$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d7a27c5d-9d0c-3a48-b526-806911d25f5b.roa File: d7a27c5d-9d0c-3a48-b526-806911d25f5b.roa (raw, json) Hash identifier: GTfeAcHPFN6GvyLuGfxkXk+nh65CoZ9dCmsTbfs7xEY= Subject key identifier: D5:72:40:9D:30:B6:09:E0:0D:72:8D:82:3B:FF:F0:97:CA:FC:02:D5 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D0D4256139D3689012A5A2000 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d7a27c5d-9d0c-3a48-b526-806911d25f5b.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 209.89.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:56:13:9d:36:89:01:2a:5a:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=411058c8-1b46-4ca7-a73e-d4c141840e5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:dc:44:f1:d8:30:18:68:b0:9b:c0:c4:b9:24: e9:8e:8f:90:80:15:e4:dd:a4:c9:e2:5a:72:1d:fe: 7b:2f:82:cb:3a:f6:7a:45:c2:cf:6c:89:fb:15:e1: cd:0c:26:9d:19:2e:17:4a:d4:24:9c:89:a3:02:58: 7b:b2:cb:83:63:1a:5f:b2:0c:a4:1a:e9:a6:b7:0e: c4:e9:9c:e1:b2:51:dd:e6:aa:84:2d:66:fb:24:54: f8:35:6b:bf:1b:9a:59:69:6b:da:4a:9b:3a:94:77: 23:05:3a:2b:92:ef:a6:c0:7d:2f:e9:b9:e7:09:ec: 61:7e:b7:4f:a6:59:c8:8f:fd:20:44:73:c5:13:bb: 1f:b9:aa:91:9d:a3:f5:29:f6:b6:81:1f:f2:8a:f6: 02:0c:91:b8:9d:3b:dd:8d:a3:ed:5a:eb:00:68:e6: bb:21:14:2e:94:dd:a5:fc:bb:74:e1:25:de:6b:3a: af:16:da:38:6c:b0:d4:df:d6:96:c1:8d:ef:db:5c: 83:67:79:ae:7c:8a:4a:8f:df:30:e4:e6:ac:7b:7a: 4b:87:64:a9:d2:92:b9:6d:20:d9:c4:66:9f:f6:6f: 33:07:23:13:ff:ca:c8:8d:d3:e3:fd:bf:ea:61:af: df:8a:e7:c1:c1:d5:15:70:9e:d2:4f:bb:29:50:01: 77:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:72:40:9D:30:B6:09:E0:0D:72:8D:82:3B:FF:F0:97:CA:FC:02:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d7a27c5d-9d0c-3a48-b526-806911d25f5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.89.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:20:b2:b4:5f:2b:c5:b8:ae:55:f1:43:8b:03:b8:07:61:54: 50:ce:d1:9b:ca:e1:a8:39:9d:36:3e:27:7b:f8:3b:fa:e0:37: 39:25:4c:7c:31:98:5e:b2:4e:38:fa:b4:02:4f:07:8c:54:22: 8d:4c:17:64:df:b0:21:0a:1c:c0:12:2e:b3:43:f8:28:05:bd: 15:2d:a0:b6:71:d2:18:a1:87:f2:fc:53:4b:49:1b:b1:b6:83: 7a:ad:b3:56:35:7d:be:15:d9:c3:f4:a9:93:6d:ba:7b:ba:28: 5d:0e:c3:47:36:2c:8e:2d:cb:a2:ef:fb:c5:7c:61:51:9f:2a: 6a:24:5a:0f:97:55:83:37:dd:c0:f1:a9:c4:32:ff:84:5a:e2: 6a:f3:a9:86:09:22:3d:48:87:56:3a:4c:1b:92:f1:5a:26:ce: 41:e4:6f:77:d7:23:db:f2:c5:0a:82:75:36:c3:9a:c2:11:2b: 85:07:76:62:70:b1:33:f4:75:35:4d:36:1f:26:6f:ab:b6:d0: 0a:3a:c6:11:28:f4:1c:66:ee:b2:85:7e:f3:48:e9:b9:1b:26: ae:d3:d2:d7:ef:3f:37:91:3c:54:fe:e0:be:fa:d8:b8:f0:8a: 7b:d7:82:91:a1:a1:08:eb:b5:57:ae:de:b6:db:aa:b9:ef:fa: 2a:d7:95:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQlYTnTaJASpaIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk NDExMDU4YzgtMWI0Ni00Y2E3LWE3M2UtZDRjMTQxODQwZTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9xE8dgwGGiwm8DEuSTpjo+QgBXk3aTJ4lpy Hf57L4LLOvZ6RcLPbIn7FeHNDCadGS4XStQknImjAlh7ssuDYxpfsgykGummtw7E 6ZzhslHd5qqELWb7JFT4NWu/G5pZaWvaSps6lHcjBTorku+mwH0v6bnnCexhfrdP plnIj/0gRHPFE7sfuaqRnaP1Kfa2gR/yivYCDJG4nTvdjaPtWusAaOa7IRQulN2l /Lt04SXeazqvFto4bLDU39aWwY3v21yDZ3mufIpKj98w5Oase3pLh2Sp0pK5bSDZ xGaf9m8zByMT/8rIjdPj/b/qYa/fiufBwdUVcJ7ST7spUAF3CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVyQJ0wtgngDXKNgjv/8JfK/ALVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDdhMjdjNWQtOWQwYy0z YTQ4LWI1MjYtODA2OTExZDI1ZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0VlsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQgsrRfK8W4rlXxQ4sDuAdhVFDO0ZvK4ag5nTY+J3v4O/rgNzklTHwx mF6yTjj6tAJPB4xUIo1MF2TfsCEKHMASLrND+CgFvRUtoLZx0hihh/L8U0tJG7G2 g3qts1Y1fb4V2cP0qZNtunu6KF0Ow0c2LI4ty6Lv+8V8YVGfKmokWg+XVYM33cDx qcQy/4Ra4mrzqYYJIj1Ih1Y6TBuS8VomzkHkb3fXI9vyxQqCdTbDmsIRK4UHdmJw sTP0dTVNNh8mb6u20Ao6xhEo9Bxm7rKFfvNI6bkbJq7T0tfvPzeRPFT+4L762Ljw invXgpGhoQjrtVeu3rbbqrnv+irXlW8= -----END CERTIFICATE-----Generated at Fri Mar 13 23:53:54 2026 by rpki-client