$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015/ac8bfafd-782d-3f2a-bada-8f51073a92ef.roa File: ac8bfafd-782d-3f2a-bada-8f51073a92ef.roa (raw, json) Hash identifier: 38AznAtXyN3gc9musjmlyY/cY8S5QC5anhleJaiOSF8= Subject key identifier: A5:FD:C3:0A:26:A4:9D:06:F2:8A:25:C0:A2:BE:6A:CF:6A:42:13:13 Certificate issuer: /CN=f229bba4-1d66-4a9f-8e40-159e94bdd015 Certificate serial: 010D0C9F4328584D4D5A5D9C7E92AB6D4BC49480 Authority key identifier: 56:41:D8:48:AC:B9:29:79:0A:18:8C:CD:74:E2:54:9C:3D:F5:86:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015/ac8bfafd-782d-3f2a-bada-8f51073a92ef.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 14618 IP address blocks: 206.198.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015/f229bba4-1d66-4a9f-8e40-159e94bdd015.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015/f229bba4-1d66-4a9f-8e40-159e94bdd015.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:5d:9c:7e:92:ab:6d:4b:c4:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f229bba4-1d66-4a9f-8e40-159e94bdd015 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=55b832d7-6184-4d15-a36d-24da400036e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1a:49:b0:f6:98:60:ca:f3:84:43:60:1a:27: d6:7f:7f:a5:6e:70:a7:83:da:cb:eb:bb:c5:61:34: c2:61:5f:53:81:4c:20:98:79:16:8d:5b:f9:e7:9f: d6:8b:e6:79:ef:50:3d:43:9b:00:34:e7:e6:e2:82: 8a:a7:86:9b:e2:af:54:be:16:e2:71:5b:e6:42:d2: 2e:f6:fd:f5:94:c3:10:5c:28:d3:8d:32:78:50:b1: f4:38:1e:5c:10:db:75:15:67:0b:97:8c:f3:f9:af: 8c:8c:35:7b:be:db:fc:b6:df:dd:ae:da:8a:b0:84: ef:9b:11:ae:a4:33:b7:c2:47:65:22:09:c9:9a:2d: de:9b:db:36:8b:2c:aa:30:d6:f5:7f:34:17:63:62: 2b:0b:a4:ed:ac:1f:fb:21:ff:79:70:b8:93:a2:26: 53:c7:f5:5a:4e:44:b9:d5:38:de:29:cd:f6:ab:a7: e6:86:af:08:5b:fd:ab:44:36:45:07:8d:12:49:70: 9e:e1:78:c6:67:85:ce:e4:6f:99:6f:08:c5:7f:9f: 04:40:d2:5b:0d:aa:e8:fb:a6:d2:5d:5c:8b:35:d7: f9:6f:e7:b5:4d:70:99:e3:f0:e9:3b:e9:c7:d0:33: c1:0f:db:9c:a0:af:f8:a8:0e:bf:8d:b4:7c:a5:ea: 60:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:FD:C3:0A:26:A4:9D:06:F2:8A:25:C0:A2:BE:6A:CF:6A:42:13:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015/ac8bfafd-782d-3f2a-bada-8f51073a92ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015/f229bba4-1d66-4a9f-8e40-159e94bdd015.crl X509v3 Authority Key Identifier: keyid:56:41:D8:48:AC:B9:29:79:0A:18:8C:CD:74:E2:54:9C:3D:F5:86:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015.cer sbgp-ipAddrBlock: critical IPv4: 206.198.