$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/de791f6f-55b0-308e-b01a-7d78aff6921b.roa File: de791f6f-55b0-308e-b01a-7d78aff6921b.roa (raw, json) Hash identifier: zza011ncDRrN6ZM5YgvRqPLhi6PwA+fTCwlrRTM0UHM= Subject key identifier: CA:B7:53:00:61:20:C3:DA:C7:F5:60:70:E8:F6:5B:81:53:2A:F7:18 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D91C0110A8CD0A2A1069FE238 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/de791f6f-55b0-308e-b01a-7d78aff6921b.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 7861 IP address blocks: 209.29.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:11:0a:8c:d0:a2:a1:06:9f:e2:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=2a7ce745-6400-4ead-b0be-2c8c4d7598ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ad:05:27:2a:71:e2:0e:0b:b0:5a:b6:4a:65: be:ab:5a:be:9a:9d:ec:b9:8f:df:3a:88:1e:d0:8e: 0a:3d:10:c8:ce:b9:42:0a:d9:dc:9d:66:70:8b:e7: 50:73:23:4b:1d:a2:88:73:dd:99:d7:e1:d2:c5:a2: 97:2b:86:58:d3:9f:07:e1:d5:69:ea:69:5e:0a:0b: 17:e1:87:9e:fc:87:50:dc:f7:8c:33:ef:b4:fe:30: 9a:06:28:0c:66:92:ff:78:95:7a:41:cc:61:4f:35: a5:9b:c2:a0:d2:2c:5b:91:07:84:2e:18:d3:73:6a: f6:5d:3c:19:a4:f8:d8:df:f2:22:02:f4:d3:2d:0d: 1d:f0:d2:8b:5e:a9:be:e6:60:9c:96:67:d1:34:c6: 27:60:37:4e:9c:67:7c:c0:15:53:d3:ec:b7:4f:37: f7:61:29:05:22:d0:7d:c3:7d:14:db:43:38:a9:fc: 9a:5e:84:07:b6:63:8e:f5:e7:7f:fd:5c:cc:a0:db: a4:72:bb:a8:f6:c7:5e:9e:14:e2:ca:13:96:b8:bc: 47:03:85:d7:47:89:e8:61:5a:8f:f0:7e:ec:ad:e3: c1:d9:91:71:c6:51:f2:2c:24:ad:fd:3a:b0:1b:29: e1:6a:db:c0:2e:f8:8f:45:66:3b:dc:18:8d:61:f5: da:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B7:53:00:61:20:C3:DA:C7:F5:60:70:E8:F6:5B:81:53:2A:F7:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/de791f6f-55b0-308e-b01a-7d78aff6921b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.29.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:06:1a:46:26:31:a7:6a:b2:b2:59:d6:03:f2:d4:d7:19:6a: a2:9c:2e:e7:8c:90:b9:6a:86:6e:28:ea:fb:f1:28:04:1c:11: 4c:c2:91:d4:b1:bb:a8:18:65:f8:df:b9:40:20:b0:f6:13:8a: 3c:8b:d4:75:a5:ef:89:63:86:fb:b3:b7:b8:df:ea:42:5f:bb: 10:0f:50:76:2e:4a:3c:f2:53:2b:6c:89:ab:6b:cf:78:30:6b: bc:9f:82:c3:5b:db:1b:ab:b5:44:17:96:be:fc:27:7f:88:0d: 1e:41:38:00:fe:ac:f1:50:09:a4:19:ae:fb:9c:f1:41:33:e2: 50:55:cf:29:b9:1b:43:2f:e8:32:2c:05:d2:4c:41:69:45:31: ed:df:ba:f5:9c:d6:6a:88:4f:f6:42:2c:b8:dd:20:ad:16:35: d1:85:cf:8c:cf:74:72:3d:62:27:86:46:6d:82:20:37:b2:43: 94:8d:11:1e:9c:c4:70:fa:a4:1e:f2:5b:b6:63:18:cd:48:2b: 67:ff:cd:66:e9:4d:4f:9a:8c:be:06:e4:5b:e0:fb:49:1d:f9: 8b:fb:5c:8b:2d:cb:3f:4d:03:2c:b2:be:b9:4f:b5:96:b0:6a: fa:c3:97:81:b7:a1:7f:85:40:fe:c3:31:dc:5e:ba:44:4b:8c: dd:fd:c8:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwBEKjNCioQaf4jgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk MmE3Y2U3NDUtNjQwMC00ZWFkLWIwYmUtMmM4YzRkNzU5OGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh60FJypx4g4LsFq2SmW+q1q+mp3suY/fOoge 0I4KPRDIzrlCCtncnWZwi+dQcyNLHaKIc92Z1+HSxaKXK4ZY058H4dVp6mleCgsX 4Yee/IdQ3PeMM++0/jCaBigMZpL/eJV6QcxhTzWlm8Kg0ixbkQeELhjTc2r2XTwZ pPjY3/IiAvTTLQ0d8NKLXqm+5mCclmfRNMYnYDdOnGd8wBVT0+y3Tzf3YSkFItB9 w30U20M4qfyaXoQHtmOO9ed//VzMoNukcruo9sdenhTiyhOWuLxHA4XXR4noYVqP 8H7srePB2ZFxxlHyLCSt/TqwGynhatvALviPRWY73BiNYfXa6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMq3UwBhIMPax/VgcOj2W4FTKvcYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZGU3OTFmNmYtNTViMC0z MDhlLWIwMWEtN2Q3OGFmZjY5MjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0R3jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL8GGkYmMadqsrJZ1gPy1NcZaqKcLueMkLlqhm4o6vvxKAQcEUzCkdSx u6gYZfjfuUAgsPYTijyL1HWl74ljhvuzt7jf6kJfuxAPUHYuSjzyUytsiatrz3gw a7yfgsNb2xurtUQXlr78J3+IDR5BOAD+rPFQCaQZrvuc8UEz4lBVzym5G0Mv6DIs BdJMQWlFMe3fuvWc1mqIT/ZCLLjdIK0WNdGFz4zPdHI9YieGRm2CIDeyQ5SNER6c xHD6pB7yW7ZjGM1IK2f/zWbpTU+ajL4G5Fvg+0kd+Yv7XIstyz9NAyyyvrlPtZaw avrDl4G3oX+FQP7DMdxeukRLjN39yBs= -----END CERTIFICATE-----Generated at Tue Apr 28 08:45:40 2026 by rpki-client