$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ecaf3eac-d982-4ee8-b103-c57ce0ff9c81/ad734eb9-15e0-3a3e-bde3-ad72d0edff2b.roa File: ad734eb9-15e0-3a3e-bde3-ad72d0edff2b.roa (raw, json) Hash identifier: GhKyX+vs5bYIhvqO/jlskM9TE9c04oOZv1CS1mE7gjw= Subject key identifier: 41:FA:71:56:E7:09:B0:94:C0:D1:80:16:D3:3E:2F:DD:6D:8C:F1:D2 Certificate issuer: /CN=ecaf3eac-d982-4ee8-b103-c57ce0ff9c81 Certificate serial: 010D0C9F4328584D44FA62AF3A9C8C625BAEA980 Authority key identifier: C9:DB:48:E3:6C:7D:18:7A:DB:3F:13:52:36:D0:61:8D:65:63:96:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ecaf3eac-d982-4ee8-b103-c57ce0ff9c81.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ecaf3eac-d982-4ee8-b103-c57ce0ff9c81/ad734eb9-15e0-3a3e-bde3-ad72d0edff2b.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 401803 IP address blocks: 204.128.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ecaf3eac-d982-4ee8-b103-c57ce0ff9c81/ecaf3eac-d982-4ee8-b103-c57ce0ff9c81.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ecaf3eac-d982-4ee8-b103-c57ce0ff9c81/ecaf3eac-d982-4ee8-b103-c57ce0ff9c81.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ecaf3eac-d982-4ee8-b103-c57ce0ff9c81.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:62:af:3a:9c:8c:62:5b:ae:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecaf3eac-d982-4ee8-b103-c57ce0ff9c81 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=8d970ed9-7b17-49f3-bfd4-dac5e1eadcd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f1:47:ae:ae:b2:ee:4b:69:e4:ce:64:97:04: a0:5e:27:22:90:12:8b:99:f6:d4:a1:4d:78:93:57: 05:0b:2b:b3:01:d0:aa:41:c9:dc:61:a3:c0:ab:24: eb:f9:46:b5:81:78:af:45:5f:41:48:7c:fc:0d:67: 32:34:e2:44:21:ec:11:2e:e0:76:93:0e:5e:b2:ab: bb:51:10:94:a6:ed:5c:08:af:09:f5:67:c3:74:eb: f0:8f:1f:27:73:49:f3:ba:2a:a5:cd:06:4b:27:85: 62:90:84:ea:1c:ca:8b:79:e1:a4:98:91:14:d2:84: 3f:5e:e2:ba:c9:31:29:22:f8:64:cb:ca:0d:ba:db: 1f:c9:6e:79:3a:7e:f1:be:78:45:1d:d0:3b:a8:7a: 4c:c5:aa:7d:8e:40:e5:3b:1d:95:f4:a2:40:3f:58: 12:ee:07:4e:8b:82:2b:ee:d5:ea:b3:f9:4b:ba:f1: db:ca:21:e0:f2:79:79:17:88:3c:d8:f4:0c:05:73: 3d:4d:8b:4e:52:8e:84:c4:fd:28:1b:00:a1:ba:6b: 81:0a:2c:82:2c:ed:a9:3c:d7:7b:e2:29:20:9e:9a: 15:d7:fb:b7:1e:7f:5d:2c:9e:69:2b:24:29:2d:47: 0b:5c:29:d0:9c:a0:4e:5e:8a:d8:61:1b:76:a7:3a: af:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:FA:71:56:E7:09:B0:94:C0:D1:80:16:D3:3E:2F:DD:6D:8C:F1:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ecaf3eac-d982-4ee8-b103-c57ce0ff9c81/ad734eb9-15e0-3a3e-bde3-ad72d0edff2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ecaf3eac-d982-4ee8-b103-c57ce0ff9c81/ecaf3eac-d982-4ee8-b103-c57ce0ff9c81.crl X509v3 Authority Key Identifier: keyid:C9:DB:48:E3:6C:7D:18:7A:DB:3F:13:52:36:D0:61:8D:65:63:96:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ecaf3eac-d982-4ee8-b103-c57ce0ff9c81.cer sbgp-ipAddrBlock: critical IPv4: 204.128.