$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7716c7f-2ec7-3b0d-acc1-8e1f1ecf7f55.roa File: c7716c7f-2ec7-3b0d-acc1-8e1f1ecf7f55.roa (raw, json) Hash identifier: 3i+kPM/B/T0fBoAk+vB4JGT1gojVQfDwjamaSJrBH8g= Subject key identifier: 3F:0B:97:95:8E:5D:83:EE:80:8A:28:0F:DC:29:FD:3D:A1:05:E7:45 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584EA794042122C1FB46D68A3FC0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7716c7f-2ec7-3b0d-acc1-8e1f1ecf7f55.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 19905 IP address blocks: 209.53.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:04:21:22:c1:fb:46:d6:8a:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=121ff635-e791-4ed1-85f3-4d64a902e44f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e1:d6:da:18:13:38:ba:1d:4d:23:41:50:7c: 45:f9:38:35:02:e0:ff:35:66:33:fb:da:98:b5:96: ac:e4:eb:26:b9:6c:d7:0a:be:4e:8e:96:a8:67:80: 6d:18:39:24:c7:8c:f4:1c:37:ff:54:ea:ae:ba:01: c4:89:50:25:19:90:0c:f1:fe:91:2b:73:59:82:97: ef:df:1f:43:9c:5f:f4:a2:96:3b:67:5f:2b:c1:f3: 33:40:c7:61:eb:ab:a8:d1:53:e9:cf:11:a1:b2:75: 37:70:e0:b1:aa:2b:f8:be:fb:6e:cc:05:4e:aa:c1: 9c:78:dd:0b:46:0e:97:56:12:b0:9f:2f:84:8e:4e: 6b:83:b8:a3:5d:fe:3d:07:48:d2:86:0a:eb:8b:f6: 1c:20:3a:4f:dc:2c:46:74:00:7f:64:de:66:7f:bf: a6:e2:02:f6:ea:7f:86:ec:17:f2:5d:fd:1d:6f:1c: a7:72:47:47:cb:12:bf:8b:9b:10:1c:42:fc:dc:a4: 0e:bf:c1:33:fc:e4:7f:47:ff:23:3b:59:80:de:d4: a7:ff:db:97:a6:07:8c:1f:0d:b5:71:2d:2a:db:78: 23:d6:ed:71:30:7a:85:eb:a4:e9:7c:3b:c4:83:d4: fe:1c:a7:a4:d2:f2:53:9c:94:b7:48:cb:e5:35:e3: c6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:0B:97:95:8E:5D:83:EE:80:8A:28:0F:DC:29:FD:3D:A1:05:E7:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7716c7f-2ec7-3b0d-acc1-8e1f1ecf7f55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:39:c3:c2:17:a9:90:5a:93:4a:05:7d:24:3e:67:9f:0b:78: 25:1e:8a:45:ff:5b:3e:73:5e:58:a2:87:3e:5f:fe:e9:cc:7b: 4f:bc:c3:51:71:42:2d:37:df:6b:d4:29:49:8c:58:6a:86:70: 7b:ef:38:ec:92:8c:51:5f:7f:8e:a3:79:5c:89:54:e0:2e:ee: 36:ec:06:72:da:7e:c1:32:d2:9b:a6:8a:69:40:02:f0:11:e3: af:8d:c8:8c:d1:3f:6e:27:28:21:b2:86:7e:bc:47:91:85:a4: 60:89:4b:3c:50:62:d4:07:b7:d7:56:8e:da:2b:7f:25:b7:2c: 39:80:50:d5:be:f3:33:e2:c6:7c:80:9d:d7:8e:c0:2e:5e:32: 1c:1e:77:20:91:dd:45:41:e6:18:f7:e7:d2:e8:f1:cc:53:d9: 38:a0:d7:b6:5a:ef:c6:fc:57:4f:25:a1:54:8f:bd:cd:d6:f7: a0:3a:09:86:c3:3c:02:b0:7c:98:e3:b8:c8:84:d4:e7:34:65: 73:e2:04:35:52:85:37:f2:55:e8:99:aa:19:12:d9:22:4e:25: 3f:c3:1f:77:7b:a5:10:6d:f3:d3:ab:cd:76:ca:9b:59:c5:df: ae:32:d7:8c:94:8e:a4:77:63:44:e2:3e:c4:22:3a:20:9a:48: 56:65:0a:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlAQhIsH7RtaKP8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTIxZmY2MzUtZTc5MS00ZWQxLTg1ZjMtNGQ2NGE5MDJlNDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uHW2hgTOLodTSNBUHxF+Tg1AuD/NWYz+9qY tZas5OsmuWzXCr5OjpaoZ4BtGDkkx4z0HDf/VOquugHEiVAlGZAM8f6RK3NZgpfv 3x9DnF/0opY7Z18rwfMzQMdh66uo0VPpzxGhsnU3cOCxqiv4vvtuzAVOqsGceN0L Rg6XVhKwny+Ejk5rg7ijXf49B0jShgrri/YcIDpP3CxGdAB/ZN5mf7+m4gL26n+G 7BfyXf0dbxynckdHyxK/i5sQHEL83KQOv8Ez/OR/R/8jO1mA3tSn/9uXpgeMHw21 cS0q23gj1u1xMHqF66TpfDvEg9T+HKek0vJTnJS3SMvlNePGIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8Ll5WOXYPugIooD9wp/T2hBedFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYzc3MTZjN2YtMmVjNy0z YjBkLWFjYzEtOGUxZjFlY2Y3ZjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TWuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ85w8IXqZBak0oFfSQ+Z58LeCUeikX/Wz5zXliihz5f/unMe0+8w1Fx Qi0332vUKUmMWGqGcHvvOOySjFFff46jeVyJVOAu7jbsBnLafsEy0pumimlAAvAR 46+NyIzRP24nKCGyhn68R5GFpGCJSzxQYtQHt9dWjtorfyW3LDmAUNW+8zPixnyA ndeOwC5eMhwedyCR3UVB5hj359Lo8cxT2Tig17Za78b8V08loVSPvc3W96A6CYbD PAKwfJjjuMiE1Oc0ZXPiBDVShTfyVeiZqhkS2SJOJT/DH3d7pRBt89OrzXbKm1nF 364y14yUjqR3Y0TiPsQiOiCaSFZlCrk= -----END CERTIFICATE-----Generated at Wed Jul 29 09:32:48 2026 by rpki-client