$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7c13c5f1-a6b1-3d42-be79-d2736f02af2a.roa File: 7c13c5f1-a6b1-3d42-be79-d2736f02af2a.roa (raw, json) Hash identifier: GUIKx0J9UYCUycEw02We/1hLZajOf3Lxg04ELB2NVRg= Subject key identifier: BE:A2:85:78:7D:AF:8B:1E:44:E6:33:13:44:14:52:FE:30:B3:0C:BA Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584D146D925A8F2A5D71240077C0 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7c13c5f1-a6b1-3d42-be79-d2736f02af2a.roa Signing time: Fri 06 Mar 2026 15:38:31 +0000 ROA not before: Fri 06 Mar 2026 15:38:31 +0000 ROA not after: Thu 04 Jun 2026 14:38:31 +0000 asID: 36850 IP address blocks: 204.85.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:6d:92:5a:8f:2a:5d:71:24:00:77:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Mar 6 15:38:31 2026 GMT Not After : Jun 4 14:38:31 2026 GMT Subject: CN=3fc28e00-9675-48cf-89d5-beaa3627fe66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:eb:47:04:5f:50:6a:66:42:46:a8:0e:f2:de: 8d:8a:11:a7:12:cf:00:dc:90:0a:54:68:1e:d2:ad: d9:a8:33:0f:14:03:74:ac:fe:84:6a:c8:3a:3f:1a: 76:98:10:b6:b6:1e:5f:66:59:04:b8:6e:32:36:45: aa:f0:ed:12:07:09:fe:a5:2a:48:0b:44:8c:c8:ac: 82:63:de:b1:f4:1a:f8:d0:b2:5c:95:55:3e:2d:13: 88:8b:d9:5d:c3:c5:4b:06:c4:c4:6c:64:d2:5f:b6: 2e:95:ac:f2:c3:bf:ff:99:a8:8f:c0:44:27:f8:05: 90:7e:36:b5:68:26:31:a3:41:32:33:7b:25:74:b4: a0:3f:f1:cd:b5:3d:66:de:59:67:3c:cd:3d:e0:97: 35:6c:b2:e9:79:92:15:54:d6:27:79:58:36:c3:85: 7d:2c:e2:f2:d2:36:65:ad:a3:03:8e:e2:27:a3:54: 5c:67:bd:9a:42:88:e6:c7:f1:59:96:1b:b8:4b:a7: 52:b1:d2:f7:43:d5:18:82:40:e3:55:03:50:0a:ee: 77:34:c7:d0:1d:0f:8f:80:f9:20:69:2a:96:0b:37: 4a:71:17:fb:16:be:41:59:45:74:89:55:7c:19:93: c6:e0:7a:4d:56:52:23:b0:30:b1:fb:86:59:da:ab: 5e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A2:85:78:7D:AF:8B:1E:44:E6:33:13:44:14:52:FE:30:B3:0C:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7c13c5f1-a6b1-3d42-be79-d2736f02af2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 204.85.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:12:53:7d:bb:98:93:b9:50:c1:e9:f2:f9:2c:8b:1c:a5:04: b6:5e:35:1b:10:37:e5:80:c5:05:ed:80:8b:80:92:b0:40:03: 56:16:45:66:70:34:d2:24:3f:ca:f2:33:b0:7f:a4:2f:ac:f9: 9c:a5:cc:2c:68:f1:fe:5d:1e:d6:89:a3:89:ce:48:24:b3:a1: e2:4f:8b:70:57:66:aa:c0:8b:77:2f:e9:24:8c:fc:4f:5c:f5: 0e:e3:76:55:39:44:e9:0e:1c:38:67:0c:6f:9d:40:cc:a6:84: ed:e8:c6:85:df:a6:a2:62:a6:02:7b:c8:38:e8:44:ab:fc:7f: c4:db:58:36:55:4a:e5:bf:4a:e7:88:7f:8b:34:7c:0c:c3:b4: 98:3c:d8:ee:8b:f9:02:e7:cc:be:be:76:51:42:eb:98:01:04: 64:86:88:15:79:8c:c3:4d:83:c7:4f:ef:f9:8f:b8:b5:41:d8: 90:1c:3d:39:1b:2e:ba:7b:23:ca:ef:d4:2e:ae:37:28:f5:50: 8a:e1:10:44:a0:d4:35:60:38:44:72:e1:80:19:4d:a5:bf:0d: fe:d8:67:88:28:c7:eb:3d:eb:8b:f2:70:45:c7:90:e8:53:ff: af:fb:31:87:22:b7:f9:60:8d:48:65:9a:43:64:0c:de:ba:c8: 89:5b:8f:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UbZJajypdcSQAd8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI2MDMwNjE1MzgzMVoXDTI2MDYwNDE0MzgzMVowLzEtMCsGA1UEAxMk M2ZjMjhlMDAtOTY3NS00OGNmLTg5ZDUtYmVhYTM2MjdmZTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvetHBF9QamZCRqgO8t6NihGnEs8A3JAKVGge 0q3ZqDMPFAN0rP6Easg6Pxp2mBC2th5fZlkEuG4yNkWq8O0SBwn+pSpIC0SMyKyC Y96x9Br40LJclVU+LROIi9ldw8VLBsTEbGTSX7Yulazyw7//maiPwEQn+AWQfja1 aCYxo0EyM3sldLSgP/HNtT1m3llnPM094Jc1bLLpeZIVVNYneVg2w4V9LOLy0jZl raMDjuIno1RcZ72aQojmx/FZlhu4S6dSsdL3Q9UYgkDjVQNQCu53NMfQHQ+PgPkg aSqWCzdKcRf7Fr5BWUV0iVV8GZPG4HpNVlIjsDCx+4ZZ2qtehQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6ihXh9r4seROYzE0QUUv4wswy6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvN2MxM2M1ZjEtYTZiMS0z ZDQyLWJlNzktZDI3MzZmMDJhZjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzFW/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0SU327mJO5UMHp8vksixylBLZeNRsQN+WAxQXtgIuAkrBAA1YWRWZw NNIkP8ryM7B/pC+s+ZylzCxo8f5dHtaJo4nOSCSzoeJPi3BXZqrAi3cv6SSM/E9c 9Q7jdlU5ROkOHDhnDG+dQMymhO3oxoXfpqJipgJ7yDjoRKv8f8TbWDZVSuW/SueI f4s0fAzDtJg82O6L+QLnzL6+dlFC65gBBGSGiBV5jMNNg8dP7/mPuLVB2JAcPTkb Lrp7I8rv1C6uNyj1UIrhEESg1DVgOERy4YAZTaW/Df7YZ4gox+s964vycEXHkOhT /6/7MYcit/lgjUhlmkNkDN66yIlbj/M= -----END CERTIFICATE-----Generated at Thu Mar 26 10:05:33 2026 by rpki-client