$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/af790f3e-4881-3862-9037-383784ac4438.roa File: af790f3e-4881-3862-9037-383784ac4438.roa (raw, json) Hash identifier: fmqzVq2AZlAD+wCWz8v+sEtrwXdcYsaBPz7T4Yb0674= Subject key identifier: 4E:23:05:9D:F4:15:4F:02:E3:A7:D8:4B:86:25:BB:A6:1E:29:1E:06 Certificate issuer: /CN=d06852c4-a6c0-43d5-ba94-22fab637697a Certificate serial: 010D0C9F4328584D7093B7E99049308F862FD280 Authority key identifier: 30:01:74:AA:E6:45:3E:F4:B4:CD:2F:99:D7:6A:DE:37:8D:43:11:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/af790f3e-4881-3862-9037-383784ac4438.roa Signing time: Wed 08 Apr 2026 15:49:45 +0000 ROA not before: Wed 08 Apr 2026 15:49:45 +0000 ROA not after: Tue 07 Jul 2026 15:49:45 +0000 asID: 5650 IP address blocks: 206.72.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/d06852c4-a6c0-43d5-ba94-22fab637697a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/d06852c4-a6c0-43d5-ba94-22fab637697a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:93:b7:e9:90:49:30:8f:86:2f:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d06852c4-a6c0-43d5-ba94-22fab637697a Validity Not Before: Apr 8 15:49:45 2026 GMT Not After : Jul 7 15:49:45 2026 GMT Subject: CN=2041f7db-6b80-4a29-881a-d29fdeeb69d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:00:f3:3a:fd:8b:0d:fb:15:d4:92:c6:96:92: 01:19:4d:27:63:da:e0:e6:4c:17:ab:e6:b0:7c:9e: 6b:44:62:56:9a:40:25:86:97:e5:a6:2c:dd:34:30: 74:54:77:71:17:5a:b9:d0:1b:dd:0e:8a:27:b5:1a: da:69:d2:0d:4f:84:e2:da:9c:6b:6a:f3:c5:86:6f: ad:ca:74:59:71:25:87:5e:e9:f9:21:36:63:69:42: 67:bf:1e:87:f1:1b:1e:3f:cf:cb:3e:83:c4:58:d3: 64:a1:61:42:c2:86:2f:ec:65:40:10:af:e9:43:74: d5:00:5d:ec:c3:e7:5c:64:40:91:da:84:96:8a:44: 74:44:1e:e7:52:76:a3:78:35:4f:bb:8e:61:8d:3c: 7d:41:78:d5:ff:d6:0a:ec:be:7a:54:89:ec:8e:63: b6:7d:db:ce:a1:43:bc:af:52:e0:ed:c1:59:58:d6: 44:a2:78:f8:d7:f2:06:e3:9d:f6:e9:c8:9a:dd:15: 77:1e:e5:a2:2f:7e:f8:3f:03:eb:5c:b1:ea:b7:da: 13:38:93:e1:f4:85:b4:a6:af:a2:75:2a:36:a9:83: 71:dd:58:d3:bc:46:d2:bc:75:ec:84:68:91:5f:21: 89:26:6c:28:da:ef:35:85:ed:5e:c8:21:bd:4a:73: 39:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:23:05:9D:F4:15:4F:02:E3:A7:D8:4B:86:25:BB:A6:1E:29:1E:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/af790f3e-4881-3862-9037-383784ac4438.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/d06852c4-a6c0-43d5-ba94-22fab637697a.crl X509v3 Authority Key Identifier: keyid:30:01:74:AA:E6:45:3E:F4:B4:CD:2F:99:D7:6A:DE:37:8D:43:11:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a.cer sbgp-ipAddrBlock: critical IPv4: 206.72.