$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2baa63e3-2bdd-397e-83e3-1a73a6edbebd.roa File: 2baa63e3-2bdd-397e-83e3-1a73a6edbebd.roa (raw, json) Hash identifier: UrLNebizM5BjrB6noOSCBfipSqSH/zIyNSYHa3A6RKs= Subject key identifier: 59:41:07:2E:9C:E1:8A:7D:7A:C6:75:64:97:D9:F9:1D:5D:65:1B:DF Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D1172619B68644AD36F1582C0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2baa63e3-2bdd-397e-83e3-1a73a6edbebd.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 7861 IP address blocks: 209.29.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:61:9b:68:64:4a:d3:6f:15:82:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=a1ab00e3-4e16-417d-9ccd-c268f5b57127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:45:c1:63:40:d4:f8:c2:7b:be:26:a5:da:b4: ab:3c:b4:c0:18:9f:b2:ae:ed:95:c6:85:0a:fb:34: a6:f6:45:79:39:e4:0d:3b:40:da:40:c5:51:94:6f: 6c:0f:9c:06:e8:a2:10:4b:04:0b:36:10:1d:51:a4: ab:b4:da:0a:49:15:83:09:9f:6f:9d:5c:a2:15:c3: f6:97:72:32:74:e0:16:e1:c7:e5:bd:a2:79:a1:1d: f8:03:86:8f:6b:24:da:fd:1f:49:c0:7c:f3:cf:e8: a4:57:87:01:b4:7b:c4:b4:32:23:4a:b4:9b:7f:ea: 62:e7:c2:00:bf:b8:d0:2d:d8:28:e1:a9:0c:a3:1a: 02:f6:74:f2:db:f5:c8:d1:e5:48:a1:5b:2e:b4:a7: aa:d6:9e:ca:bd:85:3b:c7:d1:bc:be:9e:4c:8b:d9: 22:97:fa:69:ae:a2:42:9e:33:16:34:08:9c:61:c6: 73:7f:c0:a2:0d:a9:96:6f:13:94:bd:6e:65:3b:17: b2:cf:5f:76:8b:51:75:a2:3a:15:ac:5a:90:7b:26: 2b:da:5b:df:5a:0a:75:93:1b:5e:2e:24:20:da:c8: 2d:42:7d:90:18:65:87:f8:c2:20:ed:a2:fc:aa:6b: e2:8a:d0:3d:de:de:4a:93:0b:e0:b7:d5:b8:88:cb: c1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:41:07:2E:9C:E1:8A:7D:7A:C6:75:64:97:D9:F9:1D:5D:65:1B:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2baa63e3-2bdd-397e-83e3-1a73a6edbebd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.29.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption f8:77:73:4a:6b:b1:72:5b:9f:d2:15:ee:eb:aa:3e:3b:5c:fe: f1:81:93:11:71:54:c8:47:4d:78:7c:fd:88:07:54:95:8a:96: ba:0d:f6:7d:d2:4d:41:f4:11:38:6a:49:14:05:18:0b:52:c3: f9:de:d5:fb:a0:2d:53:dc:d9:af:7a:d2:8f:81:ef:42:1b:01: b3:23:37:6a:3e:35:98:43:dc:32:4b:71:9c:0b:45:d8:aa:0c: a4:7e:0b:4e:2e:81:46:83:ef:7e:7c:e4:64:45:8d:0b:b0:06: 02:ad:ea:07:21:45:62:d3:de:d8:3a:44:be:bf:77:cc:a5:07: 8f:90:82:ea:b1:23:88:aa:e7:e4:1f:06:41:0d:3a:57:ea:f8: 21:4f:be:8b:42:5c:20:60:bb:62:14:0c:08:88:77:92:15:f6: ff:fc:be:c3:bb:c5:93:ec:4d:48:5d:12:9b:c6:33:c6:b3:8f: e8:3b:72:a0:61:74:8c:06:2a:54:2a:52:f1:40:d9:f2:fe:51: 0d:0d:b4:b9:3d:0d:6d:d5:c7:1a:30:63:19:3a:fb:37:98:f0: 19:03:c5:ff:9f:01:61:aa:34:ed:0a:b0:9a:44:76:46:da:d0: 56:09:d0:59:7b:be:ea:33:f1:69:cb:73:e9:9d:e3:c6:86:e3: bc:70:cd:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcmGbaGRK028VgsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk YTFhYjAwZTMtNGUxNi00MTdkLTljY2QtYzI2OGY1YjU3MTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUXBY0DU+MJ7vial2rSrPLTAGJ+yru2VxoUK +zSm9kV5OeQNO0DaQMVRlG9sD5wG6KIQSwQLNhAdUaSrtNoKSRWDCZ9vnVyiFcP2 l3IydOAW4cflvaJ5oR34A4aPayTa/R9JwHzzz+ikV4cBtHvEtDIjSrSbf+pi58IA v7jQLdgo4akMoxoC9nTy2/XI0eVIoVsutKeq1p7KvYU7x9G8vp5Mi9kil/pprqJC njMWNAicYcZzf8CiDamWbxOUvW5lOxeyz192i1F1ojoVrFqQeyYr2lvfWgp1kxte LiQg2sgtQn2QGGWH+MIg7aL8qmviitA93t5Kkwvgt9W4iMvBHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlBBy6c4Yp9esZ1ZJfZ+R1dZRvfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMmJhYTYzZTMtMmJkZC0z OTdlLTgzZTMtMWE3M2E2ZWRiZWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0R2NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAPh3c0prsXJbn9IV7uuqPjtc/vGBkxFxVMhHTXh8/YgHVJWKlroN9n3S TUH0EThqSRQFGAtSw/ne1fugLVPc2a960o+B70IbAbMjN2o+NZhD3DJLcZwLRdiq DKR+C04ugUaD73585GRFjQuwBgKt6gchRWLT3tg6RL6/d8ylB4+QguqxI4iq5+Qf BkENOlfq+CFPvotCXCBgu2IUDAiId5IV9v/8vsO7xZPsTUhdEpvGM8azj+g7cqBh dIwGKlQqUvFA2fL+UQ0NtLk9DW3VxxowYxk6+zeY8BkDxf+fAWGqNO0KsJpEdkba 0FYJ0Fl7vuoz8WnLc+md48aG47xwzfQ= -----END CERTIFICATE-----Generated at Fri Mar 13 23:52:39 2026 by rpki-client