$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/28d0696b-8dfd-3cab-8fab-1a07f8dbee06.roa File: 28d0696b-8dfd-3cab-8fab-1a07f8dbee06.roa (raw, json) Hash identifier: 4/IAOs7DKnd5YZ2/NHSGJPCVyVAHcUs4P21mpyGwTgY= Subject key identifier: FB:53:62:68:4F:90:26:60:04:32:24:60:CE:D5:E9:CB:35:CE:BB:7F Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584DF640A30133E1ECC4654ADBE0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/28d0696b-8dfd-3cab-8fab-1a07f8dbee06.roa Signing time: Tue 26 May 2026 13:00:31 +0000 ROA not before: Tue 26 May 2026 13:00:31 +0000 ROA not after: Mon 24 Aug 2026 13:00:31 +0000 asID: 852 IP address blocks: 209.121.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f6:40:a3:01:33:e1:ec:c4:65:4a:db:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: May 26 13:00:31 2026 GMT Not After : Aug 24 13:00:31 2026 GMT Subject: CN=25add8cb-09e0-4c1d-8df9-b840a7f41e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:df:c3:81:71:a4:18:83:ec:fa:72:21:94:43: 06:04:60:a4:a4:cc:b7:87:b4:f9:c2:26:db:87:ae: 92:19:15:ed:91:d6:21:ae:51:c9:89:da:9b:7b:56: dc:34:30:bd:47:b6:51:6a:3e:ff:ea:a0:ac:22:c0: c0:18:88:9b:2a:3e:48:a6:40:d6:fb:cf:41:30:f9: 37:1e:d2:be:57:07:05:61:60:ce:dc:e8:9d:77:ca: 19:78:1e:18:7e:62:1f:12:76:d3:c2:d2:64:94:4e: 03:f6:1c:4e:5e:ba:02:02:c4:43:ee:c8:dc:ec:e5: 4a:7a:bc:83:bb:9f:9c:56:47:6e:a2:a9:51:fd:99: a4:20:1e:6a:7a:5b:bd:3f:4f:3b:49:f7:39:a3:0e: 27:99:fe:f0:8f:45:08:45:93:d2:09:b7:21:d2:3b: 8a:d8:a8:52:f5:3c:de:02:04:0e:ce:11:f5:01:fb: 58:ab:5e:0d:e4:59:30:3b:dc:13:a3:df:13:b1:bd: 1b:70:56:49:2c:1c:fb:3f:14:0a:fa:70:de:4b:83: 90:06:25:75:cf:63:f7:d3:7b:c3:f9:e8:8d:ef:88: b2:cf:5d:a4:6c:49:87:f1:2c:57:83:03:08:3a:f7: 71:c7:4a:04:ec:7a:d0:a7:db:63:52:93:b7:d1:54: f3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:53:62:68:4F:90:26:60:04:32:24:60:CE:D5:E9:CB:35:CE:BB:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/28d0696b-8dfd-3cab-8fab-1a07f8dbee06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.121.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:63:c4:bb:f2:56:db:85:a3:2a:48:2e:a8:60:bf:58:3d:ad: 4e:0d:d1:0f:47:8b:cf:4e:d1:29:61:41:53:0c:2c:23:6f:e5: 23:60:94:7d:1a:a9:f1:29:79:ab:88:e4:79:14:8b:3e:25:fa: 3d:45:b3:07:e9:ea:6a:f8:8d:a0:b8:d6:a8:6e:a1:27:ca:f4: 4e:a6:7c:ac:60:88:6e:fc:49:f6:f7:9a:15:3e:2c:c2:cb:c5: 95:b3:8f:43:21:40:c4:4f:b4:8d:51:85:69:8c:04:25:e8:1f: 43:a3:45:4a:a2:01:3d:21:44:47:ff:23:ca:08:41:11:d8:b4: 31:a8:4d:83:8f:01:cb:5f:f6:81:c4:5a:c5:86:be:db:c2:f9: f0:4d:ad:08:c9:25:4b:fc:7e:c2:36:51:64:4d:65:fa:a4:2c: db:fa:cc:83:9f:85:e6:fb:ec:c6:21:dc:bc:50:82:4e:69:25: cf:94:e6:5f:5f:ed:1b:14:df:0b:23:6f:89:40:6a:f6:ed:b2: 2f:0b:89:6c:90:94:34:91:86:2a:0b:f2:a2:b9:23:bf:f4:cb: 05:53:ec:f5:55:8a:35:82:61:e6:7c:9f:37:67:37:8b:3f:45: c9:f3:3e:08:d7:6f:ea:eb:27:a0:7e:64:60:ca:a1:ea:d2:28: 39:ef:9d:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE32QKMBM+HsxGVK2+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDUyNjEzMDAzMVoXDTI2MDgyNDEzMDAzMVowLzEtMCsGA1UEAxMk MjVhZGQ4Y2ItMDllMC00YzFkLThkZjktYjg0MGE3ZjQxZTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt/DgXGkGIPs+nIhlEMGBGCkpMy3h7T5wibb h66SGRXtkdYhrlHJidqbe1bcNDC9R7ZRaj7/6qCsIsDAGIibKj5IpkDW+89BMPk3 HtK+VwcFYWDO3Oidd8oZeB4YfmIfEnbTwtJklE4D9hxOXroCAsRD7sjc7OVKeryD u5+cVkduoqlR/ZmkIB5qelu9P087Sfc5ow4nmf7wj0UIRZPSCbch0juK2KhS9Tze AgQOzhH1AftYq14N5FkwO9wTo98Tsb0bcFZJLBz7PxQK+nDeS4OQBiV1z2P303vD +eiN74iyz12kbEmH8SxXgwMIOvdxx0oE7HrQp9tjUpO30VTzuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPtTYmhPkCZgBDIkYM7V6cs1zrt/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjhkMDY5NmItOGRmZC0z Y2FiLThmYWItMWEwN2Y4ZGJlZTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XlHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJjxLvyVtuFoypILqhgv1g9rU4N0Q9Hi89O0SlhQVMMLCNv5SNglH0a qfEpeauI5HkUiz4l+j1Fswfp6mr4jaC41qhuoSfK9E6mfKxgiG78Sfb3mhU+LMLL xZWzj0MhQMRPtI1RhWmMBCXoH0OjRUqiAT0hREf/I8oIQRHYtDGoTYOPActf9oHE WsWGvtvC+fBNrQjJJUv8fsI2UWRNZfqkLNv6zIOfheb77MYh3LxQgk5pJc+U5l9f 7RsU3wsjb4lAavbtsi8LiWyQlDSRhioL8qK5I7/0ywVT7PVVijWCYeZ8nzdnN4s/ RcnzPgjXb+rrJ6B+ZGDKoerSKDnvnVE= -----END CERTIFICATE-----Generated at Fri Jun 12 22:49:43 2026 by rpki-client