$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1791e969-7c08-3e78-95e8-9199c2d5752a.roa File: 1791e969-7c08-3e78-95e8-9199c2d5752a.roa (raw, json) Hash identifier: 5ELc+TwnUb2hjdts9hrcTS48XrM2H0yDtDrMx96s2vU= Subject key identifier: D9:A3:AF:42:F7:62:2F:E6:13:E7:21:D3:24:AB:F2:5A:1F:C5:CA:00 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584DF4DB4893336E13E4C6E42580 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1791e969-7c08-3e78-95e8-9199c2d5752a.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 7861 IP address blocks: 209.20.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:48:93:33:6e:13:e4:c6:e4:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=673c7c02-5721-40fd-b2c9-e943a51bacbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ed:ba:64:6d:b2:e6:6b:35:7d:9a:89:60:9c: 67:39:bd:f7:7d:40:54:de:1e:02:6b:39:ac:1a:0b: bb:8c:51:17:07:13:5d:cd:21:8b:40:42:76:ef:54: e0:4f:0b:7e:05:da:b4:2c:f1:fe:d0:8e:a7:92:85: ac:cd:a7:de:b3:cb:27:73:51:42:36:e8:30:a1:e9: 7f:2c:dd:99:2e:cb:ee:9d:e1:e1:a5:ac:81:2d:2f: c5:bb:99:31:15:14:a0:c6:fc:65:e2:d5:5c:97:f2: 9c:ae:02:d9:97:52:b8:d8:b5:d2:3c:2e:ca:00:b8: b0:f3:b4:e2:a9:91:2b:63:84:73:e6:3c:e0:84:47: e4:4e:d0:de:2c:7f:18:2e:fe:41:80:43:a8:32:c6: 8e:c7:60:47:f5:24:a1:9f:f0:f9:e6:3c:7e:a6:b1: 42:85:b3:8b:88:ee:17:70:f6:b3:44:6f:f1:3d:da: f8:32:89:41:c0:70:c4:79:25:67:6d:cd:31:e4:a7: dc:86:60:9b:de:97:61:9f:5a:8a:48:d3:2a:6c:47: c5:20:a8:3b:01:a4:40:3a:7d:6d:9e:4a:02:52:45: cd:0f:2b:93:b5:61:6d:cf:04:9e:6d:29:52:36:e6: 5a:07:f0:2f:70:60:84:28:b2:2a:90:e3:fb:c4:15: 02:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A3:AF:42:F7:62:2F:E6:13:E7:21:D3:24:AB:F2:5A:1F:C5:CA:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1791e969-7c08-3e78-95e8-9199c2d5752a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.20.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:00:90:ab:17:42:bd:a0:de:36:64:4c:88:f7:75:a0:aa:75: 78:30:2d:65:e9:b5:90:ec:b4:a3:8f:33:5b:2f:cc:6a:25:08: be:47:15:66:04:33:da:be:37:79:41:59:8e:12:f0:d1:68:0e: 50:f8:b6:7f:f1:1b:35:f1:f1:8e:7e:0a:4f:a8:e7:b9:46:9b: f4:17:bd:08:54:4a:42:2b:90:a9:0e:da:10:f5:1f:49:be:88: bd:00:ac:ec:15:aa:dd:4a:1c:07:ed:53:b2:10:67:21:9e:73: 4a:b6:c2:f8:e9:34:09:22:9a:1d:ed:6f:f8:61:10:e0:46:ed: 22:f1:fa:0b:a3:18:07:de:a3:5f:e3:05:df:90:e1:e4:cf:e9: 3f:10:ae:ab:e4:4d:64:2a:0c:9c:9a:03:64:20:15:cd:d5:cf: bb:9e:0e:21:3e:49:51:77:cc:50:8d:9f:83:87:1e:67:a3:1e: 5d:fa:19:63:2e:7f:fc:07:88:64:41:b8:75:38:61:83:bb:0a: 8d:37:e0:45:73:bb:9d:68:c9:69:71:ee:51:00:f1:61:34:3b: 4c:e2:aa:88:15:89:dc:ca:32:fc:32:da:be:32:94:f4:cb:4e: 73:0f:dd:5b:ba:37:ee:ca:5d:9d:bf:46:d3:6c:b1:50:b3:23: 38:54:1c:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3020iTM24T5MbkJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk NjczYzdjMDItNTcyMS00MGZkLWIyYzktZTk0M2E1MWJhY2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjO26ZG2y5ms1fZqJYJxnOb33fUBU3h4Cazms Ggu7jFEXBxNdzSGLQEJ271TgTwt+Bdq0LPH+0I6nkoWszafes8snc1FCNugwoel/ LN2ZLsvuneHhpayBLS/Fu5kxFRSgxvxl4tVcl/KcrgLZl1K42LXSPC7KALiw87Ti qZErY4Rz5jzghEfkTtDeLH8YLv5BgEOoMsaOx2BH9SShn/D55jx+prFChbOLiO4X cPazRG/xPdr4MolBwHDEeSVnbc0x5KfchmCb3pdhn1qKSNMqbEfFIKg7AaRAOn1t nkoCUkXNDyuTtWFtzwSebSlSNuZaB/AvcGCEKLIqkOP7xBUCBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmjr0L3Yi/mE+ch0ySr8lofxcoAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMTc5MWU5NjktN2MwOC0z ZTc4LTk1ZTgtOTE5OWMyZDU3NTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RQhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKsAkKsXQr2g3jZkTIj3daCqdXgwLWXptZDstKOPM1svzGolCL5HFWYE M9q+N3lBWY4S8NFoDlD4tn/xGzXx8Y5+Ck+o57lGm/QXvQhUSkIrkKkO2hD1H0m+ iL0ArOwVqt1KHAftU7IQZyGec0q2wvjpNAkimh3tb/hhEOBG7SLx+gujGAfeo1/j Bd+Q4eTP6T8QrqvkTWQqDJyaA2QgFc3Vz7ueDiE+SVF3zFCNn4OHHmejHl36GWMu f/wHiGRBuHU4YYO7Co034EVzu51oyWlx7lEA8WE0O0ziqogVidzKMvwy2r4ylPTL TnMP3Vu6N+7KXZ2/RtNssVCzIzhUHDM= -----END CERTIFICATE-----Generated at Fri Jun 12 22:46:35 2026 by rpki-client