$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/63d372a0-915d-3d5b-935b-f36d95b64c30.roa File: 63d372a0-915d-3d5b-935b-f36d95b64c30.roa (raw, json) Hash identifier: 7E4ctNGiCvxuE7Wak8oHobwAlQkX3WA4tR8aMWro6wY= Subject key identifier: 6B:09:0C:53:87:F6:03:52:25:3A:FE:03:8B:EA:7C:22:78:69:19:FE Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584D4FAFB0D2227498F8FE6A6200 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/63d372a0-915d-3d5b-935b-f36d95b64c30.roa Signing time: Fri 27 Mar 2026 21:04:26 +0000 ROA not before: Fri 27 Mar 2026 21:04:26 +0000 ROA not after: Thu 25 Jun 2026 21:04:26 +0000 asID: 6079 IP address blocks: 206.245.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4f:af:b0:d2:22:74:98:f8:fe:6a:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Mar 27 21:04:26 2026 GMT Not After : Jun 25 21:04:26 2026 GMT Subject: CN=24a16cbf-d2f4-4fd7-85e9-9c8705bd2525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d3:af:1f:4e:d8:f2:38:e0:78:b5:89:0a:04: 41:ee:5d:b1:9a:b6:48:25:bb:13:10:36:56:45:fd: 86:76:53:50:3c:27:6f:69:2f:0d:59:89:ab:02:be: c7:2d:8f:a1:b4:25:f0:0d:52:52:da:c3:48:a6:dc: 6b:43:03:55:64:68:b8:eb:e5:79:ff:e8:61:60:e7: 0a:70:8c:79:f5:86:22:56:34:60:28:3b:38:96:86: f7:f6:7e:ce:4c:5d:5b:45:dd:77:4f:4f:0f:36:b8: e5:82:ae:96:c9:b7:17:e3:c0:70:eb:70:3f:6d:73: b7:02:cf:49:f0:37:1e:42:a1:78:a4:17:c5:b5:cb: 5c:f0:c1:93:7f:9b:b3:e6:e6:d4:df:3c:1e:ff:6b: 48:98:5f:83:ee:70:66:26:e2:a8:8c:b7:8a:72:48: da:15:46:13:6c:5f:b4:56:3f:a0:7a:aa:91:33:08: af:72:80:b8:c4:0e:01:b1:68:3f:f3:9a:fd:6a:00: f5:63:18:5c:6e:ea:08:08:92:05:a3:6e:f6:92:7b: fc:f6:48:f2:7a:72:fa:64:ca:0d:04:ed:3d:55:95: 9d:bd:c4:d2:d6:68:33:ff:75:94:d9:e4:a8:1d:ab: 32:dc:39:05:45:22:3d:9c:49:9e:75:0f:ec:28:0d: ca:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:09:0C:53:87:F6:03:52:25:3A:FE:03:8B:EA:7C:22:78:69:19:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/63d372a0-915d-3d5b-935b-f36d95b64c30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 206.245.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:33:e0:9e:9f:28:a1:e2:eb:3d:82:6a:f4:90:f0:07:44:da: 0d:66:0e:41:5a:b9:95:d3:7e:e6:c7:44:df:a8:6e:a3:ca:a2: 26:c5:2a:7b:39:8d:9d:f6:19:72:16:a4:25:75:c8:33:60:d2: 99:bb:38:e7:8f:35:20:4b:f0:30:6d:66:9a:d0:70:09:51:aa: 15:7e:ad:30:f1:d9:80:5e:6a:61:89:5d:1f:8a:34:f5:bc:18: 1d:33:6c:18:66:7f:31:c0:85:99:06:e3:0a:a8:d3:cd:8f:b0: 55:81:d6:9f:0b:54:55:82:00:7a:14:0c:58:60:da:9a:fd:c2: c8:56:a2:87:6d:2a:91:c7:98:6a:38:84:26:99:b3:a4:8f:ce: 7c:11:6d:62:b9:f6:10:85:99:ff:f3:f3:01:ea:4a:86:ae:e5: 3d:3d:79:f0:d7:ed:7d:c8:59:cc:52:4d:54:92:bf:8f:0f:5a: 42:c2:d4:07:c4:aa:90:64:93:4d:ee:17:3e:77:fa:96:1c:71: 6f:88:ff:89:b2:25:29:35:62:8b:44:d4:24:6f:ba:48:18:be: a4:8d:f4:4d:9e:ab:f0:7f:c1:b0:d0:6c:6b:a4:76:a7:2f:c4: 60:50:28:7b:6d:5a:a4:81:5c:fc:69:14:e4:6a:6b:e2:f2:03: 6a:4e:79:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Pr7DSInSY+P5qYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDMyNzIxMDQyNloXDTI2MDYyNTIxMDQyNlowLzEtMCsGA1UEAxMk MjRhMTZjYmYtZDJmNC00ZmQ3LTg1ZTktOWM4NzA1YmQyNTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNOvH07Y8jjgeLWJCgRB7l2xmrZIJbsTEDZW Rf2GdlNQPCdvaS8NWYmrAr7HLY+htCXwDVJS2sNIptxrQwNVZGi46+V5/+hhYOcK cIx59YYiVjRgKDs4lob39n7OTF1bRd13T08PNrjlgq6WybcX48Bw63A/bXO3As9J 8DceQqF4pBfFtctc8MGTf5uz5ubU3zwe/2tImF+D7nBmJuKojLeKckjaFUYTbF+0 Vj+geqqRMwivcoC4xA4BsWg/85r9agD1YxhcbuoICJIFo272knv89kjyenL6ZMoN BO09VZWdvcTS1mgz/3WU2eSoHasy3DkFRSI9nEmedQ/sKA3KFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsJDFOH9gNSJTr+A4vqfCJ4aRn+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvNjNkMzcyYTAtOTE1ZC0z ZDViLTkzNWItZjM2ZDk1YjY0YzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzvWqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoz4J6fKKHi6z2CavSQ8AdE2g1mDkFauZXTfubHRN+obqPKoibFKns5 jZ32GXIWpCV1yDNg0pm7OOePNSBL8DBtZprQcAlRqhV+rTDx2YBeamGJXR+KNPW8 GB0zbBhmfzHAhZkG4wqo082PsFWB1p8LVFWCAHoUDFhg2pr9wshWoodtKpHHmGo4 hCaZs6SPznwRbWK59hCFmf/z8wHqSoau5T09efDX7X3IWcxSTVSSv48PWkLC1AfE qpBkk03uFz53+pYccW+I/4myJSk1YotE1CRvukgYvqSN9E2eq/B/wbDQbGukdqcv xGBQKHttWqSBXPxpFORqa+LyA2pOefQ= -----END CERTIFICATE-----Generated at Fri Apr 17 19:54:46 2026 by rpki-client