$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/aaf1c443-fe8e-397a-9abb-97486c685ca2.roa File: aaf1c443-fe8e-397a-9abb-97486c685ca2.roa (raw, json) Hash identifier: LOZoFlxE4cD9e9VLU657adM5FkHiwXLha8CEkPrumOA= Subject key identifier: 7C:CB:8C:60:52:8B:64:F4:87:FE:D4:F6:D1:70:AC:69:76:77:67:D9 Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584CCFD74B7A7F8E3242161DEB80 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/aaf1c443-fe8e-397a-9abb-97486c685ca2.roa Signing time: Tue 10 Feb 2026 02:00:31 +0000 ROA not before: Tue 10 Feb 2026 02:00:31 +0000 ROA not after: Mon 11 May 2026 01:00:31 +0000 asID: 21947 IP address blocks: 204.11.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cf:d7:4b:7a:7f:8e:32:42:16:1d:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Feb 10 02:00:31 2026 GMT Not After : May 11 01:00:31 2026 GMT Subject: CN=7069ae0a-78a9-4d62-932f-3b1f56fc69e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b9:8c:53:55:53:ef:6d:ba:69:5d:1f:bb:7f: 36:e0:1a:5a:49:b4:b7:42:f5:16:f1:65:b9:59:dc: 13:53:e5:9a:45:b8:94:28:09:08:75:f3:8b:52:42: 5d:d2:4d:50:c1:83:25:8e:12:c5:69:1f:ce:c5:3c: 9a:4a:70:19:6c:27:d1:8e:20:27:8d:74:a1:80:0f: 4b:53:68:27:a5:f3:b9:81:94:1d:ef:3e:3c:bb:90: a4:57:22:7d:7a:3b:fb:91:f4:86:94:99:83:57:61: 6c:e9:69:8f:ee:b2:4f:1e:a1:93:a3:38:f6:98:12: 9b:7c:4f:9a:20:7a:08:0f:7e:18:fb:3a:f3:31:0f: 71:95:6f:eb:e8:2b:c4:77:16:7e:93:9b:8b:8c:c3: 86:0e:86:dd:2b:ed:9e:e4:13:f6:2b:54:10:c3:34: 6f:09:31:2c:08:d6:a4:8b:4e:d6:a4:8f:71:83:68: e4:e1:79:8f:eb:90:5d:b4:3e:77:61:b6:55:15:9c: 29:e9:05:57:a2:79:c3:f8:6e:b1:f1:e0:87:45:a8: 8e:80:52:3d:c7:a1:a2:4a:6e:02:70:11:e3:1c:b5: bc:ba:3b:c5:43:c0:93:66:2c:4c:6f:4d:b4:38:57: c6:cb:de:8f:3d:a5:89:1e:e4:8b:8c:26:16:56:0f: ff:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CB:8C:60:52:8B:64:F4:87:FE:D4:F6:D1:70:AC:69:76:77:67:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/aaf1c443-fe8e-397a-9abb-97486c685ca2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 204.11.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:78:1a:87:39:47:22:46:5b:ad:24:8e:09:83:76:1f:12:c6: df:08:1d:2c:2c:1e:9d:a5:8f:12:c2:49:9e:37:c2:34:f2:24: c1:89:2f:7b:f9:5a:39:62:33:ea:8a:04:95:d5:ee:e6:cd:2b: 5b:b6:17:9c:48:a5:1a:6e:55:50:a5:5d:d2:c0:03:27:1d:a7: b5:2c:63:95:f5:25:c6:10:f0:59:a5:63:ad:d5:55:ad:93:6e: 91:28:04:bb:25:8d:6d:12:14:63:fb:a5:60:ec:b4:a8:d1:9e: 54:37:23:8c:44:a7:b0:f7:fb:cd:5d:14:e3:bd:43:b7:c9:6c: a4:7f:a7:8b:d2:bc:a1:7a:e2:04:59:93:da:f6:f8:29:f7:a3: db:8b:29:f5:7c:85:83:7d:c4:34:dd:1d:8d:d4:4d:7b:b3:91: 3c:95:d5:41:30:90:55:0c:ab:30:df:9a:45:f5:ef:8f:af:e7: c7:cb:fc:25:8a:1a:d0:c3:1e:a2:c7:91:e6:6a:fc:0b:71:cb: 01:dc:e1:58:a7:0f:75:70:d1:5b:b1:07:98:83:b5:a1:be:6c: 70:aa:ed:cf:39:ff:03:cd:f4:0d:8d:1e:a9:df:5d:4d:99:b8: a4:98:03:7a:d0:92:7a:15:ed:0a:42:a6:a8:04:c6:2c:3b:0b: 33:4b:89:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzP10t6f44yQhYd64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI2MDIxMDAyMDAzMVoXDTI2MDUxMTAxMDAzMVowLzEtMCsGA1UEAxMk NzA2OWFlMGEtNzhhOS00ZDYyLTkzMmYtM2IxZjU2ZmM2OWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybmMU1VT7226aV0fu3824BpaSbS3QvUW8WW5 WdwTU+WaRbiUKAkIdfOLUkJd0k1QwYMljhLFaR/OxTyaSnAZbCfRjiAnjXShgA9L U2gnpfO5gZQd7z48u5CkVyJ9ejv7kfSGlJmDV2Fs6WmP7rJPHqGTozj2mBKbfE+a IHoID34Y+zrzMQ9xlW/r6CvEdxZ+k5uLjMOGDobdK+2e5BP2K1QQwzRvCTEsCNak i07WpI9xg2jk4XmP65BdtD53YbZVFZwp6QVXonnD+G6x8eCHRaiOgFI9x6GiSm4C cBHjHLW8ujvFQ8CTZixMb020OFfGy96PPaWJHuSLjCYWVg//lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzLjGBSi2T0h/7U9tFwrGl2d2fZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvYWFmMWM0NDMtZmU4ZS0z OTdhLTlhYmItOTc0ODZjNjg1Y2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAv0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABp4Goc5RyJGW60kjgmDdh8Sxt8IHSwsHp2ljxLCSZ43wjTyJMGJL3v5 WjliM+qKBJXV7ubNK1u2F5xIpRpuVVClXdLAAycdp7UsY5X1JcYQ8FmlY63VVa2T bpEoBLsljW0SFGP7pWDstKjRnlQ3I4xEp7D3+81dFOO9Q7fJbKR/p4vSvKF64gRZ k9r2+Cn3o9uLKfV8hYN9xDTdHY3UTXuzkTyV1UEwkFUMqzDfmkX174+v58fL/CWK GtDDHqLHkeZq/AtxywHc4VinD3Vw0VuxB5iDtaG+bHCq7c85/wPN9A2NHqnfXU2Z uKSYA3rQknoV7QpCpqgExiw7CzNLiao= -----END CERTIFICATE-----Generated at Tue Mar 3 07:14:25 2026 by rpki-client