$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/684c8408-e1d6-3109-9a08-0ec671566794.roa File: 684c8408-e1d6-3109-9a08-0ec671566794.roa (raw, json) Hash identifier: RA5KCO8AVB1e2ARFHL4UxM6dPr6xBzjEOaJayzh6GqA= Subject key identifier: 1D:19:02:C8:DB:DA:6A:33:30:C9:4E:AA:B5:33:0B:48:47:E0:3E:79 Certificate issuer: /CN=3cbb085b-8c58-48f1-a7b9-d446d3f961bf Certificate serial: 010D0C9F4328584D19B4AA316EA205BF70640F00 Authority key identifier: E1:ED:F1:F0:07:BC:85:33:E5:BF:5C:FE:5F:8B:EC:CF:2F:21:97:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/684c8408-e1d6-3109-9a08-0ec671566794.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 399864 IP address blocks: 206.168.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:aa:31:6e:a2:05:bf:70:64:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cbb085b-8c58-48f1-a7b9-d446d3f961bf Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=4f066c2e-b6f6-4023-becd-c451131d48d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9c:01:c5:7d:c3:80:a6:48:35:a8:06:66:dd: cb:29:42:b3:c9:ac:3b:55:49:39:1b:9a:8b:b9:f6: 99:53:7b:00:8d:0a:a8:cd:85:01:39:e2:15:71:ed: fd:27:71:2a:ea:ef:86:45:04:5c:b4:bb:15:bc:fe: c1:69:c6:cf:f0:f3:ca:d5:99:18:f1:7e:e8:79:85: 3f:a1:1c:68:86:b7:b0:98:82:e3:41:21:a0:18:b1: a3:46:f3:fe:87:f5:f7:53:67:76:3b:4c:c9:f5:aa: a7:a1:65:25:09:f8:c2:cf:44:a5:34:14:21:96:38: fb:69:25:fd:ff:4a:79:87:92:e0:91:cc:fb:8d:40: 5f:3e:82:8f:99:ac:c5:e1:4a:d8:91:42:cd:70:df: 7f:a6:85:53:4a:96:79:a9:b7:5f:d7:4d:2a:9e:88: d9:83:15:cf:f4:ca:9c:f1:93:c0:30:9f:8b:ff:99: da:7a:3c:ae:cc:01:99:90:45:fe:8d:23:b6:f8:0c: 57:a9:26:39:65:a4:14:23:7f:0c:98:71:e4:8f:0a: 3b:3b:bf:72:39:4f:a5:4d:5d:56:9e:56:38:34:bf: ce:eb:a3:3c:24:f4:9e:0e:1b:e8:78:12:dd:91:cb: 0f:53:1f:fe:2f:e8:62:c7:99:86:8c:41:65:fa:ba: 02:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:19:02:C8:DB:DA:6A:33:30:C9:4E:AA:B5:33:0B:48:47:E0:3E:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/684c8408-e1d6-3109-9a08-0ec671566794.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.crl X509v3 Authority Key Identifier: keyid:E1:ED:F1:F0:07:BC:85:33:E5:BF:5C:FE:5F:8B:EC:CF:2F:21:97:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer sbgp-ipAddrBlock: critical IPv4: 206.168.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ca:dd:58:c6:36:85:e4:50:4d:04:6a:9f:0f:66:f0:e1:65: 3f:cd:ba:41:98:b1:06:32:85:46:6a:ea:da:cc:a0:7e:da:6e: 2a:b4:2c:06:16:e2:30:f0:0b:d3:20:3b:c3:a8:41:a6:ec:28: 74:6f:20:4d:6b:82:b6:5a:e9:2e:f0:83:d3:2b:29:bf:77:fd: 53:93:2e:0a:43:c8:af:0b:68:df:fa:f3:c3:7f:d7:4d:e8:15: 44:2a:23:4b:63:1d:f5:cc:fe:96:01:c7:c8:1d:bd:1a:9d:bf: 89:25:62:ca:d8:76:41:6b:9f:a8:eb:30:12:ca:70:e7:b0:ef: 40:d3:21:a9:e5:97:75:95:b0:4d:d5:28:90:ec:6c:80:a8:c9: a5:e9:01:02:de:27:63:a4:54:e4:a8:f4:e3:78:98:8c:72:b1: ed:d7:a6:40:8d:9a:69:43:5c:32:04:62:88:52:60:4a:5c:d9: 1b:db:e9:02:97:06:fe:1b:4b:7b:1c:60:bc:86:0f:aa:6a:89: df:eb:93:6b:09:60:90:43:48:f7:4d:31:41:30:7b:35:7d:47: 74:cc:6f:fe:be:54:d3:84:26:9b:5b:31:e7:7e:fa:8e:78:ef: 06:5d:13:b2:ba:5e:20:33:42:35:d9:d5:08:5c:92:88:95:02: 69:be:96:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtKoxbqIFv3BkDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2NiYjA4NWItOGM1OC00OGYxLWE3YjktZDQ0NmQzZjk2 MWJmMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk NGYwNjZjMmUtYjZmNi00MDIzLWJlY2QtYzQ1MTEzMWQ0OGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpwBxX3DgKZINagGZt3LKUKzyaw7VUk5G5qL ufaZU3sAjQqozYUBOeIVce39J3Eq6u+GRQRctLsVvP7BacbP8PPK1ZkY8X7oeYU/ oRxohrewmILjQSGgGLGjRvP+h/X3U2d2O0zJ9aqnoWUlCfjCz0SlNBQhljj7aSX9 /0p5h5Lgkcz7jUBfPoKPmazF4UrYkULNcN9/poVTSpZ5qbdf100qnojZgxXP9Mqc 8ZPAMJ+L/5naejyuzAGZkEX+jSO2+AxXqSY5ZaQUI38MmHHkjwo7O79yOU+lTV1W nlY4NL/O66M8JPSeDhvoeBLdkcsPUx/+L+hix5mGjEFl+roCgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0ZAsjb2mozMMlOqrUzC0hH4D55MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zY2Ji MDg1Yi04YzU4LTQ4ZjEtYTdiOS1kNDQ2ZDNmOTYxYmYvNjg0Yzg0MDgtZTFkNi0z MTA5LTlhMDgtMGVjNjcxNTY2Nzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2NiYjA4NWItOGM1OC00OGYxLWE3 YjktZDQ0NmQzZjk2MWJmLzNjYmIwODViLThjNTgtNDhmMS1hN2I5LWQ0NDZkM2Y5 NjFiZi5jcmwwHwYDVR0jBBgwFoAU4e3x8Ae8hTPlv1z+X4vszy8hl7AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zY2JiMDg1Yi04YzU4LTQ4ZjEtYTdiOS1kNDQ2 ZDNmOTYxYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqg4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbK3VjGNoXkUE0Eap8PZvDhZT/NukGYsQYyhUZq6trMoH7abiq0LAYW 4jDwC9MgO8OoQabsKHRvIE1rgrZa6S7wg9MrKb93/VOTLgpDyK8LaN/688N/103o FUQqI0tjHfXM/pYBx8gdvRqdv4klYsrYdkFrn6jrMBLKcOew70DTIanll3WVsE3V KJDsbICoyaXpAQLeJ2OkVOSo9ON4mIxyse3XpkCNmmlDXDIEYohSYEpc2Rvb6QKX Bv4bS3scYLyGD6pqid/rk2sJYJBDSPdNMUEwezV9R3TMb/6+VNOEJptbMed++o54 7wZdE7K6XiAzQjXZ1QhckoiVAmm+liA= -----END CERTIFICATE-----Generated at Thu Mar 26 23:26:06 2026 by rpki-client