$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2c7c68e3-af0b-3c06-81b1-fb16b7a6aade.roa File: 2c7c68e3-af0b-3c06-81b1-fb16b7a6aade.roa (raw, json) Hash identifier: Ju7iGFGCr5JUFhGd9RhKXRBfnnMVuND2gUvSMIMBCCM= Subject key identifier: FA:ED:1B:49:D5:2F:E7:10:0D:12:97:4B:8A:4B:19:D5:B6:55:F6:89 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D15A25B671CC36304C8F72E00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2c7c68e3-af0b-3c06-81b1-fb16b7a6aade.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 852 IP address blocks: 209.171.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:5b:67:1c:c3:63:04:c8:f7:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=79873114-f717-45de-8584-490b334dc35f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4a:97:89:4a:1d:22:30:5f:b5:aa:8d:a4:22: be:41:e3:28:a4:d8:6b:3f:1b:a1:01:77:ce:1a:0b: 19:e1:d6:91:5a:39:39:fc:b6:7f:9f:6a:87:dd:b2: 6f:22:5a:e1:66:00:a2:2c:4e:1d:95:98:13:e9:fd: 9e:a0:27:2c:c1:f5:0e:04:94:d7:34:48:31:76:ee: 41:68:69:02:81:57:e9:5e:51:ea:43:58:76:86:1a: 57:43:8a:37:88:b1:7f:2c:7c:01:a4:6a:ec:16:bf: 95:c6:f0:6f:f1:85:fc:f4:3c:a4:e5:a9:11:71:a9: 03:35:52:3e:71:20:d1:43:bb:6b:08:e3:52:88:1a: 99:99:b8:a4:c9:46:a7:96:b4:0c:9b:96:ae:be:7f: df:9e:48:88:07:71:08:bc:37:fb:95:7e:7f:c3:3e: f8:5b:36:ed:f8:1e:3d:29:ba:e6:10:31:48:5d:07: 5d:a1:8f:4a:18:e8:32:c5:5c:c5:28:c7:94:16:a0: 06:3e:93:d5:97:12:da:ae:a2:6e:96:6b:bb:ef:b3: 40:b5:6d:a5:48:de:d2:8c:f9:fc:b3:b6:43:ee:a0: ee:53:da:e7:c2:80:74:e1:78:74:de:0a:a5:c5:f7: 5f:c0:1f:e0:b7:04:ac:28:cd:c6:37:37:0d:4b:4a: d8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:ED:1B:49:D5:2F:E7:10:0D:12:97:4B:8A:4B:19:D5:B6:55:F6:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2c7c68e3-af0b-3c06-81b1-fb16b7a6aade.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.171.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ef:d1:5d:bc:23:ae:2e:90:a2:7d:37:cd:20:54:d1:9b:5c:8c: e3:57:e6:d1:31:b3:03:00:c6:02:3d:c7:ab:0f:06:ee:6b:ca: 1b:58:fa:f0:02:97:89:2d:43:d8:23:06:57:02:f0:56:d5:3e: 87:b6:2b:f7:d5:ec:a0:b4:7e:4b:78:82:e7:36:42:d2:60:e5: 78:a8:d6:72:d9:7c:a6:9e:69:e5:8e:68:e4:f6:81:b8:27:20: c0:a5:a1:81:24:a1:03:08:cb:4e:77:de:dc:af:24:94:5e:4d: aa:f6:d5:13:86:6e:39:c5:06:c1:45:d3:c0:3c:71:65:93:85: dd:e5:d3:4c:9d:55:7e:6b:54:83:cd:c8:ef:de:4d:49:5f:a1: 19:ba:3b:e9:d3:a7:47:86:db:b7:cb:e8:23:f0:7e:9b:0f:36: ae:6e:22:e6:74:14:3d:33:6e:fd:f2:eb:49:af:37:bb:1f:ef: 27:9c:85:2f:60:b6:26:6e:03:74:3c:57:bd:96:40:39:9c:6b: 99:50:f7:67:c0:74:af:9b:c9:cd:88:bf:b5:64:81:29:ea:28: 96:ed:eb:88:ac:7c:7f:63:e8:89:bd:f5:d6:b2:fc:9e:7f:e9: 29:ec:10:63:8c:c5:64:64:3d:c0:d6:d6:3f:59:e4:85:39:ef: 68:c1:b8:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0VoltnHMNjBMj3LgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk Nzk4NzMxMTQtZjcxNy00NWRlLTg1ODQtNDkwYjMzNGRjMzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUqXiUodIjBftaqNpCK+QeMopNhrPxuhAXfO GgsZ4daRWjk5/LZ/n2qH3bJvIlrhZgCiLE4dlZgT6f2eoCcswfUOBJTXNEgxdu5B aGkCgVfpXlHqQ1h2hhpXQ4o3iLF/LHwBpGrsFr+VxvBv8YX89Dyk5akRcakDNVI+ cSDRQ7trCONSiBqZmbikyUanlrQMm5auvn/fnkiIB3EIvDf7lX5/wz74Wzbt+B49 KbrmEDFIXQddoY9KGOgyxVzFKMeUFqAGPpPVlxLarqJulmu777NAtW2lSN7SjPn8 s7ZD7qDuU9rnwoB04Xh03gqlxfdfwB/gtwSsKM3GNzcNS0rY2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrtG0nVL+cQDRKXS4pLGdW2VfaJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMmM3YzY4ZTMtYWYwYi0z YzA2LTgxYjEtZmIxNmI3YTZhYWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0asDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAO/RXbwjri6Qon03zSBU0ZtcjONX5tExswMAxgI9x6sPBu5ryhtY+vAC l4ktQ9gjBlcC8FbVPoe2K/fV7KC0fkt4guc2QtJg5Xio1nLZfKaeaeWOaOT2gbgn IMCloYEkoQMIy0533tyvJJReTar21ROGbjnFBsFF08A8cWWThd3l00ydVX5rVIPN yO/eTUlfoRm6O+nTp0eG27fL6CPwfpsPNq5uIuZ0FD0zbv3y60mvN7sf7yechS9g tiZuA3Q8V72WQDmca5lQ92fAdK+byc2Iv7VkgSnqKJbt64isfH9j6Im99day/J5/ 6SnsEGOMxWRkPcDW1j9Z5IU572jBuA0= -----END CERTIFICATE-----Generated at Fri Mar 13 23:53:02 2026 by rpki-client