$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e7653f7e-eabb-370d-b6bb-50e21ccf1c94.roa File: e7653f7e-eabb-370d-b6bb-50e21ccf1c94.roa (raw, json) Hash identifier: ivVQ3xc3vhIGj3D3DEjREdJdNF1AL4Fcf7b/n+MVfsY= Subject key identifier: B8:B2:FA:EB:61:0B:1B:6F:E4:90:0C:63:47:23:12:B4:F3:32:6A:AD Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D0D424DAD1B0D2DED3EB1D800 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e7653f7e-eabb-370d-b6bb-50e21ccf1c94.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 207.194.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:4d:ad:1b:0d:2d:ed:3e:b1:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=3f3c16a7-8a2c-4a3c-b0fc-75d2e15075c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fa:97:6c:fc:75:94:9f:cf:ab:90:df:03:4b: bb:de:8e:20:8f:c3:b8:dd:e6:91:36:dc:5a:89:43: 89:7d:28:d9:0f:45:99:f9:ae:88:ef:8f:d5:dc:ed: d0:1c:be:e7:64:e2:a3:26:1d:8d:80:79:0e:7d:e3: fe:88:48:84:69:38:19:a4:33:84:3d:f8:f5:31:6d: 36:37:b0:1f:6f:94:6e:07:cf:25:32:d6:6d:eb:c4: 6e:b5:02:eb:01:53:2e:e4:ff:a4:b5:cb:72:d6:3c: c4:e2:f7:8a:75:b9:12:55:f6:95:8e:4d:47:43:bf: 23:88:eb:b5:e5:ca:4d:34:49:81:f7:fe:06:ab:df: ab:10:8d:3f:4b:2b:d4:cd:0c:eb:5d:8e:4c:c2:14: 4c:6d:61:5b:02:26:e5:c9:33:33:d3:f0:3c:a6:38: d9:4b:b1:f5:4e:ec:a4:a1:77:43:2b:22:b6:a9:d7: d3:1e:02:be:4e:1a:39:12:e2:b4:d8:eb:a9:77:a3: 1b:7a:31:f8:38:74:ea:a1:24:48:8a:4e:f2:38:b4: 14:64:2c:b7:c5:49:4f:e8:67:8a:d1:5a:6a:c3:3e: 84:29:c8:2a:31:e7:8b:bf:e9:f2:3f:3f:a0:7e:0a: ab:39:56:6f:1a:eb:42:e4:8a:cd:a5:f2:8c:06:38: 8b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B2:FA:EB:61:0B:1B:6F:E4:90:0C:63:47:23:12:B4:F3:32:6A:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e7653f7e-eabb-370d-b6bb-50e21ccf1c94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.194.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:68:e6:43:aa:3c:7a:2a:73:24:62:e8:87:eb:83:a3:97:63: 39:d2:88:c3:f3:1a:2c:cd:11:c0:b3:ad:f5:ed:e4:dd:ce:29: ee:85:7e:35:76:6b:c7:59:61:a3:19:c5:d2:1d:9f:64:9a:7a: b1:15:65:6e:35:bf:86:79:80:65:67:47:35:9f:69:d7:de:d5: 79:ac:3a:dc:fd:44:b9:df:97:5f:6a:e6:34:08:bb:46:9f:ba: 93:78:3b:8d:28:86:99:ba:17:8d:07:1b:8b:94:42:f0:b4:cf: 6a:14:17:e5:99:fa:80:b0:48:46:dc:8f:2a:2e:71:a5:48:c1: b0:8c:37:b9:32:5d:c9:29:81:cd:0f:14:e2:90:b5:a8:c1:58: 96:90:c4:4f:d2:6c:f5:71:6b:7d:4b:91:5b:62:c7:1f:11:d6: 9e:55:a1:33:e0:4b:ad:9b:eb:8a:5c:b1:72:a4:7a:0d:ab:61: 47:fd:38:e5:c0:7a:0f:42:cf:9f:bd:66:c8:f3:99:d4:81:16: 56:80:1f:3f:d4:07:1a:f1:6e:cf:38:e7:68:7f:02:ef:28:19: cc:af:9a:65:33:74:cf:68:c2:87:08:92:79:2f:59:0e:d9:48: 79:68:95:9b:a4:51:96:82:f4:41:92:41:ef:cd:c5:ce:8a:5f: 9b:e4:cc:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQk2tGw0t7T6x2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk M2YzYzE2YTctOGEyYy00YTNjLWIwZmMtNzVkMmUxNTA3NWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPqXbPx1lJ/Pq5DfA0u73o4gj8O43eaRNtxa iUOJfSjZD0WZ+a6I74/V3O3QHL7nZOKjJh2NgHkOfeP+iEiEaTgZpDOEPfj1MW02 N7Afb5RuB88lMtZt68RutQLrAVMu5P+ktcty1jzE4veKdbkSVfaVjk1HQ78jiOu1 5cpNNEmB9/4Gq9+rEI0/SyvUzQzrXY5MwhRMbWFbAiblyTMz0/A8pjjZS7H1Tuyk oXdDKyK2qdfTHgK+Tho5EuK02Oupd6MbejH4OHTqoSRIik7yOLQUZCy3xUlP6GeK 0Vpqwz6EKcgqMeeLv+nyPz+gfgqrOVZvGutC5IrNpfKMBjiLPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiy+uthCxtv5JAMY0cjErTzMmqtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZTc2NTNmN2UtZWFiYi0z NzBkLWI2YmItNTBlMjFjY2YxYzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz8LIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZo5kOqPHoqcyRi6Ifrg6OXYznSiMPzGizNEcCzrfXt5N3OKe6FfjV2 a8dZYaMZxdIdn2SaerEVZW41v4Z5gGVnRzWfadfe1XmsOtz9RLnfl19q5jQIu0af upN4O40ohpm6F40HG4uUQvC0z2oUF+WZ+oCwSEbcjyoucaVIwbCMN7kyXckpgc0P FOKQtajBWJaQxE/SbPVxa31LkVtixx8R1p5VoTPgS62b64pcsXKkeg2rYUf9OOXA eg9Cz5+9ZsjzmdSBFlaAHz/UBxrxbs8452h/Au8oGcyvmmUzdM9owocIknkvWQ7Z SHlolZukUZaC9EGSQe/Nxc6KX5vkzD0= -----END CERTIFICATE-----Generated at Fri Mar 13 23:51:52 2026 by rpki-client