$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d6a09d39-891c-447e-84f7-e3f10a608451/6290e7da-30f8-3239-8853-239e5420675a.roa File: 6290e7da-30f8-3239-8853-239e5420675a.roa (raw, json) Hash identifier: E/sXSndG5VDlqSuIPstRFS0rlw2uL3RAj1HgLkC8Tvc= Subject key identifier: 12:F7:E6:CC:A2:EC:45:7A:F8:50:19:0A:C1:2D:E2:51:F3:28:0B:92 Certificate issuer: /CN=d6a09d39-891c-447e-84f7-e3f10a608451 Certificate serial: 010D0C9F4328584D2A69DB92111A1DA43627D450 Authority key identifier: 83:28:D5:41:12:A2:6F:A2:CA:EA:7C:6D:6B:B1:48:96:D0:A5:36:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d6a09d39-891c-447e-84f7-e3f10a608451.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d6a09d39-891c-447e-84f7-e3f10a608451/6290e7da-30f8-3239-8853-239e5420675a.roa Signing time: Sat 14 Mar 2026 12:38:49 +0000 ROA not before: Sat 14 Mar 2026 12:38:49 +0000 ROA not after: Fri 12 Jun 2026 12:38:49 +0000 asID: 25687 IP address blocks: 199.244.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d6a09d39-891c-447e-84f7-e3f10a608451/d6a09d39-891c-447e-84f7-e3f10a608451.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d6a09d39-891c-447e-84f7-e3f10a608451/d6a09d39-891c-447e-84f7-e3f10a608451.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d6a09d39-891c-447e-84f7-e3f10a608451.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:69:db:92:11:1a:1d:a4:36:27:d4:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6a09d39-891c-447e-84f7-e3f10a608451 Validity Not Before: Mar 14 12:38:49 2026 GMT Not After : Jun 12 12:38:49 2026 GMT Subject: CN=707bb571-3b16-496c-8817-96854fa3fbea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6a:ce:e7:46:b7:9d:17:21:2f:ed:0b:7d:4b: fe:79:82:ff:8a:f6:b8:42:19:77:7d:d9:dc:ad:d1: c4:39:79:cd:d9:b8:90:cd:14:5a:c2:40:88:6d:dc: 16:ea:d9:00:d2:f6:3d:7d:60:9d:9e:be:6a:07:42: 24:3a:b7:c4:80:ea:7d:0f:dd:9c:7e:22:1a:31:d0: 8e:e5:bd:d7:eb:45:13:7c:0f:fe:e2:e3:dd:58:cd: 6b:0a:9c:7a:90:fd:f5:3b:d3:a0:ed:bb:b7:4f:95: 07:37:de:8f:f2:e4:d7:fd:ee:f3:22:0e:3b:32:61: f5:71:f0:a0:a5:02:c1:b8:10:29:1e:8d:a7:41:fd: 55:ff:0e:ad:ba:35:f7:84:ba:6a:de:81:54:ff:74: 4b:68:49:b6:de:de:8f:eb:de:45:90:55:fe:72:f9: 91:14:f4:cc:47:08:d6:d4:e2:0b:91:78:71:b5:1b: 8c:ab:fe:f9:b7:b6:cc:3c:9a:83:56:a7:0a:eb:94: 61:4f:3f:a0:fc:62:a0:d8:f2:0e:0a:6c:9c:2f:fa: 1d:f0:7e:20:25:e0:51:c0:46:cc:9f:84:32:f6:c9: 97:8c:b7:c7:e4:29:dc:e4:62:62:0a:82:a8:74:57: 0b:a4:2f:19:52:e1:ee:8f:48:4f:57:a0:55:34:1f: 25:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F7:E6:CC:A2:EC:45:7A:F8:50:19:0A:C1:2D:E2:51:F3:28:0B:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d6a09d39-891c-447e-84f7-e3f10a608451/6290e7da-30f8-3239-8853-239e5420675a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d6a09d39-891c-447e-84f7-e3f10a608451/d6a09d39-891c-447e-84f7-e3f10a608451.crl X509v3 Authority Key Identifier: keyid:83:28:D5:41:12:A2:6F:A2:CA:EA:7C:6D:6B:B1:48:96:D0:A5:36:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d6a09d39-891c-447e-84f7-e3f10a608451.cer sbgp-ipAddrBlock: critical IPv4: 199.244.