$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b3df106d-b438-3e20-8914-1fe7a07853fe.roa File: b3df106d-b438-3e20-8914-1fe7a07853fe.roa (raw, json) Hash identifier: 3achGL8m3VhPrF57oK9nF05dxK0ojax7sj2f3TS4F6g= Subject key identifier: A2:BC:DC:AD:76:8C:11:6D:9F:8C:D2:00:DC:7A:59:70:02:47:1B:AC Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D1B19F881000BDEB987CDD880 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b3df106d-b438-3e20-8914-1fe7a07853fe.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 852 IP address blocks: 142.59.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:19:f8:81:00:0b:de:b9:87:cd:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=3bbce532-387e-4cc9-9ad4-0bb7b0218f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5b:59:61:ae:ad:4e:08:d2:80:af:d7:e5:9b: 90:99:1b:8a:e8:6e:dd:58:b4:1e:38:9d:5a:42:a0: a2:ce:e1:13:29:98:da:19:0b:70:27:e9:11:f6:a2: e1:39:c9:19:0a:46:01:62:88:a5:ec:4f:60:84:c4: 4a:ac:52:75:02:4c:3f:96:7d:5f:c8:dc:de:5e:40: 97:1d:ce:e4:41:f4:0d:6f:b6:83:0c:a6:44:54:04: 77:0f:88:d0:a9:8f:0c:52:b3:7c:2d:26:f8:27:a2: 8c:b0:00:57:13:08:91:ad:e2:ef:99:91:aa:41:fa: 5a:6b:47:a9:62:5b:ad:b1:be:3e:da:ae:90:6c:28: 9d:75:0c:27:0b:9a:50:69:4a:8b:6c:31:ae:67:69: 6c:56:7a:37:8c:eb:00:97:7e:a4:9a:f0:2a:b5:a4: a2:43:6f:bc:d7:0b:f1:1c:93:71:01:1a:60:9d:e3: b3:84:17:26:53:fa:2e:a8:43:e7:70:ec:8d:3d:f1: c7:b6:9e:6b:9d:04:5e:c2:4c:19:a4:6f:de:ef:eb: d9:79:c8:81:8c:60:75:9c:4d:19:04:ba:c8:38:15: 24:79:cd:44:ba:93:58:0a:91:79:3a:f7:70:4e:bd: e1:ab:cb:d3:c8:34:df:74:46:bb:e3:2b:f7:81:16: 62:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:BC:DC:AD:76:8C:11:6D:9F:8C:D2:00:DC:7A:59:70:02:47:1B:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b3df106d-b438-3e20-8914-1fe7a07853fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 142.59.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:cf:b3:7d:8e:ab:3e:c0:33:a7:e9:1f:7c:c8:13:5c:d2:3d: 28:eb:b8:ff:30:e4:0e:85:60:45:6b:b3:aa:1f:1b:df:b7:a8: 0f:2d:fd:22:94:c6:c2:27:97:82:a2:62:cd:a3:b6:a1:68:b1: 76:b0:90:c7:f8:a3:3c:79:36:10:bb:1f:47:2a:d8:a6:d6:b1: b7:24:52:21:0b:b4:ec:af:92:d0:90:92:57:a0:31:19:47:c7: 37:7b:61:40:42:ee:66:7c:a6:9e:98:b0:72:48:c3:20:84:a5: 98:db:af:5c:dd:8f:6f:78:33:2c:5c:68:06:22:76:e2:f6:77: 66:55:89:85:9b:d8:4b:24:d3:ad:c7:f3:bd:4d:dd:d0:cb:1d: 8b:06:55:3c:ec:9e:a6:c5:89:1b:4b:a1:54:88:91:78:be:b6: 17:9b:3a:30:63:a1:ca:1d:b4:6f:5e:e1:4a:a2:17:a1:20:61: 1d:f9:d2:9b:cc:c3:8e:92:dc:bc:2f:c8:31:46:65:b8:74:3d: 84:97:c0:d2:e8:0d:1d:e7:f8:77:b7:82:ff:85:10:7b:80:a1: 45:30:90:8f:75:1f:56:d3:06:2a:71:b7:a0:70:75:4b:89:33: 1f:72:fb:1e:eb:31:51:f7:73:e9:ad:d5:08:1e:c3:87:28:cd: 20:80:26:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGfiBAAveuYfN2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk M2JiY2U1MzItMzg3ZS00Y2M5LTlhZDQtMGJiN2IwMjE4ZjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFtZYa6tTgjSgK/X5ZuQmRuK6G7dWLQeOJ1a QqCizuETKZjaGQtwJ+kR9qLhOckZCkYBYoil7E9ghMRKrFJ1Akw/ln1fyNzeXkCX Hc7kQfQNb7aDDKZEVAR3D4jQqY8MUrN8LSb4J6KMsABXEwiRreLvmZGqQfpaa0ep Ylutsb4+2q6QbCiddQwnC5pQaUqLbDGuZ2lsVno3jOsAl36kmvAqtaSiQ2+81wvx HJNxARpgneOzhBcmU/ouqEPncOyNPfHHtp5rnQRewkwZpG/e7+vZeciBjGB1nE0Z BLrIOBUkec1EupNYCpF5OvdwTr3hq8vTyDTfdEa74yv3gRZidQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKK83K12jBFtn4zSANx6WXACRxusMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYjNkZjEwNmQtYjQzOC0z ZTIwLTg5MTQtMWZlN2EwNzg1M2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHjjsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHPs32Oqz7AM6fpH3zIE1zSPSjruP8w5A6FYEVrs6ofG9+3qA8t/SKU xsInl4KiYs2jtqFosXawkMf4ozx5NhC7H0cq2KbWsbckUiELtOyvktCQklegMRlH xzd7YUBC7mZ8pp6YsHJIwyCEpZjbr1zdj294MyxcaAYiduL2d2ZViYWb2Esk063H 871N3dDLHYsGVTzsnqbFiRtLoVSIkXi+thebOjBjocodtG9e4UqiF6EgYR350pvM w46S3LwvyDFGZbh0PYSXwNLoDR3n+He3gv+FEHuAoUUwkI91H1bTBipxt6BwdUuJ Mx9y+x7rMVH3c+mt1Qgew4cozSCAJpc= -----END CERTIFICATE-----Generated at Fri Mar 13 23:53:42 2026 by rpki-client