$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/debf15ce-d5dd-37c4-9aa6-a5fd30d2ae2b.roa File: debf15ce-d5dd-37c4-9aa6-a5fd30d2ae2b.roa (raw, json) Hash identifier: 8Zxrr/TKwo4vKSCbVh/7Bpb/XdyuW75W/QhdCnymJ4A= Subject key identifier: 07:3A:89:70:76:44:45:1D:BF:68:1A:65:5B:6A:B8:D5:32:12:9E:29 Certificate issuer: /CN=109733f6-670d-4e02-a6e2-403ebf727263 Certificate serial: 010D0C9F4328584D746FCC78416DABFD418D7050 Authority key identifier: E9:5C:E4:04:D3:8F:E8:AD:35:EE:F9:60:53:56:92:9D:0E:C1:79:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/debf15ce-d5dd-37c4-9aa6-a5fd30d2ae2b.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 13494 IP address blocks: 206.220.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:cc:78:41:6d:ab:fd:41:8d:70:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=109733f6-670d-4e02-a6e2-403ebf727263 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=cad084c5-c7a7-4d50-8cf2-bec01c17b940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c7:1b:fe:67:4b:24:c2:a1:5a:07:e0:3b:f0: 1e:f4:ec:bb:87:47:bd:da:e3:e9:c4:87:3f:00:be: 8f:04:4d:48:eb:1e:89:a1:bf:ef:be:b8:94:ac:7c: 3f:68:82:71:be:71:e6:c4:b5:99:e6:80:70:d2:6d: 0c:a0:b2:e2:a3:ba:8d:1c:04:09:02:fc:1b:54:43: 14:96:45:c3:62:b0:37:47:a8:b6:b7:fa:e5:2e:8a: 16:12:14:05:b9:f1:09:2e:2d:8c:5d:95:6e:f1:1e: e4:f4:08:59:3a:68:50:14:9f:50:89:98:12:7e:af: dd:f3:8b:c0:33:86:e1:61:ea:ca:11:93:2e:9e:7b: 90:bf:df:4b:92:20:96:ba:4b:90:ea:26:bf:49:54: ff:94:b6:0e:de:1d:e8:53:95:ef:55:40:6d:a8:ff: 1f:d9:31:8c:62:e2:f4:c0:96:ff:18:8f:f4:2b:1d: 59:ba:41:ec:e6:36:2b:46:50:13:3e:17:3d:f9:16: 41:b3:df:5a:c8:f9:43:38:16:72:94:b8:ff:8c:6e: 93:4a:e1:23:3e:f7:bf:dc:db:a5:70:36:17:a5:a0: c0:62:ef:cc:10:27:1b:92:9e:80:8f:28:61:2f:8b: 43:51:34:05:02:38:62:e3:87:d9:99:0c:87:ed:51: 9b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:3A:89:70:76:44:45:1D:BF:68:1A:65:5B:6A:B8:D5:32:12:9E:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/debf15ce-d5dd-37c4-9aa6-a5fd30d2ae2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.crl X509v3 Authority Key Identifier: keyid:E9:5C:E4:04:D3:8F:E8:AD:35:EE:F9:60:53:56:92:9D:0E:C1:79:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer sbgp-ipAddrBlock: critical IPv4: 206.220.