$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/28d0696b-8dfd-3cab-8fab-1a07f8dbee06.roa File: 28d0696b-8dfd-3cab-8fab-1a07f8dbee06.roa (raw, json) Hash identifier: Fe+zQDUxu17XJOIIWJW9H+/bq0BgqSVgGLQbu8XlmjU= Subject key identifier: 89:18:0F:CA:44:9C:78:35:D5:96:20:F5:CA:1B:CE:AF:EC:54:12:5D Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D15A25EFCEBF72CA534EB1100 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/28d0696b-8dfd-3cab-8fab-1a07f8dbee06.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 852 IP address blocks: 209.121.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:5e:fc:eb:f7:2c:a5:34:eb:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=f1f480ee-1483-4a4b-9df8-6ea736a9e20f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:fc:82:31:03:e4:29:3a:3a:37:de:2b:53:6c: 80:c5:1a:ad:9b:9c:0a:07:cc:ba:89:e5:03:36:65: d1:00:65:78:6e:35:73:d5:1d:ce:8c:7d:82:43:cd: b8:91:fd:c5:d1:07:60:ed:16:b4:4c:10:25:1e:bc: a3:37:c3:82:3c:2b:d6:86:cd:35:11:cb:06:cf:39: b9:89:c5:64:86:aa:65:aa:43:dd:9f:24:a6:00:41: 6c:04:55:35:bd:f4:a7:b8:67:0e:31:5b:56:71:76: 92:a9:76:d9:f0:ed:1d:40:63:12:aa:27:25:72:6e: a2:82:d4:a8:e4:7d:c3:5b:7a:a7:a2:2f:bf:5f:dd: 95:2f:37:c3:e9:b6:06:fa:0d:22:ce:3f:7f:83:ff: 17:75:54:95:e6:4b:20:f7:47:84:7e:c3:be:00:2f: 4d:4d:ac:ca:b4:ae:1f:6c:75:68:d8:a1:ca:91:04: 53:54:83:36:a5:1a:35:eb:01:03:98:77:fa:5b:60: 3c:6a:e5:70:75:97:b1:08:31:ec:e7:10:c2:09:a1: 7b:d3:d5:b3:b8:57:15:f1:12:4c:68:a4:db:58:f6: 63:66:e8:07:93:99:6c:8c:00:a7:c7:c1:90:02:d2: ec:de:41:5c:7b:da:4c:39:0b:97:e9:e2:ce:f4:15: 43:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:18:0F:CA:44:9C:78:35:D5:96:20:F5:CA:1B:CE:AF:EC:54:12:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/28d0696b-8dfd-3cab-8fab-1a07f8dbee06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.121.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:3f:f8:7c:95:13:0e:4f:f8:6d:7f:34:29:5f:df:13:9e:cc: b4:14:b6:ba:89:d2:6a:40:6f:8f:8a:4a:ac:28:53:f1:11:39: 0e:a9:8f:a2:6f:57:e8:21:2d:7d:14:dc:ea:77:41:2c:1d:6b: 8b:f6:66:ee:ec:9f:54:6f:38:07:88:27:b4:f7:46:8c:6a:0b: e5:db:e1:37:02:cf:20:90:6e:76:90:34:d3:91:14:63:44:9c: 28:46:af:85:03:ac:e0:72:ce:bd:f2:5c:b3:1d:7a:9e:6f:28: 18:54:7b:c1:7b:ea:e6:27:a7:ac:a5:b9:ff:92:fb:8f:33:f3: 15:a5:81:c3:f5:07:3d:d0:d2:8f:53:41:bf:1b:b1:79:22:dd: 30:4c:f6:c7:83:07:48:27:69:2c:9a:30:61:b2:af:f0:bd:1d: d4:30:43:cc:75:e1:f0:b6:e1:7c:ce:33:c3:2d:d1:33:ab:7f: 41:44:1c:ca:7f:fb:99:da:16:8e:a4:8b:b0:2d:29:94:e7:c1: e0:4f:fc:d4:15:04:85:4b:66:a6:17:04:9d:51:74:10:96:9b: d8:d9:f9:64:7a:bc:f2:4e:d6:46:85:22:83:26:b8:c1:b9:08: 0d:87:d8:ce:85:7e:b8:8e:f2:9a:f9:f6:92:00:35:42:1f:4e: e0:9b:fd:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Vol786/cspTTrEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk ZjFmNDgwZWUtMTQ4My00YTRiLTlkZjgtNmVhNzM2YTllMjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvyCMQPkKTo6N94rU2yAxRqtm5wKB8y6ieUD NmXRAGV4bjVz1R3OjH2CQ824kf3F0Qdg7Ra0TBAlHryjN8OCPCvWhs01EcsGzzm5 icVkhqplqkPdnySmAEFsBFU1vfSnuGcOMVtWcXaSqXbZ8O0dQGMSqiclcm6igtSo 5H3DW3qnoi+/X92VLzfD6bYG+g0izj9/g/8XdVSV5ksg90eEfsO+AC9NTazKtK4f bHVo2KHKkQRTVIM2pRo16wEDmHf6W2A8auVwdZexCDHs5xDCCaF709WzuFcV8RJM aKTbWPZjZugHk5lsjACnx8GQAtLs3kFce9pMOQuX6eLO9BVDYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkYD8pEnHg11ZYg9cobzq/sVBJdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjhkMDY5NmItOGRmZC0z Y2FiLThmYWItMWEwN2Y4ZGJlZTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XlHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKs/+HyVEw5P+G1/NClf3xOezLQUtrqJ0mpAb4+KSqwoU/EROQ6pj6Jv V+ghLX0U3Op3QSwda4v2Zu7sn1RvOAeIJ7T3RoxqC+Xb4TcCzyCQbnaQNNORFGNE nChGr4UDrOByzr3yXLMdep5vKBhUe8F76uYnp6yluf+S+48z8xWlgcP1Bz3Q0o9T Qb8bsXki3TBM9seDB0gnaSyaMGGyr/C9HdQwQ8x14fC24XzOM8Mt0TOrf0FEHMp/ +5naFo6ki7AtKZTnweBP/NQVBIVLZqYXBJ1RdBCWm9jZ+WR6vPJO1kaFIoMmuMG5 CA2H2M6FfriO8pr59pIANUIfTuCb/Ro= -----END CERTIFICATE-----Generated at Fri Mar 13 23:51:52 2026 by rpki-client