$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/b6b0832e-4dc9-37eb-aa90-b2c9f95b84e3.roa File: b6b0832e-4dc9-37eb-aa90-b2c9f95b84e3.roa (raw, json) Hash identifier: pCmF1fDzkc7Ryc+Of3IAUMMM3T8CQKjiqWgBdD0vqrE= Subject key identifier: 08:98:A7:CF:AE:C0:F9:F3:4C:17:F1:80:FF:EC:FA:95:3F:B1:D2:8A Certificate issuer: /CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265 Certificate serial: 010D0C9F4328584D143D6E9CEBA186F33862AE60 Authority key identifier: 6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/b6b0832e-4dc9-37eb-aa90-b2c9f95b84e3.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 834 IP address blocks: 206.174.134.0/23 maxlen: 24 206.174.148.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:6e:9c:eb:a1:86:f3:38:62:ae:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=fd6d750f-e9ee-4fff-a0ce-f5dbe354ead1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:99:b7:49:75:4d:04:8b:63:34:75:aa:8f:7a: 55:a0:fd:68:ec:62:d5:b0:73:97:e7:98:22:5c:14: aa:69:3a:14:c8:96:a4:62:48:3a:e6:63:d0:14:0a: cd:6a:11:27:5b:67:eb:44:1f:87:f0:37:58:47:92: 05:37:35:79:03:8c:f7:e5:10:a7:41:46:8c:cf:a2: bf:d0:0b:5f:72:4c:d8:99:9a:d9:8f:fb:7c:11:3a: 7e:fc:4a:24:fe:1d:ff:ec:f9:b5:c1:2f:6c:af:52: fc:0f:9c:e4:84:51:f8:4c:e4:a2:b5:66:de:e1:8c: 71:e6:f9:35:3d:00:98:91:9e:ad:41:24:95:a4:e6: 95:b3:39:14:23:70:43:d2:57:1a:c7:8e:96:92:9f: f6:07:51:d7:ba:29:e7:4a:71:49:ac:c2:18:2d:1a: 31:aa:40:1d:f5:2b:58:38:dd:77:55:39:6d:a8:3e: 9d:8f:eb:2a:5c:ab:7d:dd:c5:01:ae:42:4a:32:32: 90:d6:0b:ea:62:bd:a0:7e:ad:67:a8:c5:2e:cd:23: e9:ad:9f:cd:48:30:89:f6:59:c0:0c:e6:86:a1:6e: a7:5f:dc:0d:09:18:69:81:ce:af:8f:19:d3:93:59: 28:0b:f1:86:b8:94:d7:5f:2e:77:1b:06:be:c0:26: d8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:98:A7:CF:AE:C0:F9:F3:4C:17:F1:80:FF:EC:FA:95:3F:B1:D2:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/b6b0832e-4dc9-37eb-aa90-b2c9f95b84e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl X509v3 Authority Key Identifier: keyid:6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer sbgp-ipAddrBlock: critical IPv4: 206.174.134.0/23 206.174.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:fa:1e:1b:c8:f9:13:f4:93:ee:20:1a:b1:21:17:71:4b:41: c2:9d:f2:17:30:44:b7:1a:1b:a1:8f:cd:fd:d3:aa:12:e9:ad: 83:d8:37:17:26:62:69:2c:c0:33:4e:02:15:16:11:bd:23:fe: 79:a7:58:f0:96:c0:6b:09:62:5d:08:19:fc:c7:80:83:f6:b7: 5c:e4:39:39:34:09:9c:e2:a4:68:bf:c7:90:16:50:21:a8:22: b4:6f:33:f0:94:72:ad:93:ce:cf:98:76:46:97:c8:54:5c:66: 16:b7:3c:8d:14:9d:74:ef:98:5a:5c:3a:e7:dc:b9:f2:c6:a5: a0:5d:3c:5d:82:c0:ed:58:92:7e:4a:4c:4e:a1:6d:5a:cd:f5: 58:bb:07:c2:68:df:36:51:59:76:04:01:01:b1:1f:ac:5d:1d: f1:c3:e7:65:2f:ee:ac:56:2c:fa:31:80:bc:f2:e4:38:43:32: ae:ed:d5:ba:57:58:8c:9a:4e:8b:71:c6:2a:c6:b1:42:7b:44: f2:7b:5e:6f:a6:77:0d:01:9e:d5:53:0d:11:49:50:72:0e:68: 62:14:ed:e5:1c:4a:6b:2a:15:cc:3b:10:cb:0f:bf:99:af:29: 53:a6:83:7b:e4:55:e5:12:25:8e:92:09:22:b6:b5:5f:1a:7f: a3:3a:ac:78 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE0UPW6c66GG8zhirmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZlOWVkMWMtZGQ0Zi00ZTFlLThlMjYtMjAxNDMzNGVl MjY1MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ZmQ2ZDc1MGYtZTllZS00ZmZmLWEwY2UtZjVkYmUzNTRlYWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5m3SXVNBItjNHWqj3pVoP1o7GLVsHOX55gi XBSqaToUyJakYkg65mPQFArNahEnW2frRB+H8DdYR5IFNzV5A4z35RCnQUaMz6K/ 0AtfckzYmZrZj/t8ETp+/Eok/h3/7Pm1wS9sr1L8D5zkhFH4TOSitWbe4Yxx5vk1 PQCYkZ6tQSSVpOaVszkUI3BD0lcax46Wkp/2B1HXuinnSnFJrMIYLRoxqkAd9StY ON13VTltqD6dj+sqXKt93cUBrkJKMjKQ1gvqYr2gfq1nqMUuzSPprZ/NSDCJ9lnA DOaGoW6nX9wNCRhpgc6vjxnTk1koC/GGuJTXXy53Gwa+wCbYAwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAiYp8+uwPnzTBfxgP/s+pU/sdKKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZmU5 ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0MzM0ZWUyNjUvYjZiMDgzMmUtNGRjOS0z N2ViLWFhOTAtYjJjOWY5NWI4NGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmZlOWVkMWMtZGQ0Zi00ZTFlLThl MjYtMjAxNDMzNGVlMjY1LzJmZTllZDFjLWRkNGYtNGUxZS04ZTI2LTIwMTQzMzRl ZTI2NS5jcmwwHwYDVR0jBBgwFoAUbcTQif/6sNYsCWoRLEBwddRje9MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZmU5ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0 MzM0ZWUyNjUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBzq6GAwQB zq6UMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGr6HhvI+RP0k+4gGrEhF3FLQcKd8hcwRLcaG6GPzf3TqhLp rYPYNxcmYmkswDNOAhUWEb0j/nmnWPCWwGsJYl0IGfzHgIP2t1zkOTk0CZzipGi/ x5AWUCGoIrRvM/CUcq2Tzs+YdkaXyFRcZha3PI0UnXTvmFpcOufcufLGpaBdPF2C wO1Ykn5KTE6hbVrN9Vi7B8Jo3zZRWXYEAQGxH6xdHfHD52Uv7qxWLPoxgLzy5DhD Mq7t1bpXWIyaTotxxirGsUJ7RPJ7Xm+mdw0BntVTDRFJUHIOaGIU7eUcSmsqFcw7 EMsPv5mvKVOmg3vkVeUSJY6SCSK2tV8af6M6rHg= -----END CERTIFICATE-----Generated at Thu Mar 26 06:46:36 2026 by rpki-client