$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9005fe65-5a20-3167-96fc-8740dbf0b1a8.roa File: 9005fe65-5a20-3167-96fc-8740dbf0b1a8.roa (raw, json) Hash identifier: 5tO+oQWQnQGmCXkI1LIhVNtaMJiNzBqE47sGLlmm1Xk= Subject key identifier: E5:57:FC:0F:27:6D:69:50:1F:41:3B:E0:9E:22:B9:B8:ED:56:50:7B Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D09125963E35D524635D3B450 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9005fe65-5a20-3167-96fc-8740dbf0b1a8.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 393659 IP address blocks: 207.229.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:59:63:e3:5d:52:46:35:d3:b4:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=b95e899b-8731-4da7-9c5d-0d078752f0f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e5:f4:50:cc:f1:8a:44:be:c3:6e:2b:32:44: 71:3e:3d:37:7b:62:98:b5:db:17:1d:3c:4c:e4:ce: da:bd:42:f0:f5:89:0c:68:42:cb:5e:3c:81:29:65: 52:9c:82:3f:c7:82:02:9d:3b:a1:a6:81:1b:5b:49: 60:2c:44:e8:38:33:75:43:6e:36:4c:3a:17:9a:ca: df:56:f1:38:cf:a7:d6:7b:c6:9d:59:e3:c1:31:ce: d8:b4:2a:dd:3b:10:5c:30:c8:aa:4c:e0:ef:22:68: 9b:c0:17:23:67:7a:d1:ca:bd:1c:ad:c4:5f:40:06: b0:ad:56:a2:5d:ab:44:b5:8f:0c:d5:c8:df:9d:9b: af:76:09:2b:0d:43:60:05:5f:bd:21:70:68:19:47: 02:58:85:1f:a6:97:13:28:85:3d:95:e1:04:39:ab: ab:3f:3c:2b:3d:cf:83:93:8c:f6:37:fe:ca:42:ac: 5d:c5:10:84:7e:85:5e:bf:81:93:ab:70:45:97:61: d2:12:18:f8:48:30:1b:4a:71:35:41:e5:8a:6c:c7: 1b:bd:7a:70:8e:8d:b4:0d:a3:91:dd:29:7f:65:b2: b8:be:ae:ac:d9:f4:0e:c4:42:30:92:df:36:5e:ff: 9b:83:e1:db:54:db:90:b5:c2:c1:5b:21:e0:39:bc: bb:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:57:FC:0F:27:6D:69:50:1F:41:3B:E0:9E:22:B9:B8:ED:56:50:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9005fe65-5a20-3167-96fc-8740dbf0b1a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.229.55.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:5a:53:02:06:2b:59:62:73:5f:35:63:a4:03:7b:72:88:4d: 14:9b:9b:47:e4:4a:09:1f:63:c6:06:58:f5:f0:43:7c:11:d7: 42:7e:91:4a:76:0c:d9:cc:63:19:86:c5:c1:47:f1:77:e5:62: 67:2a:56:49:c4:36:3c:bd:65:90:61:2f:83:3c:9e:2e:57:00: e0:72:64:0c:8c:bc:27:3d:f6:ff:08:93:fa:8e:b8:d2:8e:23: bd:d9:23:7b:bc:7a:32:ba:a4:e6:52:21:16:58:dc:19:2c:77: aa:31:b8:3e:d0:fa:62:ea:b2:86:1c:f4:4f:31:a5:a9:cd:13: 28:35:ba:cb:42:27:4b:9e:62:46:42:c6:f6:b2:38:97:00:c2: cd:86:58:61:c5:a0:12:a2:b1:3e:22:74:60:9d:36:3d:03:19: 8b:02:fb:c5:b8:07:3f:fc:91:8d:8a:91:c1:57:95:1e:a8:fe: 0e:7d:19:b0:88:9f:1d:3b:30:c9:91:3f:3e:29:d8:a9:c5:05: 52:38:d7:38:d3:97:ad:8a:f9:46:99:7d:5c:6b:48:1f:fa:e3: ab:c9:bc:cc:db:0b:10:df:93:82:f2:2c:34:3f:01:e6:c9:d3: b1:ba:48:81:6b:c5:10:c2:be:ad:12:d2:fa:37:44:47:ad:9a: aa:c9:72:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEllj411SRjXTtFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk Yjk1ZTg5OWItODczMS00ZGE3LTljNWQtMGQwNzg3NTJmMGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+X0UMzxikS+w24rMkRxPj03e2KYtdsXHTxM 5M7avULw9YkMaELLXjyBKWVSnII/x4ICnTuhpoEbW0lgLEToODN1Q242TDoXmsrf VvE4z6fWe8adWePBMc7YtCrdOxBcMMiqTODvImibwBcjZ3rRyr0crcRfQAawrVai XatEtY8M1cjfnZuvdgkrDUNgBV+9IXBoGUcCWIUfppcTKIU9leEEOaurPzwrPc+D k4z2N/7KQqxdxRCEfoVev4GTq3BFl2HSEhj4SDAbSnE1QeWKbMcbvXpwjo20DaOR 3Sl/ZbK4vq6s2fQOxEIwkt82Xv+bg+HbVNuQtcLBWyHgOby7cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVX/A8nbWlQH0E74J4iubjtVlB7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOTAwNWZlNjUtNWEyMC0z MTY3LTk2ZmMtODc0MGRiZjBiMWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz+U3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZaUwIGK1lic181Y6QDe3KITRSbm0fkSgkfY8YGWPXwQ3wR10J+kUp2 DNnMYxmGxcFH8XflYmcqVknENjy9ZZBhL4M8ni5XAOByZAyMvCc99v8Ik/qOuNKO I73ZI3u8ejK6pOZSIRZY3Bksd6oxuD7Q+mLqsoYc9E8xpanNEyg1ustCJ0ueYkZC xvayOJcAws2GWGHFoBKisT4idGCdNj0DGYsC+8W4Bz/8kY2KkcFXlR6o/g59GbCI nx07MMmRPz4p2KnFBVI41zjTl62K+UaZfVxrSB/646vJvMzbCxDfk4LyLDQ/AebJ 07G6SIFrxRDCvq0S0vo3REetmqrJcqU= -----END CERTIFICATE-----Generated at Fri Mar 13 23:54:19 2026 by rpki-client