$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1791e969-7c08-3e78-95e8-9199c2d5752a.roa File: 1791e969-7c08-3e78-95e8-9199c2d5752a.roa (raw, json) Hash identifier: 5Np5G2rWhXXkl1eurboolGBMvSntlFNdu9I9DpGxars= Subject key identifier: 8F:FC:C0:56:7A:A0:B7:E7:E3:14:FB:F6:3A:35:78:F3:15:05:D5:AC Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D143D2D832709013D67803E00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1791e969-7c08-3e78-95e8-9199c2d5752a.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 7861 IP address blocks: 209.20.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:2d:83:27:09:01:3d:67:80:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=4a96daba-2362-400c-aa9e-4c32fa5bb059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:74:dd:25:95:c2:8c:43:cf:ee:df:6a:74:c3: 0f:f1:3c:ce:71:11:79:cb:d0:a7:d8:0d:34:9b:66: 69:bb:ca:bf:ce:25:31:0c:d3:83:7c:1d:22:c5:71: 61:e8:3c:58:a0:52:9d:df:2c:21:07:7e:92:bd:f4: 65:6c:52:bb:34:b9:e2:2e:56:44:6a:98:8e:64:c1: 8d:a8:6d:53:64:8d:86:dc:7c:fb:ce:58:73:af:fc: 2a:23:52:83:4c:23:db:a7:c8:e2:f1:70:a1:ea:22: 6c:40:31:4b:79:63:64:b1:a8:b6:8e:d0:cf:40:40: aa:ee:70:56:21:b5:0f:ce:9e:3a:e4:32:24:44:e8: 4c:89:40:35:0d:ed:fd:d1:ab:6c:5f:f8:ae:0b:4c: 94:9e:fd:e2:af:c8:be:7e:dd:17:9e:95:b3:0d:30: f1:da:c9:48:99:b9:aa:cd:ce:99:17:7c:bf:b8:46: b3:8f:ff:72:57:d7:d4:fb:53:3a:ad:40:bd:2a:e7: d1:23:16:8f:10:3d:6d:5e:a9:2c:12:08:f0:51:8a: 30:0f:61:2f:ba:c3:14:20:cb:4d:db:40:43:2a:68: cd:3d:71:72:0e:9a:46:37:5a:45:96:49:17:8a:c0: 9d:3d:3a:06:18:af:af:91:c9:33:7f:7d:92:80:05: dc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:FC:C0:56:7A:A0:B7:E7:E3:14:FB:F6:3A:35:78:F3:15:05:D5:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1791e969-7c08-3e78-95e8-9199c2d5752a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.20.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:d0:db:7e:9a:7d:d6:16:36:16:94:d0:e9:e5:82:b2:c1:9b: 64:85:2e:0c:df:dc:91:02:f2:6a:a3:46:61:eb:74:94:c5:bd: 7a:40:26:cc:6d:69:ab:af:20:06:1a:e1:32:d9:92:d9:a6:6c: 83:f8:67:8c:43:b8:9d:e9:3c:a3:03:3a:48:71:09:79:9b:a2: f6:b9:e9:00:bd:2e:30:80:fb:b8:29:d8:9d:3f:a6:b2:32:24: 05:d9:e1:b6:bc:2f:e7:06:24:eb:ab:ee:de:ff:76:7c:2b:36: ff:a0:fb:22:70:20:5d:c0:20:a9:97:c9:7f:e0:5d:1b:f9:77: fc:63:b6:d5:8e:32:7d:0c:99:97:d9:b2:6a:03:46:3a:03:78: f1:65:2f:a7:f9:0b:a6:f3:7b:ba:30:64:f6:96:b4:c4:e9:0f: 6b:5d:a6:4c:c0:2a:3e:39:6d:6f:87:3e:6c:e3:7e:df:9f:ea: 9a:1b:9b:bc:e0:2e:58:3c:cb:61:e0:25:f9:36:5a:5a:f4:fc: 2d:e3:16:6b:42:ca:0c:8f:a8:b9:b0:56:07:ce:a5:aa:8e:b5: de:fc:43:a7:9d:e7:9e:e9:85:1d:3b:01:cb:a5:e6:80:68:46: 5b:7c:9c:11:df:de:2c:cc:d3:4a:0d:6e:fb:04:d0:63:a3:14: d4:6c:42:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPS2DJwkBPWeAPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk NGE5NmRhYmEtMjM2Mi00MDBjLWFhOWUtNGMzMmZhNWJiMDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3TdJZXCjEPP7t9qdMMP8TzOcRF5y9Cn2A00 m2Zpu8q/ziUxDNODfB0ixXFh6DxYoFKd3ywhB36SvfRlbFK7NLniLlZEapiOZMGN qG1TZI2G3Hz7zlhzr/wqI1KDTCPbp8ji8XCh6iJsQDFLeWNksai2jtDPQECq7nBW IbUPzp465DIkROhMiUA1De390atsX/iuC0yUnv3ir8i+ft0XnpWzDTDx2slImbmq zc6ZF3y/uEazj/9yV9fU+1M6rUC9KufRIxaPED1tXqksEgjwUYowD2EvusMUIMtN 20BDKmjNPXFyDppGN1pFlkkXisCdPToGGK+vkckzf32SgAXcvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/8wFZ6oLfn4xT79jo1ePMVBdWsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMTc5MWU5NjktN2MwOC0z ZTc4LTk1ZTgtOTE5OWMyZDU3NTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RQhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKrQ236afdYWNhaU0OnlgrLBm2SFLgzf3JEC8mqjRmHrdJTFvXpAJsxt aauvIAYa4TLZktmmbIP4Z4xDuJ3pPKMDOkhxCXmbova56QC9LjCA+7gp2J0/prIy JAXZ4ba8L+cGJOur7t7/dnwrNv+g+yJwIF3AIKmXyX/gXRv5d/xjttWOMn0MmZfZ smoDRjoDePFlL6f5C6bze7owZPaWtMTpD2tdpkzAKj45bW+HPmzjft+f6pobm7zg Llg8y2HgJfk2Wlr0/C3jFmtCygyPqLmwVgfOpaqOtd78Q6ed557phR07Acul5oBo Rlt8nBHf3izM00oNbvsE0GOjFNRsQlk= -----END CERTIFICATE-----Generated at Fri Mar 13 23:54:23 2026 by rpki-client