$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/ff08f32a-f185-3549-bd1d-46d56c37ebb1.roa File: ff08f32a-f185-3549-bd1d-46d56c37ebb1.roa (raw, json) Hash identifier: seQhQMXK8HyGnNh9KRliDX+31gmPh54ihnUXfAHy9ZI= Subject key identifier: 58:4F:97:F0:79:84:AC:4C:F0:3F:9B:E7:23:52:C3:25:04:F5:7A:33 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584D19B4A4A5A4C969B71347BC00 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/ff08f32a-f185-3549-bd1d-46d56c37ebb1.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 54004 IP address blocks: 207.210.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:a4:a5:a4:c9:69:b7:13:47:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=459ad4f7-a5e0-4d86-837d-b0069c8fa4e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f5:a3:19:5d:d4:ac:32:28:d3:fa:c9:29:00: 47:49:ab:51:d6:d1:9d:28:22:e9:62:cd:1e:61:0d: 99:34:c2:47:f2:f4:a6:a5:1c:43:e2:4a:2b:f6:40: fd:c0:26:c7:fd:f7:4e:84:15:b4:6d:c5:63:2b:ec: c3:a2:3f:3d:bc:8b:c1:e0:b3:f5:86:d3:f6:17:1d: 2e:bc:5e:45:65:98:ca:48:04:36:b2:86:8d:7d:b6: 8a:bc:60:31:70:61:3d:1a:a9:03:d7:3a:29:2e:a4: f0:dd:45:70:5b:5a:c0:17:89:d6:37:ab:e0:2f:ea: 76:bb:9e:5b:69:25:0a:ca:04:c8:16:22:4e:28:24: d9:2f:0d:41:ee:41:a8:53:5e:f4:ba:14:a8:9e:95: b6:0c:73:09:62:7d:f7:47:87:7f:97:c7:b2:1c:e4: b2:a4:d5:20:b3:43:f1:93:0c:f3:f3:6a:28:e2:b3: ef:31:ac:a0:3d:b4:ad:2a:95:fe:64:42:f6:70:39: f5:dc:86:60:6d:c1:31:86:e3:11:85:52:3c:b4:a9: fb:43:03:bf:a6:f3:e3:99:28:42:56:aa:26:2a:fa: 72:2c:f0:a5:75:62:59:e8:a8:6a:2e:91:44:68:f4: 9f:d6:5d:ce:14:0e:5a:6f:d0:56:d1:31:c4:ba:9a: 1b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:4F:97:F0:79:84:AC:4C:F0:3F:9B:E7:23:52:C3:25:04:F5:7A:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/ff08f32a-f185-3549-bd1d-46d56c37ebb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 207.210.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:76:69:54:9f:b3:37:65:57:1e:8b:46:88:7b:61:36:2f:8d: 06:71:c8:67:dc:4d:05:37:5c:33:cb:74:46:dc:90:d1:9b:e5: e1:31:2d:fb:55:0f:6d:0c:71:af:25:95:12:cd:c6:00:e9:cb: 27:49:29:57:7e:c3:32:15:32:6f:65:b5:7b:a5:18:0a:09:bb: 07:b2:4a:8e:fb:5d:0f:51:a9:a8:ef:64:a4:ff:56:ce:8d:2c: fe:4e:72:da:2d:d2:17:02:e1:ca:05:71:83:96:c7:af:98:98: c9:19:98:0b:77:62:2d:d4:33:c8:49:46:7f:5c:f6:01:9f:da: 28:08:b4:94:9e:9c:91:f8:60:42:7b:b3:e1:70:2d:fd:b1:17: 8f:e1:3e:36:d3:8c:cf:45:3a:61:9b:23:b9:7c:79:a9:51:7e: 37:83:b4:bb:8e:0f:99:04:f0:b9:f2:ca:2a:9d:6f:81:a9:e1: 74:a3:d2:b3:d3:9b:b3:a8:21:a0:6d:0d:f1:a3:87:8f:43:60: 59:d8:ad:55:81:c8:56:0f:8f:a3:16:b4:59:46:54:cb:e1:88: 43:59:83:b7:e9:51:a5:6e:b3:3b:8d:bb:35:3f:91:9c:82:eb: 78:74:24:e9:f0:74:de:d0:49:e7:73:57:90:89:f9:2a:15:d0: e3:6d:eb:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtKSlpMlptxNHvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk NDU5YWQ0ZjctYTVlMC00ZDg2LTgzN2QtYjAwNjljOGZhNGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/WjGV3UrDIo0/rJKQBHSatR1tGdKCLpYs0e YQ2ZNMJH8vSmpRxD4kor9kD9wCbH/fdOhBW0bcVjK+zDoj89vIvB4LP1htP2Fx0u vF5FZZjKSAQ2soaNfbaKvGAxcGE9GqkD1zopLqTw3UVwW1rAF4nWN6vgL+p2u55b aSUKygTIFiJOKCTZLw1B7kGoU170uhSonpW2DHMJYn33R4d/l8eyHOSypNUgs0Px kwzz82oo4rPvMaygPbStKpX+ZEL2cDn13IZgbcExhuMRhVI8tKn7QwO/pvPjmShC VqomKvpyLPCldWJZ6KhqLpFEaPSf1l3OFA5ab9BW0THEupobwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhPl/B5hKxM8D+b5yNSwyUE9XozMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvZmYwOGYzMmEtZjE4NS0z NTQ5LWJkMWQtNDZkNTZjMzdlYmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz9JUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHh2aVSfszdlVx6LRoh7YTYvjQZxyGfcTQU3XDPLdEbckNGb5eExLftV D20Mca8llRLNxgDpyydJKVd+wzIVMm9ltXulGAoJuweySo77XQ9RqajvZKT/Vs6N LP5Octot0hcC4coFcYOWx6+YmMkZmAt3Yi3UM8hJRn9c9gGf2igItJSenJH4YEJ7 s+FwLf2xF4/hPjbTjM9FOmGbI7l8ealRfjeDtLuOD5kE8Lnyyiqdb4Gp4XSj0rPT m7OoIaBtDfGjh49DYFnYrVWByFYPj6MWtFlGVMvhiENZg7fpUaVuszuNuzU/kZyC 63h0JOnwdN7QSedzV5CJ+SoV0ONt6yc= -----END CERTIFICATE-----Generated at Thu Mar 26 16:29:46 2026 by rpki-client