$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/67680324-7caa-3bc8-a0da-d5b9782851fa.roa File: 67680324-7caa-3bc8-a0da-d5b9782851fa.roa (raw, json) Hash identifier: TXrTh7JraTOVtDb6ENyBCcWTihb5p/irBZG1zZ9LnrQ= Subject key identifier: 67:ED:1F:7B:9C:36:AD:72:CA:A5:61:60:4C:77:CC:5F:7C:FD:F0:5D Certificate issuer: /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c Certificate serial: 010D0C9F4328584CA5F704F75E04D26521072430 Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/67680324-7caa-3bc8-a0da-d5b9782851fa.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 32133 IP address blocks: 169.197.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:04:f7:5e:04:d2:65:21:07:24:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=d1956dee-d024-4534-a9dc-b119694874af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ca:2f:0b:67:4a:11:c5:38:3b:b0:86:1a:3f: 80:22:7a:44:cb:38:fc:66:91:42:92:18:cc:3c:2f: c1:48:49:a2:9b:bb:01:ce:63:8a:2f:9a:7c:e2:4f: 44:c4:5a:b7:e9:10:80:cc:48:e9:47:60:82:60:02: cc:30:8e:29:51:e8:fb:3c:45:85:7f:51:ce:0d:6b: a7:18:9a:10:d0:8d:3e:cf:49:75:da:2c:e4:7d:01: ba:de:cb:54:fd:fc:64:cf:d3:57:53:46:31:cc:c7: db:c2:5c:c5:b7:42:c5:86:44:9c:25:7f:57:98:a6: 16:56:ab:05:7d:f5:15:0a:a6:d6:80:1b:c5:7a:ef: 6f:fd:fa:c9:e1:60:9a:d5:13:b1:a8:b6:25:b4:ed: c8:da:a8:ee:f3:fb:79:45:4f:1c:f1:1f:8f:73:d0: 29:6a:ca:d6:9f:b2:f3:e4:d7:8a:a8:86:a4:6c:e8: 76:5e:c5:ea:29:14:3c:d8:2a:39:94:7b:b6:3c:2a: bb:cd:a8:d4:62:37:60:f2:bb:4e:e9:80:30:11:f6: 82:43:77:d9:6a:af:20:c5:3c:e4:69:b0:00:c3:80: a1:21:17:db:a5:ce:b6:41:9e:e5:ed:f5:93:06:65: c7:42:b8:49:41:6a:06:45:e6:2e:87:2a:da:97:80: f4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:ED:1F:7B:9C:36:AD:72:CA:A5:61:60:4C:77:CC:5F:7C:FD:F0:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/67680324-7caa-3bc8-a0da-d5b9782851fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl X509v3 Authority Key Identifier: keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer sbgp-ipAddrBlock: critical IPv4: 169.197.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:05:aa:c8:32:8c:39:7d:36:08:f1:84:be:95:ed:00:d0:7a: cb:fd:7d:ad:dd:60:45:64:c0:68:c5:06:8d:18:50:15:76:30: a9:84:54:af:af:ad:18:42:44:cc:90:8b:07:19:09:11:a1:bc: 7d:ce:31:cc:68:69:8b:50:5d:73:f2:e1:59:28:0a:b7:2e:a7: 34:cf:89:e2:c8:e3:70:4f:cc:40:ec:17:3d:73:87:79:aa:ac: cd:a2:3b:06:5d:62:0d:55:1a:a6:32:2f:8f:ee:d5:3d:32:68: aa:40:c2:9a:e5:38:18:29:27:73:bc:63:41:ef:0d:46:68:d3: 36:c7:7a:de:09:3a:04:31:8a:77:8e:98:92:11:90:ae:4d:7d: cc:fb:c1:75:46:b0:4e:11:e1:24:37:51:fe:43:31:80:7f:20: 09:28:02:20:1b:a3:27:7b:dc:fa:9e:d0:bc:64:ed:4b:b1:0f: 51:72:eb:25:56:db:5b:8b:16:b7:9c:3b:29:3b:18:72:a6:ee: 2c:63:10:4f:f7:5d:ea:d5:83:d8:14:a9:b9:56:86:26:09:3d: 03:6f:a5:80:e1:a8:fc:ec:3e:24:a2:66:05:dc:fe:1a:91:6c: e9:b1:33:02:00:b9:59:40:8a:59:e1:be:91:84:d1:50:a7:35: 79:b9:d9:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9wT3XgTSZSEHJDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA2Y2JjOTEtY2ZlOS00ZDE1LThhMTMtZTNkODI4YzA0 NjljMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk ZDE5NTZkZWUtZDAyNC00NTM0LWE5ZGMtYjExOTY5NDg3NGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycovC2dKEcU4O7CGGj+AInpEyzj8ZpFCkhjM PC/BSEmim7sBzmOKL5p84k9ExFq36RCAzEjpR2CCYALMMI4pUej7PEWFf1HODWun GJoQ0I0+z0l12izkfQG63stU/fxkz9NXU0YxzMfbwlzFt0LFhkScJX9XmKYWVqsF ffUVCqbWgBvFeu9v/frJ4WCa1ROxqLYltO3I2qju8/t5RU8c8R+Pc9ApasrWn7Lz 5NeKqIakbOh2XsXqKRQ82Co5lHu2PCq7zajUYjdg8rtO6YAwEfaCQ3fZaq8gxTzk abAAw4ChIRfbpc62QZ7l7fWTBmXHQrhJQWoGReYuhyral4D0owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGftH3ucNq1yyqVhYEx3zF98/fBdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZj YmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4MjhjMDQ2OWMvNjc2ODAzMjQtN2NhYS0z YmM4LWEwZGEtZDViOTc4Mjg1MWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA2Y2JjOTEtY2ZlOS00ZDE1LThh MTMtZTNkODI4YzA0NjljLzkwNmNiYzkxLWNmZTktNGQxNS04YTEzLWUzZDgyOGMw NDY5Yy5jcmwwHwYDVR0jBBgwFoAUtM26EqXmV2vBKngoUh64xcKEYhUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZjYmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4 MjhjMDQ2OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqcUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYFqsgyjDl9NgjxhL6V7QDQesv9fa3dYEVkwGjFBo0YUBV2MKmEVK+v rRhCRMyQiwcZCRGhvH3OMcxoaYtQXXPy4VkoCrcupzTPieLI43BPzEDsFz1zh3mq rM2iOwZdYg1VGqYyL4/u1T0yaKpAwprlOBgpJ3O8Y0HvDUZo0zbHet4JOgQxineO mJIRkK5Nfcz7wXVGsE4R4SQ3Uf5DMYB/IAkoAiAboyd73Pqe0Lxk7UuxD1Fy6yVW 21uLFrecOyk7GHKm7ixjEE/3XerVg9gUqblWhiYJPQNvpYDhqPzsPiSiZgXc/hqR bOmxMwIAuVlAilnhvpGE0VCnNXm52UM= -----END CERTIFICATE-----Generated at Mon Mar 2 09:19:27 2026 by rpki-client