$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/33334af2-b76c-3f3d-9a71-46ea21b30ce6.roa File: 33334af2-b76c-3f3d-9a71-46ea21b30ce6.roa (raw, json) Hash identifier: /fMK4QGykwAAzFe2ONkojK7Vc5N/odBMzTjGQYexxTc= Subject key identifier: 9F:93:08:F4:BA:96:49:EF:15:10:50:AD:E8:49:FF:26:34:F8:7D:26 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584DEDE08C4E49CDD440033E8000 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/33334af2-b76c-3f3d-9a71-46ea21b30ce6.roa Signing time: Sat 23 May 2026 13:00:31 +0000 ROA not before: Sat 23 May 2026 13:00:31 +0000 ROA not after: Fri 21 Aug 2026 13:00:31 +0000 asID: 21723 IP address blocks: 209.53.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ed:e0:8c:4e:49:cd:d4:40:03:3e:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: May 23 13:00:31 2026 GMT Not After : Aug 21 13:00:31 2026 GMT Subject: CN=fe8bec49-8977-4ab6-89be-378ffb77f872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:d6:6b:8c:71:e6:64:b4:c8:f2:c5:a1:e1:eb: fd:52:6a:ba:53:4c:82:e8:2b:e3:c9:a0:8f:be:be: 60:2e:4f:99:a5:24:64:6c:d0:6c:20:81:3b:65:ed: 82:63:9a:c2:ed:63:c6:31:8f:7e:5b:f4:0f:5a:0f: 40:f5:49:70:fe:ce:b0:93:f8:a3:75:0a:c5:05:8d: 77:a8:ae:49:ae:8a:d1:a8:a5:8a:9b:6f:6c:4d:2f: e2:e4:1c:a4:0f:04:fd:7f:c9:7e:e0:fc:0c:b3:73: 5c:7d:c8:0f:07:cf:51:41:44:eb:25:8c:63:23:2e: 48:a5:dc:7d:8d:fb:c5:9f:83:2c:21:39:3f:9e:2d: 7d:e5:63:55:08:6d:44:53:7f:1e:f2:ba:b6:4b:92: ba:f0:a3:2c:49:5f:b3:fb:09:ca:11:c9:52:70:bf: ed:13:df:c7:2a:4f:2e:74:af:96:a3:96:15:0b:99: cf:00:93:55:d0:23:1b:03:ee:64:40:28:81:06:98: 33:d6:fc:35:0a:3c:5b:52:18:eb:34:04:b7:2c:8c: 0c:db:17:ad:43:13:ed:6a:85:65:47:90:1d:36:de: 2e:32:a8:4a:20:21:65:3b:5c:08:61:76:cb:d4:99: 92:93:f5:14:77:3d:3f:45:58:2d:a3:14:ab:50:4d: 31:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:93:08:F4:BA:96:49:EF:15:10:50:AD:E8:49:FF:26:34:F8:7D:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/33334af2-b76c-3f3d-9a71-46ea21b30ce6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:2d:84:04:22:80:bf:1b:7f:dc:8a:37:bd:c0:d9:c8:cf:74: 1e:2d:75:64:23:43:a2:7f:c0:57:d4:c5:67:67:0b:14:11:3f: 51:62:15:45:3e:f8:c3:d7:d5:2b:e6:76:c1:09:99:f8:db:a8: dc:16:48:04:ca:69:6d:1d:a1:78:36:8c:18:68:7f:59:d9:c4: df:39:de:98:94:d5:3e:ef:e0:e1:b9:96:df:c5:e9:63:5d:63: 3d:30:70:dc:6d:a7:bc:0c:8b:e9:52:65:c7:ed:ef:82:28:af: 9d:0d:7e:f6:9e:70:b7:1b:71:8c:5a:a0:ed:54:ae:9c:d3:51: 3c:d9:31:7b:b6:09:69:6b:e4:31:5a:39:ad:8c:09:b5:21:f8: 7d:02:99:94:f0:0b:f0:aa:e5:bd:cf:0e:0c:db:e8:43:90:b0: c7:28:20:46:74:42:f1:57:d3:b8:df:84:b9:5d:39:e4:6d:4b: 46:11:e7:de:88:40:fa:54:48:28:cb:d4:f3:20:70:e1:27:00: d6:b8:69:12:a4:f8:f8:2f:2c:9d:32:14:ac:86:95:33:91:36: 99:aa:04:02:79:1e:e3:de:eb:b4:e3:3a:10:cc:d8:69:7e:52: 9a:12:a4:40:32:dc:ca:10:8a:91:86:fe:41:f3:39:d5:47:77: 99:79:d6:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3t4IxOSc3UQAM+gAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDUyMzEzMDAzMVoXDTI2MDgyMTEzMDAzMVowLzEtMCsGA1UEAxMk ZmU4YmVjNDktODk3Ny00YWI2LTg5YmUtMzc4ZmZiNzdmODcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8dZrjHHmZLTI8sWh4ev9Umq6U0yC6CvjyaCP vr5gLk+ZpSRkbNBsIIE7Ze2CY5rC7WPGMY9+W/QPWg9A9Ulw/s6wk/ijdQrFBY13 qK5JrorRqKWKm29sTS/i5BykDwT9f8l+4PwMs3NcfcgPB89RQUTrJYxjIy5Ipdx9 jfvFn4MsITk/ni195WNVCG1EU38e8rq2S5K68KMsSV+z+wnKEclScL/tE9/HKk8u dK+Wo5YVC5nPAJNV0CMbA+5kQCiBBpgz1vw1CjxbUhjrNAS3LIwM2xetQxPtaoVl R5AdNt4uMqhKICFlO1wIYXbL1JmSk/UUdz0/RVgtoxSrUE0x/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+TCPS6lknvFRBQrehJ/yY0+H0mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzMzMzRhZjItYjc2Yy0z ZjNkLTlhNzEtNDZlYTIxYjMwY2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TVrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkthAQigL8bf9yKN73A2cjPdB4tdWQjQ6J/wFfUxWdnCxQRP1FiFUU+ +MPX1SvmdsEJmfjbqNwWSATKaW0doXg2jBhof1nZxN853piU1T7v4OG5lt/F6WNd Yz0wcNxtp7wMi+lSZcft74Ior50NfvaecLcbcYxaoO1UrpzTUTzZMXu2CWlr5DFa Oa2MCbUh+H0CmZTwC/Cq5b3PDgzb6EOQsMcoIEZ0QvFX07jfhLldOeRtS0YR596I QPpUSCjL1PMgcOEnANa4aRKk+PgvLJ0yFKyGlTORNpmqBAJ5HuPe67TjOhDM2Gl+ UpoSpEAy3MoQipGG/kHzOdVHd5l51ik= -----END CERTIFICATE-----Generated at Fri Jun 12 22:52:05 2026 by rpki-client