$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/d54a48a9-f6c9-34f1-bd58-42915ccd49d7.roa File: d54a48a9-f6c9-34f1-bd58-42915ccd49d7.roa (raw, json) Hash identifier: wENZLJrBJI+Rge8chUAqVwYqML95JX4zE8DlaZ1mz8c= Subject key identifier: AA:0A:2C:11:11:99:CC:CA:82:F6:33:18:7B:94:B2:08:D0:74:E4:A4 Certificate issuer: /CN=1f60c0cf-9537-4a86-bd67-a1dfd2892507 Certificate serial: 010D0C9F4328584D07ACFC4FBA51B9CDCA92F8C0 Authority key identifier: 9D:B7:19:FA:97:3D:4F:D2:FA:41:B6:80:92:4E:D7:18:33:4C:4E:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/d54a48a9-f6c9-34f1-bd58-42915ccd49d7.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 22280 IP address blocks: 209.196.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/1f60c0cf-9537-4a86-bd67-a1dfd2892507.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/1f60c0cf-9537-4a86-bd67-a1dfd2892507.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:fc:4f:ba:51:b9:cd:ca:92:f8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f60c0cf-9537-4a86-bd67-a1dfd2892507 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=729d8061-27df-4316-b0bd-033e832e7186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b4:11:32:44:ae:ba:b3:84:5e:26:ff:87:eb: aa:9d:b6:4b:a2:d8:74:08:7a:c1:c7:ae:e9:a5:d4: 13:73:e1:aa:a1:b0:02:6b:1a:2e:8f:39:48:c0:c2: 87:95:87:11:3c:4c:d6:68:47:13:b9:40:69:3f:15: 88:03:20:fa:17:86:e1:21:36:c6:09:dd:18:72:09: 03:86:84:3f:49:9e:e4:86:aa:31:ee:1b:70:52:64: e4:63:c9:20:55:81:9a:28:48:e6:b0:1f:12:31:25: 59:37:27:80:d4:66:78:43:ea:07:99:05:69:a8:73: 1b:ae:e2:72:9d:36:6a:6c:fd:39:84:03:15:17:53: d5:36:c7:34:e2:e2:6c:44:c9:32:0e:0a:35:36:43: d5:9f:7f:a8:12:df:af:93:17:49:0f:ed:bd:ca:85: 93:87:e9:3c:a9:9e:9c:8c:d2:5e:0d:55:dd:89:0a: 6f:8b:cd:58:ec:21:bd:36:f8:b5:fb:ad:48:28:ff: c2:14:d8:46:f7:8b:7a:a6:16:2a:ac:b0:b2:b0:94: 7a:8a:33:89:42:6d:63:91:de:0a:66:0c:5e:fc:d9: 10:83:56:b4:f8:42:69:01:61:b8:c0:20:70:d2:6f: 75:af:a1:09:c0:ba:9d:f6:fd:4f:f2:af:83:9d:9b: 01:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:0A:2C:11:11:99:CC:CA:82:F6:33:18:7B:94:B2:08:D0:74:E4:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/d54a48a9-f6c9-34f1-bd58-42915ccd49d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/1f60c0cf-9537-4a86-bd67-a1dfd2892507.crl X509v3 Authority Key Identifier: keyid:9D:B7:19:FA:97:3D:4F:D2:FA:41:B6:80:92:4E:D7:18:33:4C:4E:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507.cer sbgp-ipAddrBlock: critical IPv4: 209.196.