$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b406909a-b4ea-3137-80c3-73899902055c.roa File: b406909a-b4ea-3137-80c3-73899902055c.roa (raw, json) Hash identifier: C0H4PFLguZLB8CbcY/gO1It+cROFH0wvxMFCEXITVC8= Subject key identifier: 28:62:36:A9:8D:5E:1A:9F:F0:90:59:FF:73:18:90:2B:2A:F1:31:6F Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584DFA707638F1E6D78D93DA0D40 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b406909a-b4ea-3137-80c3-73899902055c.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 852 IP address blocks: 204.174.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:76:38:f1:e6:d7:8d:93:da:0d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=0ea8780e-ddc4-4806-bcee-b951afc8f991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b7:25:36:2b:82:ee:1c:84:91:b0:47:84:de: dc:a1:0e:10:97:d0:50:45:c1:da:00:3c:e7:7c:ed: 8f:62:3b:97:df:a7:a1:18:0b:98:ff:62:d6:55:62: b4:d1:11:de:4d:29:1d:29:64:c0:1e:91:61:8d:08: af:0c:35:5e:26:f2:97:66:2a:81:0b:63:14:c2:a9: 0e:99:a1:b6:73:81:68:56:f0:f3:8d:f5:9c:31:c1: bb:90:21:24:6c:9a:da:4a:b1:a9:eb:1e:bf:55:0a: c7:1f:9b:ca:35:9a:37:9e:b3:c3:46:ba:69:4a:0a: b0:5b:4c:e2:2c:97:b5:18:96:90:09:75:92:93:89: ce:f0:6b:36:ac:b4:5b:8f:4c:65:bf:e1:1b:4c:7d: 89:f7:52:c2:9e:c8:59:ef:17:a9:d3:bd:2a:b8:c9: 7e:54:19:a1:00:20:65:d5:4e:78:b8:39:ae:36:d5: 3d:34:3f:cc:ea:4f:fd:46:eb:53:6c:64:73:08:48: ba:8b:ed:70:57:a9:65:98:1f:5d:af:a8:dc:f6:59: 48:c6:30:0d:bf:6f:fd:bc:4e:3c:76:cf:27:20:55: e6:eb:fe:1d:21:37:23:e2:d7:a4:18:9a:61:6a:3b: 0f:92:fa:c8:28:73:e1:05:79:10:0e:91:6c:05:fc: d9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:62:36:A9:8D:5E:1A:9F:F0:90:59:FF:73:18:90:2B:2A:F1:31:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b406909a-b4ea-3137-80c3-73899902055c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 204.174.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:59:f4:e9:15:00:f3:a9:47:40:da:1f:c5:bf:e3:c2:1a:df: f8:e5:35:11:41:68:f4:54:26:c3:d0:6d:52:cb:77:a0:5f:a2: bc:40:5b:58:76:99:08:1c:0d:71:92:46:86:df:f7:b2:64:94: aa:59:f0:08:21:3b:86:9b:ff:32:4d:bd:ba:08:4d:b6:b1:0c: 4f:0a:2f:55:ff:d9:cd:01:19:3d:41:60:18:29:62:f6:93:09: b1:0e:09:d9:37:f9:47:e2:df:c4:ac:bc:5b:18:77:81:cd:01: 04:83:fd:b9:28:a9:0c:6b:e8:94:a1:33:96:86:a1:e0:8e:f1: af:07:8d:31:8b:53:f4:0a:7e:10:1f:11:39:6c:66:ff:65:48: dc:ed:2c:1f:1b:14:c7:09:e7:e4:31:85:e0:e7:2a:d2:32:90: 88:f7:cf:41:13:e7:55:8e:e3:0c:f8:ce:b0:c9:15:6c:88:f2: 84:41:3a:a5:64:8f:27:77:2d:52:4f:13:a3:19:a8:f1:35:d3: 2b:07:92:ae:4c:56:31:8d:8d:5b:0a:15:67:33:c9:55:46:57: 5c:94:7d:81:99:1e:6f:56:4e:8c:40:c4:e0:55:53:c0:92:b8: d7:06:37:a8:d6:79:e7:6d:b5:d0:e9:0c:b2:5a:29:3d:0b:16: a9:61:54:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cHY48ebXjZPaDUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk MGVhODc4MGUtZGRjNC00ODA2LWJjZWUtYjk1MWFmYzhmOTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbclNiuC7hyEkbBHhN7coQ4Ql9BQRcHaADzn fO2PYjuX36ehGAuY/2LWVWK00RHeTSkdKWTAHpFhjQivDDVeJvKXZiqBC2MUwqkO maG2c4FoVvDzjfWcMcG7kCEkbJraSrGp6x6/VQrHH5vKNZo3nrPDRrppSgqwW0zi LJe1GJaQCXWSk4nO8Gs2rLRbj0xlv+EbTH2J91LCnshZ7xep070quMl+VBmhACBl 1U54uDmuNtU9ND/M6k/9RutTbGRzCEi6i+1wV6llmB9dr6jc9llIxjANv2/9vE48 ds8nIFXm6/4dITcj4tekGJphajsPkvrIKHPhBXkQDpFsBfzZhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChiNqmNXhqf8JBZ/3MYkCsq8TFvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYjQwNjkwOWEtYjRlYS0z MTM3LTgwYzMtNzM4OTk5MDIwNTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzK5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxZ9OkVAPOpR0DaH8W/48Ia3/jlNRFBaPRUJsPQbVLLd6BforxAW1h2 mQgcDXGSRobf97JklKpZ8AghO4ab/zJNvboITbaxDE8KL1X/2c0BGT1BYBgpYvaT CbEOCdk3+Ufi38SsvFsYd4HNAQSD/bkoqQxr6JShM5aGoeCO8a8HjTGLU/QKfhAf ETlsZv9lSNztLB8bFMcJ5+QxheDnKtIykIj3z0ET51WO4wz4zrDJFWyI8oRBOqVk jyd3LVJPE6MZqPE10ysHkq5MVjGNjVsKFWczyVVGV1yUfYGZHm9WToxAxOBVU8CS uNcGN6jWeedttdDpDLJaKT0LFqlhVKg= -----END CERTIFICATE-----Generated at Fri Jun 12 22:56:12 2026 by rpki-client