$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/9f52762d-473c-34c8-82f2-31897bcaf3d6.roa File: 9f52762d-473c-34c8-82f2-31897bcaf3d6.roa (raw, json) Hash identifier: kwm7ZdTqoKWup7BXkgx2aPHuZRqwJC4FKm0k48fUE5Q= Subject key identifier: 09:D1:23:44:43:64:64:3E:78:72:B8:3E:BE:04:F9:7D:7A:F9:89:C8 Certificate issuer: /CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265 Certificate serial: 010D0C9F4328584D44FA71E6BDE2DC6115CC9E40 Authority key identifier: 6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/9f52762d-473c-34c8-82f2-31897bcaf3d6.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 834 IP address blocks: 206.174.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:71:e6:bd:e2:dc:61:15:cc:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=e2e5ca3f-bae5-4f99-9d4c-d47e2e977550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f3:d7:d9:f0:62:b5:1f:95:c3:a3:58:cb:be: df:eb:b6:10:83:00:ce:f3:86:02:16:e6:6c:24:56: bf:9b:3f:09:88:bf:ba:92:b8:40:13:7c:9e:3a:a4: 89:47:bb:31:d8:64:92:3a:c3:db:50:57:e7:82:13: 2e:39:4b:e0:4f:99:5a:ff:3a:b6:30:c7:4f:f8:d7: ab:1e:d1:8c:9b:b6:01:2b:cf:9a:dd:9f:eb:56:57: b7:08:9f:95:22:a5:4b:9c:26:88:af:ff:c7:cf:97: d3:ff:c8:21:9b:84:8f:08:01:c0:18:6d:5c:9a:c6: 7d:e8:13:ea:fc:36:2b:ad:0d:6e:de:f3:df:82:be: 6c:23:c7:5c:10:9f:7e:ba:4a:c4:dc:06:85:dd:98: b6:24:ce:fa:8b:56:46:f9:e2:d3:41:5f:cd:11:db: 08:22:c5:ed:4c:a3:56:17:be:90:00:0b:7a:a9:3d: 49:57:3d:e9:43:09:18:39:fd:77:01:94:5f:97:a5: d6:a2:b9:1b:ad:4c:4f:1e:10:86:5a:c4:ff:d2:e5: 13:89:98:33:7f:ab:76:27:90:76:1e:29:59:16:8b: 96:ec:e9:e3:86:53:a6:cf:cb:63:f3:cc:d4:16:6b: 43:4e:3a:98:7a:f0:bd:dc:e2:6b:88:b2:10:99:4e: c6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D1:23:44:43:64:64:3E:78:72:B8:3E:BE:04:F9:7D:7A:F9:89:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/9f52762d-473c-34c8-82f2-31897bcaf3d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl X509v3 Authority Key Identifier: keyid:6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer sbgp-ipAddrBlock: critical IPv4: 206.174.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:ed:06:3c:a3:0c:d4:4e:a1:19:73:de:6a:30:46:89:6c:24: 0e:e7:0f:48:22:14:22:44:d2:c6:10:9e:fe:e9:19:6b:a3:0e: d8:05:9f:94:c2:5b:d0:56:c2:b6:30:08:ad:b4:9e:3a:93:fe: 3d:bc:f4:ac:d1:c1:ad:cf:97:2f:e1:5b:a2:eb:6d:29:bd:07: 33:dd:2a:18:f4:da:ac:3f:4e:73:73:9d:9f:9e:83:87:b3:f7: 77:04:b6:ab:60:87:97:17:c3:97:de:04:38:6b:29:a6:cb:67: 36:c8:0f:ba:0d:47:78:ab:61:09:d4:3c:8b:ce:38:31:69:17: 38:ef:15:a3:39:22:5e:b3:13:f9:b9:97:61:8e:29:e9:9f:1d: 3f:2e:42:4b:5a:fd:ac:1b:61:9f:ae:7d:ba:d6:cf:57:61:43: a4:f1:b6:e2:e2:be:2f:40:96:e1:82:e8:b1:52:ef:92:c0:a0: c4:65:20:c9:44:f1:b2:f7:82:4f:c0:ca:6e:d4:a4:ad:0d:f7: a4:20:b5:da:bd:12:fc:3b:19:13:a8:22:b5:58:4e:dc:29:25: 25:a3:97:39:25:14:04:75:38:27:c2:74:83:2e:1b:ee:bb:69: b7:ab:fb:04:85:0f:2f:e9:0b:d6:c4:76:c0:ec:97:fc:e2:58: 19:bf:e7:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+nHmveLcYRXMnkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZlOWVkMWMtZGQ0Zi00ZTFlLThlMjYtMjAxNDMzNGVl MjY1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk ZTJlNWNhM2YtYmFlNS00Zjk5LTlkNGMtZDQ3ZTJlOTc3NTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPPX2fBitR+Vw6NYy77f67YQgwDO84YCFuZs JFa/mz8JiL+6krhAE3yeOqSJR7sx2GSSOsPbUFfnghMuOUvgT5la/zq2MMdP+Ner HtGMm7YBK8+a3Z/rVle3CJ+VIqVLnCaIr//Hz5fT/8ghm4SPCAHAGG1cmsZ96BPq /DYrrQ1u3vPfgr5sI8dcEJ9+ukrE3AaF3Zi2JM76i1ZG+eLTQV/NEdsIIsXtTKNW F76QAAt6qT1JVz3pQwkYOf13AZRfl6XWorkbrUxPHhCGWsT/0uUTiZgzf6t2J5B2 HilZFouW7OnjhlOmz8tj88zUFmtDTjqYevC93OJriLIQmU7GWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnRI0RDZGQ+eHK4Pr4E+X16+YnIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZmU5 ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0MzM0ZWUyNjUvOWY1Mjc2MmQtNDczYy0z NGM4LTgyZjItMzE4OTdiY2FmM2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmZlOWVkMWMtZGQ0Zi00ZTFlLThl MjYtMjAxNDMzNGVlMjY1LzJmZTllZDFjLWRkNGYtNGUxZS04ZTI2LTIwMTQzMzRl ZTI2NS5jcmwwHwYDVR0jBBgwFoAUbcTQif/6sNYsCWoRLEBwddRje9MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZmU5ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0 MzM0ZWUyNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzq6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvtBjyjDNROoRlz3mowRolsJA7nD0giFCJE0sYQnv7pGWujDtgFn5TC W9BWwrYwCK20njqT/j289KzRwa3Ply/hW6LrbSm9BzPdKhj02qw/TnNznZ+eg4ez 93cEtqtgh5cXw5feBDhrKabLZzbID7oNR3irYQnUPIvOODFpFzjvFaM5Il6zE/m5 l2GOKemfHT8uQkta/awbYZ+ufbrWz1dhQ6TxtuLivi9AluGC6LFS75LAoMRlIMlE 8bL3gk/Aym7UpK0N96Qgtdq9Evw7GROoIrVYTtwpJSWjlzklFAR1OCfCdIMuG+67 aber+wSFDy/pC9bEdsDsl/ziWBm/54o= -----END CERTIFICATE-----Generated at Thu Mar 26 10:31:30 2026 by rpki-client