$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/afb88ebe-750d-3013-b774-fadcc301a7a5.roa File: afb88ebe-750d-3013-b774-fadcc301a7a5.roa (raw, json) Hash identifier: k71fDpgkdyVPv/nbGXHkz69wBguK+kFMen9/WX3c650= Subject key identifier: 8F:CC:45:C3:5B:66:0E:7E:10:D2:20:A0:CF:EF:5D:82:A0:CE:17:36 Certificate issuer: /CN=5e3e99cc-7992-4ac1-a256-917cce07532e Certificate serial: 010D0C9F4328584D237A126D86A11A07D227C7C0 Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/afb88ebe-750d-3013-b774-fadcc301a7a5.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 400409 IP address blocks: 206.212.240.0/24 maxlen: 24 206.212.242.0/24 maxlen: 24 206.212.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:12:6d:86:a1:1a:07:d2:27:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=3b543c0c-7922-4513-8bb1-16d9cf9a8568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:50:5f:7f:37:d1:18:6c:77:2a:e8:01:02:f9: 37:4d:3d:e6:57:d8:1c:51:70:f4:c0:c4:10:07:49: e0:79:a3:6d:cd:b1:c5:7a:e4:e9:28:1e:ae:1a:4e: b5:f3:3a:0b:05:5b:45:8e:96:b1:56:09:62:a4:54: 34:02:ed:6b:4e:94:ea:03:7b:62:4d:9d:1b:78:2e: b3:4e:ff:9b:c3:75:a6:53:eb:81:3d:1e:4d:db:38: c2:4a:46:e7:8c:18:6e:0b:93:ff:83:bd:d9:b7:be: d8:69:2d:ec:5f:51:ce:da:87:68:d4:1b:87:99:29: 8e:c4:b7:b5:c1:64:a0:57:58:4d:a5:4b:12:8e:40: 3d:db:bc:54:72:35:fa:6d:81:35:b7:2b:f6:d2:55: 12:2d:64:5d:38:ae:bf:21:f0:1c:62:e5:c2:f5:fb: 0f:7c:a4:96:de:8a:b8:2a:b0:d9:ac:3b:c9:14:30: 10:de:74:9b:12:cb:f3:05:67:3a:6b:2c:fe:d9:27: cd:56:45:31:18:41:eb:d2:f3:63:8d:58:13:1b:5d: fd:b8:13:8d:42:69:22:8b:56:85:53:5f:ec:bb:d6: f8:d6:9c:d2:d8:e4:c7:51:96:49:d5:47:fd:f6:dc: fa:99:7d:0b:ba:65:cf:ba:73:bb:08:bf:98:ba:b9: f8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:CC:45:C3:5B:66:0E:7E:10:D2:20:A0:CF:EF:5D:82:A0:CE:17:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/afb88ebe-750d-3013-b774-fadcc301a7a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl X509v3 Authority Key Identifier: keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer sbgp-ipAddrBlock: critical IPv4: 206.212.240.0/24 206.212.242.0/24 206.212.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:d7:c5:57:d7:17:2b:1e:4e:c4:15:4f:ca:4a:23:3d:6e:01: da:f8:90:18:46:a4:d2:99:4b:6b:39:59:12:f0:56:91:ae:2c: a0:64:9e:41:7b:ba:fc:4d:ee:b9:0b:a7:85:96:46:4d:26:98: 4d:d3:fa:88:db:16:7e:cf:46:9d:f9:88:83:f8:ea:19:08:85: e8:84:43:69:c0:bf:70:c4:22:f6:da:d2:9d:30:4d:50:72:da: 8e:63:79:c4:45:5d:f6:d0:3a:74:84:e4:af:f3:5b:a5:9a:40: 71:54:d1:f3:c1:63:f9:ac:a2:24:1e:94:6a:40:c7:4f:2d:99: 66:7d:b7:91:2c:35:96:d0:05:31:d4:35:0c:d1:0a:f8:70:56: 11:af:5e:b3:22:76:3c:77:ce:60:ab:76:2a:45:e3:1b:c2:96: cf:1f:42:b7:75:0d:54:88:90:93:1b:a8:2c:2c:71:95:01:4f: 38:36:56:54:83:dc:32:88:22:42:28:e8:dc:da:11:b3:8e:32: d1:58:18:51:c0:9b:8a:3b:6c:be:2a:f5:ae:d9:75:d8:34:4a: 18:a5:f2:ab:63:36:60:3f:36:8c:ae:13:55:a7:af:ec:0d:c5: 82:d7:eb:62:fb:d5:82:0d:a1:7f:d9:76:c0:fb:ea:e8:2a:58: 45:c8:9f:dd -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE0jehJthqEaB9Inx8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWUzZTk5Y2MtNzk5Mi00YWMxLWEyNTYtOTE3Y2NlMDc1 MzJlMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk M2I1NDNjMGMtNzkyMi00NTEzLThiYjEtMTZkOWNmOWE4NTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11BffzfRGGx3KugBAvk3TT3mV9gcUXD0wMQQ B0ngeaNtzbHFeuTpKB6uGk618zoLBVtFjpaxVglipFQ0Au1rTpTqA3tiTZ0beC6z Tv+bw3WmU+uBPR5N2zjCSkbnjBhuC5P/g73Zt77YaS3sX1HO2odo1BuHmSmOxLe1 wWSgV1hNpUsSjkA927xUcjX6bYE1tyv20lUSLWRdOK6/IfAcYuXC9fsPfKSW3oq4 KrDZrDvJFDAQ3nSbEsvzBWc6ayz+2SfNVkUxGEHr0vNjjVgTG139uBONQmkii1aF U1/su9b41pzS2OTHUZZJ1Uf99tz6mX0LumXPunO7CL+Yurn4nQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFI/MRcNbZg5+ENIgoM/vXYKgzhc2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTNl OTljYy03OTkyLTRhYzEtYTI1Ni05MTdjY2UwNzUzMmUvYWZiODhlYmUtNzUwZC0z MDEzLWI3NzQtZmFkY2MzMDFhN2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWUzZTk5Y2MtNzk5Mi00YWMxLWEy NTYtOTE3Y2NlMDc1MzJlLzVlM2U5OWNjLTc5OTItNGFjMS1hMjU2LTkxN2NjZTA3 NTMyZS5jcmwwHwYDVR0jBBgwFoAU2RNicrf45rV9n/DguoV/tj3NwN8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTNlOTljYy03OTkyLTRhYzEtYTI1Ni05MTdj Y2UwNzUzMmUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAztTwAwQA ztTyAwQAztT4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAA3XxVfXFyseTsQVT8pKIz1uAdr4kBhGpNKZS2s5 WRLwVpGuLKBknkF7uvxN7rkLp4WWRk0mmE3T+ojbFn7PRp35iIP46hkIheiEQ2nA v3DEIvba0p0wTVBy2o5jecRFXfbQOnSE5K/zW6WaQHFU0fPBY/msoiQelGpAx08t mWZ9t5EsNZbQBTHUNQzRCvhwVhGvXrMidjx3zmCrdipF4xvCls8fQrd1DVSIkJMb qCwscZUBTzg2VlSD3DKIIkIo6NzaEbOOMtFYGFHAm4o7bL4q9a7Zddg0Shil8qtj NmA/NoyuE1Wnr+wNxYLX62L71YINoX/ZdsD76ugqWEXIn90= -----END CERTIFICATE-----Generated at Fri Mar 27 01:08:44 2026 by rpki-client