$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1c405104-ce81-34dd-86ff-db540904d806.roa File: 1c405104-ce81-34dd-86ff-db540904d806.roa (raw, json) Hash identifier: Dw0Ko5vTuNqNs9zNxJ6lubtFHnMUr2zJ9v99zH7YtWQ= Subject key identifier: 72:11:C5:63:0F:FB:19:DD:69:FB:E8:61:B2:70:79:18:94:A6:55:76 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584D300A4C32CCC34E8F57D64F00 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1c405104-ce81-34dd-86ff-db540904d806.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 10397 IP address blocks: 209.209.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:4c:32:cc:c3:4e:8f:57:d6:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=ee7a81d6-b316-46eb-99b2-9e7751dffff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:95:79:07:d4:38:f7:e6:38:ea:77:d4:48:88: 8a:80:66:6b:e0:39:99:2c:35:48:13:83:81:51:56: e9:5b:50:68:ce:36:63:ef:06:1d:bf:af:83:6d:2e: d9:0a:51:bc:59:70:62:ac:da:59:95:47:32:d4:c3: d0:5f:3c:e9:fb:98:8c:25:76:d5:03:6e:35:63:79: e6:20:e7:33:f7:0a:18:d4:a9:1a:6e:8a:c8:c3:65: 45:68:e6:7b:85:38:5e:95:05:c9:71:22:3a:24:ba: 8b:42:08:84:1b:f0:d6:13:e3:e9:91:94:76:8a:4c: af:c4:e5:3f:72:fb:e9:96:ba:7b:c1:86:78:ad:39: d8:a2:00:0a:41:f5:7b:46:50:a4:cd:a4:59:9b:ca: 33:9f:de:ae:7b:af:95:02:ef:d2:34:a2:96:4a:ea: 5f:c2:a0:50:4d:fd:17:6d:e1:38:34:ba:78:f2:95: 90:1d:3c:07:d4:2c:13:9b:94:b0:f4:fa:17:a0:b0: 3b:cc:8f:df:5d:0d:b5:ed:57:dd:04:64:46:b2:3d: a7:52:24:fa:d2:8b:32:9d:af:88:9e:9c:9a:96:98: f8:4d:b6:e7:c7:8c:84:9b:f3:63:96:76:77:2d:4d: ce:c0:69:88:88:5e:ec:d5:76:c4:d3:f0:5d:1c:14: 59:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:11:C5:63:0F:FB:19:DD:69:FB:E8:61:B2:70:79:18:94:A6:55:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1c405104-ce81-34dd-86ff-db540904d806.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 209.209.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:ae:91:fb:c0:62:1d:31:7a:03:74:35:ec:01:5d:4c:46:ad: db:68:8b:ec:6c:fd:d8:e4:d4:de:a3:aa:c7:36:55:6c:e1:e4: 00:40:1e:2f:bf:42:e8:bb:6a:52:52:e8:32:f9:c6:03:b3:b0: 8d:81:55:60:da:1b:6d:12:08:4f:83:2b:1f:15:37:48:66:27: 7a:4a:b9:bd:20:c7:81:80:a9:a4:21:5c:4a:b4:f3:8d:fa:4c: df:55:97:93:8c:c7:f0:cc:d0:d2:93:82:3e:31:97:f0:d3:ea: 08:95:6c:cd:96:2d:ba:68:5d:e5:9c:19:55:fb:94:52:74:a0: 55:10:2d:b5:35:77:03:40:f0:fb:9c:c6:9d:f9:f4:a9:05:90: f7:74:67:85:09:f7:91:9e:19:1b:b4:07:d5:b8:69:d1:a7:e2: 31:f9:19:5e:84:89:93:cb:31:20:66:a5:40:9a:7f:4f:fa:31: 75:50:2f:cc:1f:54:fa:77:05:09:cf:65:bc:bc:62:c6:53:6b: bf:ec:1b:aa:38:8e:5e:25:09:2d:a3:e7:0a:29:8c:b6:8a:07: da:11:73:56:da:74:58:e3:0e:67:09:fa:d3:88:18:35:88:78: fe:99:c4:bc:cf:43:e6:c1:8c:65:c3:53:51:93:25:27:20:f2: 64:5c:7e:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCkwyzMNOj1fWTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZWU3YTgxZDYtYjMxNi00NmViLTk5YjItOWU3NzUxZGZmZmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65V5B9Q49+Y46nfUSIiKgGZr4DmZLDVIE4OB UVbpW1BozjZj7wYdv6+DbS7ZClG8WXBirNpZlUcy1MPQXzzp+5iMJXbVA241Y3nm IOcz9woY1KkaborIw2VFaOZ7hThelQXJcSI6JLqLQgiEG/DWE+PpkZR2ikyvxOU/ cvvplrp7wYZ4rTnYogAKQfV7RlCkzaRZm8ozn96ue6+VAu/SNKKWSupfwqBQTf0X beE4NLp48pWQHTwH1CwTm5Sw9PoXoLA7zI/fXQ217VfdBGRGsj2nUiT60osyna+I npyalpj4Tbbnx4yEm/NjlnZ3LU3OwGmIiF7s1XbE0/BdHBRZwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIRxWMP+xndafvoYbJweRiUplV2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvMWM0MDUxMDQtY2U4MS0z NGRkLTg2ZmYtZGI1NDA5MDRkODA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dGrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWukfvAYh0xegN0NewBXUxGrdtoi+xs/djk1N6jqsc2VWzh5ABAHi+/ Qui7alJS6DL5xgOzsI2BVWDaG20SCE+DKx8VN0hmJ3pKub0gx4GAqaQhXEq08436 TN9Vl5OMx/DM0NKTgj4xl/DT6giVbM2WLbpoXeWcGVX7lFJ0oFUQLbU1dwNA8Puc xp359KkFkPd0Z4UJ95GeGRu0B9W4adGn4jH5GV6EiZPLMSBmpUCaf0/6MXVQL8wf VPp3BQnPZby8YsZTa7/sG6o4jl4lCS2j5wopjLaKB9oRc1badFjjDmcJ+tOIGDWI eP6ZxLzPQ+bBjGXDU1GTJScg8mRcfv8= -----END CERTIFICATE-----Generated at Thu Mar 26 17:22:59 2026 by rpki-client