$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/341487ac-a3e5-383d-bb5e-c10826c39192.roa File: 341487ac-a3e5-383d-bb5e-c10826c39192.roa (raw, json) Hash identifier: 3M9sRBZkHNyD1PXlk9ozItr19PZWmrqICVfcNjA6w3g= Subject key identifier: BF:15:C6:00:16:37:9B:FE:5E:64:F1:7A:9F:4A:96:66:DD:23:ED:08 Certificate issuer: /CN=3a86f711-5e97-4a68-9b21-940a312b854a Certificate serial: 010D0C9F4328584D0912B3D8521F2C4EF5EDBC80 Authority key identifier: D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/341487ac-a3e5-383d-bb5e-c10826c39192.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 401343 IP address blocks: 204.130.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:b3:d8:52:1f:2c:4e:f5:ed:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a86f711-5e97-4a68-9b21-940a312b854a Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=ab3e1d5f-3c20-4b3a-81f5-8ee3ae23bf6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8c:9d:cf:71:07:28:5d:a3:cc:76:79:f5:de: cc:82:a7:eb:2c:90:1d:73:39:a4:97:6d:77:42:24: 69:ca:e8:63:2b:44:05:7b:28:34:9a:50:6c:05:86: d9:b5:8e:69:7b:7e:69:76:48:30:a9:af:06:62:bf: fd:2d:a4:ee:0d:d5:7f:ae:4b:62:85:46:59:bd:5c: 80:91:b8:c3:86:ca:33:38:4d:ae:01:92:0f:27:01: dd:ec:74:c4:38:63:cf:e2:d0:a1:ff:cf:2c:8b:6f: 35:21:eb:d8:f0:3d:fe:54:65:ef:03:e4:df:ff:6e: 6e:ee:66:0d:c6:e0:ea:a8:e1:b6:4a:30:ec:db:44: 25:bb:22:5e:82:32:75:99:d6:53:5f:f5:f2:3d:e6: e6:5b:04:be:d2:ab:73:9f:4d:ed:88:33:b2:82:74: fe:98:08:6c:c5:ff:00:c2:ad:92:95:f5:d0:30:91: 00:4f:91:ff:22:ee:a9:2a:d3:50:1a:e1:1e:3f:b3: 93:64:db:1c:1f:3b:49:d6:7e:7e:e1:bf:8b:1c:d4: 97:f2:50:e4:89:ad:e6:a7:ff:03:8b:ae:4f:9d:d9: 9a:93:f2:70:88:54:97:ef:82:31:ba:a7:51:81:dc: 85:ca:e5:53:75:5d:48:e9:50:ec:e3:7c:10:a1:a7: b6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:15:C6:00:16:37:9B:FE:5E:64:F1:7A:9F:4A:96:66:DD:23:ED:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/341487ac-a3e5-383d-bb5e-c10826c39192.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl X509v3 Authority Key Identifier: keyid:D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer sbgp-ipAddrBlock: critical IPv4: 204.130.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:24:86:be:5b:de:e5:eb:c4:38:2b:48:b8:b4:2c:1e:26:73: 5a:82:c2:3b:d3:5c:72:44:e0:46:12:a6:05:c0:8c:f9:3f:b7: ca:6a:fb:16:f8:c8:2e:95:26:f0:b9:aa:56:a8:96:de:73:cf: a7:e4:3d:52:08:65:a3:e6:85:56:a2:a6:a9:ae:2d:0f:cc:8b: 28:84:dc:1c:58:9b:95:5b:a4:e2:f8:67:e4:36:10:a2:03:17: ad:23:d2:b0:93:8d:f5:ab:e8:30:5f:ef:c5:2d:f4:44:72:ef: 95:76:9c:72:07:f4:c4:45:f0:c5:0f:11:be:b6:54:47:42:0b: 97:3a:e5:25:42:cb:7d:94:60:bf:24:77:f4:3e:0e:51:d5:52: a2:e0:18:13:9f:84:9a:15:1a:4f:9d:00:12:98:1b:13:c7:57: 26:ab:4c:73:17:61:91:05:c0:09:b7:85:cd:d0:2e:05:b9:51: 6e:1f:31:8d:0a:d3:c6:50:e3:d2:6a:7d:b4:dd:b2:c2:1a:e8: 7d:b5:c6:a6:74:8d:e2:42:04:43:1d:55:d8:38:ee:ab:05:d5: b6:d5:3a:8d:d6:39:7f:f7:10:e6:6c:94:83:eb:ad:ad:a4:b4: 1f:b2:74:2a:54:ea:ce:a2:c1:41:1e:29:a6:ef:93:42:23:82: 90:83:3a:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JErPYUh8sTvXtvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4NmY3MTEtNWU5Ny00YTY4LTliMjEtOTQwYTMxMmI4 NTRhMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk YWIzZTFkNWYtM2MyMC00YjNhLTgxZjUtOGVlM2FlMjNiZjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4ydz3EHKF2jzHZ59d7MgqfrLJAdczmkl213 QiRpyuhjK0QFeyg0mlBsBYbZtY5pe35pdkgwqa8GYr/9LaTuDdV/rktihUZZvVyA kbjDhsozOE2uAZIPJwHd7HTEOGPP4tCh/88si281IevY8D3+VGXvA+Tf/25u7mYN xuDqqOG2SjDs20QluyJegjJ1mdZTX/XyPebmWwS+0qtzn03tiDOygnT+mAhsxf8A wq2SlfXQMJEAT5H/Iu6pKtNQGuEeP7OTZNscHztJ1n5+4b+LHNSX8lDkia3mp/8D i65Pndmak/JwiFSX74IxuqdRgdyFyuVTdV1I6VDs43wQoae2GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8VxgAWN5v+XmTxep9KlmbdI+0IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2 ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBhMzEyYjg1NGEvMzQxNDg3YWMtYTNlNS0z ODNkLWJiNWUtYzEwODI2YzM5MTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2E4NmY3MTEtNWU5Ny00YTY4LTli MjEtOTQwYTMxMmI4NTRhLzNhODZmNzExLTVlOTctNGE2OC05YjIxLTk0MGEzMTJi ODU0YS5jcmwwHwYDVR0jBBgwFoAU0/b3x9XLL0Dq3kgnmjXFqhER+FUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBh MzEyYjg1NGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzILIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEkhr5b3uXrxDgrSLi0LB4mc1qCwjvTXHJE4EYSpgXAjPk/t8pq+xb4 yC6VJvC5qlaolt5zz6fkPVIIZaPmhVaipqmuLQ/MiyiE3BxYm5VbpOL4Z+Q2EKID F60j0rCTjfWr6DBf78Ut9ERy75V2nHIH9MRF8MUPEb62VEdCC5c65SVCy32UYL8k d/Q+DlHVUqLgGBOfhJoVGk+dABKYGxPHVyarTHMXYZEFwAm3hc3QLgW5UW4fMY0K 08ZQ49JqfbTdssIa6H21xqZ0jeJCBEMdVdg47qsF1bbVOo3WOX/3EOZslIPrra2k tB+ydCpU6s6iwUEeKabvk0IjgpCDOoQ= -----END CERTIFICATE-----Generated at Mon Mar 2 16:11:23 2026 by rpki-client