$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f1b96501-315e-366d-a2fc-5d5497e80367.roa File: f1b96501-315e-366d-a2fc-5d5497e80367.roa (raw, json) Hash identifier: r36/fFWXHYX09Gx+/HMBkonuMWGj0SC8jchfo1FuDMA= Subject key identifier: D2:96:4E:99:76:4C:F5:C8:D0:DE:85:78:E6:64:34:92:2A:A1:F0:40 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D1B19FEDFA15520EF3D184200 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f1b96501-315e-366d-a2fc-5d5497e80367.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 852 IP address blocks: 209.20.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:19:fe:df:a1:55:20:ef:3d:18:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=0d6dc84d-4595-48b9-b1e5-50bd9469b5b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e6:5f:3d:02:7c:cd:37:bc:ca:a2:46:0e:b5: ce:45:5d:48:20:5c:19:dc:c3:ce:61:5d:b6:d1:61: 23:47:53:bf:9d:62:2d:d1:92:6e:3f:1b:1b:c6:e4: 81:42:80:40:f9:79:61:3b:3d:2b:43:cc:fa:40:e3: 2c:01:5e:8d:2c:67:f9:6c:0b:21:71:97:c9:07:ec: 6f:68:7f:e1:7c:f2:58:d4:ac:7e:e6:7c:5d:b3:a5: f2:ab:25:78:07:c0:6d:d3:86:93:c5:c6:93:93:cc: 4e:b0:1d:e6:79:e0:01:2a:eb:48:c1:56:71:87:fd: 25:dd:cc:b4:b9:70:0f:ce:ce:cf:ea:c8:68:cf:e3: d8:3e:04:2b:34:bf:70:44:02:d8:d7:22:ea:8b:63: bc:75:7f:dc:64:90:c3:28:af:f1:58:0b:b9:8d:7a: a6:f2:e0:d8:3a:0e:78:6e:b4:9f:34:18:a7:ea:6f: a7:5c:1e:31:80:d5:43:1c:3d:b1:17:3d:74:3b:6b: 08:54:f9:75:44:3c:74:62:66:d8:62:39:c9:72:44: b5:a6:de:8e:15:29:78:74:1f:55:27:99:df:9c:9c: 21:58:87:53:8d:31:7d:ef:6a:41:ea:47:3f:c7:07: 5b:dc:fd:19:0d:04:70:8e:bc:cc:aa:51:84:2f:89: 28:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:96:4E:99:76:4C:F5:C8:D0:DE:85:78:E6:64:34:92:2A:A1:F0:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f1b96501-315e-366d-a2fc-5d5497e80367.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.20.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:e2:13:55:b9:a0:dd:02:9d:c3:20:27:0f:25:86:67:c2:1a: 69:51:d6:7b:94:e2:0d:c5:e9:f7:48:b2:53:60:d2:31:4c:94: 8a:7e:b7:dc:33:a9:1f:b3:d9:eb:09:91:c6:fe:a9:c3:ac:a7: 70:3b:f9:10:62:70:22:40:37:62:bc:fb:e7:12:3f:5e:0e:65: 96:f1:59:9d:c9:a0:55:8d:7f:4d:8f:ce:d7:38:a6:b7:db:c4: b6:0c:ff:07:c6:e2:cb:1c:9f:be:26:87:df:71:b3:68:d2:81: 8a:cd:5e:ff:39:ce:b4:07:e2:22:51:44:33:32:23:97:5a:58: b3:fb:47:bc:ce:68:a4:cd:dc:d3:40:99:5e:dd:61:09:a0:88: 56:26:6e:62:0a:93:55:e6:d7:2c:f3:66:aa:fd:a1:42:28:1e: ec:37:97:24:e2:e1:72:55:45:92:96:b0:5b:87:c8:79:65:92: 5f:63:39:0a:04:af:dd:7a:ef:44:4d:a8:00:36:bf:bd:af:9d: f7:6e:f5:3a:5c:29:2d:0b:04:0d:0c:89:4d:f0:cc:91:0e:e5: cd:6e:85:c5:8f:60:ef:7a:c0:31:48:35:f5:10:e6:05:35:a3: 71:97:8c:4a:1e:17:7d:3e:41:6e:a6:ef:ad:ca:8b:93:7b:41: f1:87:6b:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGf7foVUg7z0YQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk MGQ2ZGM4NGQtNDU5NS00OGI5LWIxZTUtNTBiZDk0NjliNWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheZfPQJ8zTe8yqJGDrXORV1IIFwZ3MPOYV22 0WEjR1O/nWIt0ZJuPxsbxuSBQoBA+XlhOz0rQ8z6QOMsAV6NLGf5bAshcZfJB+xv aH/hfPJY1Kx+5nxds6XyqyV4B8Bt04aTxcaTk8xOsB3meeABKutIwVZxh/0l3cy0 uXAPzs7P6shoz+PYPgQrNL9wRALY1yLqi2O8dX/cZJDDKK/xWAu5jXqm8uDYOg54 brSfNBin6m+nXB4xgNVDHD2xFz10O2sIVPl1RDx0YmbYYjnJckS1pt6OFSl4dB9V J5nfnJwhWIdTjTF972pB6kc/xwdb3P0ZDQRwjrzMqlGEL4kooQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKWTpl2TPXI0N6FeOZkNJIqofBAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZjFiOTY1MDEtMzE1ZS0z NjZkLWEyZmMtNWQ1NDk3ZTgwMzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0RQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjiE1W5oN0CncMgJw8lhmfCGmlR1nuU4g3F6fdIslNg0jFMlIp+t9wz qR+z2esJkcb+qcOsp3A7+RBicCJAN2K8++cSP14OZZbxWZ3JoFWNf02Pztc4prfb xLYM/wfG4sscn74mh99xs2jSgYrNXv85zrQH4iJRRDMyI5daWLP7R7zOaKTN3NNA mV7dYQmgiFYmbmIKk1Xm1yzzZqr9oUIoHuw3lyTi4XJVRZKWsFuHyHllkl9jOQoE r91670RNqAA2v72vnfdu9TpcKS0LBA0MiU3wzJEO5c1uhcWPYO96wDFINfUQ5gU1 o3GXjEoeF30+QW6m763Ki5N7QfGHaww= -----END CERTIFICATE-----Generated at Fri Mar 13 23:53:03 2026 by rpki-client