$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/065d9d1f-ce3c-3be1-b1bd-bf824f37bc8e.roa File: 065d9d1f-ce3c-3be1-b1bd-bf824f37bc8e.roa (raw, json) Hash identifier: gWbXBcfKGXyZVczc6GOAHR7WZZS+xSHHuw/j6Iw+/mQ= Subject key identifier: 68:DE:6B:80:BE:7D:40:9A:CA:7E:ED:1A:60:51:D9:6F:90:24:62:EB Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D15A2604341B3737568670000 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/065d9d1f-ce3c-3be1-b1bd-bf824f37bc8e.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 852 IP address blocks: 209.171.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:60:43:41:b3:73:75:68:67:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=52cd108f-2a75-432c-b436-dcc66e9b666f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ac:6f:3e:08:fa:45:0e:e8:55:32:d1:d5:62: 49:e6:63:6c:3c:49:3c:0f:e0:f3:fc:23:4f:53:0c: f8:34:e1:e5:91:c3:60:10:34:e6:b4:83:fd:c5:75: 5e:fb:ff:30:41:2c:6b:da:45:32:28:ee:33:7c:92: 4e:d9:8c:2b:af:63:42:0e:01:46:91:7f:ce:51:e8: 67:14:74:24:ed:52:27:ce:5f:7e:83:97:52:bb:7e: fa:0f:0b:fa:2b:e8:31:f1:1c:c6:2f:b3:87:b6:db: 63:29:04:28:80:19:7b:3f:88:69:1d:b0:84:0b:66: 7a:25:6a:48:d6:17:0b:eb:a6:80:3d:0c:c5:22:9a: 04:80:4f:15:30:ba:92:63:68:8d:55:d3:33:68:67: 8a:50:b7:3e:89:e2:c3:e3:51:2a:ef:63:23:98:eb: 20:78:21:44:9d:52:52:d1:37:97:21:fa:bc:f4:f1: cd:3b:3d:79:3d:54:fc:25:7f:18:7d:d7:bd:a8:25: ff:cb:08:d9:c0:c1:a0:6a:fc:e1:7e:79:0e:93:9e: 91:fb:8f:9e:0f:79:18:4c:81:35:fc:24:26:81:99: 58:1b:ac:8d:57:04:61:93:5a:94:ed:cb:a6:a5:16: c5:5d:be:7e:2a:ec:2d:b1:82:b0:ae:fd:ee:fd:5d: 35:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:DE:6B:80:BE:7D:40:9A:CA:7E:ED:1A:60:51:D9:6F:90:24:62:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/065d9d1f-ce3c-3be1-b1bd-bf824f37bc8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.171.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:ac:94:31:04:e7:56:f9:19:79:31:29:29:1f:e6:11:cc:01: d8:02:b7:28:d0:4d:4b:a8:79:d3:8b:23:b5:7a:09:3e:c7:06: c3:40:77:b4:af:76:df:b5:7e:8a:53:8c:95:b3:31:0a:a5:24: e8:ed:bd:ae:e4:c5:36:d9:b7:cf:5e:61:5e:6e:da:e5:99:e2: 79:5f:5a:31:cf:fd:d8:5c:07:8f:29:9e:1d:ec:ac:22:cb:7e: 4e:58:33:ad:cf:92:32:7d:9b:8d:26:f6:dd:7a:c0:20:08:c5: eb:7e:f0:8b:99:f2:37:e5:a8:11:d6:ed:1f:58:4d:17:de:d0: 93:c6:36:67:de:f8:f9:83:e1:04:db:1e:af:87:97:10:05:ed: e5:db:20:b4:18:e4:bd:28:96:7c:24:fc:07:ce:f5:09:72:e9: 62:d1:1f:3a:6e:46:1a:a9:ce:ed:d2:5e:53:c0:cd:e5:50:9d: ba:0a:03:80:bb:9d:0b:75:a8:1a:8b:19:89:7b:11:16:49:8f: bf:2a:cc:06:db:d1:9b:4d:2a:3c:39:67:51:f6:9b:a8:90:47: fc:eb:c6:9d:2f:26:ba:89:e6:44:af:e7:2b:db:cf:35:95:e5: 51:e9:c1:46:9b:74:a0:97:23:0a:07:20:f7:e9:7c:00:f1:6a: 3f:e5:85:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0VomBDQbNzdWhnAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk NTJjZDEwOGYtMmE3NS00MzJjLWI0MzYtZGNjNjZlOWI2NjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaxvPgj6RQ7oVTLR1WJJ5mNsPEk8D+Dz/CNP Uwz4NOHlkcNgEDTmtIP9xXVe+/8wQSxr2kUyKO4zfJJO2Ywrr2NCDgFGkX/OUehn FHQk7VInzl9+g5dSu376Dwv6K+gx8RzGL7OHtttjKQQogBl7P4hpHbCEC2Z6JWpI 1hcL66aAPQzFIpoEgE8VMLqSY2iNVdMzaGeKULc+ieLD41Eq72MjmOsgeCFEnVJS 0TeXIfq89PHNOz15PVT8JX8Yfde9qCX/ywjZwMGgavzhfnkOk56R+4+eD3kYTIE1 /CQmgZlYG6yNVwRhk1qU7cumpRbFXb5+KuwtsYKwrv3u/V01HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjea4C+fUCayn7tGmBR2W+QJGLrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMDY1ZDlkMWYtY2UzYy0z YmUxLWIxYmQtYmY4MjRmMzdiYzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0asCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESslDEE51b5GXkxKSkf5hHMAdgCtyjQTUuoedOLI7V6CT7HBsNAd7Sv dt+1fopTjJWzMQqlJOjtva7kxTbZt89eYV5u2uWZ4nlfWjHP/dhcB48pnh3srCLL fk5YM63PkjJ9m40m9t16wCAIxet+8IuZ8jflqBHW7R9YTRfe0JPGNmfe+PmD4QTb Hq+HlxAF7eXbILQY5L0olnwk/AfO9Qly6WLRHzpuRhqpzu3SXlPAzeVQnboKA4C7 nQt1qBqLGYl7ERZJj78qzAbb0ZtNKjw5Z1H2m6iQR/zrxp0vJrqJ5kSv5yvbzzWV 5VHpwUabdKCXIwoHIPfpfADxaj/lhZk= -----END CERTIFICATE-----Generated at Fri Mar 13 23:52:28 2026 by rpki-client