$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/c6eba4d0-e78b-3380-8a7e-c6f25aee6ccf.roa File: c6eba4d0-e78b-3380-8a7e-c6f25aee6ccf.roa (raw, json) Hash identifier: ovxlKhcfadoQZgPQaqKVZ5E/+WOLbO+vnSAibygEaO0= Subject key identifier: 23:67:8A:6E:D5:67:80:42:5F:A3:99:8B:2D:71:E4:F5:92:18:CF:6E Certificate issuer: /CN=4a06d1f9-0d04-482f-a665-8c270260e2c1 Certificate serial: 010D0C9F4328584E66DA14B3ACDC5CDA97CA6800 Authority key identifier: 7B:44:2C:34:6A:A0:F4:F0:11:B5:27:93:C3:37:45:6B:6A:A6:43:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/c6eba4d0-e78b-3380-8a7e-c6f25aee6ccf.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 399103 IP address blocks: 206.168.154.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:14:b3:ac:dc:5c:da:97:ca:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a06d1f9-0d04-482f-a665-8c270260e2c1 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=38facf45-5b6a-4ecd-8cfa-826ad4a4be52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:fe:c0:a3:93:36:30:b8:7f:02:82:75:3c:3c: 9e:ea:dc:45:43:b4:15:1d:d4:67:3d:42:e5:ee:44: 8c:b8:3c:95:c6:5c:1d:96:55:60:a2:a1:09:48:28: 71:ed:6e:9a:78:cd:71:5c:17:9b:a4:3a:32:fd:e8: 3a:f7:ae:54:d0:d2:34:a2:eb:de:98:d6:2e:ec:78: 79:42:9d:9d:09:ea:77:cc:e0:a0:ee:49:63:63:0d: 5a:57:51:5c:49:b3:c1:90:de:2e:fa:81:13:32:de: d9:03:1e:32:4f:8d:e1:fc:af:9a:87:6a:b9:e6:49: 63:62:55:7a:e7:37:41:43:07:ed:b1:85:88:f8:af: 4f:cf:1a:5b:13:4b:2f:20:e0:c3:d8:5e:9c:4d:e3: 99:84:b4:10:d9:e0:74:62:fc:3b:71:4d:a8:b8:92: 27:28:88:81:f0:80:d2:45:83:0d:f7:a4:be:60:1a: 50:31:47:ac:11:66:c0:f8:c6:e6:26:b9:98:1e:3d: 6d:c8:ea:9e:03:20:29:85:f2:59:cb:dd:64:76:75: 71:d1:05:bc:0a:0b:de:f2:09:99:cf:06:6c:47:7a: b1:50:53:4a:ba:4c:bc:f3:ba:bb:49:fa:fc:25:a8: ac:37:03:d9:07:6f:88:a5:c9:22:03:2b:12:96:51: 70:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:67:8A:6E:D5:67:80:42:5F:A3:99:8B:2D:71:E4:F5:92:18:CF:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/c6eba4d0-e78b-3380-8a7e-c6f25aee6ccf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.crl X509v3 Authority Key Identifier: keyid:7B:44:2C:34:6A:A0:F4:F0:11:B5:27:93:C3:37:45:6B:6A:A6:43:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer sbgp-ipAddrBlock: critical IPv4: 206.168.