$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/afb78084-37c3-3763-b985-5cc3aa7781e6.roa File: afb78084-37c3-3763-b985-5cc3aa7781e6.roa (raw, json) Hash identifier: T9KeEOBs6RVuzbpdW9c94MOe9VWoj3+wcr5GLOvMq5g= Subject key identifier: A8:CE:30:C7:B0:9E:9F:19:02:12:0D:CD:0E:E7:77:4F:83:AC:41:E1 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D316F6CC58E9606CF709A6380 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/afb78084-37c3-3763-b985-5cc3aa7781e6.roa Signing time: Tue 17 Mar 2026 01:00:32 +0000 ROA not before: Tue 17 Mar 2026 01:00:32 +0000 ROA not after: Mon 15 Jun 2026 01:00:32 +0000 asID: 274720 IP address blocks: 206.84.72.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:6f:6c:c5:8e:96:06:cf:70:9a:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 17 01:00:32 2026 GMT Not After : Jun 15 01:00:32 2026 GMT Subject: CN=9e6cebfc-7f2b-46b1-9791-a7bfac3164a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b7:27:f0:08:48:14:b1:db:e7:5e:88:e4:4e: 2e:44:3b:25:4c:0c:b7:60:b7:a0:58:4c:ac:61:0f: e4:94:7b:2c:95:33:f6:11:a2:5a:a9:63:79:13:c7: a7:84:9c:05:11:10:28:8d:10:bc:7c:ab:0e:9a:e7: 43:4d:ba:c5:67:0e:da:3e:50:10:08:df:ec:22:82: 8c:50:e1:7d:bc:cf:a3:0b:c8:9b:5a:d1:1c:98:8d: 15:c2:f2:ac:6d:8b:89:a1:8a:c8:c8:bb:1f:78:be: 58:b3:8a:42:47:b9:0b:bd:f2:83:2a:05:75:9e:2d: 3d:a8:d9:6e:73:77:09:ce:1e:a1:4e:b4:ac:9c:36: f8:27:19:65:59:ad:8f:e9:ed:13:97:30:ba:f1:a7: ee:c3:91:58:c5:60:8d:b5:fd:30:50:81:69:f4:e1: ef:43:95:47:68:a4:73:50:42:24:62:ae:4b:c5:86: 06:6d:09:24:dd:35:61:4b:57:e8:e5:cf:76:31:d2: 3f:b3:91:b4:6d:e9:09:2f:be:80:43:1a:d6:6c:08: 5e:fc:d7:07:77:8d:f3:70:32:fa:5b:7e:f4:49:78: 1a:a0:1b:7b:13:5a:1e:a4:30:36:5b:db:e1:53:96: 2e:3d:90:40:95:63:32:69:33:c5:a5:db:7f:4f:7f: 5a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:CE:30:C7:B0:9E:9F:19:02:12:0D:CD:0E:E7:77:4F:83:AC:41:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/afb78084-37c3-3763-b985-5cc3aa7781e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 206.84.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:b8:7a:9f:36:d3:6d:c7:c1:95:8e:7d:e8:a1:c0:05:4c:1f: 3c:28:9b:02:7b:71:66:25:45:d3:a6:c3:9b:a8:be:44:af:bf: 86:60:20:70:e1:62:e9:29:47:67:d2:e6:66:c8:fe:cf:ef:2b: 0a:3b:b8:17:ed:b3:40:d1:1d:73:dc:5d:53:89:aa:7a:88:1e: 92:2d:b9:39:7d:b8:5e:21:9c:ae:72:3d:1a:5a:d5:ea:fa:e4: bf:d9:57:ac:6f:f4:bc:2a:ce:d0:06:55:1f:38:9d:c4:1e:6d: 7c:d9:06:d4:12:22:a0:6c:46:ff:cb:e6:e1:8e:78:06:fe:1c: 2b:b3:18:5e:12:b8:4d:b2:9b:1e:6c:73:1a:dc:63:32:fd:41: 62:09:0b:b7:e9:cd:71:4b:99:a1:fb:8a:dd:f5:27:a7:1a:ec: b0:c9:b5:fc:70:11:68:29:23:f8:c3:0b:21:44:e5:76:90:94: 39:60:d8:3b:aa:0a:a0:42:e4:13:5d:04:e2:1e:3f:35:7f:5d: 95:91:df:5a:88:99:6d:d1:37:e8:77:75:ad:db:c6:7d:a7:9d: 73:fe:fa:d5:b2:ac:84:dd:34:8f:72:7c:b8:3e:52:e7:f0:ea: 9f:2e:39:3e:5c:95:09:9a:91:c0:4d:d0:14:8e:be:7f:2d:7f: 4d:67:a5:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0xb2zFjpYGz3CaY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk OWU2Y2ViZmMtN2YyYi00NmIxLTk3OTEtYTdiZmFjMzE2NGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLcn8AhIFLHb516I5E4uRDslTAy3YLegWEys YQ/klHsslTP2EaJaqWN5E8enhJwFERAojRC8fKsOmudDTbrFZw7aPlAQCN/sIoKM UOF9vM+jC8ibWtEcmI0VwvKsbYuJoYrIyLsfeL5Ys4pCR7kLvfKDKgV1ni09qNlu c3cJzh6hTrSsnDb4JxllWa2P6e0TlzC68afuw5FYxWCNtf0wUIFp9OHvQ5VHaKRz UEIkYq5LxYYGbQkk3TVhS1fo5c92MdI/s5G0bekJL76AQxrWbAhe/NcHd43zcDL6 W370SXgaoBt7E1oepDA2W9vhU5YuPZBAlWMyaTPFpdt/T39aCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjOMMewnp8ZAhINzQ7nd0+DrEHhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYWZiNzgwODQtMzdjMy0z NzYzLWI5ODUtNWNjM2FhNzc4MWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzlRIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAK4ep82023HwZWOfeihwAVMHzwomwJ7cWYlRdOmw5uovkSvv4ZgIHDh YukpR2fS5mbI/s/vKwo7uBfts0DRHXPcXVOJqnqIHpItuTl9uF4hnK5yPRpa1er6 5L/ZV6xv9LwqztAGVR84ncQebXzZBtQSIqBsRv/L5uGOeAb+HCuzGF4SuE2ymx5s cxrcYzL9QWIJC7fpzXFLmaH7it31J6ca7LDJtfxwEWgpI/jDCyFE5XaQlDlg2Duq CqBC5BNdBOIePzV/XZWR31qImW3RN+h3da3bxn2nnXP++tWyrITdNI9yfLg+Uufw 6p8uOT5clQmakcBN0BSOvn8tf01npeE= -----END CERTIFICATE-----Generated at Thu Mar 26 02:10:40 2026 by rpki-client