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:fa:01:54:ca:5e:ab:ac:95:84:09:ad:df:c8:53:ad:40:3f: 33:18:1c:c3:7d:f3:74:54:4d:9b:36:5a:ec:6b:52:b3:32:fd: a9:b5:8c:6f:9c:ee:36:2f:60:94:a3:4a:25:76:53:ae:5c:19: 6e:23:fd:92:a9:16:51:00:64:80:1a:be:0f:08:0b:ea:c1:84: 1e:d3:5e:8f:7f:c9:3a:95:d3:d0:8b:0a:e0:6f:b0:e1:0f:56: 10:31:8f:7f:58:02:88:7e:1c:36:fa:42:fb:59:62:c9:41:69: 05:18:0b:f6:68:c0:6b:f6:e8:7e:1c:a2:4f:15:e9:6f:f1:d3: c2:f5:17:c8:8d:d6:97:3f:80:15:e1:76:71:82:a3:14:e7:13: 3a:99:91:b4:85:76:95:88:f8:91:91:1f:82:15:f5:87:c8:ba: bb:ba:66:a8:96:b1:5f:b9:2a:48:06:60:04:e5:11:6d:6b:74: 47:ff:95:3d:0f:24:a1:e0:c8:87:55:39:f4:57:f9:de:18:66: f8:01:05:56:ff:43:b2:58:80:9d:86:30:17:09:7c:4e:19:e3: a9:6c:74:84:bf:14:38:7e:19:28:bf:b7:4c:2f:76:85:a4:18: 87:20:c4:86:0d:d3:50:c8:55:45:5f:91:9c:2b:3a:c3:25:1f: 81:00:7d:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qaduSERodpDYn1FAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZhMDlkMzktODkxYy00NDdlLTg0ZjctZTNmMTBhNjA4 NDUxMB4XDTI2MDMxNDEyMzg0OVoXDTI2MDYxMjEyMzg0OVowLzEtMCsGA1UEAxMk NzA3YmI1NzEtM2IxNi00OTZjLTg4MTctOTY4NTRmYTNmYmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmrO50a3nRchL+0LfUv+eYL/iva4Qhl3fdnc rdHEOXnN2biQzRRawkCIbdwW6tkA0vY9fWCdnr5qB0IkOrfEgOp9D92cfiIaMdCO 5b3X60UTfA/+4uPdWM1rCpx6kP31O9Og7bu3T5UHN96P8uTX/e7zIg47MmH1cfCg pQLBuBApHo2nQf1V/w6tujX3hLpq3oFU/3RLaEm23t6P695FkFX+cvmRFPTMRwjW 1OILkXhxtRuMq/75t7bMPJqDVqcK65RhTz+g/GKg2PIOCmycL/od8H4gJeBRwEbM n4Qy9smXjLfH5Cnc5GJiCoKodFcLpC8ZUuHuj0hPV6BVNB8ljQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBL35syi7EV6+FAZCsEt4lHzKAuSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kNmEw OWQzOS04OTFjLTQ0N2UtODRmNy1lM2YxMGE2MDg0NTEvNjI5MGU3ZGEtMzBmOC0z MjM5LTg4NTMtMjM5ZTU0MjA2NzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZDZhMDlkMzktODkxYy00NDdlLTg0 ZjctZTNmMTBhNjA4NDUxL2Q2YTA5ZDM5LTg5MWMtNDQ3ZS04NGY3LWUzZjEwYTYw ODQ1MS5jcmwwHwYDVR0jBBgwFoAUgyjVQRKib6LK6nxta7FIltClNqIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kNmEwOWQzOS04OTFjLTQ0N2UtODRmNy1lM2Yx MGE2MDg0NTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/RVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALn6AVTKXquslYQJrd/IU61APzMYHMN983RUTZs2WuxrUrMy/am1jG+c 7jYvYJSjSiV2U65cGW4j/ZKpFlEAZIAavg8IC+rBhB7TXo9/yTqV09CLCuBvsOEP VhAxj39YAoh+HDb6QvtZYslBaQUYC/ZowGv26H4cok8V6W/x08L1F8iN1pc/gBXh dnGCoxTnEzqZkbSFdpWI+JGRH4IV9YfIuru6ZqiWsV+5KkgGYATlEW1rdEf/lT0P JKHgyIdVOfRX+d4YZvgBBVb/Q7JYgJ2GMBcJfE4Z46lsdIS/FDh+GSi/t0wvdoWk GIcgxIYN01DIVUVfkZwrOsMlH4EAfcw= -----END CERTIFICATE-----Generated at Thu Mar 26 09:36:35 2026 by rpki-client