$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/88f8b444-dc1b-374c-844b-0bfe001c8fb5.roa File: 88f8b444-dc1b-374c-844b-0bfe001c8fb5.roa (raw, json) Hash identifier: xrNaj1CDpn/9oMsoOWEw/VCNfBbK/Hy8QhhSZsFY4vg= Subject key identifier: 89:C1:D1:A1:F1:6C:3F:01:C2:71:66:F2:2E:E3:95:A4:68:AA:69:7C Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D0D424C40C6C83D22AB03A380 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/88f8b444-dc1b-374c-844b-0bfe001c8fb5.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 21723 IP address blocks: 209.53.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:4c:40:c6:c8:3d:22:ab:03:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=f81b8ea7-8133-42dd-8a9e-d6f626832eba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5a:be:be:5c:ea:8e:e3:10:a0:c1:3d:df:b2: 43:86:96:69:7b:97:8b:7f:20:82:7a:45:ce:47:0b: 91:d7:a4:d1:4e:50:9f:ff:98:f3:e1:17:a5:15:1b: aa:0e:1a:1b:46:cf:90:8c:48:54:9b:cf:87:00:ba: cf:02:88:59:5a:f1:01:43:72:0c:60:86:a7:bc:63: 32:86:50:2a:a3:f2:dd:db:1f:e6:e2:6b:d0:d9:b9: 13:d5:94:7b:4b:81:ce:f8:57:20:ad:00:f7:e4:84: ca:82:f1:c5:39:57:96:07:57:8a:77:e4:f4:9a:d0: 3f:36:1b:83:b8:5c:5a:6e:0b:59:d8:a3:53:ba:d6: cb:e3:92:f4:50:8b:a4:e7:67:2c:bf:69:eb:2d:ac: 6a:08:54:35:e3:dd:89:91:18:ff:03:fb:0d:fc:91: 41:ff:e3:a0:17:50:05:80:20:d4:4b:45:f6:88:ae: fd:16:fe:a0:73:65:b0:d4:e5:3d:52:d8:61:05:76: 00:fb:d0:cb:10:55:6d:76:ea:e3:7e:00:53:d9:14: 30:08:da:c0:7c:5b:62:d9:e3:80:1c:d0:4e:9f:7d: c5:ac:35:d9:8e:76:b6:0d:bc:15:7c:55:25:22:9f: fd:46:a2:ef:45:db:93:1f:5f:0c:c4:b9:22:0f:0a: 90:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C1:D1:A1:F1:6C:3F:01:C2:71:66:F2:2E:E3:95:A4:68:AA:69:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/88f8b444-dc1b-374c-844b-0bfe001c8fb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:e8:db:6c:fb:c4:45:24:07:3b:38:23:d7:48:d4:2d:9a:91: 0e:6e:89:44:08:19:46:ca:b2:cf:a0:e9:5e:b4:75:8d:c0:69: 01:fd:33:c4:01:c4:11:a6:df:2f:d3:05:c2:fc:24:37:b1:b3: d2:ee:38:2b:e9:5e:db:c2:de:34:e2:fa:37:eb:cb:0a:88:f1: c8:97:96:87:c8:50:28:60:89:f2:6b:81:c6:fb:2c:7e:98:f0: f6:35:a1:7f:6c:c0:d5:9a:4f:f1:91:0b:09:60:a4:75:f8:a2: 0a:f8:c8:3d:20:55:d5:25:46:ab:f1:e9:da:b3:e3:45:61:ac: 38:e5:83:85:93:b4:4c:84:df:7b:bc:e1:f4:71:b8:5c:8d:e2: 2d:98:1d:97:e5:75:80:ad:08:1f:cf:89:b1:87:f7:70:c2:74: 6a:ab:a8:88:a5:9c:65:a8:8a:93:c3:ee:57:df:93:d5:e8:14: e8:ae:b8:ca:b1:a4:ca:55:86:3f:cc:1e:30:cd:69:b5:3d:b8: 02:2d:9e:fe:14:41:92:d8:3d:ed:b4:71:fe:9b:7c:80:77:cc: 29:51:35:09:0d:49:92:b5:de:45:37:77:63:fa:8a:e4:55:57: cd:bd:2f:19:57:62:29:29:3e:43:91:6a:59:3f:7e:30:4e:b8: ca:80:ba:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQkxAxsg9IqsDo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk ZjgxYjhlYTctODEzMy00MmRkLThhOWUtZDZmNjI2ODMyZWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVq+vlzqjuMQoME937JDhpZpe5eLfyCCekXO RwuR16TRTlCf/5jz4RelFRuqDhobRs+QjEhUm8+HALrPAohZWvEBQ3IMYIanvGMy hlAqo/Ld2x/m4mvQ2bkT1ZR7S4HO+FcgrQD35ITKgvHFOVeWB1eKd+T0mtA/NhuD uFxabgtZ2KNTutbL45L0UIuk52csv2nrLaxqCFQ1492JkRj/A/sN/JFB/+OgF1AF gCDUS0X2iK79Fv6gc2Ww1OU9UthhBXYA+9DLEFVtdurjfgBT2RQwCNrAfFti2eOA HNBOn33FrDXZjna2DbwVfFUlIp/9RqLvRduTH18MxLkiDwqQ6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInB0aHxbD8BwnFm8i7jlaRoqml8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvODhmOGI0NDQtZGMxYi0z NzRjLTg0NGItMGJmZTAwMWM4ZmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0TWqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3o22z7xEUkBzs4I9dI1C2akQ5uiUQIGUbKss+g6V60dY3AaQH9M8QB xBGm3y/TBcL8JDexs9LuOCvpXtvC3jTi+jfrywqI8ciXlofIUChgifJrgcb7LH6Y 8PY1oX9swNWaT/GRCwlgpHX4ogr4yD0gVdUlRqvx6dqz40VhrDjlg4WTtEyE33u8 4fRxuFyN4i2YHZfldYCtCB/PibGH93DCdGqrqIilnGWoipPD7lffk9XoFOiuuMqx pMpVhj/MHjDNabU9uAItnv4UQZLYPe20cf6bfIB3zClRNQkNSZK13kU3d2P6iuRV V829LxlXYikpPkORalk/fjBOuMqAuh4= -----END CERTIFICATE-----Generated at Fri Mar 13 23:53:57 2026 by rpki-client