$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5c6a2600-430c-3c39-a484-f05a9a811305.roa File: 5c6a2600-430c-3c39-a484-f05a9a811305.roa (raw, json) Hash identifier: XQdwJnmXPvZhAa5JLR+DX3CZDrmryIzGeVknm5SLFhw= Subject key identifier: E1:E0:38:31:4E:7E:79:05:EE:D1:AA:A3:62:14:1E:18:2A:C8:CA:5F Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584DA3E561C724538D756CCEAA80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5c6a2600-430c-3c39-a484-f05a9a811305.roa Signing time: Mon 27 Apr 2026 01:00:24 +0000 ROA not before: Mon 27 Apr 2026 01:00:24 +0000 ROA not after: Sun 26 Jul 2026 01:00:24 +0000 asID: 852 IP address blocks: 209.171.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a3:e5:61:c7:24:53:8d:75:6c:ce:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 27 01:00:24 2026 GMT Not After : Jul 26 01:00:24 2026 GMT Subject: CN=33e37171-d948-4a37-bfdc-db6d64df8b74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b1:cd:bf:6d:8e:c3:02:a2:66:c1:8b:e2:d3: cb:33:1a:36:db:70:fd:aa:99:8f:e6:47:bf:f2:a5: a9:1e:5a:9c:10:e8:47:c2:10:53:6f:b9:c8:d4:19: e3:72:b4:eb:3e:92:59:97:c8:2b:b7:9f:b0:f7:96: 28:31:8b:4b:44:14:19:87:34:ef:84:bc:3e:a7:97: ef:b7:fb:45:ce:dc:68:4d:b3:dc:4d:f2:95:7b:81: 0c:ed:ed:b3:31:65:1e:6f:ff:34:15:4f:f5:96:f8: 6c:e3:fb:26:4f:19:81:e4:0f:17:d3:fe:85:93:2d: 1f:b3:31:f8:55:8e:55:8b:c0:32:4b:0c:e6:c2:91: 60:66:6d:57:17:74:a3:0c:8e:9d:9b:85:e2:df:26: 9f:0c:b6:aa:27:03:2f:43:84:13:09:a6:ad:d5:62: 7d:06:4a:f8:fd:20:32:e4:bb:d7:85:c1:19:83:86: d6:57:41:d8:2f:34:35:b2:cf:3f:82:56:bb:8d:3c: 7e:ab:ff:74:d2:9f:fc:c6:bd:ab:63:75:15:f9:58: 2c:92:05:b4:b3:ed:1b:10:9c:1c:38:d4:ca:e3:39: 26:0f:26:7a:42:b0:35:20:ad:99:3c:80:da:35:c0: 51:90:d5:d3:60:3d:10:e9:7e:23:7e:be:18:f8:fb: d3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E0:38:31:4E:7E:79:05:EE:D1:AA:A3:62:14:1E:18:2A:C8:CA:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5c6a2600-430c-3c39-a484-f05a9a811305.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.171.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:0e:ea:06:4b:c9:da:27:27:20:ab:9a:4e:5c:e6:81:48:6c: d7:13:7b:97:46:36:b5:78:60:0b:a1:cf:41:92:1f:50:d0:fe: d9:12:80:0a:5e:fa:58:04:20:21:59:56:94:ce:03:c8:a6:00: 3b:eb:6b:55:65:91:a1:f1:2c:80:68:44:8a:9d:81:15:46:f9: 4a:20:f2:b1:dc:f6:25:98:5a:4a:06:1a:37:22:60:e6:a9:2e: 60:73:9b:ca:5b:96:5b:ed:0e:b5:0a:90:54:c1:8c:b2:32:c0: a7:36:a5:48:1f:e6:f1:fb:b4:dc:84:49:e2:01:06:d3:2c:37: 71:f4:5a:9a:68:ae:6d:b4:9f:8e:8c:ea:8e:54:16:2e:7f:7c: 7a:12:dc:9d:b3:8a:1b:62:f6:47:3f:d2:7c:bc:95:e6:ff:ae: d1:fe:27:42:69:42:12:19:6b:5d:80:30:eb:03:5a:ca:d4:88: 65:ff:e5:d2:d8:9b:9c:c7:c2:9e:52:54:99:cf:40:7a:5b:43: 4f:af:0d:f5:6d:c0:15:1f:34:24:3a:cc:f7:2d:80:cd:08:3a: e7:24:23:b7:a0:6e:be:82:a0:42:d4:3c:50:2c:c4:aa:82:01: 26:8a:b1:0d:00:4e:4e:e4:d2:76:fc:30:92:7b:c9:4c:1b:4a: 69:12:28:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2j5WHHJFONdWzOqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDQyNzAxMDAyNFoXDTI2MDcyNjAxMDAyNFowLzEtMCsGA1UEAxMk MzNlMzcxNzEtZDk0OC00YTM3LWJmZGMtZGI2ZDY0ZGY4Yjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbHNv22OwwKiZsGL4tPLMxo223D9qpmP5ke/ 8qWpHlqcEOhHwhBTb7nI1BnjcrTrPpJZl8grt5+w95YoMYtLRBQZhzTvhLw+p5fv t/tFztxoTbPcTfKVe4EM7e2zMWUeb/80FU/1lvhs4/smTxmB5A8X0/6Fky0fszH4 VY5Vi8AySwzmwpFgZm1XF3SjDI6dm4Xi3yafDLaqJwMvQ4QTCaat1WJ9Bkr4/SAy 5LvXhcEZg4bWV0HYLzQ1ss8/gla7jTx+q/900p/8xr2rY3UV+VgskgW0s+0bEJwc ONTK4zkmDyZ6QrA1IK2ZPIDaNcBRkNXTYD0Q6X4jfr4Y+PvTkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHgODFOfnkF7tGqo2IUHhgqyMpfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNWM2YTI2MDAtNDMwYy0z YzM5LWE0ODQtZjA1YTlhODExMzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0atVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcO6gZLydonJyCrmk5c5oFIbNcTe5dGNrV4YAuhz0GSH1DQ/tkSgApe +lgEICFZVpTOA8imADvra1VlkaHxLIBoRIqdgRVG+Uog8rHc9iWYWkoGGjciYOap LmBzm8pbllvtDrUKkFTBjLIywKc2pUgf5vH7tNyESeIBBtMsN3H0Wpporm20n46M 6o5UFi5/fHoS3J2zihti9kc/0ny8leb/rtH+J0JpQhIZa12AMOsDWsrUiGX/5dLY m5zHwp5SVJnPQHpbQ0+vDfVtwBUfNCQ6zPctgM0IOuckI7egbr6CoELUPFAsxKqC ASaKsQ0ATk7k0nb8MJJ7yUwbSmkSKFw= -----END CERTIFICATE-----Generated at Tue Apr 28 08:48:31 2026 by rpki-client