$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8d4daf5a-29b3-362b-afb8-464f9de3c3d3.roa File: 8d4daf5a-29b3-362b-afb8-464f9de3c3d3.roa (raw, json) Hash identifier: whBxueQbTSoq5q71UviWumfkLQLEj7G60k3wvlVAD9Q= Subject key identifier: DE:54:80:3A:A9:28:57:D5:0A:45:EF:9E:81:CA:CF:B8:F1:B6:4F:50 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D091260AF7565EBEEE1731F00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8d4daf5a-29b3-362b-afb8-464f9de3c3d3.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 25668 IP address blocks: 209.53.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:60:af:75:65:eb:ee:e1:73:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=4b6e8d3f-2e4d-4238-b3da-5b8f3e96cc73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:51:54:8d:94:b0:a9:25:05:1e:07:b5:9a:53: fc:b6:e1:82:c7:85:43:22:c2:ac:b4:cd:f7:27:94: 90:72:42:a4:64:f5:7b:db:ba:0f:b7:68:84:a9:7f: ac:67:e7:c4:cf:6d:44:f8:a7:30:c7:14:fc:37:67: c5:94:33:d7:be:34:55:78:23:94:30:e9:20:98:af: 52:55:9c:4f:01:45:fd:6d:d6:96:20:0e:73:b9:63: 7c:d2:1a:9b:a6:2a:26:79:25:2c:c8:74:ea:bd:f4: 8d:6a:77:72:6a:73:8c:ab:a7:59:30:28:c1:64:e6: 48:a5:31:cd:cd:06:e6:a2:1b:d9:bc:38:12:15:20: f2:78:c1:bf:fd:02:17:e5:b0:88:5a:e4:c4:e0:53: 46:7d:ec:00:23:0f:39:12:92:1b:23:1a:f0:b7:e0: 63:c6:91:ad:23:8d:34:84:8b:53:a5:9d:f0:37:98: 45:f0:ce:ae:50:75:dc:b5:86:a2:3e:0d:1f:27:9c: 50:c2:6c:c3:d5:81:74:57:79:0d:4b:4a:b7:e0:d6: 90:85:d3:1b:d3:8e:44:54:30:20:dd:a4:4f:d0:23: c5:f5:50:bf:5b:c7:2b:67:90:0b:15:6b:52:10:8e: 19:f5:15:e9:65:7f:13:59:52:12:f4:54:40:93:d0: 31:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:54:80:3A:A9:28:57:D5:0A:45:EF:9E:81:CA:CF:B8:F1:B6:4F:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8d4daf5a-29b3-362b-afb8-464f9de3c3d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:c8:f7:9f:e4:bb:49:30:8f:5f:96:03:4e:75:51:eb:5b:37: 72:71:b2:6b:f0:33:ae:4e:21:d6:d2:08:31:da:54:ad:aa:98: 8e:d3:e6:bb:33:4c:51:6b:c0:55:5f:56:f8:d4:ba:71:53:a9: e1:90:6d:0d:ae:98:ad:19:32:b4:d1:48:0b:5b:05:fc:eb:fc: db:8d:81:a5:57:18:8e:1f:b8:af:3d:03:af:56:68:77:4b:70: 88:96:3b:47:42:fa:df:91:c6:70:89:f3:75:a2:cf:7b:bd:ce: 92:3d:73:6e:6e:4a:27:47:c3:6f:bd:62:31:e5:17:52:07:2c: ba:9e:e7:43:55:40:c2:f3:26:c3:84:bc:74:0a:d4:ac:b7:aa: 72:25:88:f0:23:83:12:6d:7e:a3:8b:59:fd:9e:56:c6:e7:5e: 2c:ab:c9:b2:0c:37:4c:e5:07:78:51:78:0e:e3:f3:80:92:7e: 70:2a:37:5f:79:3c:02:2a:3a:5f:00:64:7d:15:59:c8:32:76: f2:88:c7:08:ed:84:31:74:a3:42:22:7d:3d:0e:c0:3a:34:56: 7c:e7:91:98:5f:b7:d1:e5:ce:2c:36:c8:14:29:9f:79:6d:4e: 09:df:d3:96:d5:85:dc:1a:ae:72:60:01:c0:35:73:06:85:e4: 55:84:bc:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEmCvdWXr7uFzHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk NGI2ZThkM2YtMmU0ZC00MjM4LWIzZGEtNWI4ZjNlOTZjYzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlFUjZSwqSUFHge1mlP8tuGCx4VDIsKstM33 J5SQckKkZPV727oPt2iEqX+sZ+fEz21E+KcwxxT8N2fFlDPXvjRVeCOUMOkgmK9S VZxPAUX9bdaWIA5zuWN80hqbpiomeSUsyHTqvfSNandyanOMq6dZMCjBZOZIpTHN zQbmohvZvDgSFSDyeMG//QIX5bCIWuTE4FNGfewAIw85EpIbIxrwt+BjxpGtI400 hItTpZ3wN5hF8M6uUHXctYaiPg0fJ5xQwmzD1YF0V3kNS0q34NaQhdMb045EVDAg 3aRP0CPF9VC/W8crZ5ALFWtSEI4Z9RXpZX8TWVIS9FRAk9AxgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5UgDqpKFfVCkXvnoHKz7jxtk9QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOGQ0ZGFmNWEtMjliMy0z NjJiLWFmYjgtNDY0ZjlkZTNjM2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TXBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/I95/ku0kwj1+WA051UetbN3JxsmvwM65OIdbSCDHaVK2qmI7T5rsz TFFrwFVfVvjUunFTqeGQbQ2umK0ZMrTRSAtbBfzr/NuNgaVXGI4fuK89A69WaHdL cIiWO0dC+t+RxnCJ83Wiz3u9zpI9c25uSidHw2+9YjHlF1IHLLqe50NVQMLzJsOE vHQK1Ky3qnIliPAjgxJtfqOLWf2eVsbnXiyrybIMN0zlB3hReA7j84CSfnAqN195 PAIqOl8AZH0VWcgydvKIxwjthDF0o0IifT0OwDo0VnznkZhft9Hlziw2yBQpn3lt Tgnf05bVhdwarnJgAcA1cwaF5FWEvPc= -----END CERTIFICATE-----Generated at Fri Mar 13 23:52:38 2026 by rpki-client