$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f8437cb-088c-4f24-b728-2e13ad3df4df/9d06dada-6d76-32ae-8388-ee9247df3591.roa File: 9d06dada-6d76-32ae-8388-ee9247df3591.roa (raw, json) Hash identifier: iVwpqflDLNxMXb1U1MXsHq/AzO44FKw0zqseicujcf8= Subject key identifier: BC:F4:E5:51:7F:9C:6E:39:E3:43:81:A5:08:01:C8:66:0B:94:AD:42 Certificate issuer: /CN=1f8437cb-088c-4f24-b728-2e13ad3df4df Certificate serial: 010D0C9F4328584C5BFBE81B83EE193DA217FCC0 Authority key identifier: 5E:83:41:68:0C:95:84:9A:82:A6:5C:83:1B:1A:D9:F2:C0:60:85:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f8437cb-088c-4f24-b728-2e13ad3df4df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f8437cb-088c-4f24-b728-2e13ad3df4df/9d06dada-6d76-32ae-8388-ee9247df3591.roa Signing time: Tue 30 Dec 2025 14:00:38 +0000 ROA not before: Tue 30 Dec 2025 14:00:38 +0000 ROA not after: Mon 30 Mar 2026 13:00:38 +0000 asID: 40008 IP address blocks: 206.168.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f8437cb-088c-4f24-b728-2e13ad3df4df/1f8437cb-088c-4f24-b728-2e13ad3df4df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f8437cb-088c-4f24-b728-2e13ad3df4df/1f8437cb-088c-4f24-b728-2e13ad3df4df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f8437cb-088c-4f24-b728-2e13ad3df4df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5b:fb:e8:1b:83:ee:19:3d:a2:17:fc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f8437cb-088c-4f24-b728-2e13ad3df4df Validity Not Before: Dec 30 14:00:38 2025 GMT Not After : Mar 30 13:00:38 2026 GMT Subject: CN=be17c001-d624-4bc6-92c4-713994532e49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7f:6b:5a:9b:e0:c2:83:b1:9d:c2:41:1a:fe: 25:31:e7:a0:b7:a8:fd:92:ae:9f:22:a3:66:12:59: b0:21:70:ac:4f:99:a3:e1:54:52:2a:e5:41:7c:33: db:ae:77:04:de:43:f5:d1:d9:12:a5:52:84:d9:31: 3c:c9:8b:95:29:22:05:15:f0:9a:3f:62:31:35:fb: 1b:77:01:db:ae:9c:af:4b:27:00:22:2e:e0:c2:bc: 46:59:fa:55:3f:e7:75:14:66:04:a0:da:12:2e:28: b7:c4:60:26:40:c9:8e:53:28:62:a6:0d:fa:0c:f5: 94:26:07:6a:32:4e:b6:d8:05:04:ec:9d:02:69:f5: 82:52:33:fe:b8:29:d4:96:58:c7:0d:70:4b:bf:d8: 8a:24:97:1c:0c:5a:73:e6:cd:dc:9a:48:32:ac:b6: b9:a6:bf:c9:a4:0a:64:e0:e1:26:d3:27:92:da:ff: b6:89:dd:d0:c5:af:35:0b:79:7a:af:96:68:3e:4e: f1:1b:6e:70:96:7a:0c:77:d2:3c:68:18:b1:c4:b0: 96:b6:d2:38:38:30:6e:bc:3d:1e:53:3d:50:68:7d: ed:f5:41:00:6a:fc:3c:91:79:c6:3c:f0:62:78:32: 70:7e:6f:4d:70:0f:cb:72:a3:c5:1d:8e:47:b4:35: dc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F4:E5:51:7F:9C:6E:39:E3:43:81:A5:08:01:C8:66:0B:94:AD:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f8437cb-088c-4f24-b728-2e13ad3df4df/9d06dada-6d76-32ae-8388-ee9247df3591.