$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/58207235-6f3e-3ffd-9f4d-54297f9fdb8e.roa File: 58207235-6f3e-3ffd-9f4d-54297f9fdb8e.roa (raw, json) Hash identifier: 5uAD12+GsucKQ1KwgSQ6mIlbYfwW0aPTYmpisE0nTEo= Subject key identifier: D0:CC:4E:8E:77:41:7E:9C:38:EC:BF:6F:08:35:A9:92:72:DA:FF:F1 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D0D425723B7E56441539E62C0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/58207235-6f3e-3ffd-9f4d-54297f9fdb8e.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 15247 IP address blocks: 209.53.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:57:23:b7:e5:64:41:53:9e:62:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=4f8e2b8d-3135-406f-a313-88e9d17e861e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:74:cf:82:56:b8:c7:ca:3e:76:03:5d:ec:ec: 28:8d:b8:51:a7:bd:ee:0a:d2:68:03:eb:c2:e2:47: 26:82:5d:f0:56:6d:83:40:56:f2:d4:0f:8c:50:3a: 5d:71:f9:1c:a9:45:89:84:5e:91:71:9a:19:8e:0e: 8c:5e:8d:1f:95:71:98:51:31:47:68:6e:95:57:2a: 63:67:d6:a2:d6:0a:25:ea:69:b5:7e:32:2d:d8:c0: d1:0d:31:02:4b:06:9b:93:5d:07:b4:b5:6b:33:37: eb:98:3f:d9:ea:86:a2:3a:bd:d3:82:61:6b:d0:e5: 8c:19:64:85:8a:b9:e5:14:64:74:22:d6:65:c8:4b: a6:fa:a5:6e:33:69:da:e5:35:1c:ac:63:f4:e5:b6: 47:b9:00:60:93:ef:af:42:48:9a:85:f7:b0:9b:e9: fd:d6:bf:b1:b9:bd:d2:20:5c:cd:88:90:3d:59:eb: 97:99:6e:2e:c3:72:61:61:a2:d9:0e:48:f7:c5:f8: a9:67:35:88:c9:ed:06:78:57:31:ef:30:f3:18:f8: 62:b1:47:c6:16:82:e5:17:ba:d4:6b:a4:ed:01:e5: 49:8e:90:04:70:6d:a8:f2:27:7b:bb:33:3c:d3:68: 2a:b5:8e:99:57:89:88:cd:9f:47:4f:47:a1:d7:8c: 18:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:CC:4E:8E:77:41:7E:9C:38:EC:BF:6F:08:35:A9:92:72:DA:FF:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/58207235-6f3e-3ffd-9f4d-54297f9fdb8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:5a:57:d8:8d:fb:13:27:d2:8f:5f:d3:bb:81:54:c7:9e:a0: f5:93:e1:a9:21:6f:39:db:be:7c:a1:70:f3:cb:7e:8d:42:36: 57:97:cf:4b:19:4a:c6:77:cd:3e:85:ed:f6:a9:6e:e7:eb:ce: da:c7:c4:10:cb:79:26:65:6e:b3:fb:2f:43:f1:db:e7:01:a2: a0:7e:39:fe:03:49:41:37:7a:0b:0a:f9:b0:d9:3c:a6:f0:eb: 3c:f0:b4:68:27:c5:96:26:a2:4f:4e:a0:20:0e:74:22:8d:e2: 1a:1b:b6:cb:ed:7b:22:a3:81:50:56:24:76:a9:89:87:e7:5d: 91:06:63:56:a5:38:6f:3c:e2:d1:dd:82:38:dd:8f:d1:cb:0a: cf:d7:91:2a:2f:00:a2:87:20:d2:48:56:e3:5e:33:bd:5e:90: e8:2b:1a:b2:a1:a1:dd:1a:b5:26:02:72:fd:bd:7f:19:f2:d5: 78:e7:9a:0a:70:00:7a:df:83:b4:1a:f4:3a:81:1d:9d:03:32: 54:4d:9a:b9:a6:91:0c:a9:f7:17:7a:e7:af:e4:78:fa:e1:8e: 1a:ac:14:a7:eb:f7:76:2a:01:90:d6:01:8d:51:f2:c2:7f:d7: 38:66:bc:5c:72:f2:22:b5:9f:0d:1f:d7:3e:43:00:f7:43:ba: b7:ab:37:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQlcjt+VkQVOeYsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk NGY4ZTJiOGQtMzEzNS00MDZmLWEzMTMtODhlOWQxN2U4NjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXTPgla4x8o+dgNd7OwojbhRp73uCtJoA+vC 4kcmgl3wVm2DQFby1A+MUDpdcfkcqUWJhF6RcZoZjg6MXo0flXGYUTFHaG6VVypj Z9ai1gol6mm1fjIt2MDRDTECSwabk10HtLVrMzfrmD/Z6oaiOr3TgmFr0OWMGWSF irnlFGR0ItZlyEum+qVuM2na5TUcrGP05bZHuQBgk++vQkiahfewm+n91r+xub3S IFzNiJA9WeuXmW4uw3JhYaLZDkj3xfipZzWIye0GeFcx7zDzGPhisUfGFoLlF7rU a6TtAeVJjpAEcG2o8id7uzM802gqtY6ZV4mIzZ9HT0eh14wYNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDMTo53QX6cOOy/bwg1qZJy2v/xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNTgyMDcyMzUtNmYzZS0z ZmZkLTlmNGQtNTQyOTdmOWZkYjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0TWsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1aV9iN+xMn0o9f07uBVMeeoPWT4akhbznbvnyhcPPLfo1CNleXz0sZ SsZ3zT6F7fapbufrztrHxBDLeSZlbrP7L0Px2+cBoqB+Of4DSUE3egsK+bDZPKbw 6zzwtGgnxZYmok9OoCAOdCKN4hobtsvteyKjgVBWJHapiYfnXZEGY1alOG884tHd gjjdj9HLCs/XkSovAKKHINJIVuNeM71ekOgrGrKhod0atSYCcv29fxny1Xjnmgpw AHrfg7Qa9DqBHZ0DMlRNmrmmkQyp9xd656/kePrhjhqsFKfr93YqAZDWAY1R8sJ/ 1zhmvFxy8iK1nw0f1z5DAPdDurerN6U= -----END CERTIFICATE-----Generated at Fri Mar 13 23:52:52 2026 by rpki-client