$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/6436fe84-15d0-3af0-956b-b3cb8a063158.roa File: 6436fe84-15d0-3af0-956b-b3cb8a063158.roa (raw, json) Hash identifier: cyRrt22VwdxDRnJa0KAcVdutEcsqT7W2agqzaRmZshI= Subject key identifier: 7E:AD:83:4D:8A:B2:00:1D:E6:D0:C2:14:62:DA:E7:2C:1B:7D:9D:CE Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584CF9B786261E64C8AA697F9CE0 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/6436fe84-15d0-3af0-956b-b3cb8a063158.roa Signing time: Wed 25 Feb 2026 02:00:32 +0000 ROA not before: Wed 25 Feb 2026 02:00:32 +0000 ROA not after: Tue 26 May 2026 01:00:32 +0000 asID: 398420 IP address blocks: 216.246.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f9:b7:86:26:1e:64:c8:aa:69:7f:9c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Feb 25 02:00:32 2026 GMT Not After : May 26 01:00:32 2026 GMT Subject: CN=699a9eba-4c44-4898-b0f5-27de1790868a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ed:2d:fc:9d:c0:45:9d:2d:12:3d:04:4c:12: 9a:d5:d5:a0:ba:ab:66:d1:44:21:43:f1:f3:4d:35: 98:65:f2:7d:07:df:98:e9:03:49:0a:d5:f3:db:01: e8:b1:a7:11:1f:ce:2d:50:be:5b:1f:1a:99:9d:68: 49:d0:1d:f2:c0:ba:bb:b2:13:d2:04:50:de:65:d8: cc:5b:fd:d4:e8:1e:3f:bc:56:22:56:d7:7e:48:00: 9f:0e:9d:49:ab:3a:a1:c5:c4:24:c5:7d:76:50:69: ef:b3:32:6f:4d:46:03:ba:64:fc:40:29:49:9e:42: c2:25:aa:40:47:f4:0e:17:7d:38:a1:09:7d:0e:4a: 0b:95:43:c8:cd:29:c3:bd:b2:72:ab:f7:94:9c:42: c0:a1:dc:12:ac:4d:29:51:c7:5d:a7:67:0a:38:5f: 81:7b:b4:4b:c1:96:79:80:0a:f7:bb:d2:a8:a4:b0: 51:ac:f3:79:5f:d5:fa:6d:4e:82:f1:6b:d1:a9:1f: 76:8b:d0:d8:f8:1d:b2:16:70:fc:24:c4:b1:4b:0b: 6b:c3:53:33:ba:e6:f2:fb:ea:18:86:dd:30:8d:e4: b5:11:b8:b2:47:bd:e9:20:63:07:10:35:e4:0e:05: 88:72:b0:3f:c0:94:9a:d2:59:4d:01:17:3e:15:59: d2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:AD:83:4D:8A:B2:00:1D:E6:D0:C2:14:62:DA:E7:2C:1B:7D:9D:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/6436fe84-15d0-3af0-956b-b3cb8a063158.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 216.246.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:d8:12:07:ae:3a:43:11:61:80:5e:5d:e5:a9:dd:06:eb:3c: 8c:69:c2:3c:c5:8c:1f:0b:9c:86:9d:6b:e9:9e:e7:c7:b5:27: 5d:77:ea:c3:df:45:2b:78:bf:87:4f:1f:bf:b6:4e:7b:d7:87: 98:2f:22:ff:f9:66:14:49:52:95:a8:4c:fd:94:1a:25:38:8f: 14:ea:4e:2e:d0:63:95:06:1a:5b:2f:93:a2:ec:0d:43:0e:91: b3:43:98:81:53:43:24:37:cd:b5:20:61:54:34:6b:d5:30:eb: ea:cd:ba:78:3c:17:2f:b2:a1:d7:a0:0a:fc:ef:d5:7f:47:ad: 26:d7:01:e8:27:2e:49:1e:09:8c:d5:07:a6:03:10:b7:a9:b2: 6a:dd:42:f6:d6:30:ac:c0:29:00:23:da:08:b5:b2:49:cc:77: 73:8f:97:e7:b2:fa:c0:7f:42:47:7e:3b:ea:a2:09:07:21:0e: 96:2a:c2:75:ed:b8:00:d3:3e:9d:61:00:38:ef:62:10:8c:b9: 97:99:e7:74:df:b2:b7:76:59:8f:f6:37:bd:a7:e8:75:f7:f7: ed:a9:d2:0e:0c:1c:6f:8f:8c:d6:57:8e:1d:54:79:c8:9e:8a: bb:b6:cf:ed:69:5a:0c:b4:f3:49:fd:5b:cd:da:54:b6:66:41: b0:f5:1b:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz5t4YmHmTIqml/nOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI2MDIyNTAyMDAzMloXDTI2MDUyNjAxMDAzMlowLzEtMCsGA1UEAxMk Njk5YTllYmEtNGM0NC00ODk4LWIwZjUtMjdkZTE3OTA4NjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+0t/J3ARZ0tEj0ETBKa1dWguqtm0UQhQ/Hz TTWYZfJ9B9+Y6QNJCtXz2wHosacRH84tUL5bHxqZnWhJ0B3ywLq7shPSBFDeZdjM W/3U6B4/vFYiVtd+SACfDp1JqzqhxcQkxX12UGnvszJvTUYDumT8QClJnkLCJapA R/QOF304oQl9DkoLlUPIzSnDvbJyq/eUnELAodwSrE0pUcddp2cKOF+Be7RLwZZ5 gAr3u9KopLBRrPN5X9X6bU6C8WvRqR92i9DY+B2yFnD8JMSxSwtrw1Mzuuby++oY ht0wjeS1EbiyR73pIGMHEDXkDgWIcrA/wJSa0llNARc+FVnSnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6tg02KsgAd5tDCFGLa5ywbfZ3OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvNjQzNmZlODQtMTVkMC0z YWYwLTk1NmItYjNjYjhhMDYzMTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PbcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjYEgeuOkMRYYBeXeWp3QbrPIxpwjzFjB8LnIada+me58e1J1136sPf RSt4v4dPH7+2TnvXh5gvIv/5ZhRJUpWoTP2UGiU4jxTqTi7QY5UGGlsvk6LsDUMO kbNDmIFTQyQ3zbUgYVQ0a9Uw6+rNung8Fy+yodegCvzv1X9HrSbXAegnLkkeCYzV B6YDELepsmrdQvbWMKzAKQAj2gi1sknMd3OPl+ey+sB/Qkd+O+qiCQchDpYqwnXt uADTPp1hADjvYhCMuZeZ53Tfsrd2WY/2N72n6HX39+2p0g4MHG+PjNZXjh1Uecie iru2z+1pWgy080n9W83aVLZmQbD1G/8= -----END CERTIFICATE-----Generated at Mon Mar 2 10:03:47 2026 by rpki-client