$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/02bd9d9f-98a2-30f1-9ef4-e4db8086263c.roa File: 02bd9d9f-98a2-30f1-9ef4-e4db8086263c.roa (raw, json) Hash identifier: SNW+iZHn/a7SdlvPh6gCeSu9waNjtcrZHg9OyiGON3A= Subject key identifier: 2C:66:18:F9:1A:BE:5F:AA:F0:E5:6A:97:7D:81:2D:A3:AB:AD:14:FF Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D0D424C9FAE0649B95FE3F200 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/02bd9d9f-98a2-30f1-9ef4-e4db8086263c.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 21723 IP address blocks: 208.181.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:4c:9f:ae:06:49:b9:5f:e3:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=4c8d3e9b-1f9f-4279-b3b6-c8d101839315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:cb:c3:4f:b8:f6:33:4a:f6:c5:e5:19:19:5d: a2:68:66:08:0a:d9:af:95:25:49:68:43:70:1c:6a: 8b:98:a5:57:e2:fc:23:5e:d1:5a:35:54:19:30:85: 4b:27:38:9d:d4:ae:16:c6:df:b5:17:ba:77:01:9a: 77:77:73:8e:30:71:6b:cb:27:78:c7:fe:44:0c:f1: b0:36:cb:80:3b:8d:a4:81:36:1a:6a:c0:69:b8:ea: 34:57:17:d8:61:42:a1:21:05:19:6d:89:4a:f5:94: 85:ed:2b:f6:ec:72:07:2a:78:de:4c:f7:7b:81:73: a1:71:09:27:a5:5c:c7:01:d8:88:d0:d8:e6:a0:2f: 2a:51:e8:4d:e8:36:64:16:3d:58:dc:37:67:1c:d7: 0d:be:b2:71:93:f6:b5:ea:f8:86:1b:63:bb:f4:b1: 71:aa:6e:02:9d:f0:9c:00:14:4c:98:eb:ae:8c:f9: 61:fb:a2:86:85:8e:ce:59:d3:f8:ae:3f:99:c3:18: 3d:02:9d:b9:12:5d:35:c6:a0:8d:8f:2c:3a:b3:50: 41:99:63:44:9e:2d:91:dc:13:50:47:64:f6:25:9c: eb:17:27:60:05:3e:c4:08:df:7e:9a:8c:8a:d3:d3: bf:3a:f4:86:bc:b0:04:c3:12:a6:b0:3f:33:3b:09: b5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:66:18:F9:1A:BE:5F:AA:F0:E5:6A:97:7D:81:2D:A3:AB:AD:14:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/02bd9d9f-98a2-30f1-9ef4-e4db8086263c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 208.181.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:f1:09:72:66:88:23:f5:c9:cd:53:af:70:d8:28:9f:4c:3e: a1:ab:d9:ed:f7:98:d9:f5:6a:4c:09:28:68:0c:b5:ff:53:8d: 75:36:54:a5:85:51:b4:65:9c:54:a8:81:43:9b:4c:2e:70:ad: 0c:29:02:35:5a:b1:be:59:ff:33:64:a5:09:90:7a:2f:5a:4a: 8c:7c:01:67:d5:ad:18:9c:60:6f:be:ad:96:f2:12:64:03:d1: ef:69:58:7b:f5:57:b7:21:ec:38:93:22:76:0a:40:a9:01:c0: ac:3d:ec:ea:62:8d:6c:7b:66:d3:2a:60:0c:38:d0:16:24:54: c5:5c:9c:dc:e0:2f:f4:77:07:c7:fc:3d:34:81:06:32:34:63: 78:6f:27:ec:f9:e9:5e:f1:f7:0d:f4:2a:bd:4f:58:ff:a4:75: a5:4c:de:23:05:ad:ee:a7:62:b6:d4:d9:6d:bc:c6:65:f0:0c: 5a:a8:b8:2e:0b:ad:9a:56:e1:f4:2c:ec:0c:e9:cb:67:05:b1: 93:be:79:36:af:09:5e:6f:dd:79:5e:85:94:7d:c6:e1:2b:dd: 78:c4:79:4c:e8:e1:ac:6b:9a:7d:f7:43:fb:1f:32:cc:1f:e7: 4d:85:58:98:cd:39:66:a8:17:a2:2f:1b:36:4e:11:96:5e:ce: 80:b3:b8:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQkyfrgZJuV/j8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk NGM4ZDNlOWItMWY5Zi00Mjc5LWIzYjYtYzhkMTAxODM5MzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMvDT7j2M0r2xeUZGV2iaGYICtmvlSVJaENw HGqLmKVX4vwjXtFaNVQZMIVLJzid1K4Wxt+1F7p3AZp3d3OOMHFryyd4x/5EDPGw NsuAO42kgTYaasBpuOo0VxfYYUKhIQUZbYlK9ZSF7Sv27HIHKnjeTPd7gXOhcQkn pVzHAdiI0NjmoC8qUehN6DZkFj1Y3DdnHNcNvrJxk/a16viGG2O79LFxqm4CnfCc ABRMmOuujPlh+6KGhY7OWdP4rj+Zwxg9Ap25El01xqCNjyw6s1BBmWNEni2R3BNQ R2T2JZzrFydgBT7ECN9+moyK09O/OvSGvLAEwxKmsD8zOwm1fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxmGPkavl+q8OVql32BLaOrrRT/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMDJiZDlkOWYtOThhMi0z MGYxLTllZjQtZTRkYjgwODYyNjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0LXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMLxCXJmiCP1yc1Tr3DYKJ9MPqGr2e33mNn1akwJKGgMtf9TjXU2VKWF UbRlnFSogUObTC5wrQwpAjVasb5Z/zNkpQmQei9aSox8AWfVrRicYG++rZbyEmQD 0e9pWHv1V7ch7DiTInYKQKkBwKw97OpijWx7ZtMqYAw40BYkVMVcnNzgL/R3B8f8 PTSBBjI0Y3hvJ+z56V7x9w30Kr1PWP+kdaVM3iMFre6nYrbU2W28xmXwDFqouC4L rZpW4fQs7Azpy2cFsZO+eTavCV5v3XlehZR9xuEr3XjEeUzo4axrmn33Q/sfMswf 502FWJjNOWaoF6IvGzZOEZZezoCzuDg= -----END CERTIFICATE-----Generated at Fri Mar 13 23:52:30 2026 by rpki-client