$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3c1e0599-0f7a-36bf-9ab3-176c6b4fe000.roa File: 3c1e0599-0f7a-36bf-9ab3-176c6b4fe000.roa (raw, json) Hash identifier: VNd3pRFLwE1ydvNaNVYMhHTVyUq8OBobqEjUmpZr9PI= Subject key identifier: D3:62:C8:68:A7:B6:66:0E:84:28:3E:30:7E:F8:10:1A:25:AB:DD:3E Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D09125987B372AF055AEC3300 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3c1e0599-0f7a-36bf-9ab3-176c6b4fe000.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 36000 IP address blocks: 209.53.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:59:87:b3:72:af:05:5a:ec:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=4781c244-1c26-4999-b156-d8878e746dc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f6:92:95:53:47:2f:f1:61:42:8f:07:a7:2c: 29:fd:be:86:98:f1:86:29:fa:c7:4e:4e:3e:71:c1: b2:2e:1c:71:4c:1c:1e:8e:31:4c:fc:84:56:54:9f: 1d:ee:f1:1c:01:92:a6:d4:8f:53:6a:39:1a:a3:6b: 77:38:07:94:04:f5:c8:53:7b:c7:5c:02:05:61:0a: a2:c4:1d:b7:05:32:82:49:d3:0e:11:7c:12:97:2a: 3b:7f:52:de:0b:72:ca:af:79:50:a6:72:89:e1:0a: 8f:95:05:9f:02:d8:86:ab:12:1b:d4:18:0b:b9:d9: 61:a2:45:c2:15:01:38:2b:c7:01:2c:5d:83:21:23: 95:88:06:39:d7:24:e1:e3:04:a5:e0:23:24:c3:03: 3a:3e:0a:d0:a0:e6:ab:1a:a2:21:9a:04:84:e3:b0: 63:43:e9:a1:87:90:17:28:bc:97:52:92:90:7e:68: 83:df:3b:83:ca:fc:01:c5:62:ea:df:87:32:af:97: 3c:43:2c:ce:cf:9c:1d:50:e0:4e:b8:40:05:ad:d1: be:2d:a5:00:82:c8:96:77:18:f6:ac:26:fc:17:cc: 23:07:fa:1c:7d:57:77:c8:bf:4a:d3:5c:33:5b:26: 0b:3c:ba:6a:13:cd:ca:aa:f7:89:2a:a7:4d:5c:ec: ea:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:62:C8:68:A7:B6:66:0E:84:28:3E:30:7E:F8:10:1A:25:AB:DD:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3c1e0599-0f7a-36bf-9ab3-176c6b4fe000.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:cb:5d:10:96:41:c1:8e:16:4f:3d:da:dd:3f:3f:99:93:70: 7d:14:74:d6:b1:a8:01:c3:ef:53:1e:70:67:30:0d:b4:53:88: 6c:de:ab:ed:f2:26:b1:7a:fe:6b:20:66:43:ba:95:b5:13:98: 61:23:1c:00:b6:a3:be:a5:47:24:86:2c:19:b2:c3:ca:51:25: 1d:0d:63:2d:0f:42:7b:b2:8f:8c:ab:52:07:b5:06:6c:e4:7f: d4:fa:14:34:c8:67:73:3d:30:25:98:5b:9f:bc:59:ff:38:6a: ea:40:b8:de:92:bd:8c:64:fb:ce:dc:c9:72:bb:df:f9:4c:9c: 34:b5:e9:ea:96:27:cc:f1:e5:83:2a:a3:32:90:ee:34:37:ed: 50:b4:96:e3:f0:88:6d:63:c5:8b:8c:28:24:6b:25:86:c6:6c: 7d:bb:b1:19:f2:fa:a4:d2:84:ca:69:92:fe:6e:cf:12:cd:50: 81:cc:79:1c:ad:24:e2:bd:86:8e:9d:d0:cc:ea:bb:02:df:f2: 99:94:47:f5:14:1e:64:57:4b:07:d3:1f:18:ee:02:eb:b0:0f: 20:4f:4d:b0:80:80:18:ba:a4:88:00:85:b9:38:b7:b4:a3:ce: d9:15:54:13:cb:c8:6f:81:dc:b4:be:02:85:ec:e5:58:2f:76: 04:a6:7c:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JElmHs3KvBVrsMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk NDc4MWMyNDQtMWMyNi00OTk5LWIxNTYtZDg4NzhlNzQ2ZGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifaSlVNHL/FhQo8Hpywp/b6GmPGGKfrHTk4+ ccGyLhxxTBwejjFM/IRWVJ8d7vEcAZKm1I9Tajkao2t3OAeUBPXIU3vHXAIFYQqi xB23BTKCSdMOEXwSlyo7f1LeC3LKr3lQpnKJ4QqPlQWfAtiGqxIb1BgLudlhokXC FQE4K8cBLF2DISOViAY51yTh4wSl4CMkwwM6PgrQoOarGqIhmgSE47BjQ+mhh5AX KLyXUpKQfmiD3zuDyvwBxWLq34cyr5c8QyzOz5wdUOBOuEAFrdG+LaUAgsiWdxj2 rCb8F8wjB/ocfVd3yL9K01wzWyYLPLpqE83KqveJKqdNXOzqMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNiyGintmYOhCg+MH74EBolq90+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvM2MxZTA1OTktMGY3YS0z NmJmLTlhYjMtMTc2YzZiNGZlMDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnLXRCWQcGOFk892t0/P5mTcH0UdNaxqAHD71MecGcwDbRTiGzeq+3y JrF6/msgZkO6lbUTmGEjHAC2o76lRySGLBmyw8pRJR0NYy0PQnuyj4yrUge1Bmzk f9T6FDTIZ3M9MCWYW5+8Wf84aupAuN6SvYxk+87cyXK73/lMnDS16eqWJ8zx5YMq ozKQ7jQ37VC0luPwiG1jxYuMKCRrJYbGbH27sRny+qTShMppkv5uzxLNUIHMeRyt JOK9ho6d0MzquwLf8pmUR/UUHmRXSwfTHxjuAuuwDyBPTbCAgBi6pIgAhbk4t7Sj ztkVVBPLyG+B3LS+AoXs5VgvdgSmfMQ= -----END CERTIFICATE-----Generated at Thu Mar 26 02:45:21 2026 by rpki-client