$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/65dc74d0-0933-3de3-b4ac-28d1f59dc9df.roa File: 65dc74d0-0933-3de3-b4ac-28d1f59dc9df.roa (raw, json) Hash identifier: 3DgAEKgy8wXP1f588DmMVDanS6h6ZMsX5E0F/099aRE= Subject key identifier: 1E:F4:8F:D2:91:17:F0:35:52:87:E4:45:4F:B2:89:D8:5B:66:22:B8 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584D362C0B977F1667CF085F1480 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/65dc74d0-0933-3de3-b4ac-28d1f59dc9df.roa Signing time: Wed 18 Mar 2026 17:43:58 +0000 ROA not before: Wed 18 Mar 2026 17:43:58 +0000 ROA not after: Tue 16 Jun 2026 17:43:58 +0000 asID: 20001 IP address blocks: 209.59.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:36:2c:0b:97:7f:16:67:cf:08:5f:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Mar 18 17:43:58 2026 GMT Not After : Jun 16 17:43:58 2026 GMT Subject: CN=8f4a34d2-fb6f-4e1c-b798-7a81be90da62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fa:14:ee:67:2e:7e:29:2a:30:b3:14:db:a4: 07:0e:f2:37:d5:d2:da:cf:ea:a9:d2:38:36:3e:de: fe:f1:bc:9f:76:13:35:e0:e0:c2:e0:d9:39:12:85: 0d:dc:44:43:9a:d1:87:69:88:b6:70:a0:6e:9f:d8: 91:1c:bb:1f:86:d6:98:7b:d6:59:55:25:3e:95:51: 4d:73:8a:6f:e0:d9:fd:02:7a:9f:84:62:1f:96:4e: 24:71:4b:53:98:e6:f4:d7:07:97:58:39:b5:3e:e4: 82:cb:66:3c:6b:ce:8f:04:df:66:75:98:89:c7:ab: 1d:ac:fa:bb:81:6e:43:dc:6c:a1:22:0a:04:60:1b: e1:48:99:f8:b5:5b:d0:f4:30:78:f4:e4:cb:5b:ee: ff:3b:c6:49:6d:00:49:e9:4a:f6:fd:7c:da:20:31: 69:e4:96:d4:ac:90:b7:67:37:44:97:b7:f6:e3:1b: 9a:32:66:c2:e9:7a:39:84:11:45:3d:40:03:c6:68: 82:9e:50:b5:b2:8d:95:84:ce:43:a7:c7:7e:4f:33: 7f:5e:f6:4e:2c:b5:22:97:2e:58:fa:8b:88:2f:f7: 7d:88:c0:a6:b3:16:43:4d:f2:51:f5:ee:e5:61:c2: 71:ef:a8:ae:db:3c:ee:62:b1:f3:59:08:55:16:1c: 92:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F4:8F:D2:91:17:F0:35:52:87:E4:45:4F:B2:89:D8:5B:66:22:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/65dc74d0-0933-3de3-b4ac-28d1f59dc9df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 209.59.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:0c:59:d2:4f:14:31:f7:53:18:82:11:30:81:27:e8:b4:d2: 68:ad:ad:7b:9d:22:e3:e7:a6:81:6f:2d:02:7b:0a:fe:19:8e: 30:56:10:a5:1f:e6:21:c4:78:c8:15:a3:e5:2b:f6:ec:d2:0f: 35:21:f3:a8:fb:69:e9:e6:65:dd:c6:69:dc:09:cb:c0:70:d5: fb:c8:94:b1:1a:71:d5:a8:1d:93:f4:0d:63:f4:f6:1e:05:e6: 09:79:09:ef:6a:83:04:21:ed:ef:7f:1c:da:84:22:14:eb:a1: 7d:55:3a:81:eb:9a:1a:91:07:c5:81:e3:dd:f5:a4:38:79:de: ad:69:d1:0a:ce:41:f5:80:83:a2:ec:d0:6e:47:8b:a4:02:f8: 30:dd:5a:44:0b:f0:7a:15:89:42:b6:33:a1:2e:1b:5a:95:83: fc:05:d9:de:f0:16:5a:06:16:41:f3:27:fb:e8:69:8a:0b:9e: aa:3c:a0:62:b6:f2:33:6b:af:d1:82:c7:9b:be:ea:bf:39:44: 98:df:15:53:f0:7e:95:74:8a:6b:a4:6d:51:08:13:c5:bb:2d: 17:0e:0f:3c:c4:83:c5:9d:20:16:4b:60:bb:27:c1:04:a1:d3: a3:5f:d2:ac:2b:7f:76:a7:50:a0:28:ac:1d:c2:18:53:ce:9d: 35:60:dc:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE02LAuXfxZnzwhfFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDMxODE3NDM1OFoXDTI2MDYxNjE3NDM1OFowLzEtMCsGA1UEAxMk OGY0YTM0ZDItZmI2Zi00ZTFjLWI3OTgtN2E4MWJlOTBkYTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/oU7mcufikqMLMU26QHDvI31dLaz+qp0jg2 Pt7+8byfdhM14ODC4Nk5EoUN3ERDmtGHaYi2cKBun9iRHLsfhtaYe9ZZVSU+lVFN c4pv4Nn9AnqfhGIflk4kcUtTmOb01weXWDm1PuSCy2Y8a86PBN9mdZiJx6sdrPq7 gW5D3GyhIgoEYBvhSJn4tVvQ9DB49OTLW+7/O8ZJbQBJ6Ur2/XzaIDFp5JbUrJC3 ZzdEl7f24xuaMmbC6Xo5hBFFPUADxmiCnlC1so2VhM5Dp8d+TzN/XvZOLLUily5Y +ouIL/d9iMCmsxZDTfJR9e7lYcJx76iu2zzuYrHzWQhVFhyS1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB70j9KRF/A1UofkRU+yidhbZiK4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNjVkYzc0ZDAtMDkzMy0z ZGUzLWI0YWMtMjhkMWY1OWRjOWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TvlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAMWdJPFDH3UxiCETCBJ+i00mitrXudIuPnpoFvLQJ7Cv4ZjjBWEKUf 5iHEeMgVo+Ur9uzSDzUh86j7aenmZd3GadwJy8Bw1fvIlLEacdWoHZP0DWP09h4F 5gl5Ce9qgwQh7e9/HNqEIhTroX1VOoHrmhqRB8WB4931pDh53q1p0QrOQfWAg6Ls 0G5Hi6QC+DDdWkQL8HoViUK2M6EuG1qVg/wF2d7wFloGFkHzJ/voaYoLnqo8oGK2 8jNrr9GCx5u+6r85RJjfFVPwfpV0imukbVEIE8W7LRcODzzEg8WdIBZLYLsnwQSh 06Nf0qwrf3anUKAorB3CGFPOnTVg3CI= -----END CERTIFICATE-----Generated at Thu Mar 26 06:01:54 2026 by rpki-client