$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/67dc5438-0a89-3344-b83b-3be5abdb835d.roa File: 67dc5438-0a89-3344-b83b-3be5abdb835d.roa (raw, json) Hash identifier: 8KbXAX+m41r7mnB24FD0OMcfNV2aptzzuLdpOf6dEzM= Subject key identifier: C8:F4:26:7F:16:04:32:67:A8:C0:E6:B6:E9:2E:0D:64:CC:7B:AD:80 Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F4328584D524342589F8B4A6ACE666374 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/67dc5438-0a89-3344-b83b-3be5abdb835d.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 6453 IP address blocks: 206.82.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:42:58:9f:8b:4a:6a:ce:66:63:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=1c8a034b-16d9-44a8-9335-5a9c46b5f5d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:35:1c:54:31:b7:bb:b6:a8:94:d1:3b:d6:c4: b0:0b:e1:00:ae:9e:94:3a:50:0d:c1:a1:e1:32:cd: 82:fd:5b:47:9c:9b:c9:97:91:bd:db:bf:91:c8:cc: 84:ca:2c:b1:0f:b4:8d:56:11:05:74:dc:b0:02:06: 64:50:90:3c:35:a7:b1:09:b8:ba:9a:6f:91:f2:53: af:b8:64:e1:66:74:fa:c9:d4:c2:8b:b2:28:62:15: 52:41:48:10:ea:a6:22:92:63:ba:4c:6f:72:e2:eb: 2f:7f:a3:94:69:6c:07:b6:ce:11:c6:b4:e7:89:47: bc:7d:04:20:63:73:f3:a7:3d:a8:9f:21:fa:0e:79: 6a:a4:df:1c:c1:fb:e3:41:db:bf:61:7d:85:10:15: 45:79:58:41:22:70:6a:e1:1d:0b:2b:22:3d:d4:e4: bc:a1:04:4d:d6:24:31:c3:68:ba:b6:4b:05:f5:b2: 3b:10:8c:7d:e5:e2:5c:c7:84:5c:09:fe:42:57:52: 29:58:f9:44:f3:9c:77:c7:29:63:4b:9d:fe:e9:0a: 20:ba:49:29:a4:a3:cc:48:36:3b:22:66:4e:8c:2d: 13:55:c9:9d:d8:85:12:90:db:a6:e5:db:a4:17:32: ec:40:48:bc:7f:f7:90:cc:cd:63:81:a2:9a:f6:37: 07:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F4:26:7F:16:04:32:67:A8:C0:E6:B6:E9:2E:0D:64:CC:7B:AD:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/67dc5438-0a89-3344-b83b-3be5abdb835d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 206.82.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:3e:af:53:b4:c7:bc:70:c2:9f:58:1d:38:fa:d0:fe:53:4b: 17:69:72:6b:d1:28:de:3f:f8:3d:c4:75:3d:de:72:2d:41:36: fd:33:a4:f0:3e:aa:d6:85:34:c3:79:b3:d9:2f:7c:6e:98:1d: b8:a8:34:87:ee:b1:b1:c2:cd:b3:08:c5:b9:1e:c4:b1:80:58: 4a:2d:b8:07:df:4e:79:b8:0f:42:e3:e1:f3:00:0a:09:3e:9c: 7f:8a:67:e5:71:66:06:65:d7:8c:f6:1e:28:a2:13:56:a4:77: 2f:08:72:ed:ac:d4:c9:23:51:07:b1:11:ee:c0:ae:01:3b:ea: c6:d6:dc:26:a3:56:5e:ee:60:55:7c:6e:10:49:55:4d:46:e0: 5f:17:cd:bc:6c:1f:96:b6:50:7a:d4:38:83:50:2c:11:02:ab: 25:75:7d:b0:24:95:e1:67:de:fb:17:42:8b:80:e7:9f:6b:1b: 07:70:55:ea:17:5b:a6:35:13:ed:03:9f:e7:db:01:da:00:91: 06:f4:0b:43:8e:08:88:09:d0:d7:57:af:1a:a0:01:4c:38:3d: dd:31:05:d4:7a:07:08:38:5b:e6:36:bc:1c:50:59:14:97:f4: 59:20:63:db:36:06:74:83:93:10:bb:0b:d3:d4:a7:7e:c0:b1: 93:f7:5b:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ0JYn4tKas5mY3QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk MWM4YTAzNGItMTZkOS00NGE4LTkzMzUtNWE5YzQ2YjVmNWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzUcVDG3u7aolNE71sSwC+EArp6UOlANwaHh Ms2C/VtHnJvJl5G927+RyMyEyiyxD7SNVhEFdNywAgZkUJA8NaexCbi6mm+R8lOv uGThZnT6ydTCi7IoYhVSQUgQ6qYikmO6TG9y4usvf6OUaWwHts4RxrTniUe8fQQg Y3Pzpz2onyH6DnlqpN8cwfvjQdu/YX2FEBVFeVhBInBq4R0LKyI91OS8oQRN1iQx w2i6tksF9bI7EIx95eJcx4RcCf5CV1IpWPlE85x3xyljS53+6QogukkppKPMSDY7 ImZOjC0TVcmd2IUSkNum5dukFzLsQEi8f/eQzM1jgaKa9jcHxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMj0Jn8WBDJnqMDmtukuDWTMe62AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvNjdkYzU0MzgtMGE4OS0z MzQ0LWI4M2ItM2JlNWFiZGI4MzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzlKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAo+r1O0x7xwwp9YHTj60P5TSxdpcmvRKN4/+D3EdT3eci1BNv0zpPA+ qtaFNMN5s9kvfG6YHbioNIfusbHCzbMIxbkexLGAWEotuAffTnm4D0Lj4fMACgk+ nH+KZ+VxZgZl14z2HiiiE1akdy8Icu2s1MkjUQexEe7ArgE76sbW3CajVl7uYFV8 bhBJVU1G4F8XzbxsH5a2UHrUOINQLBECqyV1fbAkleFn3vsXQouA559rGwdwVeoX W6Y1E+0Dn+fbAdoAkQb0C0OOCIgJ0NdXrxqgAUw4Pd0xBdR6Bwg4W+Y2vBxQWRSX 9FkgY9s2BnSDkxC7C9PUp37AsZP3Wx0= -----END CERTIFICATE-----Generated at Fri Apr 17 23:03:26 2026 by rpki-client