$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/fa86666a-9b50-35cf-a58e-5f71bfe8c86d.roa File: fa86666a-9b50-35cf-a58e-5f71bfe8c86d.roa (raw, json) Hash identifier: oC3Dmg4xdLR7Np1enno8eeGwRdJl8VJ9dWm+vhmtMS8= Subject key identifier: 14:6B:0A:F2:E0:C5:BE:8E:97:DE:74:6C:3E:A9:84:48:CA:68:F2:40 Certificate issuer: /CN=974309dc-20f5-4894-9707-f2e446573ea1 Certificate serial: 010D0C9F4328584D7A0518E34D26B9B4C8CBA680 Authority key identifier: F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/fa86666a-9b50-35cf-a58e-5f71bfe8c86d.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 16509 IP address blocks: 205.201.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:18:e3:4d:26:b9:b4:c8:cb:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=974309dc-20f5-4894-9707-f2e446573ea1 Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=0c15cd9d-686d-46d1-809c-30f46be6e387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d3:f5:79:e1:08:8a:43:ee:8e:0c:92:fa:23: a1:c9:ab:ca:ed:40:1a:93:16:e8:2a:2b:50:94:cc: 38:49:70:8c:46:da:21:34:7e:d9:f2:27:1e:88:33: aa:95:99:90:da:2a:ad:32:a4:b1:e9:9e:67:de:7d: c9:f3:13:72:af:83:e6:7f:dc:e6:b7:ad:38:7d:ef: be:09:d4:61:a2:cc:c4:ec:e7:ac:01:63:aa:5f:64: 41:4e:3a:7d:85:b7:f9:43:6d:4f:34:bd:ef:2a:ac: eb:dc:19:81:59:8e:14:72:7c:ba:f1:88:47:08:fa: 78:a2:d1:2a:d2:50:c6:75:0e:8c:7b:04:bd:06:44: 4a:b3:7d:41:2f:bc:1c:45:42:48:99:6b:21:c8:02: 1d:32:c4:45:34:9a:cd:d8:90:3a:96:2d:54:93:c1: 03:af:d5:8f:cb:65:2c:91:f7:db:a5:fb:8c:7c:84: 94:78:13:7b:9a:dd:d4:1f:44:ae:ff:71:07:19:a4: 60:01:ef:e4:fe:c6:4a:56:1a:30:70:db:c6:ed:4b: a5:d6:8c:98:7f:ba:6e:f8:94:ae:de:ea:b8:e1:e2: e8:12:c2:0c:eb:e6:9c:c5:75:a5:f6:d0:13:2c:84: 89:00:78:c3:e0:2e:3c:c2:e0:0b:6d:a1:d0:aa:bf: 14:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:6B:0A:F2:E0:C5:BE:8E:97:DE:74:6C:3E:A9:84:48:CA:68:F2:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/fa86666a-9b50-35cf-a58e-5f71bfe8c86d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl X509v3 Authority Key Identifier: keyid:F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer sbgp-ipAddrBlock: critical IPv4: 205.201.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:7c:10:f2:a2:04:86:f6:4e:74:c5:d8:50:45:ac:05:ce:f6: be:06:cd:1d:cb:c5:dd:68:11:7e:d2:a9:39:90:d2:d8:36:60: 8d:26:67:2c:4b:45:da:06:54:82:30:37:6f:3f:05:17:5a:90: 76:db:0b:fe:96:4c:08:bd:4c:0b:c7:d8:4a:99:dc:71:c7:76: 0a:ed:b5:3d:af:98:81:88:96:b9:7b:61:e2:52:9d:96:28:6e: ad:67:5b:d3:41:66:ec:6d:48:aa:8e:cc:85:d5:4d:9d:86:a5: 6d:ea:b5:49:22:75:c2:e0:b9:40:e2:cf:b7:56:ad:f8:89:0c: fa:ea:7a:47:65:fd:21:2e:d7:db:5b:a4:f5:bd:8e:80:b4:e7: ba:84:a1:df:97:2a:94:f1:b6:b2:d3:b1:e5:84:4f:5c:72:fd: b7:08:f9:4a:68:22:e1:80:dd:4d:8f:fb:e8:aa:d7:9c:1a:25: 8d:cc:7e:ca:56:5f:5a:ba:e8:64:b3:93:29:60:ab:39:dd:06: 53:2f:a7:0c:06:39:f1:e2:23:7e:b5:83:bc:4f:af:58:b4:bd: d2:b7:91:5a:6d:da:d9:f2:a3:08:3d:63:64:9a:d7:7b:e7:f5: 95:11:9d:5a:95:67:70:e4:c4:5e:73:91:cb:73:90:64:e5:02: 8e:62:8a:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BRjjTSa5tMjLpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTc0MzA5ZGMtMjBmNS00ODk0LTk3MDctZjJlNDQ2NTcz ZWExMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk MGMxNWNkOWQtNjg2ZC00NmQxLTgwOWMtMzBmNDZiZTZlMzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNP1eeEIikPujgyS+iOhyavK7UAakxboKitQ lMw4SXCMRtohNH7Z8iceiDOqlZmQ2iqtMqSx6Z5n3n3J8xNyr4Pmf9zmt604fe++ CdRhoszE7OesAWOqX2RBTjp9hbf5Q21PNL3vKqzr3BmBWY4Ucny68YhHCPp4otEq 0lDGdQ6MewS9BkRKs31BL7wcRUJImWshyAIdMsRFNJrN2JA6li1Uk8EDr9WPy2Us kffbpfuMfISUeBN7mt3UH0Su/3EHGaRgAe/k/sZKVhowcNvG7Uul1oyYf7pu+JSu 3uq44eLoEsIM6+acxXWl9tATLISJAHjD4C48wuALbaHQqr8UrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRrCvLgxb6Ol950bD6phEjKaPJAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85NzQz MDlkYy0yMGY1LTQ4OTQtOTcwNy1mMmU0NDY1NzNlYTEvZmE4NjY2NmEtOWI1MC0z NWNmLWE1OGUtNWY3MWJmZThjODZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTc0MzA5ZGMtMjBmNS00ODk0LTk3 MDctZjJlNDQ2NTczZWExLzk3NDMwOWRjLTIwZjUtNDg5NC05NzA3LWYyZTQ0NjU3 M2VhMS5jcmwwHwYDVR0jBBgwFoAU8wpyK8l5Fe1rdy/fvqwHji6l1eEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NzQzMDlkYy0yMGY1LTQ4OTQtOTcwNy1mMmU0 NDY1NzNlYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzck7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE98EPKiBIb2TnTF2FBFrAXO9r4GzR3Lxd1oEX7SqTmQ0tg2YI0mZyxL RdoGVIIwN28/BRdakHbbC/6WTAi9TAvH2EqZ3HHHdgrttT2vmIGIlrl7YeJSnZYo bq1nW9NBZuxtSKqOzIXVTZ2GpW3qtUkidcLguUDiz7dWrfiJDPrqekdl/SEu19tb pPW9joC057qEod+XKpTxtrLTseWET1xy/bcI+UpoIuGA3U2P++iq15waJY3MfspW X1q66GSzkylgqzndBlMvpwwGOfHiI361g7xPr1i0vdK3kVpt2tnyowg9Y2Sa13vn 9ZURnVqVZ3DkxF5zkctzkGTlAo5iiiQ= -----END CERTIFICATE-----Generated at Fri Apr 17 21:32:56 2026 by rpki-client