$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f70fe370-fa08-3eb1-b537-9f85e1c7cfa9.roa File: f70fe370-fa08-3eb1-b537-9f85e1c7cfa9.roa (raw, json) Hash identifier: qLuN6cqLXn29FhgU3wsFvmmprCrtNNfboQozlVU5e48= Subject key identifier: 10:6A:3C:C7:64:9E:1D:8A:75:10:5A:CC:71:37:E8:A6:10:86:04:1B Certificate issuer: /CN=f2636a1c-c142-41ee-9f43-99f45ca2dc1d Certificate serial: 010D0C9F4328584DF640A4EAB6A17E44BE176F28 Authority key identifier: 6A:73:ED:D1:7D:77:BC:C1:80:8A:46:49:FF:CE:D6:B6:68:F5:D5:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f70fe370-fa08-3eb1-b537-9f85e1c7cfa9.roa Signing time: Tue 26 May 2026 13:00:31 +0000 ROA not before: Tue 26 May 2026 13:00:31 +0000 ROA not after: Mon 24 Aug 2026 13:00:31 +0000 asID: 399240 IP address blocks: 206.168.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f6:40:a4:ea:b6:a1:7e:44:be:17:6f:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2636a1c-c142-41ee-9f43-99f45ca2dc1d Validity Not Before: May 26 13:00:31 2026 GMT Not After : Aug 24 13:00:31 2026 GMT Subject: CN=bce3263f-7aa5-478a-be87-1ad4d08348cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ea:9d:6b:a3:16:45:cb:d5:5f:25:f0:45:bb: e3:27:ee:d1:e8:94:e3:f5:ea:75:53:84:8d:4c:11: 61:67:2b:11:47:7b:96:f0:37:e9:aa:09:44:f6:75: c4:b2:df:f4:c7:43:69:47:67:bb:14:9d:e7:83:04: 79:ec:5b:cc:38:f0:69:f5:65:76:80:59:ab:cc:9b: 0d:75:51:57:cd:72:fb:eb:1a:25:8d:3f:a4:76:21: 92:a0:6a:0a:70:67:fd:09:85:fd:99:33:20:12:20: 6c:fb:16:28:ca:b9:88:14:60:b6:4e:6b:5c:e9:a0: a6:f7:be:04:c9:8d:8f:d9:33:30:a0:cd:fa:7a:0d: 4b:b7:ab:c4:eb:a1:8f:fa:5a:a9:1d:d9:b0:a3:f7: 53:c4:fc:0f:08:3a:93:56:b5:61:63:aa:34:66:20: fd:dd:81:6b:91:5f:4f:44:eb:a4:e2:50:80:fa:b7: e2:0b:f1:be:7c:97:19:ac:10:ec:33:df:c4:32:0b: 02:ff:8e:c6:d1:eb:c3:eb:88:1f:96:b1:00:2f:53: c1:8b:31:3c:92:cf:af:f3:dc:98:b6:f6:4a:6e:e2: f2:70:12:0d:d1:a2:58:6c:57:0d:08:64:60:53:71: 7e:8c:37:24:17:ce:1d:99:e5:cd:20:30:a8:4f:5d: d2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6A:3C:C7:64:9E:1D:8A:75:10:5A:CC:71:37:E8:A6:10:86:04:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f70fe370-fa08-3eb1-b537-9f85e1c7cfa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.crl X509v3 Authority Key Identifier: keyid:6A:73:ED:D1:7D:77:BC:C1:80:8A:46:49:FF:CE:D6:B6:68:F5:D5:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.cer sbgp-ipAddrBlock: critical IPv4: 206.168.