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:c7:f0:d3:9f:f0:18:3d:4c:75:3c:d1:54:fb:f9:ee:4c:79: 4c:29:ed:70:f6:83:e9:f4:8e:9f:79:9e:47:ca:b3:b3:e2:34: ed:0c:45:1d:85:de:70:57:45:c8:1d:38:8f:5d:c2:85:3d:91: 6f:e3:5e:2d:09:bc:3c:5f:c1:99:ef:f5:c1:22:9e:14:1c:4d: 70:6f:75:da:2b:ee:73:7b:31:79:b6:5b:0a:4e:83:16:7c:82: fe:b6:bd:59:a6:0b:a6:a0:50:05:45:c9:72:1b:11:dc:32:04: 58:a3:4c:34:13:91:a9:97:5a:60:56:f2:2a:6c:99:6c:e8:35: 7a:82:08:0e:e1:c4:96:d9:7e:55:35:b2:c0:c1:c5:22:70:38: 10:1c:7e:be:7f:e5:b1:37:05:87:74:eb:91:50:32:5e:5c:dd: ef:4d:35:88:1e:e2:1a:34:3d:9b:2a:48:03:ef:78:b1:87:e5: 0f:d9:f3:e1:52:c8:86:ab:8b:c6:db:fc:cd:72:4f:33:d6:66: 69:32:2b:39:c7:84:0e:1f:0a:0a:8e:a5:f6:40:3a:5c:52:9e: 2c:87:de:c3:48:62:94:23:b8:dd:1d:44:4b:87:ca:75:b3:fc: 0d:68:82:7f:75:fe:1f:de:79:76:65:23:e2:e0:69:29:e0:d9: 13:54:b2:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b8x4QW2r/UGNcFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTA5NzMzZjYtNjcwZC00ZTAyLWE2ZTItNDAzZWJmNzI3 MjYzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk Y2FkMDg0YzUtYzdhNy00ZDUwLThjZjItYmVjMDFjMTdiOTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoccb/mdLJMKhWgfgO/Ae9Oy7h0e92uPpxIc/ AL6PBE1I6x6Job/vvriUrHw/aIJxvnHmxLWZ5oBw0m0MoLLio7qNHAQJAvwbVEMU lkXDYrA3R6i2t/rlLooWEhQFufEJLi2MXZVu8R7k9AhZOmhQFJ9QiZgSfq/d84vA M4bhYerKEZMunnuQv99LkiCWukuQ6ia/SVT/lLYO3h3oU5XvVUBtqP8f2TGMYuL0 wJb/GI/0Kx1ZukHs5jYrRlATPhc9+RZBs99ayPlDOBZylLj/jG6TSuEjPve/3Nul cDYXpaDAYu/MECcbkp6AjyhhL4tDUTQFAjhi44fZmQyH7VGbRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAc6iXB2REUdv2gaZVtquNUyEp4pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMDk3 MzNmNi02NzBkLTRlMDItYTZlMi00MDNlYmY3MjcyNjMvZGViZjE1Y2UtZDVkZC0z N2M0LTlhYTYtYTVmZDMwZDJhZTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTA5NzMzZjYtNjcwZC00ZTAyLWE2 ZTItNDAzZWJmNzI3MjYzLzEwOTczM2Y2LTY3MGQtNGUwMi1hNmUyLTQwM2ViZjcy NzI2My5jcmwwHwYDVR0jBBgwFoAU6VzkBNOP6K017vlgU1aSnQ7BeSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMDk3MzNmNi02NzBkLTRlMDItYTZlMi00MDNl YmY3MjcyNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAztwRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzH8NOf8Bg9THU80VT7+e5MeUwp7XD2g+n0jp95nkfKs7PiNO0MRR2F 3nBXRcgdOI9dwoU9kW/jXi0JvDxfwZnv9cEinhQcTXBvddor7nN7MXm2WwpOgxZ8 gv62vVmmC6agUAVFyXIbEdwyBFijTDQTkamXWmBW8ipsmWzoNXqCCA7hxJbZflU1 ssDBxSJwOBAcfr5/5bE3BYd065FQMl5c3e9NNYge4ho0PZsqSAPveLGH5Q/Z8+FS yIari8bb/M1yTzPWZmkyKznHhA4fCgqOpfZAOlxSniyH3sNIYpQjuN0dREuHynWz /A1ogn91/h/eeXZlI+LgaSng2RNUsjA= -----END CERTIFICATE-----Generated at Fri Apr 17 12:55:45 2026 by rpki-client