$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7aa3a8b6-481e-3816-ad73-d14f67ddc869.roa File: 7aa3a8b6-481e-3816-ad73-d14f67ddc869.roa (raw, json) Hash identifier: K+R0e07I/sNrIRFLQPHgAchCnwOrYF/YSfc09aog2lA= Subject key identifier: 32:5F:2D:D1:63:28:F8:2C:14:64:D1:73:90:D8:3F:33:BE:0E:E5:B3 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584DEDE0942A92BE312BFE985BC0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7aa3a8b6-481e-3816-ad73-d14f67ddc869.roa Signing time: Sat 23 May 2026 13:00:31 +0000 ROA not before: Sat 23 May 2026 13:00:31 +0000 ROA not after: Fri 21 Aug 2026 13:00:31 +0000 asID: 15247 IP address blocks: 209.53.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ed:e0:94:2a:92:be:31:2b:fe:98:5b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: May 23 13:00:31 2026 GMT Not After : Aug 21 13:00:31 2026 GMT Subject: CN=dd9c6905-7309-47e7-876b-05a1f0395ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:53:1c:d0:31:a3:a1:f3:99:6d:dc:63:5d:b1: 7f:0b:d4:59:f2:6f:18:4f:41:f7:dc:ce:47:eb:85: 29:d7:b8:a8:d7:0d:83:98:2b:c5:b7:6b:cd:78:14: ca:92:34:79:96:64:bd:44:b1:78:22:45:a5:f2:5e: 3a:d9:5d:5b:71:8e:18:3c:cd:ce:d4:51:a1:47:8c: d4:9e:97:6e:e9:e3:7e:61:43:1c:10:93:bc:e4:39: 05:2b:50:18:8b:2f:39:16:cf:fd:35:74:15:21:92: df:1f:a7:44:95:0b:6e:24:f5:cc:bc:aa:81:4e:7f: 45:41:4a:83:8a:ff:2f:56:09:62:c6:99:13:90:fc: c1:32:ba:9b:23:0b:ea:b0:e4:5d:2e:c1:a6:05:60: d6:46:c1:dd:d4:33:ae:f6:3a:d8:07:63:06:22:12: be:88:48:03:81:62:dc:5e:ae:24:23:21:58:c9:b1: 03:da:37:ca:3a:67:71:4a:a2:01:a2:af:96:b7:9c: 32:d5:44:7a:31:c9:92:0f:47:3d:83:c9:29:b0:bf: f4:7b:1b:ba:4b:1b:d3:11:3a:21:7d:6d:f9:6a:f7: 81:50:0f:dc:f3:92:de:ea:a0:ac:e5:40:bb:cc:f9: f8:49:75:af:b6:96:17:c3:ea:3e:cf:46:b1:65:d3: 34:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:5F:2D:D1:63:28:F8:2C:14:64:D1:73:90:D8:3F:33:BE:0E:E5:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7aa3a8b6-481e-3816-ad73-d14f67ddc869.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:7d:85:86:4f:ba:bf:0e:07:15:ad:68:de:47:23:16:a2:fc: 9e:6f:ea:a4:c2:95:62:dc:3c:f7:28:2b:57:73:78:f4:3a:cc: d1:b5:bd:34:4d:7e:be:5e:06:6f:c9:e5:80:f7:65:7e:bb:65: 94:1a:53:d4:f4:7e:b0:ed:c1:e2:65:19:f2:e7:91:28:ae:cd: 1a:8d:91:7b:0f:a1:ea:c1:79:9e:b3:50:0b:53:61:9b:ba:be: 50:68:5f:f8:9c:9b:07:92:fc:e2:5d:b6:f2:e0:c4:f6:be:7f: 25:a2:76:76:b9:f3:37:9f:57:64:c6:e9:4f:a5:84:82:53:40: 93:bf:38:dd:b2:a1:21:e4:76:1a:34:69:f7:ca:0b:9f:5b:af: 43:f4:70:fa:91:f3:80:48:b1:0b:1e:fb:5d:46:3a:48:93:38: 11:68:10:d6:97:28:c3:fe:44:f6:b5:6a:9a:50:16:27:79:a5: ae:bb:99:b7:84:2c:8e:da:56:66:d2:54:c3:ab:0a:6e:a4:cb: 54:74:2c:5f:37:34:1b:50:01:f7:17:02:49:f2:eb:fb:9e:7e: c2:1e:b6:2f:f1:6e:68:96:e0:b7:cb:65:1a:95:2f:1f:53:cc: 5c:c8:90:b9:c2:ff:3a:a9:31:ca:b5:44:4d:69:d4:b2:b9:57: 64:f2:7a:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3t4JQqkr4xK/6YW8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDUyMzEzMDAzMVoXDTI2MDgyMTEzMDAzMVowLzEtMCsGA1UEAxMk ZGQ5YzY5MDUtNzMwOS00N2U3LTg3NmItMDVhMWYwMzk1YmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVMc0DGjofOZbdxjXbF/C9RZ8m8YT0H33M5H 64Up17io1w2DmCvFt2vNeBTKkjR5lmS9RLF4IkWl8l462V1bcY4YPM3O1FGhR4zU npdu6eN+YUMcEJO85DkFK1AYiy85Fs/9NXQVIZLfH6dElQtuJPXMvKqBTn9FQUqD iv8vVglixpkTkPzBMrqbIwvqsORdLsGmBWDWRsHd1DOu9jrYB2MGIhK+iEgDgWLc Xq4kIyFYybED2jfKOmdxSqIBoq+Wt5wy1UR6McmSD0c9g8kpsL/0exu6SxvTEToh fW35aveBUA/c85Le6qCs5UC7zPn4SXWvtpYXw+o+z0axZdM0lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJfLdFjKPgsFGTRc5DYPzO+DuWzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvN2FhM2E4YjYtNDgxZS0z ODE2LWFkNzMtZDE0ZjY3ZGRjODY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TWuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAp9hYZPur8OBxWtaN5HIxai/J5v6qTClWLcPPcoK1dzePQ6zNG1vTRN fr5eBm/J5YD3ZX67ZZQaU9T0frDtweJlGfLnkSiuzRqNkXsPoerBeZ6zUAtTYZu6 vlBoX/icmweS/OJdtvLgxPa+fyWidna58zefV2TG6U+lhIJTQJO/ON2yoSHkdho0 affKC59br0P0cPqR84BIsQse+11GOkiTOBFoENaXKMP+RPa1appQFid5pa67mbeE LI7aVmbSVMOrCm6ky1R0LF83NBtQAfcXAkny6/uefsIeti/xbmiW4LfLZRqVLx9T zFzIkLnC/zqpMcq1RE1p1LK5V2Tyem8= -----END CERTIFICATE-----Generated at Fri Jun 12 22:52:16 2026 by rpki-client