$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7f6bbd7-70db-38b8-9cea-9a331e307ee4.roa File: c7f6bbd7-70db-38b8-9cea-9a331e307ee4.roa (raw, json) Hash identifier: xPLxOLgtt8Vo3NzTGIxj/KlQPDVB3T734yV5WVLaQnw= Subject key identifier: 03:FA:62:AA:22:9F:06:F2:28:D1:FD:04:F2:2B:79:CA:67:AE:13:30 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D1F4A09E80D447E8068D0D380 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7f6bbd7-70db-38b8-9cea-9a331e307ee4.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 852 IP address blocks: 209.29.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:09:e8:0d:44:7e:80:68:d0:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=883389a5-a0ab-41c1-9569-c15fc67ca0d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:57:16:8c:70:7a:bb:69:8f:de:10:8b:c3:11: 5b:02:86:5e:d0:ee:4a:f0:29:ba:a4:dc:eb:2f:c7: ab:d6:c4:e9:e4:e6:6d:10:57:44:b3:b3:bc:57:3b: ad:90:35:79:2a:9c:17:43:71:64:a8:6e:8c:8c:1d: ac:81:8d:d2:a9:f5:73:e8:47:73:c0:15:a0:38:2b: a2:07:6d:dd:f4:70:36:79:e0:74:74:87:30:69:b1: d4:9e:d3:6d:4b:7c:53:32:fa:d3:fe:fe:58:ff:64: c0:fe:ac:45:92:fd:42:28:55:f7:53:9f:57:e7:bf: 11:1c:f5:fa:8b:64:f1:37:42:2b:c6:30:b2:de:84: 03:1e:1d:12:dd:26:b3:74:c2:a6:26:39:ee:3a:a7: 08:ca:b1:d1:0d:93:27:78:b9:10:88:e9:42:a3:dd: 67:86:dc:0e:e4:c9:ab:ae:45:d7:ba:3d:79:3d:8e: b6:b0:2a:78:b7:c4:9e:54:67:c3:9b:53:b0:a8:6c: 9b:36:3f:05:10:e8:67:90:b5:0f:80:87:6a:6c:6d: be:2e:36:f2:83:d1:02:3a:0f:d1:75:79:f1:4e:16: 1a:47:f0:1d:9f:74:12:db:18:cf:5d:75:15:0c:c8: ff:87:eb:70:85:39:e3:fa:da:ef:68:b5:b1:d3:da: 66:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:FA:62:AA:22:9F:06:F2:28:D1:FD:04:F2:2B:79:CA:67:AE:13:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7f6bbd7-70db-38b8-9cea-9a331e307ee4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.29.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:a0:8e:cd:5c:14:97:ff:0f:fb:0b:57:c3:ff:29:78:51:09: ce:97:21:1f:59:1d:62:eb:cb:f3:c1:a1:d0:71:80:82:13:f7: d8:3d:dc:25:9e:93:63:a5:86:4b:db:45:fa:33:3e:41:d5:40: ed:e0:6f:f9:62:96:e2:67:0c:b2:8b:d5:88:c5:00:94:9e:1f: bc:42:7c:b6:20:f1:39:da:9e:38:7d:db:d8:c8:c1:7c:78:33: 49:4e:7d:69:c8:3a:de:0e:3a:2a:fe:5a:18:f3:70:1f:40:f8: 42:68:c4:c0:1d:a7:41:4b:b7:3c:63:99:d6:6b:ec:97:14:8d: f5:51:64:17:08:60:7b:72:9e:c0:4c:03:f7:fd:48:3b:f5:5e: de:6c:4f:1b:00:2b:54:55:42:5b:73:00:ad:aa:ed:96:b6:b9: c8:c3:0d:90:95:01:85:95:ef:fb:b6:76:ab:09:0b:11:c9:a2: 03:2a:82:3a:4c:d3:de:19:37:1d:b4:88:9d:2e:01:f7:b5:8c: 94:8e:4e:5c:8c:ff:36:f0:39:1c:70:17:f5:1a:b9:76:e6:23: a5:15:55:26:fc:d4:17:dd:a3:48:bb:cf:41:91:08:5f:34:62: 72:08:d9:7a:13:a3:b3:43:0c:4f:8f:cf:5a:66:40:08:ac:1a: 63:3a:fb:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSgnoDUR+gGjQ04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk ODgzMzg5YTUtYTBhYi00MWMxLTk1NjktYzE1ZmM2N2NhMGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlcWjHB6u2mP3hCLwxFbAoZe0O5K8Cm6pNzr L8er1sTp5OZtEFdEs7O8VzutkDV5KpwXQ3FkqG6MjB2sgY3SqfVz6EdzwBWgOCui B23d9HA2eeB0dIcwabHUntNtS3xTMvrT/v5Y/2TA/qxFkv1CKFX3U59X578RHPX6 i2TxN0IrxjCy3oQDHh0S3SazdMKmJjnuOqcIyrHRDZMneLkQiOlCo91nhtwO5Mmr rkXXuj15PY62sCp4t8SeVGfDm1OwqGybNj8FEOhnkLUPgIdqbG2+Ljbyg9ECOg/R dXnxThYaR/Adn3QS2xjPXXUVDMj/h+twhTnj+trvaLWx09pmYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAP6YqoinwbyKNH9BPIrecpnrhMwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYzdmNmJiZDctNzBkYi0z OGI4LTljZWEtOWEzMzFlMzA3ZWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0R1qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6gjs1cFJf/D/sLV8P/KXhRCc6XIR9ZHWLry/PBodBxgIIT99g93CWe k2OlhkvbRfozPkHVQO3gb/liluJnDLKL1YjFAJSeH7xCfLYg8Tnanjh929jIwXx4 M0lOfWnIOt4OOir+WhjzcB9A+EJoxMAdp0FLtzxjmdZr7JcUjfVRZBcIYHtynsBM A/f9SDv1Xt5sTxsAK1RVQltzAK2q7Za2ucjDDZCVAYWV7/u2dqsJCxHJogMqgjpM 094ZNx20iJ0uAfe1jJSOTlyM/zbwORxwF/UauXbmI6UVVSb81Bfdo0i7z0GRCF80 YnII2XoTo7NDDE+Pz1pmQAisGmM6+3s= -----END CERTIFICATE-----Generated at Fri Mar 13 23:52:29 2026 by rpki-client