$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/956cee3a-4407-3b22-a099-0422e4180296.roa File: 956cee3a-4407-3b22-a099-0422e4180296.roa (raw, json) Hash identifier: MIpIikwkf43f8rZHRXKPL1PsbDpb38+desKsJF83tas= Subject key identifier: EF:FF:23:34:39:68:95:E0:25:DF:56:88:C5:9C:86:82:55:3A:DE:01 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D091260DF228585C1B4D432E0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/956cee3a-4407-3b22-a099-0422e4180296.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 25668 IP address blocks: 207.194.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:60:df:22:85:85:c1:b4:d4:32:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=714a8200-5d91-4244-9d5f-486948eccf4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:37:b9:bd:4f:7f:bc:8b:c4:9b:6d:9a:e0:5a: 5d:5b:0e:5f:53:b2:a3:71:6a:34:dd:49:ff:49:10: 32:55:89:1a:59:9a:3f:b5:20:f7:47:f5:ba:03:2a: d2:2f:f7:e8:20:d2:44:21:8c:6c:07:8c:1b:bf:1b: 94:43:b4:2f:72:b1:7b:1e:8f:e8:2b:90:d4:32:1d: 4b:48:f4:2b:79:dc:fe:63:cc:f0:38:06:53:53:09: a4:a2:42:bf:37:c0:ae:e7:cd:06:a9:58:b9:83:34: 99:30:62:c0:f0:79:bb:57:08:81:53:53:fe:75:60: ae:fb:99:06:cf:9b:b6:8a:68:b2:23:fc:19:73:dc: 3a:47:bd:fd:ca:26:af:8d:5f:4d:69:68:b8:60:81: 81:4d:2d:78:4b:e0:5f:a9:bb:4b:19:68:b3:3f:2d: fb:e9:87:b3:0c:e6:93:c0:fb:a2:e8:fa:a5:90:50: 06:17:6d:b9:ac:98:c2:e7:00:b8:de:51:c9:b5:67: 51:af:87:30:a5:8b:dd:38:44:68:0c:c9:2f:65:11: e2:57:d9:81:4d:fb:83:a0:0f:e6:84:2f:0f:d0:a5: 8f:09:8a:80:b8:91:eb:6a:d5:f1:d7:ca:dc:20:95: 59:f6:d2:1f:53:74:fc:38:9c:25:0b:9d:00:2c:59: da:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:FF:23:34:39:68:95:E0:25:DF:56:88:C5:9C:86:82:55:3A:DE:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/956cee3a-4407-3b22-a099-0422e4180296.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.194.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:d4:7c:42:de:25:fe:61:c5:ef:10:d6:32:6d:d5:32:a8:71: 87:2d:82:8f:c5:fc:68:a9:ea:2b:e8:37:10:4e:0e:9c:5c:5a: 2c:08:b4:8c:b6:f2:6d:39:30:94:e8:4a:53:e9:10:3d:ec:83: 01:00:5c:f1:82:69:cf:87:22:4e:79:68:aa:5a:40:44:99:29: fb:6c:b6:6b:1c:94:e7:ef:02:cc:e9:ea:5a:2a:47:e2:3a:0b: e0:99:75:6c:26:50:f7:e4:00:6c:ed:07:4c:cf:99:cf:35:a9: 6c:bb:1a:03:62:f9:05:83:8f:8f:84:36:b3:27:3b:6c:e1:51: 7e:15:d9:c9:d9:f8:d2:2c:a8:19:8d:36:28:d9:ec:6a:52:8e: 16:7e:22:9e:0d:46:cf:43:89:ca:2d:3a:b7:60:3d:99:14:61: 2c:d2:9a:d0:f2:e2:28:9f:a0:9f:a7:52:5a:7c:a1:2b:90:ef: f2:6d:f9:bd:3e:27:90:ab:63:3a:e1:f7:cc:8f:f2:ad:9d:dc: 30:81:f3:84:d6:db:17:84:fb:42:b4:7a:7c:18:65:77:45:b4: 76:be:60:68:b5:df:85:25:7f:49:c7:cb:f3:b5:cc:01:af:57: 67:ca:38:73:6e:e2:a1:0f:69:f9:60:37:02:67:70:4d:a4:b7: 2b:a3:78:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEmDfIoWFwbTUMuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk NzE0YTgyMDAtNWQ5MS00MjQ0LTlkNWYtNDg2OTQ4ZWNjZjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDe5vU9/vIvEm22a4FpdWw5fU7KjcWo03Un/ SRAyVYkaWZo/tSD3R/W6AyrSL/foINJEIYxsB4wbvxuUQ7QvcrF7Ho/oK5DUMh1L SPQredz+Y8zwOAZTUwmkokK/N8Cu580GqVi5gzSZMGLA8Hm7VwiBU1P+dWCu+5kG z5u2imiyI/wZc9w6R739yiavjV9NaWi4YIGBTS14S+BfqbtLGWizPy376YezDOaT wPui6PqlkFAGF225rJjC5wC43lHJtWdRr4cwpYvdOERoDMkvZRHiV9mBTfuDoA/m hC8P0KWPCYqAuJHratXx18rcIJVZ9tIfU3T8OJwlC50ALFnaoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO//IzQ5aJXgJd9WiMWchoJVOt4BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOTU2Y2VlM2EtNDQwNy0z YjIyLWEwOTktMDQyMmU0MTgwMjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz8KAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbUfELeJf5hxe8Q1jJt1TKocYctgo/F/Gip6ivoNxBODpxcWiwItIy2 8m05MJToSlPpED3sgwEAXPGCac+HIk55aKpaQESZKftstmsclOfvAszp6loqR+I6 C+CZdWwmUPfkAGztB0zPmc81qWy7GgNi+QWDj4+ENrMnO2zhUX4V2cnZ+NIsqBmN NijZ7GpSjhZ+Ip4NRs9DicotOrdgPZkUYSzSmtDy4iifoJ+nUlp8oSuQ7/Jt+b0+ J5CrYzrh98yP8q2d3DCB84TW2xeE+0K0enwYZXdFtHa+YGi134Ulf0nHy/O1zAGv V2fKOHNu4qEPaflgNwJncE2ktyujeDQ= -----END CERTIFICATE-----Generated at Mon Mar 2 18:36:25 2026 by rpki-client