$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2c7c68e3-af0b-3c06-81b1-fb16b7a6aade.roa File: 2c7c68e3-af0b-3c06-81b1-fb16b7a6aade.roa (raw, json) Hash identifier: pNqMY6tB17pJZ6w1EUbKpTnVSnWKc7irHixkSt6HPU4= Subject key identifier: B8:68:79:F0:F4:C9:A5:F3:76:A0:F6:E6:8F:C0:D3:30:C8:F7:E6:C7 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584EA7972EAA8014FAECA3866300 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2c7c68e3-af0b-3c06-81b1-fb16b7a6aade.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 852 IP address blocks: 209.171.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:2e:aa:80:14:fa:ec:a3:86:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=2e665b4c-de2a-4b4c-9329-87d4301be326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:78:d5:eb:55:f3:48:39:1f:1b:f4:30:32:53: 6b:fc:de:cd:03:1a:cf:e4:ba:bc:4e:89:ac:82:c9: f3:3f:e7:af:08:b1:62:5b:47:71:d9:4a:00:72:a9: 43:2e:65:8f:71:4c:34:ca:a1:9e:88:57:10:ca:22: 77:75:b8:7d:28:12:0e:d4:15:60:02:1f:db:d2:3b: e1:66:9e:2b:b9:f5:03:c3:54:71:32:d7:04:b5:e8: 5d:6d:c4:5c:46:67:bd:60:34:21:0b:33:73:ff:2a: 54:a5:db:78:3f:6b:7b:9f:72:49:28:14:80:ce:8c: 9b:b1:2d:74:5b:0c:6b:59:14:24:2a:9a:10:da:2f: a1:b5:0d:75:d6:01:40:9d:94:73:78:29:6d:e2:bd: bb:13:f9:86:da:cc:b2:45:2e:25:8b:b0:5f:97:5c: 56:29:74:74:a0:43:a8:92:74:e2:7b:76:99:7a:b9: 4c:e1:5c:13:54:38:f5:93:65:1b:d5:66:6e:4d:b8: bd:ac:a7:3d:39:78:05:40:80:db:36:c5:93:69:3f: 2f:5a:76:94:18:93:12:cb:f5:65:af:39:ab:0e:a8: 4d:4b:32:ad:97:d1:6e:0a:75:94:62:7f:d1:77:69: c5:aa:d0:db:f5:e4:ed:e1:2b:4e:cf:be:82:6b:90: 5c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:68:79:F0:F4:C9:A5:F3:76:A0:F6:E6:8F:C0:D3:30:C8:F7:E6:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2c7c68e3-af0b-3c06-81b1-fb16b7a6aade.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.171.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:b5:b1:05:db:e0:07:6c:f2:2f:aa:3f:ed:7e:7e:06:9d:57: fa:d8:94:c3:5a:a3:bc:dc:fa:62:cb:ae:cb:2e:47:0b:0c:c9: 3d:8e:cc:4e:91:99:0e:2d:15:cc:cd:22:33:dc:dd:bf:de:db: a4:fd:46:3a:ed:3c:3d:15:4b:23:29:4e:ca:ad:87:1a:21:27: 38:eb:53:b0:1a:8a:93:71:fb:44:82:5d:eb:12:20:1b:fe:68: 59:ee:89:2f:22:04:b2:e9:d1:37:e1:49:c3:cd:84:42:ab:9d: ef:87:c5:73:db:b2:5b:6d:27:a6:c7:d2:56:6c:d6:df:55:7b: 27:9a:37:b8:98:96:cf:a3:22:d5:a8:98:09:e7:c4:3e:b2:2f: 2c:80:e6:62:ec:58:2f:c0:01:96:59:3e:08:a2:0b:d2:88:54: 86:c7:d7:40:04:da:9c:44:f1:21:b7:86:60:39:15:fc:b6:e4: 0b:5c:fe:49:6a:ca:44:f3:ab:0c:5d:1b:92:8c:70:a6:27:55: cb:3e:6d:bf:85:71:d0:4c:f2:52:4b:ea:06:db:79:c0:5f:12: 5f:b8:8e:bc:70:af:3d:38:e7:9b:7d:4d:be:bb:ec:62:1f:77: 30:76:a6:c7:1d:2d:e4:5d:b8:a9:2f:31:b2:34:ac:2c:0f:1d: 5e:f7:2a:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nly6qgBT67KOGYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MmU2NjViNGMtZGUyYS00YjRjLTkzMjktODdkNDMwMWJlMzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3jV61XzSDkfG/QwMlNr/N7NAxrP5Lq8Toms gsnzP+evCLFiW0dx2UoAcqlDLmWPcUw0yqGeiFcQyiJ3dbh9KBIO1BVgAh/b0jvh Zp4rufUDw1RxMtcEtehdbcRcRme9YDQhCzNz/ypUpdt4P2t7n3JJKBSAzoybsS10 WwxrWRQkKpoQ2i+htQ111gFAnZRzeClt4r27E/mG2syyRS4li7Bfl1xWKXR0oEOo knTie3aZerlM4VwTVDj1k2Ub1WZuTbi9rKc9OXgFQIDbNsWTaT8vWnaUGJMSy/Vl rzmrDqhNSzKtl9FuCnWUYn/Rd2nFqtDb9eTt4StOz76Ca5BcfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhoefD0yaXzdqD25o/A0zDI9+bHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMmM3YzY4ZTMtYWYwYi0z YzA2LTgxYjEtZmIxNmI3YTZhYWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0asDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADq1sQXb4Ads8i+qP+1+fgadV/rYlMNao7zc+mLLrssuRwsMyT2OzE6R mQ4tFczNIjPc3b/e26T9RjrtPD0VSyMpTsqthxohJzjrU7AaipNx+0SCXesSIBv+ aFnuiS8iBLLp0TfhScPNhEKrne+HxXPbslttJ6bH0lZs1t9VeyeaN7iYls+jItWo mAnnxD6yLyyA5mLsWC/AAZZZPgiiC9KIVIbH10AE2pxE8SG3hmA5Ffy25Atc/klq ykTzqwxdG5KMcKYnVcs+bb+FcdBM8lJL6gbbecBfEl+4jrxwrz0455t9Tb677GIf dzB2pscdLeRduKkvMbI0rCwPHV73Kpw= -----END CERTIFICATE-----Generated at Wed Jul 29 07:38:14 2026 by rpki-client