$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3baf912b-384b-3427-b752-a35aa9af6107.roa File: 3baf912b-384b-3427-b752-a35aa9af6107.roa (raw, json) Hash identifier: qhB9I3tKV7P6wzPJygHgmAFfHJXfYDJIvCEEb8h38wk= Subject key identifier: 25:91:56:14:56:04:15:AB:3F:9F:52:E7:B0:DB:1A:C7:C9:0E:DE:B2 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D1B19FA051A21E3D2CA67E440 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3baf912b-384b-3427-b752-a35aa9af6107.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 852 IP address blocks: 172.219.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:19:fa:05:1a:21:e3:d2:ca:67:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=aa946aaf-83ec-4b70-b868-ff0b1b105679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:56:c0:4b:25:dd:05:ae:e4:09:c6:5b:b0:4f: 17:f7:44:b4:e2:98:fe:3a:83:ae:03:90:71:8f:39: ac:ce:98:07:1e:d5:55:d8:2f:78:dc:49:a0:78:21: 69:bd:ef:46:0f:6e:8a:4f:6e:2e:e8:98:65:ff:e7: e2:60:55:4a:6a:d3:1f:5c:40:bb:f2:02:e2:77:f6: 22:17:09:05:28:19:58:8a:45:68:a6:53:05:3a:a9: 7d:b7:0c:09:e2:96:f1:a5:56:5d:56:6a:59:2a:3c: 59:95:84:f1:ba:91:bb:59:d3:5a:a6:17:5c:30:5e: 9a:99:5d:a9:ed:8b:96:b2:17:d1:f9:02:10:e6:52: ea:fd:14:8b:5e:e9:07:13:0c:41:ba:03:91:12:d1: 4b:e6:53:7e:1c:7f:27:24:1e:43:ee:20:63:8c:b6: 2b:b8:46:6c:c3:a7:11:c2:e2:57:8d:79:17:7e:06: 4e:28:80:e1:91:9a:1c:17:d3:23:22:77:56:09:76: 67:1f:fc:79:71:2a:52:ae:31:c6:b0:9a:00:08:c1: 61:07:81:67:30:ec:ca:c2:2f:2a:e0:5a:45:62:00: 66:c1:e1:5d:13:69:67:43:3c:64:71:66:a4:ee:bc: e5:e5:ab:9d:9f:0f:6b:7b:3d:de:c3:a0:1a:de:68: 7d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:91:56:14:56:04:15:AB:3F:9F:52:E7:B0:DB:1A:C7:C9:0E:DE:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3baf912b-384b-3427-b752-a35aa9af6107.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 172.219.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:fa:9b:f1:aa:a3:bd:f2:f9:20:23:31:2b:9d:70:88:de:7d: 87:3a:f2:fc:8c:32:84:45:74:03:66:79:48:9a:83:ef:5c:51: 3f:f7:f1:97:f3:70:dd:d2:e6:36:08:31:5f:18:e9:3f:ee:09: 5e:e1:af:5c:b4:fb:81:55:33:e9:8d:19:b7:76:c0:53:72:39: 92:ac:88:2e:0e:00:f8:52:ff:72:ef:23:e9:67:f9:85:c9:82: 68:fd:bc:f7:2c:eb:de:b1:df:9e:b8:1d:d6:8e:6b:6c:a5:cd: d3:b8:04:b7:9b:64:7b:1f:90:89:3e:be:4e:09:4b:94:1d:39: 1a:16:57:45:9a:23:c1:ce:06:37:04:4a:25:8c:70:f4:54:3f: ec:56:6b:75:9c:3e:88:f0:e3:2b:0e:ba:19:d3:97:ed:8d:66: 2f:80:d1:8f:2c:08:a2:46:9c:a7:fc:85:68:44:f5:ba:1c:60: c7:ee:37:3f:2e:7c:0f:94:01:39:ea:8e:0b:e4:10:de:60:97: 43:3d:d5:c0:b3:5e:14:44:87:4d:b7:45:62:37:d7:c5:87:f9: f2:e4:c6:cc:d9:fa:6e:d5:55:76:2e:c9:0f:5a:67:59:90:74: 00:aa:9a:f0:49:55:52:58:cd:c2:4d:b7:ea:65:cb:3b:e6:de: 85:ab:15:80 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0bGfoFGiHj0spn5EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk YWE5NDZhYWYtODNlYy00YjcwLWI4NjgtZmYwYjFiMTA1Njc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1bASyXdBa7kCcZbsE8X90S04pj+OoOuA5Bx jzmszpgHHtVV2C943EmgeCFpve9GD26KT24u6Jhl/+fiYFVKatMfXEC78gLid/Yi FwkFKBlYikVoplMFOql9twwJ4pbxpVZdVmpZKjxZlYTxupG7WdNaphdcMF6amV2p 7YuWshfR+QIQ5lLq/RSLXukHEwxBugOREtFL5lN+HH8nJB5D7iBjjLYruEZsw6cR wuJXjXkXfgZOKIDhkZocF9MjIndWCXZnH/x5cSpSrjHGsJoACMFhB4FnMOzKwi8q 4FpFYgBmweFdE2lnQzxkcWak7rzl5audnw9rez3ew6Aa3mh9gwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCWRVhRWBBWrP59S57DbGsfJDt6yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvM2JhZjkxMmItMzg0Yi0z NDI3LWI3NTItYTM1YWE5YWY2MTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMArNswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAI/qb8aqjvfL5ICMxK51wiN59hzry/IwyhEV0A2Z5SJqD71xRP/fxl/Nw 3dLmNggxXxjpP+4JXuGvXLT7gVUz6Y0Zt3bAU3I5kqyILg4A+FL/cu8j6Wf5hcmC aP289yzr3rHfnrgd1o5rbKXN07gEt5tkex+QiT6+TglLlB05GhZXRZojwc4GNwRK JYxw9FQ/7FZrdZw+iPDjKw66GdOX7Y1mL4DRjywIokacp/yFaET1uhxgx+43Py58 D5QBOeqOC+QQ3mCXQz3VwLNeFESHTbdFYjfXxYf58uTGzNn6btVVdi7JD1pnWZB0 AKqa8ElVUljNwk236mXLO+behasVgA== -----END CERTIFICATE-----Generated at Fri Mar 13 23:55:12 2026 by rpki-client