$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/03f0fa2f-ffdf-386b-a164-9e29718071ae.roa File: 03f0fa2f-ffdf-386b-a164-9e29718071ae.roa (raw, json) Hash identifier: ZYJuUysg+xVBiS/6hczler81pUhJtZQDfRh8L/S35JQ= Subject key identifier: 72:D6:5E:98:05:6E:B7:F9:5C:CB:2D:14:CB:5F:99:23:AE:E5:F9:F2 Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F4328584CA5F6F55B90D0D7F433401280 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/03f0fa2f-ffdf-386b-a164-9e29718071ae.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 51964 IP address blocks: 206.48.0.0/16 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f6:f5:5b:90:d0:d7:f4:33:40:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=0cd0e803-46ed-49e4-bb96-8524ee6b79a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:99:08:57:ab:96:b7:2d:de:fc:df:82:49:b3: a6:43:14:3d:d6:69:74:8e:98:8d:77:68:9f:27:62: 40:81:0b:66:1c:9b:a1:f5:9a:c9:e1:7f:e2:e2:ed: 45:ad:6c:93:54:04:a2:3c:28:4a:6e:a2:92:f4:88: 99:7b:08:c4:85:6e:9c:39:3a:a4:9a:0b:5d:23:34: 75:8c:63:c1:56:c1:35:98:1e:8f:9e:a4:3d:7e:6e: e2:b8:98:07:21:9e:90:10:44:03:75:00:f0:16:6d: 90:45:b6:b1:fa:01:0c:cf:6f:8b:0c:76:17:fd:1a: bc:83:02:3e:bb:b9:c1:ed:1d:53:35:86:1c:27:11: b9:56:e5:fa:ee:e0:c1:f2:21:28:3b:58:fa:d9:3c: 8f:d1:e0:26:0f:cc:24:a2:c5:aa:f3:8e:0f:da:4e: 3d:9d:91:08:de:68:71:62:2a:14:b9:06:20:fb:0a: 24:34:3c:e7:f1:cf:28:86:99:49:2f:11:f6:83:c8: f0:cb:6d:59:9b:10:50:75:e0:8c:29:04:ff:7a:54: c8:9c:57:b6:cc:84:ad:50:44:c6:c0:41:21:49:f2: 92:d0:80:30:dc:e3:2e:35:a7:18:ca:f9:67:d0:b5: f6:d0:98:86:07:f8:a4:b4:cb:22:7c:4a:f9:1c:6d: 08:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D6:5E:98:05:6E:B7:F9:5C:CB:2D:14:CB:5F:99:23:AE:E5:F9:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/03f0fa2f-ffdf-386b-a164-9e29718071ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 206.48.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:5f:1e:21:4e:9b:e5:66:0c:ce:eb:ef:00:35:04:86:2f:d9: 26:40:be:35:de:e7:65:b9:8b:8f:4b:82:bb:1a:94:33:b4:ca: f7:86:4e:4d:85:0b:02:71:63:51:c0:21:a0:e2:66:4e:66:e1: d5:c5:75:c2:30:b8:ec:45:f2:62:ea:d9:b6:f7:d4:bd:91:ff: 5f:b4:16:50:dd:9e:d0:60:6a:fa:34:48:6d:38:a5:00:78:f5: fb:3d:31:83:dd:a9:67:ee:58:8c:d6:e5:a0:bd:1e:f6:3a:ad: eb:de:1e:c0:19:f5:e9:c7:bc:da:9b:47:59:d8:f6:fd:ee:8b: 79:8a:99:fc:22:e3:0f:cd:d2:17:82:05:e3:5c:50:84:6e:71: 8b:7c:08:41:9a:31:6b:3f:ef:70:f6:eb:88:a3:e8:c7:0a:6b: 8a:86:87:43:1b:8c:ff:67:73:24:39:8a:b7:ce:4f:19:b4:6c: 99:22:88:ce:ea:56:4f:98:19:e7:61:c6:a3:01:15:7c:85:ec: df:d0:53:0f:cd:74:3f:f0:57:07:f7:c4:d4:4d:5b:a9:d6:90: b6:15:0d:d8:97:bf:0e:ee:0c:8f:d7:5e:f6:21:8e:dd:7e:b7: 30:99:71:55:7c:07:29:73:41:37:1d:11:a0:22:28:26:3b:5a: 7a:07:ba:75 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEyl9vVbkNDX9DNAEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk MGNkMGU4MDMtNDZlZC00OWU0LWJiOTYtODUyNGVlNmI3OWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpkIV6uWty3e/N+CSbOmQxQ91ml0jpiNd2if J2JAgQtmHJuh9ZrJ4X/i4u1FrWyTVASiPChKbqKS9IiZewjEhW6cOTqkmgtdIzR1 jGPBVsE1mB6PnqQ9fm7iuJgHIZ6QEEQDdQDwFm2QRbax+gEMz2+LDHYX/Rq8gwI+ u7nB7R1TNYYcJxG5VuX67uDB8iEoO1j62TyP0eAmD8wkosWq844P2k49nZEI3mhx YioUuQYg+wokNDzn8c8ohplJLxH2g8jwy21ZmxBQdeCMKQT/elTInFe2zIStUETG wEEhSfKS0IAw3OMuNacYyvln0LX20JiGB/iktMsifEr5HG0IvQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHLWXpgFbrf5XMstFMtfmSOu5fnyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvMDNmMGZhMmYtZmZkZi0z ODZiLWExNjQtOWUyOTcxODA3MWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAzjAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAOl8eIU6b5WYMzuvvADUEhi/ZJkC+Nd7nZbmLj0uCuxqUM7TK94ZOTYUL AnFjUcAhoOJmTmbh1cV1wjC47EXyYurZtvfUvZH/X7QWUN2e0GBq+jRIbTilAHj1 +z0xg92pZ+5YjNbloL0e9jqt694ewBn16ce82ptHWdj2/e6LeYqZ/CLjD83SF4IF 41xQhG5xi3wIQZoxaz/vcPbriKPoxwprioaHQxuM/2dzJDmKt85PGbRsmSKIzupW T5gZ52HGowEVfIXs39BTD810P/BXB/fE1E1bqdaQthUN2Je/Du4Mj9de9iGO3X63 MJlxVXwHKXNBNx0RoCIoJjtaege6dQ== -----END CERTIFICATE-----Generated at Mon Mar 2 11:38:16 2026 by rpki-client