$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d18ff211-0ee2-3022-8c45-6711b4123785.roa File: d18ff211-0ee2-3022-8c45-6711b4123785.roa (raw, json) Hash identifier: XsogYZrpd+l19rJ3JTFwpcYyA06ImSHxrZPVZ+KCtrQ= Subject key identifier: F3:28:F1:68:6A:5C:4C:19:77:E0:D1:88:3A:D8:8A:8A:88:1E:8A:91 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D1F4A0A2182C232CB4081A300 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d18ff211-0ee2-3022-8c45-6711b4123785.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 852 IP address blocks: 209.29.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:0a:21:82:c2:32:cb:40:81:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=eeed2cd4-7175-43b4-af26-08f17822e626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:81:f3:00:2d:db:3c:8c:bd:8b:5e:55:99:d2: 0d:b7:89:98:81:e0:e9:b4:1e:37:ef:d6:5c:bd:c3: 3b:bb:3c:aa:08:f9:1a:e8:76:53:ea:61:fe:19:38: 8e:df:32:1d:e1:c9:31:2c:96:0b:da:1c:80:42:5c: af:1b:7d:44:5c:e7:cd:83:d5:e1:fd:76:3a:56:48: c8:8a:c6:e1:04:e6:99:e3:62:38:c5:6b:fb:dc:0a: bf:5f:58:2b:84:cc:f2:b4:55:2d:46:0a:0d:b7:f2: 62:69:4e:e5:0a:b1:fb:da:3a:63:97:39:30:bc:11: 73:9d:f1:f2:d3:f5:fa:d4:ec:08:ce:05:9a:85:43: dd:59:eb:dd:99:11:cf:2e:34:68:ea:8e:85:4b:38: d0:ea:a0:4d:b5:c1:c1:5c:fb:0f:8a:39:62:2a:7b: 9a:df:ad:e0:5e:75:bd:f4:64:76:fa:aa:fc:d4:89: 11:b8:0b:c6:f3:51:d6:bf:3a:9e:61:d5:69:81:e3: 14:77:7d:cf:c2:7e:f3:1e:f5:dc:37:6c:c4:8c:d2: b0:15:7e:1e:71:96:16:1c:dc:96:3a:fa:82:d7:2e: 4b:b7:2b:cf:8e:77:28:24:73:a9:94:0e:ac:91:20: 8d:3f:07:98:14:94:aa:ff:c2:e1:40:93:94:7e:0e: 6a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:28:F1:68:6A:5C:4C:19:77:E0:D1:88:3A:D8:8A:8A:88:1E:8A:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d18ff211-0ee2-3022-8c45-6711b4123785.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.29.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:1a:1f:da:0c:76:0a:98:c5:3b:ad:5f:2a:82:d8:9b:cf:3f: dc:65:ed:5a:1b:21:45:31:6a:83:42:3f:69:59:55:3d:16:e4: fb:aa:5e:27:29:7f:57:d4:44:e2:63:35:0c:19:34:cb:77:c1: 4e:15:a5:37:13:16:a2:1b:b1:48:10:9a:11:cb:a4:23:66:18: 3e:f3:0c:37:2b:db:49:b6:b7:16:c0:17:23:51:6d:f3:20:89: 12:9f:65:8c:ba:73:4a:bc:23:d8:6b:31:84:af:35:0f:d6:81: ea:f0:1e:e2:0b:b5:2a:16:ad:53:5e:6b:81:08:2a:82:be:bd: 0b:67:74:78:91:35:e2:8f:dc:82:73:cc:60:48:fa:cf:87:03: 27:df:87:83:43:1b:b7:4f:c4:bd:37:d3:c7:ed:0b:a5:7d:6c: 91:bd:f4:0e:89:df:58:08:76:ee:12:62:4f:60:60:cb:f5:8f: e1:dc:cf:ce:05:45:f1:2b:5e:98:3b:c7:44:c1:38:8a:0e:68: 2d:03:e0:dc:59:20:61:2e:b4:20:60:a7:f7:a3:d6:57:5b:5e: 3b:92:09:1c:ce:ae:05:16:9b:b6:e1:a2:2c:47:cb:df:45:4b: 06:a7:4a:fb:46:e6:cb:0d:dc:c3:9a:2b:4c:1c:2a:23:ff:43: 0f:9e:d2:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSgohgsIyy0CBowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk ZWVlZDJjZDQtNzE3NS00M2I0LWFmMjYtMDhmMTc4MjJlNjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIHzAC3bPIy9i15VmdINt4mYgeDptB4379Zc vcM7uzyqCPka6HZT6mH+GTiO3zId4ckxLJYL2hyAQlyvG31EXOfNg9Xh/XY6VkjI isbhBOaZ42I4xWv73Aq/X1grhMzytFUtRgoNt/JiaU7lCrH72jpjlzkwvBFznfHy 0/X61OwIzgWahUPdWevdmRHPLjRo6o6FSzjQ6qBNtcHBXPsPijliKnua363gXnW9 9GR2+qr81IkRuAvG81HWvzqeYdVpgeMUd33Pwn7zHvXcN2zEjNKwFX4ecZYWHNyW OvqC1y5LtyvPjncoJHOplA6skSCNPweYFJSq/8LhQJOUfg5qXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMo8WhqXEwZd+DRiDrYioqIHoqRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDE4ZmYyMTEtMGVlMi0z MDIyLThjNDUtNjcxMWI0MTIzNzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0R1rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAaH9oMdgqYxTutXyqC2JvPP9xl7VobIUUxaoNCP2lZVT0W5PuqXicp f1fUROJjNQwZNMt3wU4VpTcTFqIbsUgQmhHLpCNmGD7zDDcr20m2txbAFyNRbfMg iRKfZYy6c0q8I9hrMYSvNQ/WgerwHuILtSoWrVNea4EIKoK+vQtndHiRNeKP3IJz zGBI+s+HAyffh4NDG7dPxL0308ftC6V9bJG99A6J31gIdu4SYk9gYMv1j+Hcz84F RfErXpg7x0TBOIoOaC0D4NxZIGEutCBgp/ej1ldbXjuSCRzOrgUWm7bhoixHy99F SwanSvtG5ssN3MOaK0wcKiP/Qw+e0ok= -----END CERTIFICATE-----Generated at Fri Mar 13 23:55:12 2026 by rpki-client