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:f5:39:87:67:e5:c8:70:49:9a:5a:f4:eb:ca:b5:c7:72:80: 75:38:d8:b4:ec:b2:62:48:98:65:64:0f:2f:a8:01:99:5e:f1: 57:8e:f9:06:25:e5:2e:c4:8d:9c:69:c7:aa:27:77:97:d4:55: 5b:12:7d:ad:e4:b1:cf:88:2d:46:79:7d:e3:cd:1c:df:06:55: c3:9d:bf:96:e8:03:3b:0e:bc:4b:49:be:ac:b3:cf:92:65:42: 08:ff:9e:64:e7:55:34:34:98:a5:dd:10:ed:17:57:34:75:f1: 79:80:4b:88:bf:0e:c0:65:cf:57:92:a9:a6:00:12:f8:b8:ca: 0c:63:2a:30:86:47:bf:d1:a7:c9:a2:ec:a7:af:ad:06:59:b5: cc:a7:f4:24:fe:53:48:fc:4a:da:a8:f5:d0:c1:40:c4:cd:36: f2:73:fe:c7:56:63:c8:15:9e:6e:f8:f4:62:17:6d:0e:0a:10: 35:43:64:c2:ea:c4:4f:9e:89:3e:e9:43:eb:9b:f1:1f:32:aa: d8:a9:70:a5:bf:0e:0f:32:a7:61:55:86:3b:bf:62:38:45:ee: 8f:eb:c2:43:3f:a2:5d:e5:3f:f1:ed:ef:fc:a4:98:cb:04:43: 9b:47:8b:7c:ee:b5:3f:e0:d5:bc:d8:bf:a8:4b:aa:50:1e:90: 6e:01:e4:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2hSzrNxc2pfKaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwNmQxZjktMGQwNC00ODJmLWE2NjUtOGMyNzAyNjBl MmMxMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk MzhmYWNmNDUtNWI2YS00ZWNkLThjZmEtODI2YWQ0YTRiZTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgf7Ao5M2MLh/AoJ1PDye6txFQ7QVHdRnPULl 7kSMuDyVxlwdllVgoqEJSChx7W6aeM1xXBebpDoy/eg6965U0NI0ouvemNYu7Hh5 Qp2dCep3zOCg7kljYw1aV1FcSbPBkN4u+oETMt7ZAx4yT43h/K+ah2q55kljYlV6 5zdBQwftsYWI+K9PzxpbE0svIODD2F6cTeOZhLQQ2eB0Yvw7cU2ouJInKIiB8IDS RYMN96S+YBpQMUesEWbA+MbmJrmYHj1tyOqeAyAphfJZy91kdnVx0QW8Cgve8gmZ zwZsR3qxUFNKuky887q7Sfr8JaisNwPZB2+IpckiAysSllFwTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNnim7VZ4BCX6OZiy1x5PWSGM9uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80YTA2 ZDFmOS0wZDA0LTQ4MmYtYTY2NS04YzI3MDI2MGUyYzEvYzZlYmE0ZDAtZTc4Yi0z MzgwLThhN2UtYzZmMjVhZWU2Y2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGEwNmQxZjktMGQwNC00ODJmLWE2 NjUtOGMyNzAyNjBlMmMxLzRhMDZkMWY5LTBkMDQtNDgyZi1hNjY1LThjMjcwMjYw ZTJjMS5jcmwwHwYDVR0jBBgwFoAUe0QsNGqg9PARtSeTwzdFa2qmQ+swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80YTA2ZDFmOS0wZDA0LTQ4MmYtYTY2NS04YzI3 MDI2MGUyYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzqiaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIz1OYdn5chwSZpa9OvKtcdygHU42LTssmJImGVkDy+oAZle8VeO+QYl 5S7EjZxpx6ond5fUVVsSfa3ksc+ILUZ5fePNHN8GVcOdv5boAzsOvEtJvqyzz5Jl Qgj/nmTnVTQ0mKXdEO0XVzR18XmAS4i/DsBlz1eSqaYAEvi4ygxjKjCGR7/Rp8mi 7KevrQZZtcyn9CT+U0j8Stqo9dDBQMTNNvJz/sdWY8gVnm749GIXbQ4KEDVDZMLq xE+eiT7pQ+ub8R8yqtipcKW/Dg8yp2FVhju/YjhF7o/rwkM/ol3lP/Ht7/ykmMsE Q5tHi3zutT/g1bzYv6hLqlAekG4B5JU= -----END CERTIFICATE-----Generated at Fri Jul 24 11:23:00 2026 by rpki-client