$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/96f9a3d4-5ecc-3130-b037-1af04b1e15a6.roa File: 96f9a3d4-5ecc-3130-b037-1af04b1e15a6.roa (raw, json) Hash identifier: Mn0Gnn7IFcaxehQqnrEw3LqIuqwRJTaPqnuFJcM1mEU= Subject key identifier: 1E:02:30:5C:D1:CD:09:82:34:4A:60:43:AC:23:78:BC:FC:14:35:56 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D1F4A21E130826924D27A7400 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/96f9a3d4-5ecc-3130-b037-1af04b1e15a6.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 395096 IP address blocks: 209.53.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:21:e1:30:82:69:24:d2:7a:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=f343b349-5e59-4166-980c-531a7223137e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fe:8c:78:4d:c2:89:21:28:74:80:5a:df:88: 2b:10:8c:4a:4d:ae:d1:4c:5f:08:83:27:23:19:b9: 57:bd:04:ab:16:14:3c:ec:f6:0d:05:8a:f9:92:40: fe:db:ca:1d:bc:b9:bc:c8:93:4c:dd:ed:a8:b7:c6: 41:88:cf:1e:61:93:87:8b:1c:ae:dd:ce:ab:7e:ac: 9e:2d:aa:36:eb:73:92:d6:60:40:63:d8:fe:d4:12: 5f:0c:fc:76:e7:e1:35:80:68:df:c4:b7:ad:3e:70: e6:39:00:2b:c8:e9:2c:48:62:69:d0:1c:21:3e:80: 58:c1:6b:40:f1:2d:97:0c:08:20:3f:39:81:fa:8d: 58:78:e2:42:e1:ae:21:e5:bd:8b:c5:71:0f:31:f5: 3d:57:57:2a:f2:12:1d:97:8e:5a:e9:8a:5a:a9:44: f4:1e:fc:9d:96:85:85:15:8a:2e:b5:01:8d:c2:1c: 87:7a:9e:1c:ee:3b:37:d3:4c:63:cd:05:6e:e4:fd: 16:aa:b2:d9:7d:ff:75:7f:31:ed:3b:f6:bc:5b:8a: f5:4b:47:42:ac:b9:ae:38:8d:aa:b3:fc:58:72:63: e3:59:52:d7:1b:5a:bf:47:ee:20:53:45:e2:22:1d: ee:27:4b:0e:f6:8f:bb:ba:42:2b:63:82:37:71:d0: dd:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:02:30:5C:D1:CD:09:82:34:4A:60:43:AC:23:78:BC:FC:14:35:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/96f9a3d4-5ecc-3130-b037-1af04b1e15a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:aa:96:b8:2b:67:76:3f:e1:7c:5d:c6:b6:a1:00:11:73:d4: 15:a8:1e:cb:be:37:3f:7f:9a:b9:2d:46:c3:85:2b:f4:14:7c: 35:02:60:a5:49:aa:c5:19:a3:7f:ca:09:2a:74:36:bb:09:0b: 70:42:1a:23:e5:15:7e:b3:15:19:72:fc:20:6b:be:04:af:de: ca:7e:4a:7a:76:c5:86:ae:aa:3a:53:00:46:fe:a3:db:e3:01: fa:b1:28:9b:51:49:4d:ef:2a:20:ac:9f:a0:76:13:31:6c:6d: bb:78:2b:3a:fd:ce:c1:1f:74:58:7d:45:88:83:f9:f2:3b:45: d2:d9:d5:11:12:ae:3e:d6:e8:63:62:87:ab:d4:3c:b6:6f:fd: e8:f1:c5:d4:a7:01:01:e4:7d:73:3f:50:e0:4d:83:3b:5f:b3: 67:a3:5a:58:bc:a5:15:6a:0e:b6:23:f0:95:66:f6:ff:18:38: fb:87:ed:5f:31:94:ad:98:5d:5a:0a:cd:7c:d2:00:40:78:4a: e2:c6:5f:78:92:72:db:1b:02:65:29:fa:07:1f:be:e6:d4:21: 4a:03:12:f5:b4:3f:b3:3a:39:7a:fc:d3:11:11:7b:fd:8d:69: a6:38:a0:e1:bc:0a:95:ea:2e:61:e2:ab:9e:e3:dd:71:54:bc: 49:4d:3b:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSiHhMIJpJNJ6dAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk ZjM0M2IzNDktNWU1OS00MTY2LTk4MGMtNTMxYTcyMjMxMzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzv6MeE3CiSEodIBa34grEIxKTa7RTF8Igycj GblXvQSrFhQ87PYNBYr5kkD+28odvLm8yJNM3e2ot8ZBiM8eYZOHixyu3c6rfqye Lao263OS1mBAY9j+1BJfDPx25+E1gGjfxLetPnDmOQAryOksSGJp0BwhPoBYwWtA 8S2XDAggPzmB+o1YeOJC4a4h5b2LxXEPMfU9V1cq8hIdl45a6YpaqUT0HvydloWF FYoutQGNwhyHep4c7js300xjzQVu5P0WqrLZff91fzHtO/a8W4r1S0dCrLmuOI2q s/xYcmPjWVLXG1q/R+4gU0XiIh3uJ0sO9o+7ukIrY4I3cdDdgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4CMFzRzQmCNEpgQ6wjeLz8FDVWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOTZmOWEzZDQtNWVjYy0z MTMwLWIwMzctMWFmMDRiMWUxNWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TVxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSqlrgrZ3Y/4XxdxrahABFz1BWoHsu+Nz9/mrktRsOFK/QUfDUCYKVJ qsUZo3/KCSp0NrsJC3BCGiPlFX6zFRly/CBrvgSv3sp+Snp2xYauqjpTAEb+o9vj AfqxKJtRSU3vKiCsn6B2EzFsbbt4Kzr9zsEfdFh9RYiD+fI7RdLZ1RESrj7W6GNi h6vUPLZv/ejxxdSnAQHkfXM/UOBNgztfs2ejWli8pRVqDrYj8JVm9v8YOPuH7V8x lK2YXVoKzXzSAEB4SuLGX3iSctsbAmUp+gcfvubUIUoDEvW0P7M6OXr80xERe/2N aaY4oOG8CpXqLmHiq57j3XFUvElNO/M= -----END CERTIFICATE-----Generated at Fri Mar 13 23:54:16 2026 by rpki-client