$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3b53281a-a0ba-38f4-bc44-32aa7e758304.roa File: 3b53281a-a0ba-38f4-bc44-32aa7e758304.roa (raw, json) Hash identifier: /JnKk5SsV/xIsHjrqxJE3ZmbxCDXiPOvSo3yky7txI4= Subject key identifier: DA:D1:ED:75:F4:6E:48:07:7E:59:59:42:BC:62:FB:16:D7:81:BA:33 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D1B19FCCD7554F4302E621080 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3b53281a-a0ba-38f4-bc44-32aa7e758304.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 852 IP address blocks: 142.59.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:19:fc:cd:75:54:f4:30:2e:62:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=a39c68b7-ae8d-4773-98dc-1ff599b81860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e8:b9:67:bd:86:71:39:95:cf:6a:c6:e1:75: 07:e4:e1:0b:41:0f:fd:88:62:45:a1:39:8b:e2:dd: c3:c4:e9:01:e8:f9:c4:92:96:c4:20:8b:39:c4:63: 03:9b:8b:4e:5a:6c:6c:0e:d9:2e:53:9f:90:3a:5c: 3f:7b:97:30:a9:c9:44:0e:75:d2:66:ee:50:19:a1: 70:f9:9a:d9:e4:cd:8a:c7:ce:ac:15:3f:23:f1:f5: 0d:d5:a9:a4:b0:d4:a0:c4:10:cd:f2:dc:38:d6:39: 03:be:2d:04:a2:fa:49:96:a4:07:32:ab:60:06:4c: 9b:fe:2d:68:2e:36:3b:4d:41:cc:39:43:c7:e5:23: d4:66:53:36:1c:53:81:4b:f2:81:23:46:13:a7:5b: 77:8b:e6:d1:b1:62:9a:1d:33:9b:96:9c:4a:d2:f8: d9:25:2f:52:79:e5:c7:c0:fb:f0:c4:a6:3a:d0:a2: a9:50:4e:08:fc:19:4f:5a:a5:77:73:98:11:e3:c9: a9:5f:b7:10:ad:8b:9a:e4:3e:20:52:55:cc:86:78: b4:11:dc:fd:bf:d7:c3:8f:d3:f8:45:1f:2e:86:c9: 9b:b9:50:56:a8:48:22:1e:3a:c6:ea:2b:3b:a9:5a: 0c:1e:fe:fe:3d:31:6b:06:96:f1:d0:32:e4:55:5e: 94:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D1:ED:75:F4:6E:48:07:7E:59:59:42:BC:62:FB:16:D7:81:BA:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3b53281a-a0ba-38f4-bc44-32aa7e758304.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 142.59.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:f2:8f:45:30:d6:6d:39:33:12:72:e0:c3:0b:0a:79:7c:b5: 7c:52:7e:a7:a1:da:5c:5b:8f:14:0e:6f:31:88:05:ce:d5:05: 25:bd:7a:7c:b7:7c:4a:18:d6:b8:00:4c:ae:16:9c:f2:fa:97: 49:64:95:b6:2d:08:61:1d:dd:bb:42:97:5d:64:20:d3:11:7f: 75:ea:fa:fd:82:cc:7c:a0:06:5e:60:fc:61:0b:88:f2:87:a8: 3f:8a:2f:f8:72:7e:99:00:22:de:06:5a:f7:71:a2:e6:43:fd: 61:d6:07:36:b6:06:d1:da:66:eb:af:7f:4a:59:f8:34:dc:1c: c6:5f:28:42:b7:65:4a:02:7b:cb:9c:e6:c8:7d:52:1e:1d:4c: a1:c1:d1:a6:39:d0:f5:d3:dd:f0:cb:ab:e8:1a:18:8b:a7:c8: 84:28:ea:00:f9:0b:4d:69:37:2f:da:87:de:9f:84:a3:4f:2c: f4:d0:1c:e2:d7:6c:79:a3:1d:ad:81:bf:e7:6b:f3:09:02:6b: 9c:4f:23:c2:1c:e7:ea:7c:f9:02:4f:05:56:7b:20:30:fc:95: 69:2d:45:e9:09:74:28:2a:63:e0:c9:ca:2c:30:87:51:a3:8d: 45:26:91:02:da:41:49:ed:f5:65:40:5e:3d:ca:e9:e2:13:c8: 60:db:ec:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGfzNdVT0MC5iEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk YTM5YzY4YjctYWU4ZC00NzczLTk4ZGMtMWZmNTk5YjgxODYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkui5Z72GcTmVz2rG4XUH5OELQQ/9iGJFoTmL 4t3DxOkB6PnEkpbEIIs5xGMDm4tOWmxsDtkuU5+QOlw/e5cwqclEDnXSZu5QGaFw +ZrZ5M2Kx86sFT8j8fUN1amksNSgxBDN8tw41jkDvi0EovpJlqQHMqtgBkyb/i1o LjY7TUHMOUPH5SPUZlM2HFOBS/KBI0YTp1t3i+bRsWKaHTOblpxK0vjZJS9SeeXH wPvwxKY60KKpUE4I/BlPWqV3c5gR48mpX7cQrYua5D4gUlXMhni0Edz9v9fDj9P4 RR8uhsmbuVBWqEgiHjrG6is7qVoMHv7+PTFrBpbx0DLkVV6UHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrR7XX0bkgHfllZQrxi+xbXgbozMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvM2I1MzI4MWEtYTBiYS0z OGY0LWJjNDQtMzJhYTdlNzU4MzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjjuwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvyj0Uw1m05MxJy4MMLCnl8tXxSfqeh2lxbjxQObzGIBc7VBSW9eny3 fEoY1rgATK4WnPL6l0lklbYtCGEd3btCl11kINMRf3Xq+v2CzHygBl5g/GELiPKH qD+KL/hyfpkAIt4GWvdxouZD/WHWBza2BtHaZuuvf0pZ+DTcHMZfKEK3ZUoCe8uc 5sh9Uh4dTKHB0aY50PXT3fDLq+gaGIunyIQo6gD5C01pNy/ah96fhKNPLPTQHOLX bHmjHa2Bv+dr8wkCa5xPI8Ic5+p8+QJPBVZ7IDD8lWktRekJdCgqY+DJyiwwh1Gj jUUmkQLaQUnt9WVAXj3K6eITyGDb7Mc= -----END CERTIFICATE-----Generated at Fri Mar 13 23:55:37 2026 by rpki-client