$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/065d9d1f-ce3c-3be1-b1bd-bf824f37bc8e.roa File: 065d9d1f-ce3c-3be1-b1bd-bf824f37bc8e.roa (raw, json) Hash identifier: Pjfk5R3sG+bB+l1ndbaKVRH15SFs2zyq/G1syCCcLxo= Subject key identifier: 2C:94:0C:9B:A5:AA:88:3C:DA:A3:58:D6:67:C6:54:AC:D1:87:8E:85 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584EA79737B5C76DFB05CF93C400 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/065d9d1f-ce3c-3be1-b1bd-bf824f37bc8e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 852 IP address blocks: 209.171.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:37:b5:c7:6d:fb:05:cf:93:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b7583afc-524a-4343-a999-2b014742dddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:81:dd:13:c4:7f:69:dc:26:70:71:c5:1e:69: c6:a5:6b:b3:46:16:5b:92:f9:09:34:4c:bc:ed:a5: c5:e9:b1:ae:3b:39:fb:ee:df:e6:be:8f:57:df:3e: 9c:66:70:9b:46:e2:1a:06:4e:b4:7e:c0:69:cf:f2: 23:79:ca:73:19:46:15:0f:95:b9:09:7d:6b:cc:cd: 0d:e2:3a:01:0a:ff:fc:17:e8:fd:fe:f6:d1:91:f9: 29:1d:f7:a2:3c:3d:f9:d4:9b:89:d8:1f:fc:57:aa: e4:13:a7:e5:bb:c3:16:be:e1:74:20:83:15:c7:d1: f3:23:c1:97:3a:0e:f0:1e:eb:1a:58:c1:c1:de:b0: 23:bb:8d:db:42:9c:90:c6:9d:db:9c:61:ec:19:de: d8:c6:e3:08:3c:85:44:87:e4:95:b5:99:96:1a:96: f9:92:9c:97:5c:83:55:49:88:a1:9d:c0:1e:be:8e: 4c:59:40:7a:8a:3b:e9:43:73:75:46:55:c7:43:ac: fc:32:ce:78:05:15:52:4d:2f:5a:44:4a:8c:a9:de: 8f:8f:d5:7e:d7:4a:f8:cd:c6:34:4f:85:a2:17:35: f4:53:a0:9c:ec:21:e3:02:03:b7:18:55:45:26:33: f8:6c:ea:bd:ed:a5:bd:9c:2a:34:e0:99:8d:77:b1: 7f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:94:0C:9B:A5:AA:88:3C:DA:A3:58:D6:67:C6:54:AC:D1:87:8E:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/065d9d1f-ce3c-3be1-b1bd-bf824f37bc8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.171.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e6:2a:e9:a8:11:58:c6:d0:6d:8c:9d:b6:2c:62:e5:dd:6d:78: 5f:67:35:a0:d7:62:eb:4d:67:99:f0:cb:4a:0d:a8:64:31:0f: 0d:60:9f:3a:88:de:76:78:e7:bf:ac:52:43:ce:1d:09:fc:dd: 83:43:44:f5:1e:35:bc:72:4f:fc:4c:7d:2b:e5:6e:7a:d9:c2: 4c:d2:b5:07:21:10:e8:ba:1f:65:4e:92:f5:98:ac:dc:15:0e: e4:fb:ca:15:e8:40:8f:02:ae:7e:b9:c0:27:e0:82:93:c2:f7: 88:2f:96:ad:8f:77:74:80:be:26:45:fb:9f:e9:44:7d:6e:a8: 1d:34:12:ab:b7:45:70:ee:54:37:4f:db:98:63:e4:a8:57:c1: e5:9e:25:9c:72:66:66:76:2f:95:c9:3e:bd:b8:11:0e:f7:42: 8e:cd:d4:c2:e5:41:e9:e3:fa:ef:44:b0:d0:cb:96:fc:3b:11: 64:f5:5f:33:1d:f0:a5:1a:30:b9:64:f5:6e:30:ff:de:91:27: 44:d5:c3:1c:9c:f8:95:d1:c9:66:48:bc:93:41:77:e1:7e:87: 43:b4:38:00:07:64:02:d1:5a:a0:da:0b:22:fb:6e:75:7f:d3: 19:f0:40:42:a0:34:2c:d6:a4:af:c2:4c:91:77:0d:72:b1:79: 79:0f:c5:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlze1x237Bc+TxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Yjc1ODNhZmMtNTI0YS00MzQzLWE5OTktMmIwMTQ3NDJkZGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4HdE8R/adwmcHHFHmnGpWuzRhZbkvkJNEy8 7aXF6bGuOzn77t/mvo9X3z6cZnCbRuIaBk60fsBpz/IjecpzGUYVD5W5CX1rzM0N 4joBCv/8F+j9/vbRkfkpHfeiPD351JuJ2B/8V6rkE6flu8MWvuF0IIMVx9HzI8GX Og7wHusaWMHB3rAju43bQpyQxp3bnGHsGd7YxuMIPIVEh+SVtZmWGpb5kpyXXINV SYihncAevo5MWUB6ijvpQ3N1RlXHQ6z8Ms54BRVSTS9aREqMqd6Pj9V+10r4zcY0 T4WiFzX0U6Cc7CHjAgO3GFVFJjP4bOq97aW9nCo04JmNd7F/oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyUDJulqog82qNY1mfGVKzRh46FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMDY1ZDlkMWYtY2UzYy0z YmUxLWIxYmQtYmY4MjRmMzdiYzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0asCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOYq6agRWMbQbYydtixi5d1teF9nNaDXYutNZ5nwy0oNqGQxDw1gnzqI 3nZ457+sUkPOHQn83YNDRPUeNbxyT/xMfSvlbnrZwkzStQchEOi6H2VOkvWYrNwV DuT7yhXoQI8Crn65wCfggpPC94gvlq2Pd3SAviZF+5/pRH1uqB00Equ3RXDuVDdP 25hj5KhXweWeJZxyZmZ2L5XJPr24EQ73Qo7N1MLlQenj+u9EsNDLlvw7EWT1XzMd 8KUaMLlk9W4w/96RJ0TVwxyc+JXRyWZIvJNBd+F+h0O0OAAHZALRWqDaCyL7bnV/ 0xnwQEKgNCzWpK/CTJF3DXKxeXkPxa4= -----END CERTIFICATE-----Generated at Wed Jul 29 04:52:42 2026 by rpki-client