$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/24c3b433-394d-3c4d-baa1-18b5816f7d6c.roa File: 24c3b433-394d-3c4d-baa1-18b5816f7d6c.roa (raw, json) Hash identifier: tWNpW4YRGhM4N4v/VJ4OWn/2GHGUXHtLlZH4X0Kn0BM= Subject key identifier: 24:F0:5A:16:1E:DB:C1:41:4E:28:DF:1F:31:B1:E8:26:CC:91:B9:65 Certificate issuer: /CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df Certificate serial: 010D0C9F4328584C794C372E15D4805C79ADAD40 Authority key identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/24c3b433-394d-3c4d-baa1-18b5816f7d6c.roa Signing time: Sat 10 Jan 2026 02:00:31 +0000 ROA not before: Sat 10 Jan 2026 02:00:31 +0000 ROA not after: Fri 10 Apr 2026 01:00:31 +0000 asID: 16509 IP address blocks: 206.108.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:79:4c:37:2e:15:d4:80:5c:79:ad:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df Validity Not Before: Jan 10 02:00:31 2026 GMT Not After : Apr 10 01:00:31 2026 GMT Subject: CN=354a35b5-496f-4634-8dfa-4a7477d9e7cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:49:22:4c:a9:d9:c8:6f:76:08:62:d1:50:30: 23:ef:d9:9a:7d:74:51:a7:95:45:0a:b5:99:36:94: 61:80:41:fa:f8:cc:79:91:39:41:ac:a7:b7:6e:66: 28:c5:79:42:f1:f3:3a:de:4c:10:82:cc:89:dc:90: 3a:22:f4:bf:64:49:a4:11:3c:c4:c5:b4:c0:dd:83: 12:de:a7:55:72:93:eb:ab:ee:ac:41:91:ed:f8:7f: 2f:1e:e7:d8:59:45:70:96:f7:8a:7f:b7:1c:85:03: f4:b3:c3:5b:c3:5d:09:2a:28:1e:cc:a0:8c:14:b1: 58:6f:cf:2f:89:26:e2:7a:cc:5b:b0:f8:40:82:37: 33:10:4d:c4:20:c8:1e:d6:8d:19:b3:b5:46:17:0f: 8d:9a:0a:4f:a0:2f:4f:db:be:0b:bb:ae:38:28:56: 5c:aa:91:63:a3:96:38:44:1c:02:8a:97:37:d5:82: c9:b1:f0:57:97:be:c7:78:5d:f2:c7:31:af:5d:54: 70:cc:a1:61:4e:17:1a:2f:d8:56:79:8d:3f:1c:83: 8f:5c:3c:b3:c2:d5:03:dc:00:f3:c7:ee:be:76:71: e7:46:c0:6d:9d:2f:b9:45:55:c4:d0:f5:3b:a9:86: f4:e8:66:09:9c:ce:c8:e8:ac:2c:ca:a4:f4:ad:60: e8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F0:5A:16:1E:DB:C1:41:4E:28:DF:1F:31:B1:E8:26:CC:91:B9:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/24c3b433-394d-3c4d-baa1-18b5816f7d6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl X509v3 Authority Key Identifier: keyid:97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer sbgp-ipAddrBlock: critical IPv4: 206.108.