$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/31957a02-b0ea-3ae7-b577-0f3188d3ca54.roa File: 31957a02-b0ea-3ae7-b577-0f3188d3ca54.roa (raw, json) Hash identifier: XY6VWdKMPPTGch8Q93NiOhU6VLHhYqGXkF2t4jTLOkY= Subject key identifier: 9C:CC:E2:40:E6:28:17:CA:1C:13:7E:19:5E:A7:7C:75:9A:11:28:B0 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D143D2D70B3ABBC1095B39380 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/31957a02-b0ea-3ae7-b577-0f3188d3ca54.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 7861 IP address blocks: 209.20.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:2d:70:b3:ab:bc:10:95:b3:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=100a17d8-ed2e-4f87-b18f-22f832af72e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:06:1b:5b:86:ad:34:83:0e:ac:56:47:4a:73: df:b4:ca:aa:87:94:e8:8f:69:35:27:ad:89:0f:81: 90:06:ec:9f:cc:4d:1c:8d:01:0b:de:5d:28:ec:ae: a6:87:18:9e:ff:fc:f7:dd:46:54:8a:66:a8:0a:5d: 4f:97:21:56:78:28:9a:c7:7f:00:1c:30:bf:96:f6: 60:7e:31:62:5f:97:fa:7a:40:b8:13:6e:30:63:3a: 75:bf:ca:83:bc:16:9d:22:06:85:41:59:6e:d5:94: 2a:2e:60:1e:08:21:30:f1:6f:04:c8:0d:67:70:7e: e0:fb:2f:b8:a5:d6:0f:df:9e:f2:51:93:80:9b:5c: d5:4e:dc:58:df:80:71:82:62:96:04:de:80:b0:bc: 0c:fb:5f:b3:24:db:94:ce:7d:c4:d0:7a:4b:a8:bd: 4d:38:20:61:df:6c:22:68:53:e2:60:92:6b:a6:bb: 55:e1:68:d4:37:f8:30:d8:c9:6f:10:03:69:19:e1: 89:40:e5:a8:e3:ee:87:de:7a:95:89:54:c6:32:25: df:ac:75:9a:50:ee:dd:ed:f2:bc:78:12:73:bd:8d: 66:71:f3:1e:f6:91:ba:1f:f6:09:b6:00:4a:c2:27: cc:4a:18:b5:8d:4b:a7:ae:e1:69:61:2d:15:74:e4: 2d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:CC:E2:40:E6:28:17:CA:1C:13:7E:19:5E:A7:7C:75:9A:11:28:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/31957a02-b0ea-3ae7-b577-0f3188d3ca54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.20.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:7c:59:e5:49:c1:14:f1:b5:b6:c7:c0:57:5a:39:df:96:8f: 85:c3:b5:a7:10:80:37:31:5d:08:9e:65:5e:86:f7:e9:b6:a5: 65:29:7f:da:40:5d:ae:3c:c0:c5:62:10:b5:cb:d7:2b:82:ff: 90:a1:4e:a5:e2:1d:a9:3b:e7:e3:91:5b:85:83:0e:75:ce:9c: 2c:ad:05:9a:40:0c:4b:58:26:f8:23:cf:6b:6b:d4:2b:a1:2f: 42:70:cc:29:3d:15:81:ca:81:58:bb:06:dc:68:41:54:d8:db: 82:fc:75:a4:76:6a:64:ce:a0:30:39:d4:f2:bd:7f:89:a1:a6: c3:ae:a7:73:a2:d5:73:36:0e:05:d3:72:27:30:49:10:74:60: 50:a5:99:b2:d5:ac:41:47:26:a5:ab:fe:33:cf:ab:4c:ab:7c: c6:c0:fe:13:db:d7:46:df:69:0c:37:a0:25:62:da:b9:f0:cc: 39:f9:b9:83:37:f1:ff:cd:b9:09:b7:d6:63:5b:77:5c:63:9b: c6:98:b7:3c:8a:9e:de:b3:d1:1f:7b:13:1f:4d:75:de:47:b2: bc:ea:05:50:b8:c6:15:39:be:8f:79:6a:43:20:a6:f9:02:b5: 59:a9:8f:d5:a3:5a:e8:af:49:06:b2:a9:33:f6:ae:3d:af:63: ba:d9:42:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPS1ws6u8EJWzk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MTAwYTE3ZDgtZWQyZS00Zjg3LWIxOGYtMjJmODMyYWY3MmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8QYbW4atNIMOrFZHSnPftMqqh5Toj2k1J62J D4GQBuyfzE0cjQEL3l0o7K6mhxie//z33UZUimaoCl1PlyFWeCiax38AHDC/lvZg fjFiX5f6ekC4E24wYzp1v8qDvBadIgaFQVlu1ZQqLmAeCCEw8W8EyA1ncH7g+y+4 pdYP357yUZOAm1zVTtxY34BxgmKWBN6AsLwM+1+zJNuUzn3E0HpLqL1NOCBh32wi aFPiYJJrprtV4WjUN/gw2MlvEANpGeGJQOWo4+6H3nqViVTGMiXfrHWaUO7d7fK8 eBJzvY1mcfMe9pG6H/YJtgBKwifMShi1jUunruFpYS0VdOQtywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzM4kDmKBfKHBN+GV6nfHWaESiwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzE5NTdhMDItYjBlYS0z YWU3LWI1NzctMGYzMTg4ZDNjYTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE58WeVJwRTxtbbHwFdaOd+Wj4XDtacQgDcxXQieZV6G9+m2pWUpf9pA Xa48wMViELXL1yuC/5ChTqXiHak75+ORW4WDDnXOnCytBZpADEtYJvgjz2tr1Cuh L0JwzCk9FYHKgVi7BtxoQVTY24L8daR2amTOoDA51PK9f4mhpsOup3Oi1XM2DgXT cicwSRB0YFClmbLVrEFHJqWr/jPPq0yrfMbA/hPb10bfaQw3oCVi2rnwzDn5uYM3 8f/NuQm31mNbd1xjm8aYtzyKnt6z0R97Ex9Ndd5HsrzqBVC4xhU5vo95akMgpvkC tVmpj9WjWuivSQayqTP2rj2vY7rZQoA= -----END CERTIFICATE-----Generated at Fri Mar 13 23:55:34 2026 by rpki-client