$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/56965208-8eba-3b97-80ce-42860ac58653.roa File: 56965208-8eba-3b97-80ce-42860ac58653.roa (raw, json) Hash identifier: MlITpjV2HlwQS+OtvU/0HmHaG41z14bZo6dkyFgEEp0= Subject key identifier: 26:34:3C:36:17:BE:6A:90:B3:B6:35:D7:5F:17:3E:A3:FC:FC:9A:C0 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D143D2A8F75E60F8EE7BC2F00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/56965208-8eba-3b97-80ce-42860ac58653.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 7861 IP address blocks: 209.91.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:2a:8f:75:e6:0f:8e:e7:bc:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=29071a61-7301-4b64-90c5-0d40c4473255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:83:f8:bb:08:25:ff:f0:56:29:7a:0e:97:ec: 9a:1d:e4:d0:e2:3b:42:97:cc:02:a6:d1:33:c6:fa: 10:a0:1b:5e:12:77:fc:45:16:94:1e:01:c4:dc:d7: 79:d5:f3:77:b7:d4:04:1e:56:ed:e1:22:8d:25:4b: a3:5c:4e:88:5c:b6:f5:d9:2b:35:f5:36:31:49:b7: 53:14:6d:81:35:b5:e9:54:0c:19:50:e9:13:ae:71: 7f:8f:f1:60:93:88:4a:fa:41:15:ef:61:7b:da:a7: 7d:d6:d6:f0:40:8b:a5:ac:75:05:03:65:ee:fc:60: 2d:3f:51:8c:e1:c1:71:f4:34:1d:89:51:9c:f1:7e: b4:12:c4:42:ac:67:ad:2c:08:e3:8c:58:4c:5c:d4: 20:5b:f7:40:16:af:96:1f:21:59:27:0a:0d:81:60: d0:56:6c:80:b4:5b:37:8c:98:4f:09:74:31:ff:db: 0c:20:b2:17:07:c8:6b:e8:5a:e7:ba:80:94:32:ef: 1c:53:f4:7b:c7:bd:36:ac:35:db:21:59:ed:26:33: 6e:a2:9a:87:e6:f2:a0:b3:e5:72:51:72:86:84:63: 52:2f:8f:cf:61:c7:c6:5c:6c:e1:64:40:37:66:b4: 9d:58:bf:1d:88:b7:88:56:ab:8a:eb:e8:94:46:fd: 23:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:34:3C:36:17:BE:6A:90:B3:B6:35:D7:5F:17:3E:A3:FC:FC:9A:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/56965208-8eba-3b97-80ce-42860ac58653.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.91.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e5:f0:de:83:a9:19:08:a5:a8:52:03:4e:6d:69:56:49:7a:5c: 21:31:63:a5:cc:89:29:82:3f:76:9b:92:37:21:b1:6d:70:80: 48:b7:a5:9c:4d:32:7d:c0:d8:35:07:32:c2:fe:01:c7:33:01: 0f:d2:8f:b5:44:89:44:32:e1:09:7b:4a:a0:ba:ce:c2:65:a9: 1e:59:0a:48:5b:4d:17:cc:dd:39:48:52:cd:96:53:03:4f:e2: a3:85:ef:66:41:61:74:c9:22:46:61:b3:d0:6a:f1:7d:b5:96: 53:e5:9c:4f:b4:1a:63:ae:31:b1:d2:59:48:9c:bd:ca:77:91: f0:ed:5f:87:1d:2c:ff:eb:e8:fe:73:16:c4:95:20:6d:fe:1b: de:09:bf:c9:e6:a5:0a:bb:97:24:1b:4c:ed:9f:d8:2c:ea:6f: 8e:ad:4b:f0:2d:75:ce:a5:9d:7d:26:8c:f7:64:27:65:d9:c8: 39:ab:8a:b2:dc:c7:f0:1a:f8:35:b3:ec:1d:02:be:4a:51:c3: 3a:df:c8:38:0d:66:0e:c4:1d:6c:52:61:44:f8:26:d1:0f:60: 8e:6f:7b:f9:98:f9:19:de:eb:67:08:03:54:13:83:a4:8f:9a: 28:ea:a3:2b:0d:a6:2d:67:dc:06:f5:39:b6:f0:2b:7d:13:4e: a2:08:97:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPSqPdeYPjue8LwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MjkwNzFhNjEtNzMwMS00YjY0LTkwYzUtMGQ0MGM0NDczMjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYP4uwgl//BWKXoOl+yaHeTQ4jtCl8wCptEz xvoQoBteEnf8RRaUHgHE3Nd51fN3t9QEHlbt4SKNJUujXE6IXLb12Ss19TYxSbdT FG2BNbXpVAwZUOkTrnF/j/Fgk4hK+kEV72F72qd91tbwQIulrHUFA2Xu/GAtP1GM 4cFx9DQdiVGc8X60EsRCrGetLAjjjFhMXNQgW/dAFq+WHyFZJwoNgWDQVmyAtFs3 jJhPCXQx/9sMILIXB8hr6FrnuoCUMu8cU/R7x702rDXbIVntJjNuopqH5vKgs+Vy UXKGhGNSL4/PYcfGXGzhZEA3ZrSdWL8diLeIVquK6+iURv0jGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCY0PDYXvmqQs7Y1118XPqP8/JrAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNTY5NjUyMDgtOGViYS0z Yjk3LTgwY2UtNDI4NjBhYzU4NjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0VtYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOXw3oOpGQilqFIDTm1pVkl6XCExY6XMiSmCP3abkjchsW1wgEi3pZxN Mn3A2DUHMsL+AcczAQ/Sj7VEiUQy4Ql7SqC6zsJlqR5ZCkhbTRfM3TlIUs2WUwNP 4qOF72ZBYXTJIkZhs9Bq8X21llPlnE+0GmOuMbHSWUicvcp3kfDtX4cdLP/r6P5z FsSVIG3+G94Jv8nmpQq7lyQbTO2f2Czqb46tS/Atdc6lnX0mjPdkJ2XZyDmrirLc x/Aa+DWz7B0CvkpRwzrfyDgNZg7EHWxSYUT4JtEPYI5ve/mY+Rne62cIA1QTg6SP mijqoysNpi1n3Ab1ObbwK30TTqIIl0w= -----END CERTIFICATE-----Generated at Fri Mar 13 23:55:44 2026 by rpki-client