$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/d3d52428-3366-3940-ba48-6c79fec227e0.roa File: d3d52428-3366-3940-ba48-6c79fec227e0.roa (raw, json) Hash identifier: xi+ilRr9AR7SpV4dVDSWFLTV5N5XlX6xitXv5np6wDk= Subject key identifier: 72:B8:74:A2:17:0E:33:22:0D:B7:2E:E1:2F:D7:6A:DB:BF:E0:A9:A5 Certificate issuer: /CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e Certificate serial: 010D0C9F4328584CC611EC44CD5BA4A3BA635D80 Authority key identifier: F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/d3d52428-3366-3940-ba48-6c79fec227e0.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 11736 IP address blocks: 206.209.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:11:ec:44:cd:5b:a4:a3:ba:63:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=3fb8e2b2-c9e7-4995-aa0a-6d27bf048dc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:89:01:0f:2a:d4:8e:fb:84:ec:1c:5a:cb:1f: b0:b8:43:7d:54:90:7a:85:41:fd:cd:cc:eb:88:d5: 5e:3f:3d:cf:33:9a:08:bd:33:38:5a:62:1c:ba:43: 97:58:75:fa:90:ab:01:88:87:e7:19:11:c0:bf:09: 1d:66:69:df:02:ea:ec:c7:1d:89:a0:7a:3d:2e:b9: f7:17:a2:4c:88:4b:41:bd:96:82:03:6e:a5:3f:8f: 8e:22:70:d9:22:55:c3:8d:3a:a7:3a:05:2b:4f:05: 9c:51:69:34:e5:5c:03:f8:c7:6f:1c:c0:b2:7f:ba: 12:63:f9:9d:66:56:d5:2b:b8:79:08:b9:79:4e:01: 59:c6:08:90:76:0d:d0:16:58:fe:a2:b3:4d:c9:39: 6f:42:a5:66:12:2b:91:1c:0a:99:13:ce:1f:db:27: 3f:2c:58:94:95:57:de:2f:e8:80:88:e1:8e:39:ab: f8:19:88:47:8a:2b:fd:32:7a:5a:a3:57:78:35:a2: 87:28:e0:ef:26:41:9f:f7:39:10:6d:a9:f8:d1:a0: ed:64:ff:23:a2:e4:9c:4b:82:9b:58:c0:91:28:3f: a8:b6:9a:e8:78:eb:be:aa:7f:00:a5:2b:27:99:f9: 02:06:21:10:f9:fb:0b:a0:75:e6:50:f1:4c:71:cc: fd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B8:74:A2:17:0E:33:22:0D:B7:2E:E1:2F:D7:6A:DB:BF:E0:A9:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/d3d52428-3366-3940-ba48-6c79fec227e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl X509v3 Authority Key Identifier: keyid:F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer sbgp-ipAddrBlock: critical IPv4: 206.209.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:2c:81:75:d2:45:da:04:44:7b:f6:dd:e8:7d:1e:7f:25:28: b4:01:3a:d8:7f:ac:e1:6f:49:45:09:7e:2f:8d:77:61:b7:1f: d1:a7:2c:1b:2c:9a:1f:ce:c5:66:69:67:13:3e:7e:bc:91:ab: 75:3c:b7:31:cb:5e:84:37:91:26:31:bc:47:66:48:60:68:da: ec:a9:9b:4d:fa:c9:48:df:df:bf:c2:0e:84:69:96:d9:fe:53: 44:8b:1e:14:27:8e:01:92:71:7d:6f:66:86:17:8f:a9:e4:57: c5:f8:cf:1a:51:eb:09:4d:61:d2:21:56:7b:b1:98:db:56:49: 8f:2a:67:2b:83:5f:86:8a:3d:8a:5f:d1:7e:1b:74:9e:42:37: 26:e4:d8:e6:91:9d:69:98:12:8a:0d:a9:cc:72:22:3a:6c:8e: 8d:7e:48:cb:ad:14:96:e6:12:f8:2c:9b:c3:61:bf:38:30:50: a2:fe:c4:07:b1:7a:b2:21:46:94:d2:39:ce:54:e5:33:94:96: 62:69:b0:97:93:a0:ab:16:16:73:b3:c5:b9:28:56:f7:d2:30: 58:d9:5a:e1:0b:c2:22:c3:0d:ea:13:f5:50:f9:35:f7:19:ce: 79:57:8b:13:2a:25:30:cb:39:f6:08:ef:4b:59:02:0f:60:3e: 86:69:75:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzGEexEzVuko7pjXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y5MDBlNGUtNWYwYS00YjE0LTk4YzAtNjY0N2JmZjVl NjRlMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk M2ZiOGUyYjItYzllNy00OTk1LWFhMGEtNmQyN2JmMDQ4ZGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIkBDyrUjvuE7Bxayx+wuEN9VJB6hUH9zczr iNVePz3PM5oIvTM4WmIcukOXWHX6kKsBiIfnGRHAvwkdZmnfAursxx2JoHo9Lrn3 F6JMiEtBvZaCA26lP4+OInDZIlXDjTqnOgUrTwWcUWk05VwD+MdvHMCyf7oSY/md ZlbVK7h5CLl5TgFZxgiQdg3QFlj+orNNyTlvQqVmEiuRHAqZE84f2yc/LFiUlVfe L+iAiOGOOav4GYhHiiv9Mnpao1d4NaKHKODvJkGf9zkQban40aDtZP8jouScS4Kb WMCRKD+otproeOu+qn8ApSsnmfkCBiEQ+fsLoHXmUPFMccz9TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHK4dKIXDjMiDbcu4S/Xatu/4KmlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83Zjkw MGU0ZS01ZjBhLTRiMTQtOThjMC02NjQ3YmZmNWU2NGUvZDNkNTI0MjgtMzM2Ni0z OTQwLWJhNDgtNmM3OWZlYzIyN2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2Y5MDBlNGUtNWYwYS00YjE0LTk4 YzAtNjY0N2JmZjVlNjRlLzdmOTAwZTRlLTVmMGEtNGIxNC05OGMwLTY2NDdiZmY1 ZTY0ZS5jcmwwHwYDVR0jBBgwFoAU8+WK0rjvh9c+gIgy/nujowv1xKAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZjkwMGU0ZS01ZjBhLTRiMTQtOThjMC02NjQ3 YmZmNWU2NGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEztEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMsgXXSRdoERHv23eh9Hn8lKLQBOth/rOFvSUUJfi+Nd2G3H9GnLBss mh/OxWZpZxM+fryRq3U8tzHLXoQ3kSYxvEdmSGBo2uypm036yUjf37/CDoRpltn+ U0SLHhQnjgGScX1vZoYXj6nkV8X4zxpR6wlNYdIhVnuxmNtWSY8qZyuDX4aKPYpf 0X4bdJ5CNybk2OaRnWmYEooNqcxyIjpsjo1+SMutFJbmEvgsm8NhvzgwUKL+xAex erIhRpTSOc5U5TOUlmJpsJeToKsWFnOzxbkoVvfSMFjZWuELwiLDDeoT9VD5NfcZ znlXixMqJTDLOfYI70tZAg9gPoZpdTI= -----END CERTIFICATE-----Generated at Mon Mar 2 09:46:31 2026 by rpki-client