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ec:ff:11:cf:25:bf:36:23:20:60:27:6d:14:63:9b:26:b1:c5: 09:d7:87:26:e1:0f:23:8d:a8:a5:a5:10:47:da:cd:03:eb:c9: a2:aa:96:f6:85:e3:f7:f5:6a:72:96:d6:a1:11:d5:61:32:64: 73:7f:f3:16:c0:21:87:e5:8a:c8:4c:1e:21:1d:f8:e0:6a:87: 6b:a8:d9:27:98:1a:4f:c2:e8:35:51:e6:40:a5:45:f1:f4:59: 22:b1:71:c3:86:99:9d:4d:b3:0d:eb:4c:fe:a1:ab:4a:81:2e: e4:0a:d2:25:46:97:4e:a0:21:eb:ce:22:b4:6e:13:60:fd:a4: 12:8a:4f:cf:78:b8:f1:40:49:25:73:b6:d5:0d:32:47:a2:a7: 0c:ef:76:d1:95:6a:c7:78:3d:2a:ea:d8:0c:4b:1b:8b:58:00: ce:72:8c:65:37:2a:68:00:0f:2a:e4:20:4a:de:96:f7:39:a9: 74:9a:52:be:ab:e9:5b:b6:af:ff:64:a9:ad:2c:c7:b2:c2:db: 6e:c7:bd:74:4c:26:21:b1:f0:5d:c6:8a:89:32:03:ef:0e:58: d3:69:96:34:13:1b:a1:83:ff:3b:e2:7c:67:9d:0e:7a:76:90: 1f:49:bd:82:0f:6b:bc:23:3d:e2:02:83:f5:3f:23:3f:bb:10: bb:eb:0b:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrPxPulG5zcqS+MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY2MGMwY2YtOTUzNy00YTg2LWJkNjctYTFkZmQyODky NTA3MB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk NzI5ZDgwNjEtMjdkZi00MzE2LWIwYmQtMDMzZTgzMmU3MTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LQRMkSuurOEXib/h+uqnbZLoth0CHrBx67p pdQTc+GqobACaxoujzlIwMKHlYcRPEzWaEcTuUBpPxWIAyD6F4bhITbGCd0YcgkD hoQ/SZ7khqox7htwUmTkY8kgVYGaKEjmsB8SMSVZNyeA1GZ4Q+oHmQVpqHMbruJy nTZqbP05hAMVF1PVNsc04uJsRMkyDgo1NkPVn3+oEt+vkxdJD+29yoWTh+k8qZ6c jNJeDVXdiQpvi81Y7CG9Nvi1+61IKP/CFNhG94t6phYqrLCysJR6ijOJQm1jkd4K Zgxe/NkQg1a0+EJpAWG4wCBw0m91r6EJwLqd9v1P8q+DnZsBvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKoKLBERmczKgvYzGHuUsgjQdOSkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xZjYw YzBjZi05NTM3LTRhODYtYmQ2Ny1hMWRmZDI4OTI1MDcvZDU0YTQ4YTktZjZjOS0z NGYxLWJkNTgtNDI5MTVjY2Q0OWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWY2MGMwY2YtOTUzNy00YTg2LWJk NjctYTFkZmQyODkyNTA3LzFmNjBjMGNmLTk1MzctNGE4Ni1iZDY3LWExZGZkMjg5 MjUwNy5jcmwwHwYDVR0jBBgwFoAUnbcZ+pc9T9L6QbaAkk7XGDNMTpUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xZjYwYzBjZi05NTM3LTRhODYtYmQ2Ny1hMWRm ZDI4OTI1MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0cSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOz/Ec8lvzYjIGAnbRRjmyaxxQnXhybhDyONqKWlEEfazQPryaKqlvaF 4/f1anKW1qER1WEyZHN/8xbAIYflishMHiEd+OBqh2uo2SeYGk/C6DVR5kClRfH0 WSKxccOGmZ1Nsw3rTP6hq0qBLuQK0iVGl06gIevOIrRuE2D9pBKKT894uPFASSVz ttUNMkeipwzvdtGVasd4PSrq2AxLG4tYAM5yjGU3KmgADyrkIErelvc5qXSaUr6r 6Vu2r/9kqa0sx7LC227HvXRMJiGx8F3GiokyA+8OWNNpljQTG6GD/zvifGedDnp2 kB9JvYIPa7wjPeICg/U/Iz+7ELvrC2g= -----END CERTIFICATE-----Generated at Mon Mar 2 15:53:42 2026 by rpki-client