$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2b8b31f3-1851-38cf-aec8-57909778d471.roa File: 2b8b31f3-1851-38cf-aec8-57909778d471.roa (raw, json) Hash identifier: 1k6FI35e20+JXd82QenQVJp5WSmUB7QwcFuD3m7LY9A= Subject key identifier: 64:22:ED:A0:B0:16:02:CC:A6:BE:6E:E1:D2:92:75:9F:80:46:BB:1A Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D09125A9632AC607772D29900 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2b8b31f3-1851-38cf-aec8-57909778d471.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 25668 IP address blocks: 209.53.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:5a:96:32:ac:60:77:72:d2:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=850c023d-7421-41db-8a1d-0082c37e01e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:57:63:20:a9:b5:f7:86:d1:99:0e:ec:62:de: 9a:08:d5:78:45:79:c9:d0:03:c0:48:4a:86:ad:b2: d0:71:e3:c4:bf:96:5d:db:37:3e:71:77:9f:6d:be: 34:b9:b7:ee:1a:30:48:a2:b2:21:25:82:c8:0c:7b: 4e:b2:7e:e9:c0:c0:58:f2:07:56:21:10:ea:27:db: ba:75:0d:18:a5:86:e5:90:5e:4b:07:a4:a6:9f:e7: 32:b4:64:52:03:68:1e:f1:1e:53:f6:90:4a:72:d2: a7:cf:24:4b:bc:21:74:43:75:72:56:c7:87:9b:71: 59:09:cf:34:f6:8d:5f:5d:84:88:6d:bf:5b:9f:eb: 82:72:17:dc:f7:f6:be:68:cb:18:72:05:8d:8c:df: 2a:0b:73:a3:00:97:30:ba:bd:bc:91:9d:6f:bb:8f: 4a:4a:bf:f2:79:47:99:c7:05:ae:eb:d0:47:59:ab: b3:23:8b:28:dd:b8:24:3f:e3:fd:c1:c8:42:a4:00: 41:17:9e:04:b6:24:2f:28:7f:53:bf:6e:83:69:f2: e2:3a:14:92:08:1b:b4:47:77:94:ad:ee:91:30:47: 38:4d:13:88:43:fb:42:cd:00:0a:ac:93:b9:cb:41: 5d:3a:d3:24:c8:f1:1f:11:89:c8:89:4d:df:85:69: 97:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:22:ED:A0:B0:16:02:CC:A6:BE:6E:E1:D2:92:75:9F:80:46:BB:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2b8b31f3-1851-38cf-aec8-57909778d471.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e7:20:86:f6:3b:b3:85:22:f9:7b:e9:5e:67:25:06:ea:80:5a: ca:90:f5:f3:8b:8c:63:b5:67:02:a4:e7:a8:fb:d1:1a:42:4c: d7:cc:a6:30:1c:43:ef:1e:1b:f3:f8:d4:24:e4:35:3f:4a:b9: e3:0e:8b:cb:e4:8f:0d:f1:b5:61:a3:96:25:6b:da:4a:26:86: b9:06:b1:8c:8b:01:36:4b:ce:d2:a8:a0:a5:ad:63:f0:73:d3: 5b:77:c8:11:cf:b8:0d:cf:e3:0a:78:5d:08:37:86:fa:3d:e1: eb:35:1b:89:a2:a5:2f:7d:60:d2:64:73:3d:b8:24:92:a2:99: 7e:85:e1:2b:58:84:23:9e:f4:0e:57:ce:4f:8a:1f:79:84:5e: 7a:c2:0d:40:86:21:96:7e:ed:e6:bd:0c:8e:93:84:8d:fb:96: 47:14:8e:a3:3c:db:53:bf:ef:ec:bd:bb:07:62:ac:aa:53:ff: 50:54:75:6b:f0:43:21:c8:bb:37:cf:22:70:9a:54:18:54:6d: c5:32:46:43:c9:9c:67:82:8a:e6:c7:79:ed:d1:1a:fd:e7:84: 15:5b:97:c3:9c:4f:1f:f9:09:08:3e:a5:17:40:c3:48:a7:31: 12:b9:d9:b1:4b:29:32:0d:24:65:5c:52:a3:a3:1c:18:5c:71: 4f:ef:d9:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JElqWMqxgd3LSmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk ODUwYzAyM2QtNzQyMS00MWRiLThhMWQtMDA4MmMzN2UwMWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArldjIKm194bRmQ7sYt6aCNV4RXnJ0APASEqG rbLQcePEv5Zd2zc+cXefbb40ubfuGjBIorIhJYLIDHtOsn7pwMBY8gdWIRDqJ9u6 dQ0YpYblkF5LB6Smn+cytGRSA2ge8R5T9pBKctKnzyRLvCF0Q3VyVseHm3FZCc80 9o1fXYSIbb9bn+uCchfc9/a+aMsYcgWNjN8qC3OjAJcwur28kZ1vu49KSr/yeUeZ xwWu69BHWauzI4so3bgkP+P9wchCpABBF54EtiQvKH9Tv26DafLiOhSSCBu0R3eU re6RMEc4TROIQ/tCzQAKrJO5y0FdOtMkyPEfEYnIiU3fhWmXYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQi7aCwFgLMpr5u4dKSdZ+ARrsaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMmI4YjMxZjMtMTg1MS0z OGNmLWFlYzgtNTc5MDk3NzhkNDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0TXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOcghvY7s4Ui+XvpXmclBuqAWsqQ9fOLjGO1ZwKk56j70RpCTNfMpjAc Q+8eG/P41CTkNT9KueMOi8vkjw3xtWGjliVr2komhrkGsYyLATZLztKooKWtY/Bz 01t3yBHPuA3P4wp4XQg3hvo94es1G4mipS99YNJkcz24JJKimX6F4StYhCOe9A5X zk+KH3mEXnrCDUCGIZZ+7ea9DI6ThI37lkcUjqM821O/7+y9uwdirKpT/1BUdWvw QyHIuzfPInCaVBhUbcUyRkPJnGeCiubHee3RGv3nhBVbl8OcTx/5CQg+pRdAw0in MRK52bFLKTINJGVcUqOjHBhccU/v2dg= -----END CERTIFICATE-----Generated at Thu Mar 26 02:46:10 2026 by rpki-client