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:1a:dd:51:84:70:4c:fa:5d:52:0e:55:26:b6:ba:75:83:a2: ef:2d:28:ea:5e:ca:b0:88:cf:a3:0f:bf:84:2d:fe:3a:ec:c3: ba:21:e6:5f:63:0a:56:a6:ef:92:ef:50:4f:b5:f7:95:ae:d2: ba:0d:0f:c5:07:75:61:78:79:1f:92:d5:79:23:4e:b8:ba:71: 57:90:1f:e7:d4:6d:b9:2d:07:af:ab:d6:1d:bd:64:c3:43:6b: 23:b8:fd:7f:d5:4a:0d:0c:3c:2b:80:b9:00:0c:36:fe:09:ab: 98:97:cd:cf:07:f5:f0:14:c3:0b:72:86:c4:51:83:b1:4f:a0: 01:84:fb:29:d4:a5:c6:10:55:04:28:66:52:bc:8e:af:da:6d: 82:51:39:13:a2:ca:b8:e3:51:89:ba:9a:6e:f3:f9:5f:39:b9: a7:0b:71:86:d4:6f:f5:85:00:c7:66:b9:a7:96:05:c6:4e:ce: 79:7d:dd:21:f7:6f:b8:b9:0f:73:12:29:bd:fe:dd:3b:ff:f7: 49:b5:37:36:c9:32:d0:32:7b:22:4a:4a:4d:4e:51:f0:3c:fc: e3:ea:f8:6e:86:e8:8e:03:98:2f:df:59:69:c3:94:92:85:72: 1b:30:e9:33:19:9c:79:75:25:c9:df:21:57:28:9d:34:4d:9e: 12:00:c0:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wk7fpkEkwj4Yv0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDA2ODUyYzQtYTZjMC00M2Q1LWJhOTQtMjJmYWI2Mzc2 OTdhMB4XDTI2MDQwODE1NDk0NVoXDTI2MDcwNzE1NDk0NVowLzEtMCsGA1UEAxMk MjA0MWY3ZGItNmI4MC00YTI5LTg4MWEtZDI5ZmRlZWI2OWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgDzOv2LDfsV1JLGlpIBGU0nY9rg5kwXq+aw fJ5rRGJWmkAlhpflpizdNDB0VHdxF1q50BvdDoontRraadINT4Ti2pxravPFhm+t ynRZcSWHXun5ITZjaUJnvx6H8RseP8/LPoPEWNNkoWFCwoYv7GVAEK/pQ3TVAF3s w+dcZECR2oSWikR0RB7nUnajeDVPu45hjTx9QXjV/9YK7L56VInsjmO2fdvOoUO8 r1Lg7cFZWNZEonj41/IG45326cia3RV3HuWiL374PwPrXLHqt9oTOJPh9IW0pq+i dSo2qYNx3VjTvEbSvHXshGiRXyGJJmwo2u81he1eyCG9SnM5qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4jBZ30FU8C46fYS4Ylu6YeKR4GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kMDY4 NTJjNC1hNmMwLTQzZDUtYmE5NC0yMmZhYjYzNzY5N2EvYWY3OTBmM2UtNDg4MS0z ODYyLTkwMzctMzgzNzg0YWM0NDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDA2ODUyYzQtYTZjMC00M2Q1LWJh OTQtMjJmYWI2Mzc2OTdhL2QwNjg1MmM0LWE2YzAtNDNkNS1iYTk0LTIyZmFiNjM3 Njk3YS5jcmwwHwYDVR0jBBgwFoAUMAF0quZFPvS0zS+Z12reN41DEdAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kMDY4NTJjNC1hNmMwLTQzZDUtYmE5NC0yMmZh YjYzNzY5N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzkjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYa3VGEcEz6XVIOVSa2unWDou8tKOpeyrCIz6MPv4Qt/jrsw7oh5l9j Clam75LvUE+195Wu0roND8UHdWF4eR+S1XkjTri6cVeQH+fUbbktB6+r1h29ZMND ayO4/X/VSg0MPCuAuQAMNv4Jq5iXzc8H9fAUwwtyhsRRg7FPoAGE+ynUpcYQVQQo ZlK8jq/abYJROROiyrjjUYm6mm7z+V85uacLcYbUb/WFAMdmuaeWBcZOznl93SH3 b7i5D3MSKb3+3Tv/90m1NzbJMtAyeyJKSk1OUfA8/OPq+G6G6I4DmC/fWWnDlJKF chsw6TMZnHl1JcnfIVconTRNnhIAwNg= -----END CERTIFICATE-----Generated at Fri Apr 17 19:41:18 2026 by rpki-client