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:6c:61:86:9d:bb:db:5c:c2:81:0e:08:a4:6e:08:c2:f7:5e: f1:20:7e:45:da:a6:52:e2:d3:dc:03:a8:ac:f4:c8:d0:6e:bc: 27:6b:b7:50:9c:cb:3a:27:4a:d5:6d:41:22:d7:18:c4:c2:49: 2b:37:bd:9b:62:bd:de:09:20:d2:a6:06:a1:1e:9a:10:96:bb: 01:23:c2:b1:f0:f1:b4:1d:e6:9e:2e:e5:74:76:7e:90:2e:00: c2:14:de:3c:05:e4:3e:b9:3f:b5:25:2f:50:22:0d:17:ed:57: c3:25:80:8d:8d:81:08:45:25:7a:1e:6b:69:47:df:5f:5f:20: 1f:84:6d:bf:16:26:71:bc:c4:fd:2a:7e:e3:06:e5:af:da:d4: c0:77:ae:78:2d:a4:92:99:65:0d:cd:54:b8:2e:20:8e:4d:89: 61:5c:d7:94:81:ff:5c:8a:b9:0c:33:2a:bd:75:6e:b3:7f:7c: b3:2f:70:28:69:f0:fb:d0:51:76:4e:c9:6a:ce:bd:6b:4a:ea: d9:5b:09:78:f1:02:86:c9:15:44:35:fe:28:87:34:c4:51:88: b2:5f:ae:af:05:a8:0a:38:18:92:d9:9b:be:83:0c:aa:21:aa: e0:cc:a5:5f:ec:3e:46:39:6f:70:42:e9:49:41:4e:a8:44:20: fa:ad:65:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE32QKTqtqF+RL4XbygwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI2MzZhMWMtYzE0Mi00MWVlLTlmNDMtOTlmNDVjYTJk YzFkMB4XDTI2MDUyNjEzMDAzMVoXDTI2MDgyNDEzMDAzMVowLzEtMCsGA1UEAxMk YmNlMzI2M2YtN2FhNS00NzhhLWJlODctMWFkNGQwODM0OGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeqda6MWRcvVXyXwRbvjJ+7R6JTj9ep1U4SN TBFhZysRR3uW8DfpqglE9nXEst/0x0NpR2e7FJ3ngwR57FvMOPBp9WV2gFmrzJsN dVFXzXL76xoljT+kdiGSoGoKcGf9CYX9mTMgEiBs+xYoyrmIFGC2Tmtc6aCm974E yY2P2TMwoM36eg1Lt6vE66GP+lqpHdmwo/dTxPwPCDqTVrVhY6o0ZiD93YFrkV9P ROuk4lCA+rfiC/G+fJcZrBDsM9/EMgsC/47G0evD64gflrEAL1PBizE8ks+v89yY tvZKbuLycBIN0aJYbFcNCGRgU3F+jDckF84dmeXNIDCoT13SDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBqPMdknh2KdRBazHE36KYQhgQbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mMjYz NmExYy1jMTQyLTQxZWUtOWY0My05OWY0NWNhMmRjMWQvZjcwZmUzNzAtZmEwOC0z ZWIxLWI1MzctOWY4NWUxYzdjZmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjI2MzZhMWMtYzE0Mi00MWVlLTlm NDMtOTlmNDVjYTJkYzFkL2YyNjM2YTFjLWMxNDItNDFlZS05ZjQzLTk5ZjQ1Y2Ey ZGMxZC5jcmwwHwYDVR0jBBgwFoAUanPt0X13vMGAikZJ/87Wtmj11XAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mMjYzNmExYy1jMTQyLTQxZWUtOWY0My05OWY0 NWNhMmRjMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqigMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdsYYadu9tcwoEOCKRuCML3XvEgfkXaplLi09wDqKz0yNBuvCdrt1Cc yzonStVtQSLXGMTCSSs3vZtivd4JINKmBqEemhCWuwEjwrHw8bQd5p4u5XR2fpAu AMIU3jwF5D65P7UlL1AiDRftV8MlgI2NgQhFJXoea2lH319fIB+Ebb8WJnG8xP0q fuMG5a/a1MB3rngtpJKZZQ3NVLguII5NiWFc15SB/1yKuQwzKr11brN/fLMvcChp 8PvQUXZOyWrOvWtK6tlbCXjxAobJFUQ1/iiHNMRRiLJfrq8FqAo4GJLZm76DDKoh quDMpV/sPkY5b3BC6UlBTqhEIPqtZec= -----END CERTIFICATE-----Generated at Sat Jun 13 08:45:44 2026 by rpki-client