$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/ced6341d-e795-328e-9371-e1a1f59d7ca0.roa File: ced6341d-e795-328e-9371-e1a1f59d7ca0.roa (raw, json) Hash identifier: fAzeJ5ypKRc9K6osSNZJlsOnXC1wA+KDZdDuJI9v0Rc= Subject key identifier: 4E:77:DA:4E:07:CB:5C:B2:BF:B6:EF:DB:45:31:42:53:15:38:B4:35 Certificate issuer: /CN=8a2695b7-e823-4f74-93b8-98dbbf775bcf Certificate serial: 010D0C9F4328584D59EA7BAE8636A68F0874ADB0 Authority key identifier: 43:0A:58:EE:F9:9E:78:C5:3B:DC:25:A2:B4:83:93:81:46:69:C4:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/ced6341d-e795-328e-9371-e1a1f59d7ca0.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 397493 IP address blocks: 206.197.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/8a2695b7-e823-4f74-93b8-98dbbf775bcf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/8a2695b7-e823-4f74-93b8-98dbbf775bcf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:7b:ae:86:36:a6:8f:08:74:ad:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a2695b7-e823-4f74-93b8-98dbbf775bcf Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=47b2f479-fe21-4a6e-b8f9-6cf82e46b5cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:70:8c:63:4b:e8:a5:ee:4a:45:78:75:fe:96: 1d:bf:83:91:10:59:96:90:35:c3:99:d0:f6:26:3b: f2:69:72:1b:a0:d9:69:80:49:f8:90:84:c2:1e:36: 17:db:b5:8d:83:75:fd:99:79:dc:ea:00:da:6f:83: 6f:27:c5:cf:ef:06:31:88:4e:9c:17:2f:2f:06:2b: 6b:91:4c:92:4c:5f:fd:1e:5c:d0:46:bd:47:fc:28: 85:fb:83:5a:bb:9b:89:83:e0:b3:e1:cd:8a:10:f0: 92:ea:66:0c:44:e0:5b:27:b9:cc:52:47:a6:c1:f0: ba:46:8c:a8:51:5f:67:04:c5:35:2f:38:21:ca:93: f0:1b:20:42:c8:9e:41:57:67:ad:d0:b6:26:84:92: 52:87:41:16:ed:55:ac:3c:2d:f7:5a:90:1c:0a:dd: ea:dc:67:fe:f8:10:bc:90:74:63:19:dd:ba:db:dc: 1b:db:f9:75:e6:47:7a:43:00:57:98:43:30:4e:e2: b8:7b:74:a6:c8:47:c9:c5:e6:5f:68:df:24:0b:a8: c2:0f:f4:4b:0b:10:2b:dc:95:b9:6d:20:e3:85:c3: da:5f:20:49:60:d8:c6:3d:69:a2:fb:76:c3:35:24: 48:3e:a1:84:61:26:f9:73:c2:ae:53:38:ff:ea:3e: 8c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:77:DA:4E:07:CB:5C:B2:BF:B6:EF:DB:45:31:42:53:15:38:B4:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/ced6341d-e795-328e-9371-e1a1f59d7ca0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/8a2695b7-e823-4f74-93b8-98dbbf775bcf.crl X509v3 Authority Key Identifier: keyid:43:0A:58:EE:F9:9E:78:C5:3B:DC:25:A2:B4:83:93:81:46:69:C4:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf.cer sbgp-ipAddrBlock: critical IPv4: 206.197.