$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0570ebae-fcff-332a-9a31-c6bb30ad19a9.roa File: 0570ebae-fcff-332a-9a31-c6bb30ad19a9.roa (raw, json) Hash identifier: mr/AazktbBxJME15rzYVJZ2zx89xhUl8riJH9ApomdQ= Subject key identifier: 65:F8:08:B6:BF:F3:19:04:B8:F7:26:85:55:F5:E5:8C:CB:6A:CD:81 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D0D4251A2CCD82E13C6923040 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0570ebae-fcff-332a-9a31-c6bb30ad19a9.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 25668 IP address blocks: 208.181.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:51:a2:cc:d8:2e:13:c6:92:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=0eaaa446-99f5-4592-b54d-eca4222eb2bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:64:20:59:e9:a3:d7:24:a7:a1:0a:00:46:dc: 5c:82:af:8b:94:69:0b:40:40:79:74:89:4b:49:8f: 5e:be:9f:f8:dd:66:c1:e1:2a:11:49:89:10:1b:50: 6c:ad:75:1f:6b:82:e8:db:97:ba:0e:1a:23:df:26: 47:12:cf:a4:50:65:c4:7f:72:13:c4:c7:ee:2d:99: 11:01:8a:32:7f:cf:79:aa:8a:4d:09:3e:d9:a7:24: 81:37:eb:6a:e2:29:b0:fb:2f:53:70:19:4d:d4:a0: 3d:ab:ef:27:b1:bb:38:95:4b:47:7e:63:35:27:b0: d9:2b:a9:72:6d:8a:51:a5:71:95:03:13:ab:78:a5: 54:3c:e5:02:01:c5:9b:88:67:81:dd:90:ed:f2:fc: 9f:25:86:41:ac:6f:ff:55:ed:e5:c3:51:75:8d:11: 18:6b:6d:5a:3a:e6:e7:20:59:39:d8:db:82:65:b9: e1:af:77:b6:42:2a:69:ea:b6:28:b0:2b:6b:69:52: d2:3c:9b:31:11:28:aa:14:5a:b3:30:43:85:d8:53: e4:29:8e:b5:db:7d:eb:6f:92:66:ae:bd:51:aa:52: 30:f9:7c:bd:05:f7:d1:4a:d0:ad:83:43:fe:5d:fe: 11:b0:8b:00:ad:7c:a8:8d:38:c2:87:1f:1b:ed:8b: 06:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F8:08:B6:BF:F3:19:04:B8:F7:26:85:55:F5:E5:8C:CB:6A:CD:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0570ebae-fcff-332a-9a31-c6bb30ad19a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 208.181.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:bd:02:b1:b7:04:86:2f:85:16:f3:5d:d4:3e:33:e2:d2:c7: 58:a0:10:ef:8e:11:fc:c8:0d:cd:df:91:40:4a:7a:93:8c:09: ee:60:fa:6d:9a:0b:df:f3:3b:b0:da:ec:b0:58:be:6a:c2:8b: 01:5a:1a:b8:2b:86:3e:ac:ba:b6:e8:f8:10:b5:92:b2:31:c6: 65:6b:ef:dc:a6:c1:38:7d:21:3c:4a:27:61:07:bd:38:c5:e2: 44:88:8f:5b:6c:84:4d:8d:e4:65:d2:e9:90:91:62:23:06:5b: a3:71:65:d6:24:c7:11:b8:b9:b8:b8:d0:63:e2:ca:59:9f:46: df:e4:12:28:cd:28:72:c8:1d:28:fa:56:4a:22:ce:ba:37:8c: 28:de:67:b4:b3:bb:c0:df:19:14:f5:5f:c9:8e:6c:61:b5:4d: 51:cf:8d:b4:04:22:33:96:cb:3a:4b:0e:ab:88:86:26:48:24: 95:05:e3:1d:44:36:f6:ff:8c:0b:6f:c4:3a:63:2e:47:a1:ad: a8:44:77:97:f7:fe:36:7f:d5:f9:0a:f4:e9:b1:3d:5b:95:2f: 97:89:3d:a2:88:25:ec:a6:3b:03:4c:33:e6:02:36:2b:8b:55: d0:ba:79:86:f7:d6:83:6c:fa:3e:fd:d6:96:a7:2a:0f:8a:2b: 5c:da:d8:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQlGizNguE8aSMEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk MGVhYWE0NDYtOTlmNS00NTkyLWI1NGQtZWNhNDIyMmViMmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8mQgWemj1ySnoQoARtxcgq+LlGkLQEB5dIlL SY9evp/43WbB4SoRSYkQG1BsrXUfa4Lo25e6Dhoj3yZHEs+kUGXEf3ITxMfuLZkR AYoyf895qopNCT7ZpySBN+tq4imw+y9TcBlN1KA9q+8nsbs4lUtHfmM1J7DZK6ly bYpRpXGVAxOreKVUPOUCAcWbiGeB3ZDt8vyfJYZBrG//Ve3lw1F1jREYa21aOubn IFk52NuCZbnhr3e2Qipp6rYosCtraVLSPJsxESiqFFqzMEOF2FPkKY61233rb5Jm rr1RqlIw+Xy9BffRStCtg0P+Xf4RsIsArXyojTjChx8b7YsGMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGX4CLa/8xkEuPcmhVX15YzLas2BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMDU3MGViYWUtZmNmZi0z MzJhLTlhMzEtYzZiYjMwYWQxOWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0LV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEy9ArG3BIYvhRbzXdQ+M+LSx1igEO+OEfzIDc3fkUBKepOMCe5g+m2a C9/zO7Da7LBYvmrCiwFaGrgrhj6surbo+BC1krIxxmVr79ymwTh9ITxKJ2EHvTjF 4kSIj1tshE2N5GXS6ZCRYiMGW6NxZdYkxxG4ubi40GPiylmfRt/kEijNKHLIHSj6 Vkoizro3jCjeZ7Szu8DfGRT1X8mObGG1TVHPjbQEIjOWyzpLDquIhiZIJJUF4x1E Nvb/jAtvxDpjLkehrahEd5f3/jZ/1fkK9OmxPVuVL5eJPaKIJeymOwNMM+YCNiuL VdC6eYb31oNs+j791panKg+KK1za2MQ= -----END CERTIFICATE-----Generated at Thu Mar 26 00:59:48 2026 by rpki-client