$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/33c1c010-cd03-3010-9b9a-7fb2fd1236b5.roa File: 33c1c010-cd03-3010-9b9a-7fb2fd1236b5.roa (raw, json) Hash identifier: ZDJR0GQ4JMSfwsjZdBDJ1fQWx1XK+r9kmR7ROXZSioM= Subject key identifier: E9:07:E7:E5:87:50:10:45:3F:0B:1B:EB:A5:88:95:3D:D5:18:89:89 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D1B19F68139A2354F09A0FEC0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/33c1c010-cd03-3010-9b9a-7fb2fd1236b5.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 852 IP address blocks: 199.212.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:19:f6:81:39:a2:35:4f:09:a0:fe:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=32c2ed72-ece3-4371-bcc4-ff4c075bd391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:0a:a3:13:7d:ef:7e:33:58:06:00:12:cc:e3: ed:f7:35:51:40:ca:6b:39:80:5c:59:bc:fb:07:5d: 62:cd:b8:a9:a3:85:63:7e:46:b8:c9:d6:12:11:36: 6d:e0:c9:03:e6:07:34:0c:4f:38:4a:62:a8:2a:56: 18:dc:a1:12:11:06:ed:b9:b1:0e:50:f4:88:0d:c7: 8e:0d:88:54:5a:e9:9d:24:32:dd:94:88:22:4b:82: d1:25:82:68:6b:36:fc:28:15:7d:7a:79:97:08:ad: e9:9b:e2:e4:7a:d8:a0:19:25:16:43:56:02:62:3f: bc:91:3a:3c:3f:c8:84:ca:93:9e:0f:6d:ee:e0:56: 82:0a:12:e6:d9:93:15:4e:ee:94:65:6e:4d:cf:e8: 5d:53:96:ac:b1:47:55:90:3c:24:df:3e:06:c6:53: c1:c3:de:f3:32:db:bf:82:8b:25:18:3f:80:d1:94: c2:b6:b0:8d:80:2b:94:83:aa:3f:98:80:f8:23:8e: 44:99:a7:c9:84:1e:2a:5d:dc:cf:ce:55:16:9b:8b: 72:16:34:c1:b8:cd:5a:b2:e9:89:8b:34:e6:6b:3c: 69:8e:6d:9b:19:d5:64:c3:41:cf:59:30:e2:9b:b4: 78:cd:ea:43:cd:75:23:06:26:99:37:a9:10:04:03: ac:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:07:E7:E5:87:50:10:45:3F:0B:1B:EB:A5:88:95:3D:D5:18:89:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/33c1c010-cd03-3010-9b9a-7fb2fd1236b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 199.212.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:65:a2:c4:af:74:d0:aa:cf:ad:1a:66:ab:ec:64:85:45:9d: 5f:50:ed:de:db:a9:d5:c8:e6:d8:6c:8d:66:15:88:0b:83:66: 67:fc:b6:9e:b8:f1:6c:26:f0:b3:35:44:05:3b:31:7d:7b:83: 10:fb:49:e1:ed:ab:22:84:4a:c6:0f:09:c3:f5:a7:a7:45:31: aa:5b:4b:b4:ad:d3:cb:be:7d:92:02:e7:49:03:d9:c7:53:34: 4f:d6:db:b4:30:08:8a:5c:4c:6c:4e:1b:2c:a4:07:af:0f:1e: 24:2f:08:1b:f0:16:3c:a2:18:b8:bf:0e:f9:98:7c:a4:7f:c2: 5c:65:09:07:8e:3c:a1:76:18:a8:fa:86:b6:98:cf:b0:d3:31: 31:1f:a4:36:94:38:3d:f8:68:0d:2c:5e:e5:32:c8:a8:4f:f8: 1c:da:9c:e9:aa:62:e2:f8:0d:ea:11:3e:35:90:43:1a:b2:0b: 35:6f:4c:4f:f2:f9:56:df:ee:1b:e6:bc:68:69:1d:cb:78:2e: a8:84:08:e8:56:68:07:23:f3:29:b6:1f:52:d8:e8:6c:70:43: 95:32:3c:73:69:5d:bb:ed:bd:98:38:64:44:18:3c:d6:ef:d8: 12:68:2c:bb:4e:97:9e:9b:df:53:10:b7:70:e3:8f:54:53:64: 2f:cb:1f:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGfaBOaI1Twmg/sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk MzJjMmVkNzItZWNlMy00MzcxLWJjYzQtZmY0YzA3NWJkMzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQqjE33vfjNYBgASzOPt9zVRQMprOYBcWbz7 B11izbipo4Vjfka4ydYSETZt4MkD5gc0DE84SmKoKlYY3KESEQbtubEOUPSIDceO DYhUWumdJDLdlIgiS4LRJYJoazb8KBV9enmXCK3pm+LketigGSUWQ1YCYj+8kTo8 P8iEypOeD23u4FaCChLm2ZMVTu6UZW5Nz+hdU5assUdVkDwk3z4GxlPBw97zMtu/ goslGD+A0ZTCtrCNgCuUg6o/mID4I45EmafJhB4qXdzPzlUWm4tyFjTBuM1asumJ izTmazxpjm2bGdVkw0HPWTDim7R4zepDzXUjBiaZN6kQBAOsXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkH5+WHUBBFPwsb66WIlT3VGImJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzNjMWMwMTAtY2QwMy0z MDEwLTliOWEtN2ZiMmZkMTIzNmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx9SYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALNlosSvdNCqz60aZqvsZIVFnV9Q7d7bqdXI5thsjWYViAuDZmf8tp64 8Wwm8LM1RAU7MX17gxD7SeHtqyKESsYPCcP1p6dFMapbS7St08u+fZIC50kD2cdT NE/W27QwCIpcTGxOGyykB68PHiQvCBvwFjyiGLi/DvmYfKR/wlxlCQeOPKF2GKj6 hraYz7DTMTEfpDaUOD34aA0sXuUyyKhP+BzanOmqYuL4DeoRPjWQQxqyCzVvTE/y +Vbf7hvmvGhpHct4LqiECOhWaAcj8ym2H1LY6GxwQ5UyPHNpXbvtvZg4ZEQYPNbv 2BJoLLtOl56b31MQt3Djj1RTZC/LH3Y= -----END CERTIFICATE-----Generated at Fri Mar 13 23:53:44 2026 by rpki-client