$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1beebeaf-1f0e-319d-a76d-aa110fadd44c.roa File: 1beebeaf-1f0e-319d-a76d-aa110fadd44c.roa (raw, json) Hash identifier: GC0Lxt6Ckn5VU2sLU1CkDZ4S/POFX7tpV1fZJPFIDzQ= Subject key identifier: 19:ED:3E:38:B3:51:90:78:68:15:53:44:E6:93:53:42:9A:2E:74:94 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D19B4AB44425E818168DCF880 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1beebeaf-1f0e-319d-a76d-aa110fadd44c.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 852 IP address blocks: 209.52.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:ab:44:42:5e:81:81:68:dc:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=f336f1e5-92dc-4e69-9f44-b1b7698fe5da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:42:78:27:fe:13:81:43:6d:87:89:dd:eb:b4: 6b:87:bf:7d:f8:02:a9:a4:ab:ce:0c:89:44:15:1f: c4:8d:83:5e:5b:e8:dc:0e:80:0f:1a:7b:6d:a9:51: 9a:c4:94:af:18:92:e1:04:2b:e9:eb:dd:c3:31:a1: a7:0f:07:69:da:d4:c7:7a:31:a7:fc:1f:26:a4:2d: a0:36:ee:02:da:85:40:24:8a:62:28:54:05:d1:23: 69:88:64:9f:67:21:95:c0:f3:22:71:0b:62:86:c1: a3:ea:a0:aa:87:cd:28:e1:d8:64:46:41:f9:06:22: 85:2e:1d:09:27:fc:ab:17:11:7a:20:5f:86:bb:55: 1e:25:01:c4:80:e4:77:66:4e:e7:25:b2:b6:eb:73: 71:79:7a:41:43:82:aa:21:e1:b3:e4:22:33:ec:7b: 40:64:b0:9d:a8:fa:33:b7:08:d5:7a:cc:32:76:e1: 3c:8a:7d:6a:19:38:c4:63:41:f6:f6:8b:0d:f1:7c: 60:a3:31:6c:f9:3a:1f:8f:57:a2:ae:8d:5a:4b:4e: f6:0c:20:40:01:71:ed:33:01:30:45:76:1b:97:82: 96:4f:03:b4:db:97:bb:d7:9c:7e:d8:6d:26:08:5a: 3f:9f:0f:40:6d:9e:9f:09:7e:a2:8f:24:59:f4:98: f4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:ED:3E:38:B3:51:90:78:68:15:53:44:E6:93:53:42:9A:2E:74:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1beebeaf-1f0e-319d-a76d-aa110fadd44c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.52.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:d9:b3:91:f2:40:14:4d:4c:d0:0f:c3:6d:db:3d:c5:07:97: c0:5a:b9:40:5e:2a:dc:e3:fe:34:b3:f6:28:1d:14:a3:13:d9: 9d:aa:b8:d2:eb:5f:6d:b9:0c:24:5a:85:d0:3a:c2:eb:b5:5d: dd:74:5f:c0:a4:d4:9d:b6:df:da:23:70:77:7c:cf:bc:5c:66: 42:a7:eb:e0:71:83:08:7a:74:2e:11:f0:d8:f7:15:ac:da:d7: d8:57:f9:2a:88:02:f4:a9:c5:7a:d5:2f:28:08:78:1f:2d:33: da:dc:ed:95:af:a1:b3:0b:3b:0c:d4:d8:98:de:ac:5d:49:11: fd:15:61:1a:fc:5a:cd:b4:c9:5c:86:a4:f6:e2:2b:80:0a:b4: b5:06:5c:85:66:0a:94:70:f9:da:c8:2f:49:08:64:44:f1:a9: 8f:d7:02:bd:d0:bf:82:b9:ff:78:c4:43:fb:44:63:32:41:2b: b9:d7:4c:b0:10:07:72:b6:5e:87:c1:7c:6c:1f:c7:c1:62:4e: 30:9f:9c:87:22:11:00:ed:b2:1d:1e:dc:0d:ae:bc:6e:ef:ff: ed:a6:e2:03:28:18:bb:05:3f:9a:e9:6e:13:04:06:d6:ab:16: f5:d2:7d:38:22:98:fa:c2:62:c1:94:9c:41:cc:65:ac:2b:27: da:ab:8f:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtKtEQl6BgWjc+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk ZjMzNmYxZTUtOTJkYy00ZTY5LTlmNDQtYjFiNzY5OGZlNWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUJ4J/4TgUNth4nd67Rrh799+AKppKvODIlE FR/EjYNeW+jcDoAPGnttqVGaxJSvGJLhBCvp693DMaGnDwdp2tTHejGn/B8mpC2g Nu4C2oVAJIpiKFQF0SNpiGSfZyGVwPMicQtihsGj6qCqh80o4dhkRkH5BiKFLh0J J/yrFxF6IF+Gu1UeJQHEgOR3Zk7nJbK263NxeXpBQ4KqIeGz5CIz7HtAZLCdqPoz twjVeswyduE8in1qGTjEY0H29osN8XxgozFs+Tofj1eiro1aS072DCBAAXHtMwEw RXYbl4KWTwO025e715x+2G0mCFo/nw9AbZ6fCX6ijyRZ9Jj0DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBntPjizUZB4aBVTROaTU0KaLnSUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMWJlZWJlYWYtMWYwZS0z MTlkLWE3NmQtYWExMTBmYWRkNDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0TQoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANPZs5HyQBRNTNAPw23bPcUHl8BauUBeKtzj/jSz9igdFKMT2Z2quNLr X225DCRahdA6wuu1Xd10X8Ck1J2239ojcHd8z7xcZkKn6+Bxgwh6dC4R8Nj3Faza 19hX+SqIAvSpxXrVLygIeB8tM9rc7ZWvobMLOwzU2JjerF1JEf0VYRr8Ws20yVyG pPbiK4AKtLUGXIVmCpRw+drIL0kIZETxqY/XAr3Qv4K5/3jEQ/tEYzJBK7nXTLAQ B3K2XofBfGwfx8FiTjCfnIciEQDtsh0e3A2uvG7v/+2m4gMoGLsFP5rpbhMEBtar FvXSfTgimPrCYsGUnEHMZawrJ9qrjww= -----END CERTIFICATE-----Generated at Fri Mar 13 23:52:41 2026 by rpki-client