$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f18747e6-7bea-32fa-877d-0db804fae88a.roa File: f18747e6-7bea-32fa-877d-0db804fae88a.roa (raw, json) Hash identifier: SBYfHGazGJ0aoG+CEfhfCvsGj2D3BIPRQVu9gl5pZyQ= Subject key identifier: AD:A9:E8:12:F2:F4:71:CB:7C:2C:71:45:2C:F6:FA:D4:19:EA:AF:44 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584D0EA7B427A935872DA106D780 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f18747e6-7bea-32fa-877d-0db804fae88a.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 10397 IP address blocks: 209.209.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:b4:27:a9:35:87:2d:a1:06:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=573ecc73-d4f9-4b60-8e79-fcfbccf13f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:26:73:10:fc:e5:67:44:d6:55:6b:c8:38:31: c6:53:d0:73:43:a7:99:b0:05:51:82:11:e4:ab:a4: 3d:df:b3:75:a9:02:97:d8:87:63:b0:63:9f:8a:f5: 90:92:8c:77:9f:6e:57:a3:23:ea:56:d8:7d:2a:4b: cf:77:63:1a:90:d4:29:fa:48:7c:dd:7c:c0:19:71: aa:3f:cf:bd:5d:bf:22:8f:49:6d:3e:df:52:32:de: 0a:54:68:34:eb:61:1c:63:f8:8e:8d:8f:35:90:72: 66:2f:3c:3c:23:6b:28:ac:57:04:fa:3d:b9:fa:32: 57:ed:30:5c:89:7f:7c:21:4b:4c:62:a5:8a:fc:07: b3:a5:51:62:f8:78:d1:99:21:a0:73:11:69:e0:80: 3e:82:93:1e:43:9c:ec:5d:2e:36:c8:82:3f:e6:10: a7:f6:4b:4c:11:10:18:c1:6c:9c:1c:b9:d6:d2:df: 21:b4:2b:79:d4:1c:61:37:8a:81:9e:37:7d:65:6c: 08:dd:3a:c7:0c:74:af:10:05:62:6f:ea:95:71:34: 4e:0d:f4:68:05:06:af:84:b6:c0:dc:6f:2c:3e:f2: 78:41:84:8b:d7:36:c4:a9:52:c6:d2:3c:1b:73:aa: 63:84:0a:dc:92:16:49:be:31:71:75:bc:2c:bc:18: 26:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A9:E8:12:F2:F4:71:CB:7C:2C:71:45:2C:F6:FA:D4:19:EA:AF:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f18747e6-7bea-32fa-877d-0db804fae88a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 209.209.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:43:b6:27:48:2c:d4:36:1d:c5:43:6c:9a:60:87:1f:69:af: 41:ed:2a:69:16:74:a8:96:6d:28:4d:e9:df:82:05:40:81:11: c7:00:87:a3:9e:66:80:58:6a:c8:8b:85:df:58:9c:f2:c8:76: ee:46:2a:88:a3:d6:60:8c:84:cf:c4:11:0e:6f:ef:92:04:68: de:1f:61:ed:7f:a1:26:52:21:c4:59:1c:6e:22:86:4d:1c:ca: 78:db:8f:18:61:09:26:ec:36:32:8f:e1:da:ad:1e:ca:b6:36: 37:39:6b:8d:e2:35:fa:7e:67:1c:2c:f9:d8:4b:ae:5a:59:db: 20:e8:b7:bd:c9:85:7a:36:07:f5:56:d6:2a:ce:73:36:be:76: e4:29:02:b7:35:36:ca:74:36:44:de:39:3f:90:15:18:f1:f6: eb:1f:a2:dc:3f:93:63:8a:ad:66:4d:5a:6e:98:19:2b:75:8f: 47:10:fd:59:60:11:ad:15:32:f1:3a:8b:e3:a9:4e:22:d8:8b: 73:f4:68:69:2e:a6:91:09:1c:f5:74:4d:a4:d1:18:06:c3:e7: e4:91:cc:59:55:dd:ff:68:de:69:af:1a:a6:e3:f8:56:12:c7: e2:83:08:df:d3:18:e4:11:1e:da:f5:32:78:99:30:18:db:b8: 08:69:cf:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op7QnqTWHLaEG14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk NTczZWNjNzMtZDRmOS00YjYwLThlNzktZmNmYmNjZjEzZjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSZzEPzlZ0TWVWvIODHGU9BzQ6eZsAVRghHk q6Q937N1qQKX2IdjsGOfivWQkox3n25XoyPqVth9KkvPd2MakNQp+kh83XzAGXGq P8+9Xb8ij0ltPt9SMt4KVGg062EcY/iOjY81kHJmLzw8I2sorFcE+j25+jJX7TBc iX98IUtMYqWK/AezpVFi+HjRmSGgcxFp4IA+gpMeQ5zsXS42yII/5hCn9ktMERAY wWycHLnW0t8htCt51BxhN4qBnjd9ZWwI3TrHDHSvEAVib+qVcTRODfRoBQavhLbA 3G8sPvJ4QYSL1zbEqVLG0jwbc6pjhArckhZJvjFxdbwsvBgmpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2p6BLy9HHLfCxxRSz2+tQZ6q9EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvZjE4NzQ3ZTYtN2JlYS0z MmZhLTg3N2QtMGRiODA0ZmFlODhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dGqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBDtidILNQ2HcVDbJpghx9pr0HtKmkWdKiWbShN6d+CBUCBEccAh6Oe ZoBYasiLhd9YnPLIdu5GKoij1mCMhM/EEQ5v75IEaN4fYe1/oSZSIcRZHG4ihk0c ynjbjxhhCSbsNjKP4dqtHsq2Njc5a43iNfp+Zxws+dhLrlpZ2yDot73JhXo2B/VW 1irOcza+duQpArc1Nsp0NkTeOT+QFRjx9usfotw/k2OKrWZNWm6YGSt1j0cQ/Vlg Ea0VMvE6i+OpTiLYi3P0aGkuppEJHPV0TaTRGAbD5+SRzFlV3f9o3mmvGqbj+FYS x+KDCN/TGOQRHtr1MniZMBjbuAhpzyw= -----END CERTIFICATE-----Generated at Thu Mar 26 16:55:23 2026 by rpki-client