$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3c1e0599-0f7a-36bf-9ab3-176c6b4fe000.roa File: 3c1e0599-0f7a-36bf-9ab3-176c6b4fe000.roa (raw, json) Hash identifier: uGS4Igp08uriw8k99//zpWdfgRURIz/WnbviK2n0oIw= Subject key identifier: 6A:A4:7C:04:30:25:0E:4E:C0:0D:A3:99:46:E0:1F:A1:53:DE:AF:29 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584DE9B07A5FB600BD70C6DA8100 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3c1e0599-0f7a-36bf-9ab3-176c6b4fe000.roa Signing time: Fri 22 May 2026 01:00:24 +0000 ROA not before: Fri 22 May 2026 01:00:24 +0000 ROA not after: Thu 20 Aug 2026 01:00:24 +0000 asID: 36000 IP address blocks: 209.53.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e9:b0:7a:5f:b6:00:bd:70:c6:da:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: May 22 01:00:24 2026 GMT Not After : Aug 20 01:00:24 2026 GMT Subject: CN=640338d4-9741-45f0-aace-ff92f40f156a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b4:2d:30:5e:17:27:fe:63:98:a6:72:a8:13: cd:6c:b1:f1:da:b5:cf:23:f0:b9:28:e1:94:dc:9d: d2:13:54:b8:59:be:94:30:eb:02:a5:81:a5:da:b7: ca:56:cd:37:ed:ac:fe:95:34:c7:1d:54:af:96:14: 0d:4e:2b:2d:d0:6d:ab:f2:54:a3:d4:af:0b:bf:02: d0:0c:2f:54:76:e3:f4:d3:e4:45:d0:ea:6c:ed:25: cc:88:6f:4e:b4:7c:b5:18:8d:eb:d4:d7:36:16:db: 11:04:6f:38:0d:2f:da:92:f0:96:6f:df:5e:73:30: df:89:b3:e4:28:e7:73:41:84:9c:89:02:bd:09:77: 55:7b:98:b4:6c:0d:20:b1:24:eb:a5:f3:1f:06:85: 3f:c0:71:72:2d:ce:b2:35:28:8e:6e:31:5c:28:ca: 7c:08:26:8f:e0:a5:f2:27:64:20:0b:b1:01:2f:79: 07:5a:80:9e:ef:67:59:ce:2f:4e:ce:29:e6:47:13: 21:cb:79:bc:28:c7:1b:6b:d2:de:e1:e1:47:ec:4c: 64:74:87:3b:ed:00:0a:ae:61:5d:bc:9b:ff:51:0f: 31:57:bf:a4:7d:a9:54:12:f1:49:f1:5d:6f:b7:72: ea:36:8f:f6:6c:05:0f:19:fc:f2:5e:2b:aa:98:cb: 54:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A4:7C:04:30:25:0E:4E:C0:0D:A3:99:46:E0:1F:A1:53:DE:AF:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3c1e0599-0f7a-36bf-9ab3-176c6b4fe000.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:aa:b5:22:67:e5:61:42:a4:dd:eb:76:7f:f1:a3:8d:be:c5: 59:39:19:7b:28:01:25:43:52:aa:f6:df:eb:7e:7f:9c:31:43: 38:1d:e1:a5:ad:8f:b0:48:85:be:64:79:46:54:ab:bf:13:30: d0:c3:ab:1c:83:72:3f:35:1c:63:39:a2:9f:0c:4c:c7:6f:90: 7e:5d:f3:0b:29:34:f2:b2:d4:63:21:0b:26:14:5a:3c:1d:a5: 12:f8:51:4e:72:ba:fd:41:bc:65:96:da:e9:8b:f3:bc:f3:ca: 86:99:ef:d4:0f:65:38:ca:fa:e2:50:df:0a:a2:f8:49:50:b1: d3:96:75:86:a8:e2:42:69:c5:f4:73:f4:e5:9d:f5:bd:55:d9: 55:e8:1a:16:4c:81:1c:b9:8f:5d:77:b6:60:7b:f6:28:96:98: f6:5f:aa:7a:e1:d5:12:4a:46:c5:cf:c8:d4:5a:80:6e:2f:f6: 60:05:7c:03:51:9f:02:84:13:ce:c3:31:2a:ea:99:f1:ee:1b: 45:62:63:2e:d3:fe:0f:70:2b:74:95:62:f7:77:42:29:d5:46: 7c:4c:cf:20:e8:67:66:18:57:4a:11:9d:2c:a0:38:a8:85:a0: 38:bc:00:01:16:0b:e9:52:49:9a:79:a9:51:27:41:ba:0a:d6: ca:24:36:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3psHpftgC9cMbagQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDUyMjAxMDAyNFoXDTI2MDgyMDAxMDAyNFowLzEtMCsGA1UEAxMk NjQwMzM4ZDQtOTc0MS00NWYwLWFhY2UtZmY5MmY0MGYxNTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbQtMF4XJ/5jmKZyqBPNbLHx2rXPI/C5KOGU 3J3SE1S4Wb6UMOsCpYGl2rfKVs037az+lTTHHVSvlhQNTist0G2r8lSj1K8LvwLQ DC9UduP00+RF0Ops7SXMiG9OtHy1GI3r1Nc2FtsRBG84DS/akvCWb99eczDfibPk KOdzQYSciQK9CXdVe5i0bA0gsSTrpfMfBoU/wHFyLc6yNSiObjFcKMp8CCaP4KXy J2QgC7EBL3kHWoCe72dZzi9OzinmRxMhy3m8KMcba9Le4eFH7ExkdIc77QAKrmFd vJv/UQ8xV7+kfalUEvFJ8V1vt3LqNo/2bAUPGfzyXiuqmMtU0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqkfAQwJQ5OwA2jmUbgH6FT3q8pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvM2MxZTA1OTktMGY3YS0z NmJmLTlhYjMtMTc2YzZiNGZlMDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWqtSJn5WFCpN3rdn/xo42+xVk5GXsoASVDUqr23+t+f5wxQzgd4aWt j7BIhb5keUZUq78TMNDDqxyDcj81HGM5op8MTMdvkH5d8wspNPKy1GMhCyYUWjwd pRL4UU5yuv1BvGWW2umL87zzyoaZ79QPZTjK+uJQ3wqi+ElQsdOWdYao4kJpxfRz 9OWd9b1V2VXoGhZMgRy5j113tmB79iiWmPZfqnrh1RJKRsXPyNRagG4v9mAFfANR nwKEE87DMSrqmfHuG0ViYy7T/g9wK3SVYvd3QinVRnxMzyDoZ2YYV0oRnSygOKiF oDi8AAEWC+lSSZp5qVEnQboK1sokNoE= -----END CERTIFICATE-----Generated at Sat Jun 13 23:09:44 2026 by rpki-client