$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ca3dc49f-9faa-3fb9-bae8-8ebe5cf1f6e0.roa File: ca3dc49f-9faa-3fb9-bae8-8ebe5cf1f6e0.roa (raw, json) Hash identifier: l+Fqcv1Zt5H37xLu2g05Svaf+3WejSsLKXf2Nuz2oGY= Subject key identifier: BD:10:D6:B2:2D:4E:8E:B4:B2:9A:7F:FD:26:E6:FC:04:37:BD:03:D3 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584D7B6A8E6499E1C80250CBBF80 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ca3dc49f-9faa-3fb9-bae8-8ebe5cf1f6e0.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 11105 IP address blocks: 206.12.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:8e:64:99:e1:c8:02:50:cb:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=47758ba8-0c55-40f4-89c4-01baa7be7785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:11:78:7c:1a:94:a0:95:87:fb:d9:96:fa:d4: e3:9a:3a:e2:ae:6b:b4:8d:86:2a:29:7f:51:90:86: b4:43:14:de:03:35:49:e1:cc:d1:a0:45:ed:d5:10: e5:0c:6f:f0:37:82:66:61:ee:7e:c4:fa:f0:27:9e: 83:7a:03:66:7a:09:24:13:94:eb:c5:03:83:f0:ba: 3e:d4:ae:91:ab:0f:37:08:96:bd:7f:bf:1c:2f:56: 6c:c5:fb:f1:4d:26:e5:7d:2d:a7:7f:e3:20:da:66: 66:38:89:c5:f8:c2:01:49:ad:42:e1:d4:ea:21:37: fd:f8:a7:69:be:be:ed:31:a6:10:c2:8b:a7:bf:44: 8f:b2:2d:2b:8f:05:c1:bb:ca:7f:46:f6:59:23:91: 34:6d:69:af:5a:a1:aa:7f:2b:67:de:62:bd:6e:cb: da:34:d2:09:76:0e:54:9b:16:ed:66:6d:1f:7b:49: a6:f7:62:88:43:06:6a:2a:19:51:77:32:93:e1:d2: c4:8f:fd:4f:e3:5c:74:2b:79:e2:43:9a:fd:20:bf: 5a:81:ed:3b:3e:46:0c:bd:13:a5:65:01:b4:88:e9: 8e:61:60:52:85:1c:ea:35:22:7c:17:38:a7:68:61: 22:01:78:34:17:c9:44:85:f8:88:d0:73:6a:58:a3: 67:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:10:D6:B2:2D:4E:8E:B4:B2:9A:7F:FD:26:E6:FC:04:37:BD:03:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ca3dc49f-9faa-3fb9-bae8-8ebe5cf1f6e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 206.12.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:d8:b8:61:27:15:47:98:e6:72:88:82:cd:82:58:f6:2f:03: fb:b1:40:6a:1a:8f:5c:98:4e:b4:23:bf:d2:2e:47:c2:b1:eb: 91:e8:60:f1:83:ff:bd:38:e8:2b:0e:96:25:0a:07:7f:44:4d: 87:75:88:fc:41:a9:1a:a6:88:a5:67:e0:de:61:74:34:88:82: d3:91:10:06:0d:e6:0f:06:ce:9b:06:c2:f6:a5:81:8b:2b:9a: 4e:74:48:ec:09:fa:32:a6:47:6e:a4:c7:7e:e7:b0:bd:b3:88: de:0a:63:08:3f:55:f7:fc:bb:1f:20:e4:24:e0:4f:d4:23:07: 11:94:42:99:9a:8b:cc:ea:82:ba:f3:07:e6:64:be:af:bb:9d: 22:5b:14:1b:c3:eb:8f:9c:81:5f:82:4b:31:af:8a:06:b0:f3: e6:20:a4:5b:33:5d:3d:80:91:bd:37:dc:27:ff:e9:22:bb:89: 43:13:87:2e:a9:bd:cf:9d:04:28:9b:e8:30:03:15:15:87:a3: c5:43:e1:38:bf:0f:01:99:c8:27:18:80:09:44:f6:5f:07:3b: 44:e8:3a:f5:86:86:d1:04:22:e2:2e:60:86:f2:d0:da:28:c3: ea:06:6d:62:77:dc:5a:7b:4e:b1:9c:0d:fa:81:a6:e5:10:36: e3:65:bd:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE17ao5kmeHIAlDLv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk NDc3NThiYTgtMGM1NS00MGY0LTg5YzQtMDFiYWE3YmU3Nzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xF4fBqUoJWH+9mW+tTjmjrirmu0jYYqKX9R kIa0QxTeAzVJ4czRoEXt1RDlDG/wN4JmYe5+xPrwJ56DegNmegkkE5TrxQOD8Lo+ 1K6Rqw83CJa9f78cL1ZsxfvxTSblfS2nf+Mg2mZmOInF+MIBSa1C4dTqITf9+Kdp vr7tMaYQwounv0SPsi0rjwXBu8p/RvZZI5E0bWmvWqGqfytn3mK9bsvaNNIJdg5U mxbtZm0fe0mm92KIQwZqKhlRdzKT4dLEj/1P41x0K3niQ5r9IL9age07PkYMvROl ZQG0iOmOYWBShRzqNSJ8FzinaGEiAXg0F8lEhfiI0HNqWKNnlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0Q1rItTo60spp//Sbm/AQ3vQPTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvY2EzZGM0OWYtOWZhYS0z ZmI5LWJhZTgtOGViZTVjZjFmNmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzgwYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLYuGEnFUeY5nKIgs2CWPYvA/uxQGoaj1yYTrQjv9IuR8Kx65HoYPGD /7046CsOliUKB39ETYd1iPxBqRqmiKVn4N5hdDSIgtOREAYN5g8GzpsGwvalgYsr mk50SOwJ+jKmR26kx37nsL2ziN4KYwg/Vff8ux8g5CTgT9QjBxGUQpmai8zqgrrz B+Zkvq+7nSJbFBvD64+cgV+CSzGvigaw8+YgpFszXT2Akb033Cf/6SK7iUMThy6p vc+dBCib6DADFRWHo8VD4Ti/DwGZyCcYgAlE9l8HO0ToOvWGhtEEIuIuYIby0Noo w+oGbWJ33Fp7TrGcDfqBpuUQNuNlvf8= -----END CERTIFICATE-----Generated at Sat Apr 18 01:36:09 2026 by rpki-client