$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4a6e5061-b1d2-3aa0-9f11-c21450bad81b.roa File: 4a6e5061-b1d2-3aa0-9f11-c21450bad81b.roa (raw, json) Hash identifier: fxiuSmGHmB5TSDKBMaa57jP7A4A+dgaP5bXWERNfKA0= Subject key identifier: 6B:33:88:E5:8A:A8:F1:FF:58:1A:18:30:28:D0:ED:11:2E:28:88:54 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584EA79263FAECCEEA0C23B3B300 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4a6e5061-b1d2-3aa0-9f11-c21450bad81b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 25668 IP address blocks: 209.52.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:92:63:fa:ec:ce:ea:0c:23:b3:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=93d4e5de-506b-4ef5-8008-8c3f4cd46e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:eb:39:12:db:a6:48:45:da:82:31:26:b8:e5: 3b:1a:ef:53:99:e1:1c:fb:52:9d:f6:6f:a0:7c:f8: 68:8b:14:10:7b:35:2c:98:e2:f2:4f:86:b6:aa:58: 8f:e2:7b:5a:84:d4:8f:5e:75:08:a2:e4:0d:3f:12: fe:04:d2:b0:0c:84:3c:c0:57:e1:07:da:aa:79:e4: e7:63:b3:24:23:17:33:60:2e:ea:29:e2:3c:b4:0a: c5:b0:90:b1:de:a0:02:06:82:f4:04:5f:94:fc:81: 68:15:dd:02:1b:4a:54:61:84:24:31:63:a4:82:a5: c5:23:32:02:4c:4a:34:1e:36:60:3e:f3:68:71:28: c3:16:0c:41:d7:c0:49:66:88:91:78:15:db:cd:76: 2f:0b:c2:51:a2:60:9e:d6:be:75:3f:56:df:b8:6e: b2:f9:8b:ee:19:b5:67:8e:f6:3a:e7:63:34:55:6c: 9a:3e:d4:b2:ef:1d:ec:1e:5b:27:f0:a7:4b:11:8e: e4:a8:91:47:ac:c1:09:19:24:27:ea:6a:62:4d:54: 90:cd:d6:bd:3d:cf:4e:0c:39:44:7d:c5:8d:bd:f5: 60:85:b8:ce:86:c4:70:c0:a3:ce:67:3b:e0:45:ce: d3:77:67:96:5b:22:8d:f7:dc:4e:c7:09:cf:bd:b9: 03:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:33:88:E5:8A:A8:F1:FF:58:1A:18:30:28:D0:ED:11:2E:28:88:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4a6e5061-b1d2-3aa0-9f11-c21450bad81b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.52.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:c5:1c:0a:59:86:59:52:61:9d:8e:c6:c2:79:ea:4a:db:89: fe:10:7a:f9:d0:3d:b2:41:02:e1:70:8a:ac:5a:fd:63:86:66: c2:06:68:a2:38:ec:e7:c9:1d:0e:d7:b8:6e:06:d0:2a:79:83: c1:8d:d8:45:7d:00:e7:30:b5:e4:75:17:5c:13:59:f1:79:b5: bb:7a:aa:af:4b:fa:24:6f:32:6f:39:25:52:26:ce:93:c6:df: 72:01:88:92:dd:d0:7e:a0:c8:2f:cb:0d:2c:c8:9f:39:10:f7: 71:54:33:7c:fa:8d:f0:a9:0b:6d:79:bd:60:0c:da:42:86:e8: b0:52:87:6c:41:6f:d7:c9:21:61:31:97:b8:c8:33:a6:c7:01: cc:03:e7:46:f1:99:b4:7d:e1:46:ca:00:9f:37:79:a1:55:4e: ba:93:c2:8e:d4:1b:06:84:a6:fd:00:19:1f:38:77:bf:5b:fd: 25:62:77:34:d4:1b:56:7a:72:2f:c1:d4:15:93:2a:d3:f0:bd: 75:c5:3d:d4:d0:7c:c6:dd:86:d0:c8:f2:c9:12:83:08:02:c8: 5b:ac:93:58:02:53:b5:af:46:6e:44:a7:a6:fc:70:5b:c8:c1: fd:38:bf:44:79:23:a4:4a:62:89:20:42:5f:ea:e1:89:74:01: 17:db:68:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkmP67M7qDCOzswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTNkNGU1ZGUtNTA2Yi00ZWY1LTgwMDgtOGMzZjRjZDQ2ZTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnes5EtumSEXagjEmuOU7Gu9TmeEc+1Kd9m+g fPhoixQQezUsmOLyT4a2qliP4ntahNSPXnUIouQNPxL+BNKwDIQ8wFfhB9qqeeTn Y7MkIxczYC7qKeI8tArFsJCx3qACBoL0BF+U/IFoFd0CG0pUYYQkMWOkgqXFIzIC TEo0HjZgPvNocSjDFgxB18BJZoiReBXbzXYvC8JRomCe1r51P1bfuG6y+YvuGbVn jvY652M0VWyaPtSy7x3sHlsn8KdLEY7kqJFHrMEJGSQn6mpiTVSQzda9Pc9ODDlE fcWNvfVghbjOhsRwwKPOZzvgRc7Td2eWWyKN99xOxwnPvbkDNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsziOWKqPH/WBoYMCjQ7REuKIhUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNGE2ZTUwNjEtYjFkMi0z YWEwLTlmMTEtYzIxNDUwYmFkODFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TTkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL3FHApZhllSYZ2OxsJ56krbif4QevnQPbJBAuFwiqxa/WOGZsIGaKI4 7OfJHQ7XuG4G0Cp5g8GN2EV9AOcwteR1F1wTWfF5tbt6qq9L+iRvMm85JVImzpPG 33IBiJLd0H6gyC/LDSzInzkQ93FUM3z6jfCpC215vWAM2kKG6LBSh2xBb9fJIWEx l7jIM6bHAcwD50bxmbR94UbKAJ83eaFVTrqTwo7UGwaEpv0AGR84d79b/SVidzTU G1Z6ci/B1BWTKtPwvXXFPdTQfMbdhtDI8skSgwgCyFusk1gCU7WvRm5Ep6b8cFvI wf04v0R5I6RKYokgQl/q4Yl0ARfbaNI= -----END CERTIFICATE-----Generated at Wed Jul 29 07:39:27 2026 by rpki-client