$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/234a4d7c-16e8-37f4-ac06-1ddcc4528f22.roa File: 234a4d7c-16e8-37f4-ac06-1ddcc4528f22.roa (raw, json) Hash identifier: i/so3LB8oV1y1OzczAh8WZKt8yZB7uzpD5lgK1WzOSw= Subject key identifier: 7A:9B:D5:CD:11:94:CF:BB:A6:F8:C4:6D:A1:6A:8D:1F:06:B1:DF:FB Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584DF6409FB86D1D7442BF301300 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/234a4d7c-16e8-37f4-ac06-1ddcc4528f22.roa Signing time: Tue 26 May 2026 13:00:31 +0000 ROA not before: Tue 26 May 2026 13:00:31 +0000 ROA not after: Mon 24 Aug 2026 13:00:31 +0000 asID: 852 IP address blocks: 209.52.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f6:40:9f:b8:6d:1d:74:42:bf:30:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: May 26 13:00:31 2026 GMT Not After : Aug 24 13:00:31 2026 GMT Subject: CN=7fe9b86a-2d88-4bd5-82d8-b3629af05125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ad:02:c0:d7:55:03:c1:f2:a5:98:76:a4:c3: 3a:ad:db:c4:b0:93:c9:2a:1a:0d:29:c5:05:c1:14: 86:39:5a:f1:68:15:b4:33:c7:41:ba:f9:a7:b1:c3: 87:3c:16:16:78:de:56:a6:05:c0:90:75:6e:f1:27: 86:fe:1b:09:c9:32:ed:ef:d1:0e:0c:fb:58:09:e6: 35:91:ea:21:3b:57:1a:f6:b9:1f:b7:e1:40:1f:cf: 4f:cb:89:c8:e2:3d:d8:43:b7:dc:f8:00:99:f2:bb: 27:97:48:11:46:eb:2e:2c:1e:2e:e9:72:2e:f7:7d: a2:0b:ea:1b:09:77:9b:7f:41:44:d2:5d:3a:5d:eb: 47:0e:3b:83:96:14:af:8b:08:8c:bb:af:72:11:cb: 39:a0:bb:9f:46:13:c0:33:2b:5a:0b:92:25:16:9b: e7:61:97:2d:f4:5c:3d:b4:0a:33:6a:43:bd:de:b9: 5b:8c:c6:4c:98:02:1f:9f:a2:4c:70:a1:83:70:a7: 83:c8:be:c5:8d:21:fc:e9:d1:31:4b:df:e6:2b:c1: 1b:92:46:40:6c:2b:2d:af:52:a4:c1:70:64:e2:97: 37:03:5d:f4:4f:4a:1b:c5:cb:84:e7:8a:6f:f7:9b: b2:80:6c:8d:1b:87:45:3f:2c:a3:1a:d5:a7:73:a9: 38:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:9B:D5:CD:11:94:CF:BB:A6:F8:C4:6D:A1:6A:8D:1F:06:B1:DF:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/234a4d7c-16e8-37f4-ac06-1ddcc4528f22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.52.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:4a:8d:55:4c:68:a7:cc:a2:ea:96:0b:80:c4:1b:33:4b:60: d1:26:b5:c7:bd:49:5e:ca:e7:16:b6:83:a8:10:f4:d1:8a:32: 36:e3:0a:13:46:7a:a8:8d:e3:32:a8:c3:f5:33:7f:79:32:ae: 8b:3e:b3:26:43:8c:2e:96:90:99:ea:57:72:d7:8a:0f:98:41: 68:9c:a1:50:0e:93:06:a6:ab:d4:08:bf:3a:ed:86:54:e9:19: b0:98:7b:20:71:cc:29:ea:b5:df:cd:a5:02:f1:82:1b:bc:54: 34:ad:f9:f4:2c:ac:7f:68:72:0b:4e:78:d1:73:07:8e:94:e1: c9:e2:2e:58:38:14:98:b4:05:44:6e:ff:c8:68:de:42:72:6c: b9:af:1a:03:a5:7f:14:86:7c:46:42:4c:7b:61:62:e6:7f:34: ea:8b:e1:c3:ef:13:b1:4b:f9:75:14:49:57:85:d6:b7:1d:7d: 8d:62:6f:66:29:b8:b0:a3:e5:ba:1c:44:d3:d1:b2:05:1b:6c: f0:93:9e:4a:8d:93:bb:de:a1:28:e3:68:f0:9a:a3:80:1a:d6: fd:cf:38:f3:62:9f:38:30:6b:bd:9a:e4:60:4f:33:57:25:3b: 44:4b:33:90:82:08:aa:78:97:29:22:0c:9f:c0:05:bd:59:61: 7d:75:05:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE32QJ+4bR10Qr8wEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDUyNjEzMDAzMVoXDTI2MDgyNDEzMDAzMVowLzEtMCsGA1UEAxMk N2ZlOWI4NmEtMmQ4OC00YmQ1LTgyZDgtYjM2MjlhZjA1MTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu60CwNdVA8HypZh2pMM6rdvEsJPJKhoNKcUF wRSGOVrxaBW0M8dBuvmnscOHPBYWeN5WpgXAkHVu8SeG/hsJyTLt79EODPtYCeY1 keohO1ca9rkft+FAH89Py4nI4j3YQ7fc+ACZ8rsnl0gRRusuLB4u6XIu932iC+ob CXebf0FE0l06XetHDjuDlhSviwiMu69yEcs5oLufRhPAMytaC5IlFpvnYZct9Fw9 tAozakO93rlbjMZMmAIfn6JMcKGDcKeDyL7FjSH86dExS9/mK8EbkkZAbCstr1Kk wXBk4pc3A130T0obxcuE54pv95uygGyNG4dFPyyjGtWnc6k47QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqb1c0RlM+7pvjEbaFqjR8Gsd/7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjM0YTRkN2MtMTZlOC0z N2Y0LWFjMDYtMWRkY2M0NTI4ZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TRYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5KjVVMaKfMouqWC4DEGzNLYNEmtce9SV7K5xa2g6gQ9NGKMjbjChNG eqiN4zKow/Uzf3kyros+syZDjC6WkJnqV3LXig+YQWicoVAOkwamq9QIvzrthlTp GbCYeyBxzCnqtd/NpQLxghu8VDSt+fQsrH9ocgtOeNFzB46U4cniLlg4FJi0BURu /8ho3kJybLmvGgOlfxSGfEZCTHthYuZ/NOqL4cPvE7FL+XUUSVeF1rcdfY1ib2Yp uLCj5bocRNPRsgUbbPCTnkqNk7veoSjjaPCao4Aa1v3POPNinzgwa72a5GBPM1cl O0RLM5CCCKp4lykiDJ/ABb1ZYX11Bf4= -----END CERTIFICATE-----Generated at Fri Jun 12 22:45:44 2026 by rpki-client