$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1beebeaf-1f0e-319d-a76d-aa110fadd44c.roa File: 1beebeaf-1f0e-319d-a76d-aa110fadd44c.roa (raw, json) Hash identifier: sMGjhv2gOvbJA/Fo29d71AReTM4qVgPIUUQYHP5in6Q= Subject key identifier: AF:84:A6:9F:31:A8:51:1C:25:4B:88:64:D0:BB:50:08:75:65:2E:45 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584DFA7075D647006D7E88A33200 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1beebeaf-1f0e-319d-a76d-aa110fadd44c.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 852 IP address blocks: 209.52.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:75:d6:47:00:6d:7e:88:a3:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=77d55502-fc7f-4ac4-a949-e3c017dca954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c8:3d:b0:0a:d4:87:b4:f9:fe:b7:c5:60:ef: e2:ed:d8:f0:59:88:29:f9:ef:f0:cf:e0:71:86:32: 8a:55:59:3e:3b:d8:2b:13:42:27:cc:a8:ca:fa:bf: 76:c5:90:cb:6e:af:ad:c8:49:b6:6d:81:85:3b:0d: 72:94:f6:bd:25:95:3f:74:88:41:6f:6b:9a:b8:fe: 0f:ee:fc:06:b8:5c:56:22:7c:44:f0:cd:b7:a3:8e: 39:8e:32:8b:3b:57:37:35:3f:32:22:c1:49:95:55: 6d:b9:9d:b8:17:30:54:2a:49:7b:42:7a:1e:51:86: 0a:2d:ff:2e:69:0f:19:b7:6a:74:e0:79:ba:71:1e: f8:5b:1c:ed:8a:87:f6:25:36:71:6a:20:f7:5d:4a: ed:5e:ac:1d:55:24:9e:37:3b:01:37:83:f4:e7:51: 72:9f:54:61:56:94:63:cc:88:7c:b1:c1:dd:10:1a: c7:5b:9f:ad:fd:f5:2b:86:59:25:5d:cb:58:9c:ef: 57:46:5f:dd:cb:43:5f:34:ab:38:96:4e:d3:5c:ac: 1e:5f:80:f0:46:59:a2:26:72:0d:1f:78:2e:8f:10: 55:f7:1c:af:3b:6b:3b:18:f4:6e:8f:7d:a7:cb:88: e7:8b:a5:55:fd:0d:03:72:7c:10:d6:ec:bf:71:5c: b8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:84:A6:9F:31:A8:51:1C:25:4B:88:64:D0:BB:50:08:75:65:2E:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1beebeaf-1f0e-319d-a76d-aa110fadd44c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.52.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:35:12:97:3b:bf:eb:2f:de:a7:ca:fa:75:e8:9d:81:9d:4a: cf:5a:0f:7e:15:34:2c:e4:86:40:71:ac:5e:0a:31:fa:70:2f: cf:31:34:a3:07:53:77:35:a0:5e:7b:75:97:22:df:0c:6b:3e: f8:b9:a5:5f:19:78:ef:bc:7d:72:6d:90:2b:5c:15:cf:83:97: a1:cc:d7:00:bc:6f:66:20:d7:16:29:4d:e2:f5:6a:ed:cd:17: 25:ab:12:6c:99:31:8d:95:04:41:13:43:95:24:d0:76:ae:1d: a9:3a:e9:7d:ae:9b:a5:a3:28:92:2e:a3:8a:e0:8f:e0:78:4d: 42:5a:1e:15:de:43:9d:be:57:1e:1e:57:cc:a7:60:de:42:5b: 68:4b:32:2b:81:d0:e6:56:71:f7:02:26:1a:44:22:0b:6e:29: 6a:15:be:5f:60:a7:ba:3a:f4:76:de:3f:cb:c0:e2:04:fd:1b: a8:04:e7:b6:94:ed:59:35:23:5b:a2:b7:ec:0e:bf:dd:e8:65: 96:62:6d:af:09:bb:b7:82:e9:39:54:45:8b:ae:51:ee:b2:0d: e0:fd:18:68:6d:6f:c2:2a:4e:15:77:fb:62:08:12:76:ee:3b: c3:bf:e1:df:47:99:99:34:3a:55:86:2b:0a:84:2f:20:a5:70: 72:92:6b:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cHXWRwBtfoijMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk NzdkNTU1MDItZmM3Zi00YWM0LWE5NDktZTNjMDE3ZGNhOTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscg9sArUh7T5/rfFYO/i7djwWYgp+e/wz+Bx hjKKVVk+O9grE0InzKjK+r92xZDLbq+tyEm2bYGFOw1ylPa9JZU/dIhBb2uauP4P 7vwGuFxWInxE8M23o445jjKLO1c3NT8yIsFJlVVtuZ24FzBUKkl7QnoeUYYKLf8u aQ8Zt2p04Hm6cR74Wxztiof2JTZxaiD3XUrtXqwdVSSeNzsBN4P051Fyn1RhVpRj zIh8scHdEBrHW5+t/fUrhlklXctYnO9XRl/dy0NfNKs4lk7TXKweX4DwRlmiJnIN H3gujxBV9xyvO2s7GPRuj32ny4jni6VV/Q0DcnwQ1uy/cVy47QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+Epp8xqFEcJUuIZNC7UAh1ZS5FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMWJlZWJlYWYtMWYwZS0z MTlkLWE3NmQtYWExMTBmYWRkNDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0TQoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJs1Epc7v+sv3qfK+nXonYGdSs9aD34VNCzkhkBxrF4KMfpwL88xNKMH U3c1oF57dZci3wxrPvi5pV8ZeO+8fXJtkCtcFc+Dl6HM1wC8b2Yg1xYpTeL1au3N FyWrEmyZMY2VBEETQ5Uk0HauHak66X2um6WjKJIuo4rgj+B4TUJaHhXeQ52+Vx4e V8ynYN5CW2hLMiuB0OZWcfcCJhpEIgtuKWoVvl9gp7o69HbeP8vA4gT9G6gE57aU 7Vk1I1uit+wOv93oZZZiba8Ju7eC6TlURYuuUe6yDeD9GGhtb8IqThV3+2IIEnbu O8O/4d9HmZk0OlWGKwqELyClcHKSawQ= -----END CERTIFICATE-----Generated at Fri Jun 12 22:42:28 2026 by rpki-client