$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d4cc3d9c-1d43-376d-8888-30e7aad244f2.roa File: d4cc3d9c-1d43-376d-8888-30e7aad244f2.roa (raw, json) Hash identifier: 8kshWYLVanXcbhLuwMG6UO9Ih0lj03FVDBCNkSqGTsU= Subject key identifier: 66:1E:11:FC:B4:31:7D:1C:31:4F:2B:44:E4:D4:07:31:1C:B9:90:56 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D19B4A6974DF3C00FE3AA0E80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d4cc3d9c-1d43-376d-8888-30e7aad244f2.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 852 IP address blocks: 207.194.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:a6:97:4d:f3:c0:0f:e3:aa:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=2c5e1d2e-cf28-45b6-9daa-d87c3eb436d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:76:2a:55:09:d6:69:41:5a:48:dd:e9:67:a6: f8:a7:53:32:10:83:f4:bc:7e:cf:1f:6d:75:a1:6e: c2:6f:9d:ba:93:ad:5f:aa:be:bb:f9:42:8e:80:80: d2:a2:0c:b0:1c:d6:ed:29:9e:5c:29:f1:a4:54:91: 50:0e:85:22:fa:4c:f9:05:fb:6b:f6:36:d0:02:b2: 8a:6a:93:c6:3c:59:db:28:20:0f:2d:7c:52:59:3b: 45:d6:03:60:67:09:b4:f7:a7:ef:11:2d:f8:87:b2: 9e:90:18:5a:a4:cb:99:0c:cf:b7:6b:e0:c3:7e:ff: 86:f1:74:0f:42:8b:0f:ff:99:43:6d:83:a4:38:94: b1:9a:68:fa:44:ee:95:79:b3:95:7c:b1:1f:04:4f: b0:d5:b9:0c:54:83:47:c9:41:e6:a1:c0:d4:1b:26: bd:5c:03:43:c7:96:cf:28:40:7f:6b:c1:a6:f7:f6: fd:d5:fc:03:df:5b:86:d3:a0:60:5e:18:d1:84:33: a9:85:fa:cc:76:ca:47:6e:48:cf:29:06:66:70:9e: 2a:79:21:c1:d7:c0:32:c0:e2:c0:c7:94:6a:78:08: fc:d9:ba:86:4f:75:76:f7:5a:7b:f4:b8:0d:63:e3: 31:d8:c1:1b:9d:cc:ef:a1:ed:3c:7d:70:e1:46:22: 4a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:1E:11:FC:B4:31:7D:1C:31:4F:2B:44:E4:D4:07:31:1C:B9:90:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d4cc3d9c-1d43-376d-8888-30e7aad244f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.194.78.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:1d:6e:90:5d:cb:d7:23:96:d1:45:35:e5:99:c0:f8:b6:77: bc:2f:81:5b:88:3e:83:3e:05:06:6d:4f:f8:02:18:74:90:1b: 99:60:76:a8:e5:c5:bd:e8:16:c1:b9:0b:7d:0f:af:f9:b8:a2: 96:95:65:0f:ef:e0:27:03:54:0c:5b:08:89:6f:39:37:a5:c1: 60:11:1d:6c:f1:af:9e:d3:52:45:f8:0d:81:2e:72:99:bb:be: 52:3b:57:ed:4c:a5:21:4e:0b:94:c3:0b:b3:39:f1:ee:0d:3f: 3e:d7:fb:34:19:db:ea:03:8d:ef:d7:b3:bc:90:97:92:a9:06: 64:69:e5:44:91:d3:f9:31:9a:77:bf:6a:26:e2:cb:56:46:21: 34:f5:da:41:4a:7a:65:93:29:3e:06:8a:62:b1:51:60:10:80: ac:08:f4:10:ea:6f:1b:a0:4b:f9:8d:63:4c:ab:73:b6:3a:19: 77:ad:da:c5:4e:3c:03:21:06:9a:78:05:2a:40:70:19:e4:4b: e2:b6:83:5a:a2:38:9d:80:2a:89:2c:62:0a:04:64:a8:71:27: 92:16:c3:f7:ff:21:a0:cf:41:32:9c:90:55:91:5e:0f:38:64: 6d:4e:ce:86:29:57:9d:b3:f6:0f:39:4b:f0:de:51:86:19:d6: 64:dc:91:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtKaXTfPAD+OqDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk MmM1ZTFkMmUtY2YyOC00NWI2LTlkYWEtZDg3YzNlYjQzNmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnYqVQnWaUFaSN3pZ6b4p1MyEIP0vH7PH211 oW7Cb526k61fqr67+UKOgIDSogywHNbtKZ5cKfGkVJFQDoUi+kz5Bftr9jbQArKK apPGPFnbKCAPLXxSWTtF1gNgZwm096fvES34h7KekBhapMuZDM+3a+DDfv+G8XQP QosP/5lDbYOkOJSxmmj6RO6VebOVfLEfBE+w1bkMVINHyUHmocDUGya9XANDx5bP KEB/a8Gm9/b91fwD31uG06BgXhjRhDOphfrMdspHbkjPKQZmcJ4qeSHB18AywOLA x5RqeAj82bqGT3V291p79LgNY+Mx2MEbnczvoe08fXDhRiJKQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYeEfy0MX0cMU8rROTUBzEcuZBWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDRjYzNkOWMtMWQ0My0z NzZkLTg4ODgtMzBlN2FhZDI0NGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz8JOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIdbpBdy9cjltFFNeWZwPi2d7wvgVuIPoM+BQZtT/gCGHSQG5lgdqjl xb3oFsG5C30Pr/m4opaVZQ/v4CcDVAxbCIlvOTelwWARHWzxr57TUkX4DYEucpm7 vlI7V+1MpSFOC5TDC7M58e4NPz7X+zQZ2+oDje/Xs7yQl5KpBmRp5USR0/kxmne/ aibiy1ZGITT12kFKemWTKT4GimKxUWAQgKwI9BDqbxugS/mNY0yrc7Y6GXet2sVO PAMhBpp4BSpAcBnkS+K2g1qiOJ2AKoksYgoEZKhxJ5IWw/f/IaDPQTKckFWRXg84 ZG1OzoYpV52z9g85S/DeUYYZ1mTckaM= -----END CERTIFICATE-----Generated at Fri Mar 13 23:53:04 2026 by rpki-client