$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/9839a028-6cd7-3ec6-b0b9-57aee83944c3.roa File: 9839a028-6cd7-3ec6-b0b9-57aee83944c3.roa (raw, json) Hash identifier: ZeYI3p7lZLNrmungldfh1jN7cmopUWrR3LlSH1qgDRw= Subject key identifier: 38:B9:8C:5B:DB:AC:1A:BC:B6:E3:7D:7E:12:2C:47:5E:D7:9F:19:44 Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584D2BDA004C378E8EED89F5CF80 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/9839a028-6cd7-3ec6-b0b9-57aee83944c3.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 10747 IP address blocks: 206.109.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:00:4c:37:8e:8e:ed:89:f5:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=5b7a0f2e-4485-46a6-b55b-22010caf9261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:59:0e:f3:b6:4a:da:2e:5e:2a:90:f4:d6:51: cc:69:45:1b:81:cd:ee:fe:70:03:43:0d:12:5e:99: 38:55:1e:f7:24:af:87:99:ba:45:7e:3c:a5:2f:00: 36:42:e1:b4:37:82:ea:52:49:53:9a:10:60:59:e9: 91:22:38:2b:71:dc:36:40:03:2a:c3:6f:e8:e8:1a: 8f:64:7d:5a:64:de:a7:51:10:f1:61:f9:9e:41:06: 14:83:6c:47:b2:32:1f:e8:9b:9a:0c:2e:36:6e:35: a4:bf:e5:0d:8b:3d:5a:ec:f1:2b:ed:3c:a9:75:04: d9:5e:de:89:c5:9a:f5:25:f3:68:e1:a4:85:e5:25: f9:3a:d9:2f:67:ac:6f:b3:6d:04:b1:84:bc:b3:bd: 4f:31:56:31:0c:6e:91:2b:d8:93:50:60:f6:2f:da: 21:a0:91:c0:78:58:ab:83:83:fd:32:22:18:61:f8: 30:b4:e2:ba:0c:77:ec:e1:5a:fb:2a:28:ec:bc:52: b0:12:d5:d1:f1:fc:04:ca:99:4d:9d:50:92:50:4f: 31:66:f0:7e:f5:7e:c0:f3:77:13:d7:33:cd:72:40: 57:91:1c:f2:62:37:a5:42:31:30:a5:d7:47:16:80: 52:c6:42:1c:97:c8:92:1f:d0:41:5e:ca:f7:2a:ea: 23:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B9:8C:5B:DB:AC:1A:BC:B6:E3:7D:7E:12:2C:47:5E:D7:9F:19:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/9839a028-6cd7-3ec6-b0b9-57aee83944c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 206.109.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:79:d1:ae:ad:db:f0:0f:f1:56:5f:75:fc:24:9d:c8:43:7a: 08:4c:19:c0:02:51:3d:98:14:fc:77:a7:6b:55:28:ee:4f:ee: 8e:06:6b:c4:d8:d5:a4:91:db:a6:21:c9:d3:7b:d9:0f:fc:7d: ad:02:1d:3e:0c:2e:6d:19:92:c7:43:ff:10:bc:27:5d:09:2b: a5:81:f4:2b:4f:d8:62:13:58:22:3b:39:22:ce:cd:c3:b9:4d: b5:66:f3:43:d2:6a:5f:a6:86:5b:9e:68:fa:36:f9:57:84:bb: ad:fe:d5:d3:1a:17:78:16:9c:c8:f5:d5:2f:45:d2:1a:a5:c6: 3c:31:6c:ea:44:2e:49:13:97:1c:df:13:7d:08:86:60:24:e7: f0:cc:57:4d:a8:02:2a:a2:3c:5b:00:dc:3e:cc:f7:df:c2:02: a5:73:11:0a:f4:08:de:ef:2f:d8:37:c0:93:3a:21:b5:aa:8f: dd:23:5b:fb:2a:ad:a7:1b:f6:90:6b:eb:1e:9d:ff:e6:17:58: 0b:31:fc:05:36:4c:f1:01:1f:b5:15:34:d6:49:57:d9:2d:dc: 7f:08:cf:7d:a9:fb:9f:2c:94:5c:47:47:16:1a:89:54:7f:9d: 29:37:f7:1c:99:57:99:36:ef:63:b3:b8:e5:45:6d:54:31:09: d0:24:14:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2gBMN46O7Yn1z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk NWI3YTBmMmUtNDQ4NS00NmE2LWI1NWItMjIwMTBjYWY5MjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFkO87ZK2i5eKpD01lHMaUUbgc3u/nADQw0S Xpk4VR73JK+HmbpFfjylLwA2QuG0N4LqUklTmhBgWemRIjgrcdw2QAMqw2/o6BqP ZH1aZN6nURDxYfmeQQYUg2xHsjIf6JuaDC42bjWkv+UNiz1a7PEr7TypdQTZXt6J xZr1JfNo4aSF5SX5OtkvZ6xvs20EsYS8s71PMVYxDG6RK9iTUGD2L9ohoJHAeFir g4P9MiIYYfgwtOK6DHfs4Vr7KijsvFKwEtXR8fwEyplNnVCSUE8xZvB+9X7A83cT 1zPNckBXkRzyYjelQjEwpddHFoBSxkIcl8iSH9BBXsr3KuojjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDi5jFvbrBq8tuN9fhIsR17XnxlEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvOTgzOWEwMjgtNmNkNy0z ZWM2LWIwYjktNTdhZWU4Mzk0NGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzm3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI550a6t2/AP8VZfdfwknchDeghMGcACUT2YFPx3p2tVKO5P7o4Ga8TY 1aSR26YhydN72Q/8fa0CHT4MLm0ZksdD/xC8J10JK6WB9CtP2GITWCI7OSLOzcO5 TbVm80PSal+mhlueaPo2+VeEu63+1dMaF3gWnMj11S9F0hqlxjwxbOpELkkTlxzf E30IhmAk5/DMV02oAiqiPFsA3D7M99/CAqVzEQr0CN7vL9g3wJM6IbWqj90jW/sq racb9pBr6x6d/+YXWAsx/AU2TPEBH7UVNNZJV9kt3H8Iz32p+58slFxHRxYaiVR/ nSk39xyZV5k272OzuOVFbVQxCdAkFGM= -----END CERTIFICATE-----Generated at Thu Mar 26 13:41:08 2026 by rpki-client