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:1f:bf:c7:5a:50:2e:0f:40:41:ed:39:dc:75:1f:84:96:74: 1e:e0:d2:16:91:81:4e:26:ba:18:1c:38:89:7a:0d:1a:fa:c1: 0d:93:6c:d8:46:a6:ba:81:12:06:4b:f2:cb:55:b4:e0:00:73: 63:73:c2:3c:4b:1b:cb:59:fd:75:aa:e6:e6:cf:eb:ea:c9:d1: 81:f3:91:96:c4:73:9b:dd:62:a7:79:b0:4d:b1:37:2b:16:c2: 3f:64:ce:f8:74:c6:86:c2:d8:f3:74:d0:b7:b6:56:d8:cb:26: f7:96:fc:48:68:c4:12:04:d5:39:f3:50:d1:c2:26:53:43:b7: ce:d3:24:58:cf:87:96:ce:76:8f:d6:af:0c:d9:36:4c:0e:43: 49:f6:88:06:88:0e:ec:59:05:70:ea:de:ac:a4:44:80:4f:55: 25:2b:23:22:48:aa:a7:99:c3:b5:57:16:0d:e4:67:15:b3:ca: 00:b4:c2:60:32:0e:e9:e4:3e:d1:76:20:d0:68:90:7e:0e:bf: da:b5:5c:74:cb:0f:97:94:38:1e:e8:cf:0b:26:ba:c8:fe:38: 44:7f:75:e6:67:2c:58:45:1f:a0:62:f6:35:90:5d:1e:cb:1b: d7:af:53:29:cc:94:51:c5:96:4e:c4:e5:9e:34:fd:b8:68:68: b8:81:1b:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+mKvOpyMYluuqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWNhZjNlYWMtZDk4Mi00ZWU4LWIxMDMtYzU3Y2UwZmY5 YzgxMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk OGQ5NzBlZDktN2IxNy00OWYzLWJmZDQtZGFjNWUxZWFkY2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPFHrq6y7ktp5M5klwSgXicikBKLmfbUoU14 k1cFCyuzAdCqQcncYaPAqyTr+Ua1gXivRV9BSHz8DWcyNOJEIewRLuB2kw5esqu7 URCUpu1cCK8J9WfDdOvwjx8nc0nzuiqlzQZLJ4VikITqHMqLeeGkmJEU0oQ/XuK6 yTEpIvhky8oNutsfyW55On7xvnhFHdA7qHpMxap9jkDlOx2V9KJAP1gS7gdOi4Ir 7tXqs/lLuvHbyiHg8nl5F4g82PQMBXM9TYtOUo6ExP0oGwChumuBCiyCLO2pPNd7 4ikgnpoV1/u3Hn9dLJ5pKyQpLUcLXCnQnKBOXorYYRt2pzqv3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEH6cVbnCbCUwNGAFtM+L91tjPHSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9lY2Fm M2VhYy1kOTgyLTRlZTgtYjEwMy1jNTdjZTBmZjljODEvYWQ3MzRlYjktMTVlMC0z YTNlLWJkZTMtYWQ3MmQwZWRmZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZWNhZjNlYWMtZDk4Mi00ZWU4LWIx MDMtYzU3Y2UwZmY5YzgxL2VjYWYzZWFjLWQ5ODItNGVlOC1iMTAzLWM1N2NlMGZm OWM4MS5jcmwwHwYDVR0jBBgwFoAUydtI42x9GHrbPxNSNtBhjWVjlqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9lY2FmM2VhYy1kOTgyLTRlZTgtYjEwMy1jNTdj ZTBmZjljODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzID5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8fv8daUC4PQEHtOdx1H4SWdB7g0haRgU4muhgcOIl6DRr6wQ2TbNhG prqBEgZL8stVtOAAc2NzwjxLG8tZ/XWq5ubP6+rJ0YHzkZbEc5vdYqd5sE2xNysW wj9kzvh0xobC2PN00Le2VtjLJveW/EhoxBIE1TnzUNHCJlNDt87TJFjPh5bOdo/W rwzZNkwOQ0n2iAaIDuxZBXDq3qykRIBPVSUrIyJIqqeZw7VXFg3kZxWzygC0wmAy DunkPtF2INBokH4Ov9q1XHTLD5eUOB7ozwsmusj+OER/deZnLFhFH6Bi9jWQXR7L G9evUynMlFHFlk7E5Z40/bhoaLiBG+8= -----END CERTIFICATE-----Generated at Thu Mar 26 19:03:16 2026 by rpki-client