$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1bb85a3f-0989-370d-a1bd-9f8cf8eb710c.roa File: 1bb85a3f-0989-370d-a1bd-9f8cf8eb710c.roa (raw, json) Hash identifier: ZvB+9hp9BJ9gYGMpM6d/ezKrvfcTKQ03NEl0NkuvstI= Subject key identifier: 39:42:A0:BC:70:FB:BE:36:C4:44:08:CF:13:CD:39:6C:DC:B6:94:41 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584CB121CCE417BD06832318C0E0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1bb85a3f-0989-370d-a1bd-9f8cf8eb710c.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 7861 IP address blocks: 209.29.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:cc:e4:17:bd:06:83:23:18:c0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=bfabc68a-16be-4b7c-8951-03c4eb052c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2c:71:d5:1c:d5:36:4a:a5:a7:f8:58:5d:2f: 6b:b0:4e:db:ca:24:6b:13:2e:fe:14:c5:f0:74:8f: 86:19:0e:37:81:d0:31:26:19:cd:af:e3:83:56:ba: 1b:87:06:5b:ff:39:ef:1d:8b:47:7d:66:62:8d:d2: 1d:31:28:0e:42:b3:c5:b9:72:44:22:cc:41:01:78: 69:87:8f:37:68:ba:73:41:31:1b:33:e0:a4:22:05: 5a:97:5f:31:1e:0a:58:c3:c8:20:7b:9f:ec:ae:b7: 0c:31:1a:e9:2e:15:e9:8b:2a:19:0e:da:13:2d:1b: 99:c1:8b:d0:c3:10:4b:88:de:04:7a:42:8f:e2:69: 80:ed:33:d5:7a:ea:ce:12:70:19:83:27:a0:62:e3: 42:92:90:ac:dd:87:37:88:a3:54:9c:90:b2:42:58: fa:67:ee:a1:ee:e4:d6:6a:99:7b:59:23:2a:33:4e: b0:63:f4:0f:88:e8:bf:ca:3b:00:f1:46:a0:9b:41: 7d:3e:38:53:40:d4:e1:8f:ae:81:30:60:f9:96:40: 8b:5f:60:c7:06:46:12:ce:ca:f5:55:1f:f0:e6:44: 6b:d3:b5:d2:7e:61:b1:1b:8f:12:33:b6:36:c7:3a: e8:55:ed:a7:c3:8c:d4:09:7c:8d:a0:d0:1b:f8:bf: 80:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:42:A0:BC:70:FB:BE:36:C4:44:08:CF:13:CD:39:6C:DC:B6:94:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1bb85a3f-0989-370d-a1bd-9f8cf8eb710c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.29.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:c0:a3:89:9e:13:b0:21:08:e3:df:2c:87:43:07:0e:f6:27: d1:13:2e:c3:94:e8:37:69:9e:8d:44:84:c0:77:45:b2:a9:ef: c1:d6:03:06:d6:10:cf:67:8c:c1:40:20:88:46:44:45:25:e5: d8:87:a0:02:82:18:b2:67:96:f4:f5:30:c7:7b:45:59:6a:30: 69:4d:30:bd:f1:92:bd:99:12:7f:23:c0:d9:00:39:5f:ac:99: 8d:7a:0d:fc:50:b2:41:6f:55:41:55:c1:5e:4b:72:c5:77:ff: 26:73:1a:ad:6c:75:71:1f:69:a2:62:fb:3e:cf:69:2b:ff:8a: 29:8a:5e:50:a0:49:81:b3:2e:73:cd:37:3a:97:d2:67:e0:bf: 84:0e:d5:66:21:2e:ad:89:f9:4c:63:dd:f2:a9:8e:24:85:09: 1b:1e:b3:47:ac:38:f8:6e:9f:18:03:41:3f:9b:7c:12:d8:3c: fe:c0:3a:4c:b8:01:39:48:90:e4:44:05:a3:af:aa:80:04:54: ae:8c:bd:03:1a:5e:66:69:72:b5:dd:f9:0b:1e:68:22:b1:04: 80:a8:d7:a2:c9:97:29:85:e8:f3:fa:a4:3a:e8:83:94:75:be: 6a:e3:4f:3f:e7:81:14:60:65:9e:2a:4b:ba:6e:26:da:bd:dd: 8b:68:7d:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIczkF70GgyMYwOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk YmZhYmM2OGEtMTZiZS00YjdjLTg5NTEtMDNjNGViMDUyYzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCxx1RzVNkqlp/hYXS9rsE7byiRrEy7+FMXw dI+GGQ43gdAxJhnNr+ODVrobhwZb/znvHYtHfWZijdIdMSgOQrPFuXJEIsxBAXhp h483aLpzQTEbM+CkIgVal18xHgpYw8gge5/srrcMMRrpLhXpiyoZDtoTLRuZwYvQ wxBLiN4EekKP4mmA7TPVeurOEnAZgyegYuNCkpCs3Yc3iKNUnJCyQlj6Z+6h7uTW apl7WSMqM06wY/QPiOi/yjsA8Uagm0F9PjhTQNThj66BMGD5lkCLX2DHBkYSzsr1 VR/w5kRr07XSfmGxG48SM7Y2xzroVe2nw4zUCXyNoNAb+L+AdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlCoLxw+742xEQIzxPNOWzctpRBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMWJiODVhM2YtMDk4OS0z NzBkLWExYmQtOWY4Y2Y4ZWI3MTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0R2hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMnAo4meE7AhCOPfLIdDBw72J9ETLsOU6Ddpno1EhMB3RbKp78HWAwbW EM9njMFAIIhGREUl5diHoAKCGLJnlvT1MMd7RVlqMGlNML3xkr2ZEn8jwNkAOV+s mY16DfxQskFvVUFVwV5LcsV3/yZzGq1sdXEfaaJi+z7PaSv/iimKXlCgSYGzLnPN NzqX0mfgv4QO1WYhLq2J+Uxj3fKpjiSFCRses0esOPhunxgDQT+bfBLYPP7AOky4 ATlIkOREBaOvqoAEVK6MvQMaXmZpcrXd+QseaCKxBICo16LJlymF6PP6pDrog5R1 vmrjTz/ngRRgZZ4qS7puJtq93Ytoffc= -----END CERTIFICATE-----Generated at Mon Mar 2 09:24:18 2026 by rpki-client