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:f3:99:e4:ca:b6:b4:b5:96:c0:1a:80:b5:54:cf:d2:ca:79: 66:67:98:42:0f:fa:dd:9f:a5:22:99:c5:99:2f:a3:7b:87:0e: 15:40:0d:cc:4d:3c:55:7b:a0:22:1b:4e:27:df:af:db:65:5b: 80:4d:4e:84:41:5a:bf:36:d7:fe:16:01:2e:c0:02:b1:d5:1e: 06:ae:90:b4:56:e2:e2:cb:75:2a:24:08:87:03:2c:3c:09:5a: 46:05:53:5c:36:4c:28:f6:1e:e5:c2:78:68:dd:e9:cc:00:bb: 4d:6b:26:c9:1c:80:05:4f:8a:eb:b2:11:52:24:c3:00:a6:70: cc:7d:a1:ae:31:ac:b0:81:ef:71:eb:7b:20:85:60:4b:96:0b: 5a:dd:fb:e0:84:13:e8:98:47:7d:1d:66:dd:ca:e9:47:be:af: 5b:96:05:34:10:5f:6b:b6:7f:6d:e6:c9:aa:1f:80:1c:1e:99: 46:a7:59:46:13:6f:cd:5a:5b:b8:0e:92:70:a5:22:2d:71:fb: 9e:7f:6f:cb:c1:23:66:f0:c7:f6:8d:97:13:c7:75:b0:59:b6: 04:f0:3a:30:58:d5:95:65:29:bb:46:29:90:9d:85:3f:e0:78: 72:1b:32:c7:7f:44:ed:71:15:0e:6b:b1:48:5c:57:39:0e:be: fb:22:bf:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx5TDcuFdSAXHmtrUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE4YThhZTQtYmU2Mi00ZWYwLTlkYzctNGM0ZDgyNmE0 MGRmMB4XDTI2MDExMDAyMDAzMVoXDTI2MDQxMDAxMDAzMVowLzEtMCsGA1UEAxMk MzU0YTM1YjUtNDk2Zi00NjM0LThkZmEtNGE3NDc3ZDllN2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0kiTKnZyG92CGLRUDAj79mafXRRp5VFCrWZ NpRhgEH6+Mx5kTlBrKe3bmYoxXlC8fM63kwQgsyJ3JA6IvS/ZEmkETzExbTA3YMS 3qdVcpPrq+6sQZHt+H8vHufYWUVwlveKf7cchQP0s8Nbw10JKigezKCMFLFYb88v iSbiesxbsPhAgjczEE3EIMge1o0Zs7VGFw+NmgpPoC9P274Lu644KFZcqpFjo5Y4 RBwCipc31YLJsfBXl77HeF3yxzGvXVRwzKFhThcaL9hWeY0/HIOPXDyzwtUD3ADz x+6+dnHnRsBtnS+5RVXE0PU7qYb06GYJnM7I6KwsyqT0rWDovwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTwWhYe28FBTijfHzGx6CbMkbllMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MThh OGFlNC1iZTYyLTRlZjAtOWRjNy00YzRkODI2YTQwZGYvMjRjM2I0MzMtMzk0ZC0z YzRkLWJhYTEtMThiNTgxNmY3ZDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjE4YThhZTQtYmU2Mi00ZWYwLTlk YzctNGM0ZDgyNmE0MGRmLzYxOGE4YWU0LWJlNjItNGVmMC05ZGM3LTRjNGQ4MjZh NDBkZi5jcmwwHwYDVR0jBBgwFoAUlz5X9TGBsVJSZ9MGK6XxSki+o3UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82MThhOGFlNC1iZTYyLTRlZjAtOWRjNy00YzRk ODI2YTQwZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzmwpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETzmeTKtrS1lsAagLVUz9LKeWZnmEIP+t2fpSKZxZkvo3uHDhVADcxN PFV7oCIbTiffr9tlW4BNToRBWr821/4WAS7AArHVHgaukLRW4uLLdSokCIcDLDwJ WkYFU1w2TCj2HuXCeGjd6cwAu01rJskcgAVPiuuyEVIkwwCmcMx9oa4xrLCB73Hr eyCFYEuWC1rd++CEE+iYR30dZt3K6Ue+r1uWBTQQX2u2f23myaofgBwemUanWUYT b81aW7gOknClIi1x+55/b8vBI2bwx/aNlxPHdbBZtgTwOjBY1ZVlKbtGKZCdhT/g eHIbMsd/RO1xFQ5rsUhcVzkOvvsiv2w= -----END CERTIFICATE-----Generated at Sun Mar 1 23:16:00 2026 by rpki-client