$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/4685c788-cfca-3dbe-b1b6-6ee6f414c366.roa File: 4685c788-cfca-3dbe-b1b6-6ee6f414c366.roa (raw, json) Hash identifier: U+4vMiiCYs6meUo/mXw6LWljZ7t8GMIXNvmQ3EWDgIA= Subject key identifier: 93:6B:5A:17:4A:18:F3:22:A9:D2:13:3A:B3:4D:C2:92:C0:8F:9B:93 Certificate issuer: /CN=a01c464d-9d20-46a1-858b-c36c8c1a3776 Certificate serial: 010D0C9F4328584D571FAEBC233BC47C82663700 Authority key identifier: 42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/4685c788-cfca-3dbe-b1b6-6ee6f414c366.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 6360 IP address blocks: 205.166.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:ae:bc:23:3b:c4:7c:82:66:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a01c464d-9d20-46a1-858b-c36c8c1a3776 Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=840adf8e-4056-4de9-99e2-943a5550834e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e6:5b:76:a6:f6:7a:f6:fe:ac:b7:bb:e8:8e: e5:c1:02:44:df:77:d4:25:fa:cb:bd:30:43:c7:43: 22:48:8c:f3:00:01:e9:88:03:04:a1:0d:0b:a0:d6: 8f:a1:56:6d:19:67:ee:b7:e1:c2:24:9d:bd:90:bc: f4:53:1c:ad:3b:7f:8a:cc:7f:48:70:3d:52:4e:3c: a7:f2:7f:0f:be:ed:54:de:eb:f3:be:9c:d6:7c:d3: ac:62:90:3b:59:7a:e3:61:e0:aa:52:66:63:f8:40: 51:62:82:fe:16:8a:dd:f9:2f:24:78:f9:6a:57:bc: eb:3e:40:f1:76:8b:66:73:71:bf:b4:de:15:fe:09: 01:1d:ee:43:d5:49:40:20:f3:c8:e6:3c:e5:db:9d: 88:91:1e:ad:a6:6a:b1:5b:ab:9c:0d:6d:81:46:eb: 02:02:a4:5a:37:7e:5d:20:e1:74:ed:77:5c:df:bd: d8:3a:a0:07:89:72:2d:f6:40:42:98:73:d0:01:c2: 83:38:e6:56:bd:21:a5:f8:ce:dd:2c:08:3f:c6:bc: 2c:b9:e0:01:48:00:3e:7b:30:77:59:88:5a:5d:93: ea:06:df:77:5d:80:e1:ad:da:13:1f:d2:58:22:5f: 40:04:de:3e:ce:73:36:87:fb:4f:83:74:1b:62:2e: 32:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:6B:5A:17:4A:18:F3:22:A9:D2:13:3A:B3:4D:C2:92:C0:8F:9B:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/4685c788-cfca-3dbe-b1b6-6ee6f414c366.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.crl X509v3 Authority Key Identifier: keyid:42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer sbgp-ipAddrBlock: critical IPv4: 205.166.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:25:1a:a5:51:16:22:28:34:e6:8e:17:65:da:3f:9f:26:88: bf:a3:5e:6e:03:27:f1:69:38:e7:a7:47:ee:6b:19:9f:58:3c: 91:01:60:54:a6:14:29:e2:95:0b:9e:50:f2:e1:2c:92:d3:98: a1:7b:5b:16:7c:68:81:68:fd:84:08:6a:4e:a5:00:a7:56:9d: 87:8b:ff:f7:b8:be:92:65:6a:57:e6:da:17:6d:be:13:11:18: 15:e0:5e:64:0d:e2:00:98:b6:42:35:df:b8:1c:33:34:13:78: 49:97:fd:4f:a3:56:55:0a:3c:12:4f:51:79:ce:b9:5d:0c:76: c5:3d:99:f9:ae:a3:04:cd:cd:61:48:2f:a5:22:f0:06:f2:71: f0:86:5f:d8:8b:04:0c:b1:0b:25:0e:28:8c:49:1d:87:33:ad: 15:c2:05:bc:81:65:57:29:77:4e:6a:f3:22:ef:71:0e:e0:5a: 85:c3:ee:0a:1c:28:3f:ee:2d:3d:9b:7b:ba:73:09:42:94:93: 0a:7d:47:29:69:3d:36:ea:ae:1d:bc:aa:33:10:0d:78:99:d9: 1c:1b:a7:42:f1:41:2c:2b:b2:8b:7f:d0:4a:de:a2:b9:cf:03: 26:22:0f:98:6d:a5:89:aa:e6:d1:12:a0:fb:ff:cb:54:71:81: e2:b6:9d:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH668IzvEfIJmNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTAxYzQ2NGQtOWQyMC00NmExLTg1OGItYzM2YzhjMWEz Nzc2MB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk ODQwYWRmOGUtNDA1Ni00ZGU5LTk5ZTItOTQzYTU1NTA4MzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuZbdqb2evb+rLe76I7lwQJE33fUJfrLvTBD x0MiSIzzAAHpiAMEoQ0LoNaPoVZtGWfut+HCJJ29kLz0UxytO3+KzH9IcD1STjyn 8n8Pvu1U3uvzvpzWfNOsYpA7WXrjYeCqUmZj+EBRYoL+Ford+S8kePlqV7zrPkDx dotmc3G/tN4V/gkBHe5D1UlAIPPI5jzl252IkR6tpmqxW6ucDW2BRusCAqRaN35d IOF07Xdc373YOqAHiXIt9kBCmHPQAcKDOOZWvSGl+M7dLAg/xrwsueABSAA+ezB3 WYhaXZPqBt93XYDhrdoTH9JYIl9ABN4+znM2h/tPg3QbYi4y/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJNrWhdKGPMiqdITOrNNwpLAj5uTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMDFj NDY0ZC05ZDIwLTQ2YTEtODU4Yi1jMzZjOGMxYTM3NzYvNDY4NWM3ODgtY2ZjYS0z ZGJlLWIxYjYtNmVlNmY0MTRjMzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTAxYzQ2NGQtOWQyMC00NmExLTg1 OGItYzM2YzhjMWEzNzc2L2EwMWM0NjRkLTlkMjAtNDZhMS04NThiLWMzNmM4YzFh Mzc3Ni5jcmwwHwYDVR0jBBgwFoAUQo2GNS7VIXZWdKOP4reK/APen14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMDFjNDY0ZC05ZDIwLTQ2YTEtODU4Yi1jMzZj OGMxYTM3NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzabNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAlGqVRFiIoNOaOF2XaP58miL+jXm4DJ/FpOOenR+5rGZ9YPJEBYFSm FCnilQueUPLhLJLTmKF7WxZ8aIFo/YQIak6lAKdWnYeL//e4vpJlalfm2hdtvhMR GBXgXmQN4gCYtkI137gcMzQTeEmX/U+jVlUKPBJPUXnOuV0MdsU9mfmuowTNzWFI L6Ui8AbycfCGX9iLBAyxCyUOKIxJHYczrRXCBbyBZVcpd05q8yLvcQ7gWoXD7goc KD/uLT2be7pzCUKUkwp9RylpPTbqrh28qjMQDXiZ2Rwbp0LxQSwrsot/0EreornP AyYiD5htpYmq5tESoPv/y1RxgeK2nR4= -----END CERTIFICATE-----Generated at Fri Apr 17 15:00:04 2026 by rpki-client