$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2baa63e3-2bdd-397e-83e3-1a73a6edbebd.roa File: 2baa63e3-2bdd-397e-83e3-1a73a6edbebd.roa (raw, json) Hash identifier: T5o32yrA+HBl5384YqVna0CCI7Nijicbk5Sw5VZa+S8= Subject key identifier: 74:60:C2:04:8D:90:0B:52:BC:F7:DA:86:8B:DA:41:0B:0F:D1:F6:97 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584DF21084BABAE40BF7DC287EC0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2baa63e3-2bdd-397e-83e3-1a73a6edbebd.roa Signing time: Mon 25 May 2026 01:00:24 +0000 ROA not before: Mon 25 May 2026 01:00:24 +0000 ROA not after: Sun 23 Aug 2026 01:00:24 +0000 asID: 7861 IP address blocks: 209.29.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f2:10:84:ba:ba:e4:0b:f7:dc:28:7e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: May 25 01:00:24 2026 GMT Not After : Aug 23 01:00:24 2026 GMT Subject: CN=a52a2267-3741-4287-9a28-40372d20cc92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:07:5c:2c:31:7c:c2:32:79:f3:14:4a:c4:2f: fa:3b:f2:fb:10:ac:d9:7a:59:37:88:1d:fa:ed:9d: ff:4c:cf:8f:d8:fe:8b:27:2b:ad:51:6c:dc:de:2e: 1d:97:06:ed:fe:26:81:39:5f:da:b7:34:9b:3b:7e: 3c:d1:80:c1:bb:2f:18:07:af:8e:ba:38:c4:87:36: e4:d0:20:4a:49:ec:18:ac:ae:d9:50:e9:cd:23:34: aa:2e:71:23:6e:87:d9:98:a6:ad:10:cd:dc:78:76: c6:f2:27:5e:09:57:03:a9:7d:25:47:55:33:68:ab: 09:a5:bc:c9:90:16:8a:fa:68:0c:22:71:7b:42:a9: de:2c:68:4b:dd:5e:f9:54:40:1e:6c:10:09:df:af: b0:c3:ff:83:3c:fb:64:70:90:9e:26:2d:04:48:d2: fa:46:67:8e:41:bb:63:ca:7f:6d:3b:9c:18:cf:3e: ce:e2:32:d9:60:08:21:ee:ff:46:bf:7c:1d:28:1d: 95:db:fc:dc:f9:59:b0:68:dc:0d:8e:78:5b:f8:0d: b1:55:3c:3f:0c:8a:99:60:d5:32:33:9b:8e:76:23: 48:b8:19:c5:a5:f7:97:22:6b:74:9b:a5:53:2e:eb: c8:ed:cc:34:41:5b:37:da:0c:3e:47:42:d7:8b:64: 95:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:60:C2:04:8D:90:0B:52:BC:F7:DA:86:8B:DA:41:0B:0F:D1:F6:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2baa63e3-2bdd-397e-83e3-1a73a6edbebd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.29.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:0b:c1:62:71:12:ab:56:fa:20:5a:e2:32:4e:88:44:41:3a: 60:b9:93:6b:cb:18:78:fe:8b:f3:dd:1c:eb:4e:de:1f:50:40: 43:53:c9:46:be:10:5c:75:28:2d:86:06:3a:ff:1e:b7:6c:58: e9:82:bf:29:2f:29:75:ad:3f:85:4f:92:a8:d9:d5:e7:60:f5: 2e:24:34:6c:48:15:35:a8:12:cb:50:a1:3e:f0:e2:6e:44:19: a3:06:4f:e3:2b:4c:85:69:7b:15:e9:8b:48:77:5d:4c:1b:d8: c2:98:09:4d:9b:31:a7:f3:48:c9:29:5f:5e:ab:a0:1a:6e:a0: 4a:99:56:eb:0b:5c:3b:f2:5f:cf:07:aa:ed:74:d0:7b:78:f9: aa:a4:6b:a0:d0:dc:d3:25:77:04:e6:af:d1:ea:33:ce:0b:d4: e4:2c:9d:dd:2d:8d:d0:4b:c1:bb:f1:0f:4f:db:fa:99:99:38: e0:6f:9c:23:f8:aa:7e:07:50:ba:5c:0c:19:27:73:5b:31:f6: c8:be:5d:f8:6c:a0:e2:50:2f:3f:4a:7e:91:c6:c1:45:49:b0: 9b:67:d9:01:68:6c:d6:f2:87:14:15:e9:9d:e1:d2:e5:d6:ee: da:a1:53:c4:27:11:d7:cf:c4:11:2c:4a:b7:cb:66:31:37:f2: fe:ca:4e:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3yEIS6uuQL99wofsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDUyNTAxMDAyNFoXDTI2MDgyMzAxMDAyNFowLzEtMCsGA1UEAxMk YTUyYTIyNjctMzc0MS00Mjg3LTlhMjgtNDAzNzJkMjBjYzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigdcLDF8wjJ58xRKxC/6O/L7EKzZelk3iB36 7Z3/TM+P2P6LJyutUWzc3i4dlwbt/iaBOV/atzSbO3480YDBuy8YB6+OujjEhzbk 0CBKSewYrK7ZUOnNIzSqLnEjbofZmKatEM3ceHbG8ideCVcDqX0lR1UzaKsJpbzJ kBaK+mgMInF7QqneLGhL3V75VEAebBAJ36+ww/+DPPtkcJCeJi0ESNL6RmeOQbtj yn9tO5wYzz7O4jLZYAgh7v9Gv3wdKB2V2/zc+VmwaNwNjnhb+A2xVTw/DIqZYNUy M5uOdiNIuBnFpfeXImt0m6VTLuvI7cw0QVs32gw+R0LXi2SVMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRgwgSNkAtSvPfahovaQQsP0faXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMmJhYTYzZTMtMmJkZC0z OTdlLTgzZTMtMWE3M2E2ZWRiZWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0R2NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMgLwWJxEqtW+iBa4jJOiERBOmC5k2vLGHj+i/PdHOtO3h9QQENTyUa+ EFx1KC2GBjr/HrdsWOmCvykvKXWtP4VPkqjZ1edg9S4kNGxIFTWoEstQoT7w4m5E GaMGT+MrTIVpexXpi0h3XUwb2MKYCU2bMafzSMkpX16roBpuoEqZVusLXDvyX88H qu100Ht4+aqka6DQ3NMldwTmr9HqM84L1OQsnd0tjdBLwbvxD0/b+pmZOOBvnCP4 qn4HULpcDBknc1sx9si+XfhsoOJQLz9KfpHGwUVJsJtn2QFobNbyhxQV6Z3h0uXW 7tqhU8QnEdfPxBEsSrfLZjE38v7KTpw= -----END CERTIFICATE-----Generated at Fri Jun 12 22:50:57 2026 by rpki-client