$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/c1738741-658a-32cd-a4c3-18dc5ad14fc2.roa File: c1738741-658a-32cd-a4c3-18dc5ad14fc2.roa (raw, json) Hash identifier: xNJTHJ/vALSaRDNBRdPtlyH1T0TOr6iDIGsgbtl7d64= Subject key identifier: 62:22:9E:AE:8D:60:C8:46:18:F0:B8:6B:28:62:6C:3F:E8:57:0C:48 Certificate issuer: /CN=8ac31463-974b-4676-9328-200202ae4d6e Certificate serial: 010D0C9F4328584E104F29DC8CF8FAF60A0AC3C0 Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/c1738741-658a-32cd-a4c3-18dc5ad14fc2.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 33211 IP address blocks: 206.41.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:29:dc:8c:f8:fa:f6:0a:0a:c3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=ff70cb97-d55c-484c-9d65-52cb5eb33251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:42:86:97:ef:8f:1d:d1:87:87:01:26:65:5f: 7d:a6:80:e0:4f:b6:41:74:5c:79:41:4d:06:7b:0c: c9:48:63:9b:f8:27:a3:c5:ca:41:01:df:d9:df:7b: 31:93:d6:32:89:d7:65:94:ca:dd:9c:25:49:c3:07: 65:7f:33:8a:13:9b:b5:ba:bf:23:53:c7:75:21:29: c5:46:15:ba:8b:a9:19:c3:af:f3:46:4c:c6:d1:34: 6a:92:1b:a0:16:af:d8:14:92:e3:52:21:e9:60:dd: 47:0d:d7:85:f6:b0:44:24:88:7c:4a:fb:67:39:ee: 4b:f4:f6:1a:9e:23:e0:69:59:d8:3d:a5:5f:de:6b: a6:f7:ea:3e:3a:ed:7d:d1:9f:30:a3:8b:f7:68:25: 42:da:67:4b:c3:1f:96:e0:d2:ac:10:c8:d1:e2:98: 7d:b6:2d:10:63:60:17:96:0f:fb:03:ab:33:f9:2b: 10:4a:dc:94:fe:41:26:06:5b:7a:c8:a2:4a:0f:82: 0a:12:90:00:04:e2:f8:28:c9:cb:06:5f:f6:95:74: 39:77:b8:ab:6e:07:1b:3c:19:a8:2f:2f:81:18:b8: ac:17:4b:94:0f:37:72:26:eb:17:1c:c6:ff:ae:ce: 72:0e:3b:77:c1:1f:dd:eb:85:71:f5:43:63:98:01: 68:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:22:9E:AE:8D:60:C8:46:18:F0:B8:6B:28:62:6C:3F:E8:57:0C:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/c1738741-658a-32cd-a4c3-18dc5ad14fc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl X509v3 Authority Key Identifier: keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer sbgp-ipAddrBlock: critical IPv4: 206.41.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:38:51:7b:54:ba:6a:0e:94:5c:73:17:f1:60:0f:f3:a8:26: 48:58:91:19:59:5e:03:47:aa:12:8b:a4:b1:7e:a6:a2:53:5d: 2e:47:f4:dc:6e:3f:cb:86:c6:87:c6:e7:da:80:60:61:fd:d1: b9:20:01:19:6d:1e:f3:9c:e6:34:75:0a:f0:24:9a:e1:85:80: 1b:87:54:0e:b3:a7:e7:f5:67:49:44:83:67:35:75:d1:c8:ea: b8:ef:86:3b:03:a3:93:81:42:38:4b:2a:5e:8b:d3:73:ef:f5: bd:aa:1c:da:42:a2:01:5c:dc:70:44:82:2f:49:ff:19:ed:e1: 0e:35:9d:33:6e:b7:5c:1e:09:0b:96:4c:a8:19:26:99:88:5d: 19:3a:4a:56:16:dc:b1:19:72:fd:e5:73:b1:a2:77:53:7b:2b: ef:9d:52:9d:9a:41:f2:18:4e:91:ba:6d:7c:2f:68:8e:1e:05: af:bc:a8:72:39:9f:f5:b9:0c:1e:99:1f:1b:53:fb:e4:90:34: f1:b5:a4:6c:f2:07:f3:64:4b:8b:a3:d9:6d:55:87:b8:a7:9d: 49:8a:eb:4d:73:b5:ee:14:99:ca:cb:48:34:75:b0:ab:5f:b6: fc:61:49:69:59:f1:45:5c:77:2a:1d:c0:67:6f:50:47:1a:2d: f1:0e:e4:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTyncjPj69goKw8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFjMzE0NjMtOTc0Yi00Njc2LTkzMjgtMjAwMjAyYWU0 ZDZlMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk ZmY3MGNiOTctZDU1Yy00ODRjLTlkNjUtNTJjYjVlYjMzMjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUKGl++PHdGHhwEmZV99poDgT7ZBdFx5QU0G ewzJSGOb+CejxcpBAd/Z33sxk9YyiddllMrdnCVJwwdlfzOKE5u1ur8jU8d1ISnF RhW6i6kZw6/zRkzG0TRqkhugFq/YFJLjUiHpYN1HDdeF9rBEJIh8SvtnOe5L9PYa niPgaVnYPaVf3mum9+o+Ou190Z8wo4v3aCVC2mdLwx+W4NKsEMjR4ph9ti0QY2AX lg/7A6sz+SsQStyU/kEmBlt6yKJKD4IKEpAABOL4KMnLBl/2lXQ5d7irbgcbPBmo Ly+BGLisF0uUDzdyJusXHMb/rs5yDjt3wR/d64Vx9UNjmAFoLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIinq6NYMhGGPC4ayhibD/oVwxIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84YWMz MTQ2My05NzRiLTQ2NzYtOTMyOC0yMDAyMDJhZTRkNmUvYzE3Mzg3NDEtNjU4YS0z MmNkLWE0YzMtMThkYzVhZDE0ZmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGFjMzE0NjMtOTc0Yi00Njc2LTkz MjgtMjAwMjAyYWU0ZDZlLzhhYzMxNDYzLTk3NGItNDY3Ni05MzI4LTIwMDIwMmFl NGQ2ZS5jcmwwHwYDVR0jBBgwFoAUZkrPeoeALtWWaZNuDr1s6kFXZvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84YWMzMTQ2My05NzRiLTQ2NzYtOTMyOC0yMDAy MDJhZTRkNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzil8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACA4UXtUumoOlFxzF/FgD/OoJkhYkRlZXgNHqhKLpLF+pqJTXS5H9Nxu P8uGxofG59qAYGH90bkgARltHvOc5jR1CvAkmuGFgBuHVA6zp+f1Z0lEg2c1ddHI 6rjvhjsDo5OBQjhLKl6L03Pv9b2qHNpCogFc3HBEgi9J/xnt4Q41nTNut1weCQuW TKgZJpmIXRk6SlYW3LEZcv3lc7Gid1N7K++dUp2aQfIYTpG6bXwvaI4eBa+8qHI5 n/W5DB6ZHxtT++SQNPG1pGzyB/NkS4uj2W1Vh7innUmK601zte4UmcrLSDR1sKtf tvxhSWlZ8UVcdyodwGdvUEcaLfEO5NE= -----END CERTIFICATE-----Generated at Sun Jun 14 08:10:21 2026 by rpki-client