$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/2e770edc-16ab-3ebf-b4b8-43a3a6f1e69c.roa File: 2e770edc-16ab-3ebf-b4b8-43a3a6f1e69c.roa (raw, json) Hash identifier: w8KU1P/Lvg6wtnJWyvJgZpjVDy7zzm5Fhj+vDLLWgLA= Subject key identifier: 43:E1:F0:1F:70:F1:20:90:C9:75:68:AA:03:CB:EB:38:E3:36:F1:55 Certificate issuer: /CN=647216b7-a938-45d2-8264-7d448a4eaad9 Certificate serial: 010D0C9F4328584D492A6CDA7ACEEF37CBBD2900 Authority key identifier: 22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/2e770edc-16ab-3ebf-b4b8-43a3a6f1e69c.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 398143 IP address blocks: 206.204.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:6c:da:7a:ce:ef:37:cb:bd:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=647216b7-a938-45d2-8264-7d448a4eaad9 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=207eeada-7728-4e66-a2d5-eb9a4a1564b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b2:47:09:5a:b5:3f:ee:f7:fb:2a:bc:cc:84: bc:38:fa:3f:2b:45:85:3d:32:8a:a2:c6:62:aa:d3: 77:1c:dd:67:41:dc:5e:80:de:35:c0:f7:1b:13:45: 1f:81:d7:32:c1:6f:bd:31:44:72:cf:c7:34:be:50: c6:77:14:ed:12:12:58:20:d5:d9:dc:b2:f2:c8:99: dc:01:95:31:51:e8:00:0f:5d:00:45:1a:97:0e:14: a2:28:9c:6d:5a:a8:56:f5:9f:27:5c:bd:02:ce:fb: 06:42:ea:04:28:4a:ce:ca:1d:4a:f8:a9:7d:c5:91: 88:7b:0a:61:fb:f4:51:ec:6d:7b:12:2e:d6:d2:67: 5a:0e:56:8a:13:b4:9e:fa:5d:0b:dc:11:18:b8:cb: 6d:3f:e5:b1:15:f6:40:3d:30:ad:26:a7:38:2b:af: 22:da:6e:be:97:e0:a8:cf:d4:ed:2e:e3:72:3c:31: 84:bc:81:47:06:46:2d:9e:87:11:b5:8e:1b:6f:e1: db:b7:46:58:aa:0f:4f:12:ce:8b:e7:c0:a6:6f:c3: ca:cd:50:62:9f:2b:e5:f3:5b:c1:2a:1a:4a:cf:4f: fe:a6:d3:df:86:03:93:2c:6a:0c:fa:f6:01:97:3e: 8f:df:98:d2:05:5f:17:f4:f9:dd:d6:51:9b:25:f7: 83:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E1:F0:1F:70:F1:20:90:C9:75:68:AA:03:CB:EB:38:E3:36:F1:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/2e770edc-16ab-3ebf-b4b8-43a3a6f1e69c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl X509v3 Authority Key Identifier: keyid:22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer sbgp-ipAddrBlock: critical IPv4: 206.204.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:9c:76:da:af:39:36:2e:5a:ab:87:b8:24:cc:48:a5:cb:af: 70:45:f1:88:4c:4f:21:15:c1:53:f0:84:9a:05:af:73:32:bf: d6:51:ba:28:2a:6d:c4:80:97:2f:ad:b9:72:85:ab:e1:ae:e3: 52:eb:3b:0f:65:fe:02:a3:3d:65:56:20:09:9e:0b:a0:23:43: ec:a7:2c:52:50:34:a2:fe:36:66:55:3b:ec:14:e1:4d:f9:d6: 12:99:f7:e8:f9:32:f1:81:05:af:0c:33:2a:31:91:6f:87:5a: 52:57:e1:02:0f:30:0b:e3:06:72:81:d3:a0:4f:9a:b4:66:b8: de:05:18:37:24:e4:45:06:a8:93:23:31:48:99:da:e4:4a:fa: b2:e9:8a:9b:82:fc:fb:9e:56:96:aa:41:e3:02:68:b8:1f:2a: eb:43:e5:3a:06:7f:c6:3f:83:69:87:24:e8:04:c1:02:a6:6a: c3:d0:49:35:2f:d5:9b:73:c1:66:7f:d4:15:22:ef:7a:a1:41: ec:3c:99:69:cb:e2:f8:d4:c2:a7:1e:4d:ed:7d:2e:e2:32:5e: b9:bd:f0:3a:d3:c2:47:c8:db:3f:a7:e0:aa:e4:eb:b2:ac:40: 1c:f9:44:70:15:8f:bf:58:e4:36:ef:47:ab:26:5b:3f:ad:da: 57:0c:ed:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKmzaes7vN8u9KQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ3MjE2YjctYTkzOC00NWQyLTgyNjQtN2Q0NDhhNGVh YWQ5MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk MjA3ZWVhZGEtNzcyOC00ZTY2LWEyZDUtZWI5YTRhMTU2NGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLJHCVq1P+73+yq8zIS8OPo/K0WFPTKKosZi qtN3HN1nQdxegN41wPcbE0UfgdcywW+9MURyz8c0vlDGdxTtEhJYINXZ3LLyyJnc AZUxUegAD10ARRqXDhSiKJxtWqhW9Z8nXL0CzvsGQuoEKErOyh1K+Kl9xZGIewph +/RR7G17Ei7W0mdaDlaKE7Se+l0L3BEYuMttP+WxFfZAPTCtJqc4K68i2m6+l+Co z9TtLuNyPDGEvIFHBkYtnocRtY4bb+Hbt0ZYqg9PEs6L58Cmb8PKzVBinyvl81vB KhpKz0/+ptPfhgOTLGoM+vYBlz6P35jSBV8X9Pnd1lGbJfeDAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPh8B9w8SCQyXVoqgPL6zjjNvFVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82NDcy MTZiNy1hOTM4LTQ1ZDItODI2NC03ZDQ0OGE0ZWFhZDkvMmU3NzBlZGMtMTZhYi0z ZWJmLWI0YjgtNDNhM2E2ZjFlNjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjQ3MjE2YjctYTkzOC00NWQyLTgy NjQtN2Q0NDhhNGVhYWQ5LzY0NzIxNmI3LWE5MzgtNDVkMi04MjY0LTdkNDQ4YTRl YWFkOS5jcmwwHwYDVR0jBBgwFoAUIvIMhMMKGr3ejeHfHF8TeMPZRF8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82NDcyMTZiNy1hOTM4LTQ1ZDItODI2NC03ZDQ0 OGE0ZWFhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzszAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKcdtqvOTYuWquHuCTMSKXLr3BF8YhMTyEVwVPwhJoFr3Myv9ZRuigq bcSAly+tuXKFq+Gu41LrOw9l/gKjPWVWIAmeC6AjQ+ynLFJQNKL+NmZVO+wU4U35 1hKZ9+j5MvGBBa8MMyoxkW+HWlJX4QIPMAvjBnKB06BPmrRmuN4FGDck5EUGqJMj MUiZ2uRK+rLpipuC/PueVpaqQeMCaLgfKutD5ToGf8Y/g2mHJOgEwQKmasPQSTUv 1ZtzwWZ/1BUi73qhQew8mWnL4vjUwqceTe19LuIyXrm98DrTwkfI2z+n4Krk67Ks QBz5RHAVj79Y5DbvR6smWz+t2lcM7bk= -----END CERTIFICATE-----Generated at Thu Mar 26 16:56:39 2026 by rpki-client