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:03:44:bc:e2:d0:53:06:36:63:78:1f:c7:2f:14:00:2d:e5: 23:b3:f3:85:57:d2:ee:27:f5:97:54:7f:21:b3:ec:01:ac:b0: da:06:a4:7e:9b:e6:b9:d0:07:2e:be:33:4d:73:c2:a6:93:3b: e1:01:98:61:f5:91:e4:18:05:b1:72:51:a8:f4:7f:da:6c:bb: 38:77:4b:ee:b0:22:38:3e:d2:0a:a3:81:c1:ed:62:5c:8d:b0: 8c:ba:b8:0a:36:cd:7e:ca:ac:84:92:f1:31:38:93:8a:a9:73: 28:5a:16:b6:9f:83:9d:ee:aa:52:01:2b:f1:1e:6c:54:fd:e1: 0c:f4:9d:53:b6:d2:c7:c8:6b:e7:0f:51:89:3e:17:50:94:dc: d0:98:8a:be:68:2b:cf:37:1f:28:67:43:6d:e6:bb:69:f1:00: eb:83:b2:e3:4d:4a:77:29:94:ec:99:8b:bd:3e:46:ba:d7:4e: 42:02:a6:6c:34:4d:ba:e1:0e:b8:0e:37:bf:b9:9d:a9:83:fd: 75:01:32:79:90:29:b1:c5:b8:2a:be:98:81:72:88:26:20:35: 4c:61:57:86:63:c9:03:6a:a9:b7:b9:79:ed:0b:63:cc:81:91: 83:1e:b8:b3:5d:51:e4:6c:be:85:c1:20:39:9c:af:51:f9:93: 12:72:44:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWl2cfpKrbUvElIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjIyOWJiYTQtMWQ2Ni00YTlmLThlNDAtMTU5ZTk0YmRk MDE1MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk NTViODMyZDctNjE4NC00ZDE1LWEzNmQtMjRkYTQwMDAzNmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRpJsPaYYMrzhENgGifWf3+lbnCng9rL67vF YTTCYV9TgUwgmHkWjVv555/Wi+Z571A9Q5sANOfm4oKKp4ab4q9UvhbicVvmQtIu 9v31lMMQXCjTjTJ4ULH0OB5cENt1FWcLl4zz+a+MjDV7vtv8tt/drtqKsITvmxGu pDO3wkdlIgnJmi3em9s2iyyqMNb1fzQXY2IrC6TtrB/7If95cLiToiZTx/VaTkS5 1TjeKc32q6fmhq8IW/2rRDZFB40SSXCe4XjGZ4XO5G+ZbwjFf58EQNJbDaro+6bS XVyLNdf5b+e1TXCZ4/DpO+nH0DPBD9ucoK/4qA6/jbR8pepgqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKX9wwompJ0G8oolwKK+as9qQhMTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjI5 YmJhNC0xZDY2LTRhOWYtOGU0MC0xNTllOTRiZGQwMTUvYWM4YmZhZmQtNzgyZC0z ZjJhLWJhZGEtOGY1MTA3M2E5MmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjIyOWJiYTQtMWQ2Ni00YTlmLThl NDAtMTU5ZTk0YmRkMDE1L2YyMjliYmE0LTFkNjYtNGE5Zi04ZTQwLTE1OWU5NGJk ZDAxNS5jcmwwHwYDVR0jBBgwFoAUVkHYSKy5KXkKGIzNdOJUnD31htkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjI5YmJhNC0xZDY2LTRhOWYtOGU0MC0xNTll OTRiZGQwMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzsYlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMDRLzi0FMGNmN4H8cvFAAt5SOz84VX0u4n9ZdUfyGz7AGssNoGpH6b 5rnQBy6+M01zwqaTO+EBmGH1keQYBbFyUaj0f9psuzh3S+6wIjg+0gqjgcHtYlyN sIy6uAo2zX7KrISS8TE4k4qpcyhaFrafg53uqlIBK/EebFT94Qz0nVO20sfIa+cP UYk+F1CU3NCYir5oK883HyhnQ23mu2nxAOuDsuNNSncplOyZi70+RrrXTkICpmw0 TbrhDrgON7+5namD/XUBMnmQKbHFuCq+mIFyiCYgNUxhV4ZjyQNqqbe5ee0LY8yB kYMeuLNdUeRsvoXBIDmcr1H5kxJyRGQ= -----END CERTIFICATE-----Generated at Fri Apr 17 11:23:59 2026 by rpki-client