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:72:ce:2f:a7:9e:22:4a:2c:2d:fa:ea:10:34:da:c3:1c:a8: 87:0f:cb:ee:3e:aa:c1:c1:a0:ac:5a:56:0e:be:25:45:4c:98: ba:78:16:ac:9b:00:2a:9c:da:a9:27:e3:47:a8:94:13:e8:8d: 47:da:56:45:67:50:3e:89:48:39:c4:ee:9f:a7:92:c6:3f:66: 01:a8:73:2b:7c:3c:7b:84:20:19:be:6e:59:99:29:e3:ec:a8: 01:03:5a:01:24:60:b7:ae:a1:60:ab:bd:54:79:3c:40:21:c3: 80:e6:eb:aa:20:ae:37:63:f9:d7:ca:81:80:c8:1c:99:ed:1f: c2:fa:b6:c9:1c:1c:ca:ad:30:d1:8c:04:92:26:8a:30:d1:98: 2f:89:bd:28:11:8d:e1:7d:0d:f4:71:c8:e4:5d:ac:50:99:87: b9:23:60:94:65:83:2a:9c:c6:e4:17:31:fa:76:c7:e1:6a:18: a6:3e:36:22:57:cf:1c:2a:66:9b:42:55:31:c8:94:36:0b:f8: aa:51:4a:6b:26:8d:8c:1b:66:aa:0a:54:3f:d8:47:b7:25:40: 29:8f:e9:ca:4f:96:38:f6:63:c6:5c:6f:9f:c1:bb:64:be:21: fb:57:55:7c:9d:d6:07:39:8d:71:3d:af:51:70:cf:86:ce:1e: 55:ff:0d:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6nuuhjamjwh0rbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGEyNjk1YjctZTgyMy00Zjc0LTkzYjgtOThkYmJmNzc1 YmNmMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NDdiMmY0NzktZmUyMS00YTZlLWI4ZjktNmNmODJlNDZiNWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13CMY0vope5KRXh1/pYdv4OREFmWkDXDmdD2 JjvyaXIboNlpgEn4kITCHjYX27WNg3X9mXnc6gDab4NvJ8XP7wYxiE6cFy8vBitr kUySTF/9HlzQRr1H/CiF+4Nau5uJg+Cz4c2KEPCS6mYMROBbJ7nMUkemwfC6Royo UV9nBMU1LzghypPwGyBCyJ5BV2et0LYmhJJSh0EW7VWsPC33WpAcCt3q3Gf++BC8 kHRjGd2629wb2/l15kd6QwBXmEMwTuK4e3SmyEfJxeZfaN8kC6jCD/RLCxAr3JW5 bSDjhcPaXyBJYNjGPWmi+3bDNSRIPqGEYSb5c8KuUzj/6j6M2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE532k4Hy1yyv7bv20UxQlMVOLQ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84YTI2 OTViNy1lODIzLTRmNzQtOTNiOC05OGRiYmY3NzViY2YvY2VkNjM0MWQtZTc5NS0z MjhlLTkzNzEtZTFhMWY1OWQ3Y2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGEyNjk1YjctZTgyMy00Zjc0LTkz YjgtOThkYmJmNzc1YmNmLzhhMjY5NWI3LWU4MjMtNGY3NC05M2I4LTk4ZGJiZjc3 NWJjZi5jcmwwHwYDVR0jBBgwFoAUQwpY7vmeeMU73CWitIOTgUZpxGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84YTI2OTViNy1lODIzLTRmNzQtOTNiOC05OGRi YmY3NzViY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzsXPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxyzi+nniJKLC366hA02sMcqIcPy+4+qsHBoKxaVg6+JUVMmLp4Fqyb ACqc2qkn40eolBPojUfaVkVnUD6JSDnE7p+nksY/ZgGocyt8PHuEIBm+blmZKePs qAEDWgEkYLeuoWCrvVR5PEAhw4Dm66ogrjdj+dfKgYDIHJntH8L6tskcHMqtMNGM BJImijDRmC+JvSgRjeF9DfRxyORdrFCZh7kjYJRlgyqcxuQXMfp2x+FqGKY+NiJX zxwqZptCVTHIlDYL+KpRSmsmjYwbZqoKVD/YR7clQCmP6cpPljj2Y8Zcb5/Bu2S+ IftXVXyd1gc5jXE9r1Fwz4bOHlX/Des= -----END CERTIFICATE-----Generated at Sun Apr 19 12:47:44 2026 by rpki-client