$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/20508438-3f62-3e58-a0ad-1794d09922eb.roa File: 20508438-3f62-3e58-a0ad-1794d09922eb.roa (raw, json) Hash identifier: F30pnqLXIQCJJTUCHzV4Ynmmzi3cScHnlI2hUnzQlCg= Subject key identifier: 7A:C7:C2:0E:56:26:8E:B5:29:30:AF:14:CA:C3:13:3E:B4:8C:B7:15 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584CA5F709269856F7DA05775500 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/20508438-3f62-3e58-a0ad-1794d09922eb.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 13576 IP address blocks: 208.53.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:09:26:98:56:f7:da:05:77:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=8d820cc5-a9e3-45c4-8cdb-b1c11a970af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a0:17:20:d6:63:84:6a:03:84:64:55:dc:a4: 85:88:1f:69:c6:18:d3:9b:8b:53:f5:d6:d8:40:76: 78:6b:32:e6:f6:8b:0f:c3:cc:4c:d5:88:fa:02:99: 98:57:fd:a9:90:fe:0a:cf:21:c0:11:b9:46:b0:eb: 3d:db:a7:d9:f9:28:31:f2:f8:cd:2d:63:e6:9a:67: 87:4c:33:cf:29:8f:3b:48:5e:78:d0:a9:ec:df:7a: 17:e5:f6:55:63:26:6c:75:e1:e7:60:9b:3f:52:ca: b6:19:1c:8e:d0:6c:a5:52:ea:82:35:48:2c:85:59: 70:f0:e3:fe:9b:04:92:cd:05:ac:bd:67:9d:61:59: ae:84:b5:2b:af:a9:58:f2:da:9a:27:14:08:c3:38: 64:c0:51:92:06:2c:10:d1:2c:f7:47:67:18:c8:25: af:f1:e7:7b:db:36:27:08:bb:87:49:53:26:c8:bc: 0f:7a:bc:9f:f1:e8:24:21:53:d2:27:ef:88:8d:91: 5f:e6:55:2d:44:af:0b:77:9e:33:e8:52:0f:62:41: 15:df:32:28:6a:3a:b5:31:cd:a5:87:97:a0:2d:a7: 10:23:fb:82:e1:3b:26:b8:73:33:fd:74:fc:ca:68: 67:00:ca:4f:eb:fc:8e:20:21:1b:c1:7d:67:f8:93: 32:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C7:C2:0E:56:26:8E:B5:29:30:AF:14:CA:C3:13:3E:B4:8C:B7:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/20508438-3f62-3e58-a0ad-1794d09922eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:86:38:fe:9b:f0:d9:3b:95:5d:de:86:de:fa:9c:e8:bc:a9: a3:53:fd:38:77:c1:b4:84:df:07:88:55:c4:10:b6:4c:30:6a: a3:a7:87:11:fd:fb:32:47:cc:22:61:d5:cf:d9:67:8e:a2:ed: 43:b0:42:a6:3e:65:8e:49:96:e8:88:e0:a5:a6:11:a9:c4:38: 2e:ce:c8:6a:23:3a:d8:0a:34:e5:34:c7:7e:4f:39:c0:ea:e2: d9:8a:ac:13:59:07:e1:af:1d:e6:06:61:83:c6:9d:82:ac:04: 5d:41:e8:2a:a9:30:49:12:3f:79:36:1f:e4:ff:a2:f4:26:1b: 9a:df:8d:0b:00:14:da:a7:69:ae:79:83:6a:1c:6e:7e:38:2d: ee:ea:86:b8:88:2c:f8:3f:c5:db:04:c5:2f:a4:ef:36:95:46: 48:ef:8b:97:73:a6:db:0a:1a:6c:c7:9e:34:9b:52:bd:b8:5e: 70:6f:df:48:aa:d3:db:de:33:a1:f9:be:4d:68:86:cc:d2:b3: 97:fa:95:04:2c:d5:94:49:25:a6:69:9a:4e:10:30:25:23:8d: f7:3f:10:be:ec:0b:a0:53:ea:1f:e9:21:27:ab:e4:a7:40:41: 1a:58:bc:0b:03:22:7c:7c:94:51:cc:fe:d4:0f:59:ad:0d:e5: 2a:2a:01:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9wkmmFb32gV3VQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk OGQ4MjBjYzUtYTllMy00NWM0LThjZGItYjFjMTFhOTcwYWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6AXINZjhGoDhGRV3KSFiB9pxhjTm4tT9dbY QHZ4azLm9osPw8xM1Yj6ApmYV/2pkP4KzyHAEblGsOs926fZ+Sgx8vjNLWPmmmeH TDPPKY87SF540Kns33oX5fZVYyZsdeHnYJs/Usq2GRyO0GylUuqCNUgshVlw8OP+ mwSSzQWsvWedYVmuhLUrr6lY8tqaJxQIwzhkwFGSBiwQ0Sz3R2cYyCWv8ed72zYn CLuHSVMmyLwPeryf8egkIVPSJ++IjZFf5lUtRK8Ld54z6FIPYkEV3zIoajq1Mc2l h5egLacQI/uC4TsmuHMz/XT8ymhnAMpP6/yOICEbwX1n+JMyFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrHwg5WJo61KTCvFMrDEz60jLcVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMjA1MDg0MzgtM2Y2Mi0z ZTU4LWEwYWQtMTc5NGQwOTkyMmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0DXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKuGOP6b8Nk7lV3eht76nOi8qaNT/Th3wbSE3weIVcQQtkwwaqOnhxH9 +zJHzCJh1c/ZZ46i7UOwQqY+ZY5JluiI4KWmEanEOC7OyGojOtgKNOU0x35POcDq 4tmKrBNZB+GvHeYGYYPGnYKsBF1B6CqpMEkSP3k2H+T/ovQmG5rfjQsAFNqnaa55 g2ocbn44Le7qhriILPg/xdsExS+k7zaVRkjvi5dzptsKGmzHnjSbUr24XnBv30iq 09veM6H5vk1ohszSs5f6lQQs1ZRJJaZpmk4QMCUjjfc/EL7sC6BT6h/pISer5KdA QRpYvAsDInx8lFHM/tQPWa0N5SoqAVI= -----END CERTIFICATE-----Generated at Tue Mar 3 15:25:46 2026 by rpki-client