$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ab30c321-509e-38aa-b5f6-eaa571dc4f82.roa File: ab30c321-509e-38aa-b5f6-eaa571dc4f82.roa (raw, json) Hash identifier: cj5EHsZEr0f53aZN9zzOnPIFzqxdqjGXfvqk/z0Ejw0= Subject key identifier: 57:10:9F:00:2F:3A:F1:CD:A3:87:AC:1B:53:0A:A4:87:60:EE:0B:E8 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584D55BA491356550AD52334A340 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ab30c321-509e-38aa-b5f6-eaa571dc4f82.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 271 IP address blocks: 206.12.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:49:13:56:55:0a:d5:23:34:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=644627e3-420e-41d3-8554-485f10a2a03f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ac:fd:13:3b:59:c1:0b:7b:55:eb:a2:3e:af: d7:1e:c8:aa:a1:44:ab:23:a6:d0:3d:33:c9:8e:a0: 40:b5:1d:1c:41:ff:26:c1:07:0d:da:21:e3:b1:d5: 22:8c:9f:3c:6c:5b:b1:80:2a:34:bb:76:47:6e:f6: d4:da:cf:60:53:a0:9a:aa:53:3e:ef:8d:fd:d6:89: cc:f7:f9:47:b2:19:a4:28:a8:61:1f:c1:44:6a:db: ca:e1:97:8d:85:99:f0:58:2a:e2:6e:59:04:ce:8e: 41:22:d4:d1:07:0b:de:60:43:ef:c6:8a:be:ca:99: ad:d4:b6:25:22:0a:f3:51:d4:92:8e:b1:ce:f2:43: 81:3b:d6:7d:da:12:b0:7c:02:2f:1a:18:4c:49:39: ad:51:74:bc:49:f0:4d:e4:87:a3:a8:a4:99:d1:fa: 1d:d5:c5:ff:d7:05:3a:b8:23:e5:5a:ae:90:42:d0: c2:0d:e6:b5:48:d9:f9:35:2d:d3:82:8e:16:4c:d3: c8:16:e2:b1:57:9d:a5:69:9b:50:fc:38:40:6d:f4: db:ee:bc:6c:61:44:a4:70:53:f7:d0:6d:d5:60:8f: 1d:0c:a8:68:9c:6f:e0:db:e8:82:92:39:cf:32:19: 26:b9:f9:6a:67:f1:05:2a:68:62:a9:12:1f:fe:0e: 8d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:10:9F:00:2F:3A:F1:CD:A3:87:AC:1B:53:0A:A4:87:60:EE:0B:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ab30c321-509e-38aa-b5f6-eaa571dc4f82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 206.12.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:5b:f3:74:fb:ff:1e:2c:9c:c5:36:71:4b:58:af:2b:7a:04: 9e:95:da:d3:92:8c:b1:c4:c3:81:5e:11:67:b3:c3:7b:c6:b2: 5f:60:65:53:89:14:99:60:bd:b2:42:6a:85:e6:5b:74:e1:91: 0b:20:09:69:d6:73:97:71:2f:f0:23:e5:d3:1c:cf:06:f3:02: a7:61:cc:8d:d2:56:62:21:2d:8a:6b:dd:cb:17:36:f8:65:37: d0:99:4d:c0:06:0e:ff:d3:d7:75:0b:9e:ff:5e:b9:f6:da:ba: 79:4f:f4:af:e7:67:ba:32:bf:ea:d3:27:af:0d:7d:35:7e:22: 11:28:e6:4f:70:6d:1c:ec:15:13:6e:21:7e:4b:9c:db:fe:bb: ac:0b:19:17:89:91:60:6e:a0:91:7b:fd:81:5b:75:98:3b:c7: 67:07:4b:dc:af:0a:9a:be:5b:78:e4:5b:86:d9:eb:7b:ea:7b: 5e:65:25:89:67:b9:48:1e:15:ec:34:60:5c:7a:51:1d:82:b9: 7a:bf:ed:f3:50:69:f3:73:e2:82:30:4e:62:a2:18:68:5c:a7: b3:3c:83:da:ac:81:ac:9e:3e:4b:23:ef:8f:3c:f4:ad:ca:76: 6b:d9:04:ca:fd:da:ee:4b:a5:b9:0a:81:09:43:23:3f:4a:db: 53:cf:5e:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VukkTVlUK1SM0o0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NjQ0NjI3ZTMtNDIwZS00MWQzLTg1NTQtNDg1ZjEwYTJhMDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqz9EztZwQt7VeuiPq/XHsiqoUSrI6bQPTPJ jqBAtR0cQf8mwQcN2iHjsdUijJ88bFuxgCo0u3ZHbvbU2s9gU6CaqlM+74391onM 9/lHshmkKKhhH8FEatvK4ZeNhZnwWCriblkEzo5BItTRBwveYEPvxoq+ypmt1LYl IgrzUdSSjrHO8kOBO9Z92hKwfAIvGhhMSTmtUXS8SfBN5IejqKSZ0fod1cX/1wU6 uCPlWq6QQtDCDea1SNn5NS3Tgo4WTNPIFuKxV52laZtQ/DhAbfTb7rxsYUSkcFP3 0G3VYI8dDKhonG/g2+iCkjnPMhkmuflqZ/EFKmhiqRIf/g6NWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcQnwAvOvHNo4esG1MKpIdg7gvoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvYWIzMGMzMjEtNTA5ZS0z OGFhLWI1ZjYtZWFhNTcxZGM0ZjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzgzUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFb83T7/x4snMU2cUtYryt6BJ6V2tOSjLHEw4FeEWezw3vGsl9gZVOJ FJlgvbJCaoXmW3ThkQsgCWnWc5dxL/Aj5dMczwbzAqdhzI3SVmIhLYpr3csXNvhl N9CZTcAGDv/T13ULnv9eufbaunlP9K/nZ7oyv+rTJ68NfTV+IhEo5k9wbRzsFRNu IX5LnNv+u6wLGReJkWBuoJF7/YFbdZg7x2cHS9yvCpq+W3jkW4bZ63vqe15lJYln uUgeFew0YFx6UR2CuXq/7fNQafNz4oIwTmKiGGhcp7M8g9qsgayePksj74889K3K dmvZBMr92u5LpbkKgQlDIz9K21PPXgc= -----END CERTIFICATE-----Generated at Fri Apr 17 22:44:38 2026 by rpki-client