$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e0972672-e679-3bd6-97ed-6d9fb5022064.roa File: e0972672-e679-3bd6-97ed-6d9fb5022064.roa (raw, json) Hash identifier: Z/9mWajLnbID6yFjwho+q5YjQiY7QstLi4438UJoQW8= Subject key identifier: 9D:EE:7E:FE:64:5A:61:C6:76:D7:D2:87:0A:8E:B1:70:7C:E6:58:05 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584DF21084EFE007E8DFFD048000 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e0972672-e679-3bd6-97ed-6d9fb5022064.roa Signing time: Mon 25 May 2026 01:00:24 +0000 ROA not before: Mon 25 May 2026 01:00:24 +0000 ROA not after: Sun 23 Aug 2026 01:00:24 +0000 asID: 7861 IP address blocks: 209.91.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f2:10:84:ef:e0:07:e8:df:fd:04:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: May 25 01:00:24 2026 GMT Not After : Aug 23 01:00:24 2026 GMT Subject: CN=fb5bb63c-17c2-46a9-aaab-448e2cfe9778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:86:df:f2:30:a6:c7:33:d1:1c:0d:b7:21:31: 47:5a:bc:5f:fb:f7:56:e2:53:31:43:69:0a:af:97: 1a:ce:72:a2:83:b9:61:f4:03:ff:d9:28:a8:d9:5c: 48:95:8e:66:bd:f0:30:00:5e:be:2e:f0:45:8a:f8: 02:3d:3b:b2:44:01:53:42:c4:9b:e4:00:ac:df:97: 47:52:d1:83:b2:8e:39:71:1c:f8:ee:0e:9e:e7:9e: 5b:ca:7c:dd:a1:3f:e9:30:03:bc:4c:d1:56:b9:7e: 9b:d3:ca:f7:1c:b0:95:46:df:53:23:dc:04:2d:9a: 4e:5a:da:0e:74:8d:fe:09:12:54:54:45:09:a5:39: a5:03:c7:78:ce:52:36:3e:c8:a6:15:22:4e:40:2f: 78:c1:cf:b1:73:9c:a3:75:5c:0a:74:4d:01:fd:b8: 34:90:8d:e8:b3:64:14:38:b8:f7:7f:37:34:63:2d: 0a:d0:bb:17:c7:13:c4:47:27:1a:1a:8f:47:9c:59: c7:13:d9:c8:c2:fe:b2:01:fa:35:49:53:a1:52:f6: fb:bd:ff:44:13:8a:d7:02:88:ab:c5:bf:09:64:39: f4:ec:b4:09:d9:7a:78:13:7a:a2:cb:71:cf:f6:78: 4f:a0:1e:3a:35:12:a1:30:22:00:3c:20:ee:ca:99: e8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:EE:7E:FE:64:5A:61:C6:76:D7:D2:87:0A:8E:B1:70:7C:E6:58:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e0972672-e679-3bd6-97ed-6d9fb5022064.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.91.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:d2:03:51:a5:9c:96:9e:b6:04:80:70:bf:cf:55:f4:55:18: 72:62:5a:29:f3:39:a9:6b:66:95:5a:a5:1d:03:af:95:36:bd: 24:69:9d:14:b5:f1:dc:26:6b:4c:99:a8:ec:09:41:d8:c6:f8: 0a:fa:02:43:ef:4f:70:8f:fb:cf:ec:9f:0b:ba:20:af:c5:f6: e8:e5:4c:df:2d:ce:cd:bd:46:91:99:23:0c:af:2d:7b:95:af: 25:4a:87:2f:36:01:6e:50:dd:c1:42:78:81:fd:ea:99:f2:1c: 93:e2:c1:86:26:94:b2:82:19:26:a4:01:96:ec:3a:52:07:0f: 5e:c5:68:33:65:2c:bb:84:58:b7:04:ed:76:98:25:c3:68:8b: 50:1c:a7:03:27:8a:46:2d:c5:1d:25:dd:00:23:62:99:1d:77: 68:85:a1:b5:78:b5:06:c5:68:c4:33:a7:6b:24:db:7f:2f:16: 1b:b8:ce:35:bc:bf:bd:3a:ba:0b:97:1a:bb:2a:aa:ec:1c:ae: 26:8d:2f:10:6c:44:a7:9d:4d:71:cb:21:b6:39:62:a8:44:b2: ca:f9:99:6e:e1:be:04:31:b5:8e:ba:30:37:30:59:cb:b8:c1: 2e:56:e7:f1:ad:dc:01:cc:33:d6:ff:6a:24:6d:90:8f:e2:15: 7c:b1:f6:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3yEITv4Afo3/0EgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDUyNTAxMDAyNFoXDTI2MDgyMzAxMDAyNFowLzEtMCsGA1UEAxMk ZmI1YmI2M2MtMTdjMi00NmE5LWFhYWItNDQ4ZTJjZmU5Nzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIbf8jCmxzPRHA23ITFHWrxf+/dW4lMxQ2kK r5caznKig7lh9AP/2Sio2VxIlY5mvfAwAF6+LvBFivgCPTuyRAFTQsSb5ACs35dH UtGDso45cRz47g6e555bynzdoT/pMAO8TNFWuX6b08r3HLCVRt9TI9wELZpOWtoO dI3+CRJUVEUJpTmlA8d4zlI2PsimFSJOQC94wc+xc5yjdVwKdE0B/bg0kI3os2QU OLj3fzc0Yy0K0LsXxxPERycaGo9HnFnHE9nIwv6yAfo1SVOhUvb7vf9EE4rXAoir xb8JZDn07LQJ2Xp4E3qiy3HP9nhPoB46NRKhMCIAPCDuypnoBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3ufv5kWmHGdtfShwqOsXB85lgFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZTA5NzI2NzItZTY3OS0z YmQ2LTk3ZWQtNmQ5ZmI1MDIyMDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Vt0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPSA1GlnJaetgSAcL/PVfRVGHJiWinzOalrZpVapR0Dr5U2vSRpnRS1 8dwma0yZqOwJQdjG+Ar6AkPvT3CP+8/snwu6IK/F9ujlTN8tzs29RpGZIwyvLXuV ryVKhy82AW5Q3cFCeIH96pnyHJPiwYYmlLKCGSakAZbsOlIHD17FaDNlLLuEWLcE 7XaYJcNoi1AcpwMnikYtxR0l3QAjYpkdd2iFobV4tQbFaMQzp2sk238vFhu4zjW8 v706uguXGrsqquwcriaNLxBsRKedTXHLIbY5YqhEssr5mW7hvgQxtY66MDcwWcu4 wS5W5/Gt3AHMM9b/aiRtkI/iFXyx9g4= -----END CERTIFICATE-----Generated at Fri Jun 12 22:51:30 2026 by rpki-client