$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/54eab883-39fe-3183-a9f2-014900f1b617.roa File: 54eab883-39fe-3183-a9f2-014900f1b617.roa (raw, json) Hash identifier: B8IyuoAzJI20SrO/j0Lmdbu2rI36NJnlu98tjsI149I= Subject key identifier: E6:69:1A:91:92:12:83:15:61:2F:5E:05:53:80:D9:42:D4:74:F6:68 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D1B19FF1D6B20C013B3EB4A80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/54eab883-39fe-3183-a9f2-014900f1b617.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 852 IP address blocks: 209.202.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:19:ff:1d:6b:20:c0:13:b3:eb:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=f2b48896-af95-42af-9061-8846efd36ec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d2:18:58:50:99:0c:e0:2d:49:1f:a6:1b:ab: 02:75:5a:60:ab:7e:a9:38:b2:b0:72:47:71:b9:35: 8a:b1:55:69:40:f2:a9:d9:6c:49:2c:28:10:42:ae: e2:d2:e7:ef:a0:b9:66:d0:40:92:12:d9:88:dd:3f: d5:f7:ba:fb:df:c5:cd:71:53:62:1d:47:f5:c3:25: 62:4d:2a:f2:a0:af:63:8c:64:d9:c0:a4:25:f2:c3: 0e:23:71:cf:76:d3:df:fb:1d:15:ce:50:61:a3:84: 78:9a:b7:ea:e6:f9:f5:72:0f:7d:23:50:6a:d9:5c: 63:35:c1:a7:06:64:b3:09:ee:bb:65:c9:35:9e:87: 35:1a:d6:39:4e:d0:e4:8f:95:8b:24:d9:5f:60:ce: 52:4f:2f:40:64:4e:3a:75:d6:86:1e:9f:4a:37:69: 3f:be:cd:ce:37:6c:d7:b2:20:38:1e:29:dc:c8:86: c6:c2:59:d1:65:4a:5c:a3:11:2a:10:18:90:df:65: 79:f2:ed:75:8e:e9:c8:dc:06:aa:77:44:0e:ad:df: 61:93:57:60:f4:4f:2f:13:9e:1c:c8:55:90:b0:41: 32:ec:b9:16:cd:4c:b8:ad:ed:75:79:86:08:30:b8: 9d:88:27:02:83:a9:a1:93:c5:22:23:88:1a:0f:1a: 95:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:69:1A:91:92:12:83:15:61:2F:5E:05:53:80:D9:42:D4:74:F6:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/54eab883-39fe-3183-a9f2-014900f1b617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.202.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:fa:60:1c:7b:2a:a7:0d:39:91:d2:39:be:ae:6c:7b:c8:a6: 98:fc:f4:a0:9b:b6:a4:17:29:9b:bc:dd:d3:af:11:78:13:12: 7d:75:cd:ac:07:f1:38:61:52:aa:46:8a:f3:e3:7b:c3:80:66: bb:66:46:f4:21:89:1d:ee:77:af:93:3d:cc:ee:b2:22:d9:0b: 1a:81:99:2a:16:0c:77:c8:77:a1:a4:14:4e:b0:54:3d:20:84: b6:fb:02:0d:18:90:2c:8f:5f:ce:7f:52:81:84:df:ad:4a:a2: dc:cc:83:e6:ee:0b:ca:40:2a:a2:5a:79:1f:c3:e8:98:f6:be: da:06:82:12:d3:50:5c:dd:47:4c:27:af:87:47:95:f1:5f:f5: 0f:20:64:0d:df:92:f1:f2:79:ba:4b:44:5c:ba:96:5d:e2:5a: e9:34:4e:09:13:61:8b:0d:af:89:d8:d2:8f:bb:fa:f8:7c:33: a3:11:29:4a:b5:1d:ee:b7:44:29:a4:61:e1:8a:c1:cd:7d:65: c1:1d:02:bf:89:ba:cf:dd:ba:f9:58:12:d9:bf:b2:79:10:c2: 8d:52:01:c8:f5:a2:42:b9:21:ee:38:4c:57:bf:cf:f4:3c:33: f9:c7:b8:08:98:90:83:0e:e1:21:90:69:e3:ae:03:0d:a4:dd: 99:7d:15:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGf8dayDAE7PrSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk ZjJiNDg4OTYtYWY5NS00MmFmLTkwNjEtODg0NmVmZDM2ZWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidIYWFCZDOAtSR+mG6sCdVpgq36pOLKwckdx uTWKsVVpQPKp2WxJLCgQQq7i0ufvoLlm0ECSEtmI3T/V97r738XNcVNiHUf1wyVi TSryoK9jjGTZwKQl8sMOI3HPdtPf+x0VzlBho4R4mrfq5vn1cg99I1Bq2VxjNcGn BmSzCe67Zck1noc1GtY5TtDkj5WLJNlfYM5STy9AZE46ddaGHp9KN2k/vs3ON2zX siA4HincyIbGwlnRZUpcoxEqEBiQ32V58u11junI3Aaqd0QOrd9hk1dg9E8vE54c yFWQsEEy7LkWzUy4re11eYYIMLidiCcCg6mhk8UiI4gaDxqVewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZpGpGSEoMVYS9eBVOA2ULUdPZoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNTRlYWI4ODMtMzlmZS0z MTgzLWE5ZjItMDE0OTAwZjFiNjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0cpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAb6YBx7KqcNOZHSOb6ubHvIppj89KCbtqQXKZu83dOvEXgTEn11zawH 8ThhUqpGivPje8OAZrtmRvQhiR3ud6+TPczusiLZCxqBmSoWDHfId6GkFE6wVD0g hLb7Ag0YkCyPX85/UoGE361KotzMg+buC8pAKqJaeR/D6Jj2vtoGghLTUFzdR0wn r4dHlfFf9Q8gZA3fkvHyebpLRFy6ll3iWuk0TgkTYYsNr4nY0o+7+vh8M6MRKUq1 He63RCmkYeGKwc19ZcEdAr+Jus/duvlYEtm/snkQwo1SAcj1okK5Ie44TFe/z/Q8 M/nHuAiYkIMO4SGQaeOuAw2k3Zl9Fb0= -----END CERTIFICATE-----Generated at Thu Mar 26 19:09:02 2026 by rpki-client