$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/40185669-7cfc-3465-8a11-d5521152b30e.roa File: 40185669-7cfc-3465-8a11-d5521152b30e.roa (raw, json) Hash identifier: KkpfDdnmWr8cXjtDtkOMyZZ/FI2eNnmIiMYoUiFIwa0= Subject key identifier: 99:77:68:C4:3C:41:89:2A:85:2E:76:AC:29:7C:0C:7B:79:CA:5A:DE Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584EA7926FA29D214D15D8AFC7A0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/40185669-7cfc-3465-8a11-d5521152b30e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 25668 IP address blocks: 209.53.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:92:6f:a2:9d:21:4d:15:d8:af:c7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=79a23b09-5430-452b-aa16-f6ce9079c353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ae:14:06:9f:8d:1c:00:82:0e:f8:bf:3b:fa: ee:e5:ba:fe:1a:9b:a9:85:1c:fc:2f:f3:21:93:8f: d4:33:15:a4:bc:27:00:6c:c1:24:59:49:87:1d:59: a7:84:7a:3e:22:ef:c8:ad:be:6c:4c:c2:9e:f6:7d: 55:8b:5e:18:65:e2:1b:cc:24:74:5b:77:e7:af:ff: 92:a5:d0:77:3a:dd:d0:66:83:bf:c4:54:77:4b:f8: e9:9c:7e:83:18:05:19:e9:30:e5:af:38:df:6f:e6: 5e:14:74:4b:20:ee:e6:dd:eb:d4:cb:94:39:81:1b: 7b:97:c2:e2:3d:c4:7e:a6:b8:b7:ba:44:e8:dc:ee: 4c:af:7f:36:19:02:71:39:8e:8f:ff:e1:09:b4:18: 65:b3:db:ce:3d:3b:c4:b1:d1:67:e8:8e:61:a2:69: 8f:d8:20:3b:b4:e5:7e:3f:43:1c:15:0b:c9:98:4c: 83:a0:a0:ee:62:c5:a9:db:ce:e6:db:7e:ca:c0:8c: 94:71:4c:80:9d:e1:39:c7:c9:cf:93:18:73:39:72: 2e:40:99:ae:55:19:7a:b0:6d:42:78:2c:6d:a5:3e: cb:63:f5:22:71:9e:a2:f6:fb:94:da:89:c1:8f:62: 9a:a9:78:85:e0:76:7b:72:9d:f8:aa:4c:f8:dd:f4: 4f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:77:68:C4:3C:41:89:2A:85:2E:76:AC:29:7C:0C:7B:79:CA:5A:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/40185669-7cfc-3465-8a11-d5521152b30e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:df:20:c1:bc:5b:82:ae:e0:3b:f0:3e:c7:d9:8b:66:4e:70: 36:4e:1a:dc:57:a9:a9:50:51:4d:bf:ae:de:9f:d8:df:a7:f8: 98:54:09:85:46:de:b7:33:cd:4a:8f:e8:be:b5:a1:02:15:76: b7:c3:33:06:7f:c8:93:fe:01:42:ab:07:d1:de:8a:e7:1b:06: 9d:db:31:de:00:a9:06:d3:73:e7:c8:26:ab:0e:cb:fe:bd:36: 51:81:f4:02:c7:3a:9d:6f:4d:fa:c0:cd:91:50:46:55:c2:3f: 30:2c:47:e5:80:34:a8:1c:07:d0:4e:87:0c:58:28:72:64:ac: e7:ad:1b:b0:79:5f:b8:a8:c0:65:8c:e6:87:45:d2:a5:c2:d5: 6c:9e:de:2b:c1:3e:e3:1f:d9:43:3c:43:29:2f:28:d4:93:fe: a8:c3:55:aa:8d:ac:6b:32:68:91:7a:42:c2:4c:5d:25:6e:53: 7e:ee:84:58:9e:45:a6:03:a3:3a:ce:d8:7c:dc:28:01:b6:19: e3:1c:d2:02:53:0e:0c:c4:00:9b:a6:03:2e:d5:ca:0a:3b:82: b8:ec:2d:09:f8:7d:91:24:29:09:f8:59:fe:8e:52:93:aa:bf: a5:d5:0d:39:b0:da:21:1a:35:75:75:0d:7d:38:86:3a:ea:c0: f2:27:17:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkm+inSFNFdivx6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NzlhMjNiMDktNTQzMC00NTJiLWFhMTYtZjZjZTkwNzljMzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa4UBp+NHACCDvi/O/ru5br+GpuphRz8L/Mh k4/UMxWkvCcAbMEkWUmHHVmnhHo+Iu/Irb5sTMKe9n1Vi14YZeIbzCR0W3fnr/+S pdB3Ot3QZoO/xFR3S/jpnH6DGAUZ6TDlrzjfb+ZeFHRLIO7m3evUy5Q5gRt7l8Li PcR+pri3ukTo3O5Mr382GQJxOY6P/+EJtBhls9vOPTvEsdFn6I5hommP2CA7tOV+ P0McFQvJmEyDoKDuYsWp287m237KwIyUcUyAneE5x8nPkxhzOXIuQJmuVRl6sG1C eCxtpT7LY/UicZ6i9vuU2onBj2KaqXiF4HZ7cp34qkz43fRPwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJl3aMQ8QYkqhS52rCl8DHt5ylreMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNDAxODU2NjktN2NmYy0z NDY1LThhMTEtZDU1MjExNTJiMzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TXWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHfIMG8W4Ku4DvwPsfZi2ZOcDZOGtxXqalQUU2/rt6f2N+n+JhUCYVG 3rczzUqP6L61oQIVdrfDMwZ/yJP+AUKrB9HeiucbBp3bMd4AqQbTc+fIJqsOy/69 NlGB9ALHOp1vTfrAzZFQRlXCPzAsR+WANKgcB9BOhwxYKHJkrOetG7B5X7iowGWM 5odF0qXC1Wye3ivBPuMf2UM8QykvKNST/qjDVaqNrGsyaJF6QsJMXSVuU37uhFie RaYDozrO2HzcKAG2GeMc0gJTDgzEAJumAy7Vygo7grjsLQn4fZEkKQn4Wf6OUpOq v6XVDTmw2iEaNXV1DX04hjrqwPInF2Y= -----END CERTIFICATE-----Generated at Wed Jul 29 08:50:45 2026 by rpki-client