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f8437cb-088c-4f24-b728-2e13ad3df4df/1f8437cb-088c-4f24-b728-2e13ad3df4df.crl X509v3 Authority Key Identifier: keyid:5E:83:41:68:0C:95:84:9A:82:A6:5C:83:1B:1A:D9:F2:C0:60:85:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f8437cb-088c-4f24-b728-2e13ad3df4df.cer sbgp-ipAddrBlock: critical IPv4: 206.168.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:f2:9d:3b:9d:5f:5d:98:84:67:3c:ef:0c:39:a1:16:78:10: 96:14:28:de:1a:5d:cf:54:28:62:da:3d:63:b2:30:74:c6:07: b0:ba:9a:39:99:93:63:81:2b:72:d1:50:6f:23:c9:c8:56:e1: f2:46:03:89:06:0a:ec:90:bd:6f:bc:3c:d3:ac:8c:56:50:dc: e0:c7:46:18:a9:95:9b:a9:26:33:bb:9d:49:58:3a:1e:77:a3: 85:ee:df:6c:ff:d4:48:fe:7d:82:69:e9:11:70:cd:d4:fb:80: 83:68:64:fa:05:03:6f:5d:5e:5b:71:e4:12:4f:fc:25:04:57: 07:85:44:e9:46:e9:4d:2e:ff:f4:1d:20:44:35:31:95:18:f8: 93:26:44:bb:32:2a:39:46:c3:a9:2d:80:67:f5:77:3a:61:7a: 30:3e:45:77:7b:a2:42:5e:b5:87:bc:8b:02:5e:9f:c4:a5:e4: d8:0b:40:bb:c0:93:7c:6f:a0:51:3d:9a:26:47:74:a1:c5:51: 6e:91:a4:87:c6:52:2d:fa:f8:91:71:7a:af:e9:0f:5a:85:fd: 62:54:2c:7c:41:31:52:0d:a8:a7:9a:1a:24:7c:c4:95:e9:7c: d3:ea:49:9e:58:b7:a4:e9:03:3c:a5:b5:83:f7:da:c7:56:ef: 79:cc:03:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExb++gbg+4ZPaIX/MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY4NDM3Y2ItMDg4Yy00ZjI0LWI3MjgtMmUxM2FkM2Rm NGRmMB4XDTI1MTIzMDE0MDAzOFoXDTI2MDMzMDEzMDAzOFowLzEtMCsGA1UEAxMk YmUxN2MwMDEtZDYyNC00YmM2LTkyYzQtNzEzOTk0NTMyZTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX9rWpvgwoOxncJBGv4lMeegt6j9kq6fIqNm ElmwIXCsT5mj4VRSKuVBfDPbrncE3kP10dkSpVKE2TE8yYuVKSIFFfCaP2IxNfsb dwHbrpyvSycAIi7gwrxGWfpVP+d1FGYEoNoSLii3xGAmQMmOUyhipg36DPWUJgdq Mk622AUE7J0CafWCUjP+uCnUlljHDXBLv9iKJJccDFpz5s3cmkgyrLa5pr/JpApk 4OEm0yeS2v+2id3Qxa81C3l6r5ZoPk7xG25wlnoMd9I8aBixxLCWttI4ODBuvD0e Uz1QaH3t9UEAavw8kXnGPPBieDJwfm9NcA/LcqPFHY5HtDXcHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLz05VF/nG4540OBpQgByGYLlK1CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjg0 MzdjYi0wODhjLTRmMjQtYjcyOC0yZTEzYWQzZGY0ZGYvOWQwNmRhZGEtNmQ3Ni0z MmFlLTgzODgtZWU5MjQ3ZGYzNTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWY4NDM3Y2ItMDg4Yy00ZjI0LWI3 MjgtMmUxM2FkM2RmNGRmLzFmODQzN2NiLTA4OGMtNGYyNC1iNzI4LTJlMTNhZDNk ZjRkZi5jcmwwHwYDVR0jBBgwFoAUXoNBaAyVhJqCplyDGxrZ8sBghckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjg0MzdjYi0wODhjLTRmMjQtYjcyOC0yZTEz YWQzZGY0ZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqh0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/ynTudX12YhGc87ww5oRZ4EJYUKN4aXc9UKGLaPWOyMHTGB7C6mjmZ k2OBK3LRUG8jychW4fJGA4kGCuyQvW+8PNOsjFZQ3ODHRhiplZupJjO7nUlYOh53 o4Xu32z/1Ej+fYJp6RFwzdT7gINoZPoFA29dXltx5BJP/CUEVweFROlG6U0u//Qd IEQ1MZUY+JMmRLsyKjlGw6ktgGf1dzphejA+RXd7okJetYe8iwJen8Sl5NgLQLvA k3xvoFE9miZHdKHFUW6RpIfGUi36+JFxeq/pD1qF/WJULHxBMVINqKeaGiR8xJXp fNPqSZ5Yt6TpAzyltYP32sdW73nMAyQ= -----END CERTIFICATE-----Generated at Mon Mar 2 10:14:01 2026 by rpki-client