$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/49082d3e-7584-364a-9da5-2646622120e1.roa File: 49082d3e-7584-364a-9da5-2646622120e1.roa (raw, json) Hash identifier: Pw+EP3u428jYapRt2hihC/yIZlrBAyT9n0TSZo6BiYk= Subject key identifier: E0:D0:34:17:06:45:10:65:60:3C:80:00:59:11:3A:25:AB:ED:27:4D Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584F093CE996A7EE317F44016940 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/49082d3e-7584-364a-9da5-2646622120e1.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 25732 IP address blocks: 208.53.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:e9:96:a7:ee:31:7f:44:01:69:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=9d2fc1f5-5edf-4b7d-ac89-c19eb8621733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:2e:51:fd:81:67:d6:f7:50:fd:d3:2f:53:0c: 9d:a8:66:53:37:51:69:d2:25:97:aa:c8:26:d2:12: bb:83:f7:4b:43:fc:40:1e:73:f1:26:f1:27:4a:1a: 28:5d:42:c5:08:f7:43:dc:1e:6e:f5:fb:82:d3:9e: 23:38:69:14:9e:5e:84:ec:28:fd:19:3a:2b:6b:9e: 11:b2:73:77:58:85:41:99:98:de:91:e9:92:f8:a4: c7:ee:61:dc:32:84:72:8d:c1:67:08:6f:3e:58:ce: 12:a9:9c:b1:99:81:16:3f:1f:53:10:d4:6a:b2:ed: 8f:0b:e6:a9:37:22:22:88:dc:da:68:e4:3b:da:db: b8:fb:86:91:c5:b7:db:e0:70:d8:86:d0:6b:6e:7d: e5:36:83:49:26:b4:21:16:28:fb:c1:68:51:dc:dd: 79:f3:69:0b:87:21:e4:18:60:15:06:9b:46:e9:a7: d1:36:e9:6f:a6:41:b0:78:4f:e3:78:5e:c4:19:63: 14:ac:de:22:01:f5:f0:cd:c9:99:f8:c5:5b:26:4c: 39:1a:85:af:3b:d6:1d:e7:13:1d:c2:59:6c:88:15: f7:6c:b5:5c:5f:df:9b:9a:3c:53:d5:45:86:28:b4: c0:57:13:19:00:79:43:ec:d3:f4:4d:77:fb:23:80: 2f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D0:34:17:06:45:10:65:60:3C:80:00:59:11:3A:25:AB:ED:27:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/49082d3e-7584-364a-9da5-2646622120e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:10:37:61:96:9e:38:bf:5b:ce:91:b6:39:f8:bd:39:98:8e: c5:60:b7:81:1e:78:80:e9:bf:a7:2f:14:78:f3:c5:9c:73:94: 12:7a:39:f8:c2:ea:82:d9:22:f9:36:3c:46:f6:0d:d3:46:06: a5:1e:ed:a6:29:b9:98:09:87:8c:2f:39:b7:08:50:14:93:0f: 62:a3:6e:83:6d:e6:7d:fe:47:29:83:6b:4f:fd:35:7e:4b:42: b4:bc:1c:d3:aa:2a:33:9a:2f:12:6c:ac:67:0c:57:39:0e:dc: 20:e9:b8:d8:e3:d6:39:33:5f:03:1c:74:25:69:13:15:0a:3c: 14:f7:10:40:9e:55:a9:6a:9b:ed:3c:3c:fa:3d:d7:ce:21:05: 12:fa:e4:31:3d:dc:b0:c0:2c:05:e2:3f:87:b9:0b:8e:99:a0: 2c:5a:80:ab:fc:3f:e5:1e:45:ff:a8:e7:87:bc:21:49:c5:1f: d4:dc:bc:72:fa:b9:93:e2:65:c8:12:0b:09:51:c4:0c:b7:36: eb:28:98:00:29:72:be:81:b2:cc:b1:d1:cf:40:29:fd:ed:93: 51:59:1f:db:43:75:c4:28:07:31:02:81:d6:2e:74:8b:92:e6: 15:38:a5:65:c6:f9:6c:85:8e:de:19:a1:55:e5:3b:27:da:94: ab:40:ea:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPOmWp+4xf0QBaUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk OWQyZmMxZjUtNWVkZi00YjdkLWFjODktYzE5ZWI4NjIxNzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgi5R/YFn1vdQ/dMvUwydqGZTN1Fp0iWXqsgm 0hK7g/dLQ/xAHnPxJvEnShooXULFCPdD3B5u9fuC054jOGkUnl6E7Cj9GTora54R snN3WIVBmZjekemS+KTH7mHcMoRyjcFnCG8+WM4SqZyxmYEWPx9TENRqsu2PC+ap NyIiiNzaaOQ72tu4+4aRxbfb4HDYhtBrbn3lNoNJJrQhFij7wWhR3N1582kLhyHk GGAVBptG6afRNulvpkGweE/jeF7EGWMUrN4iAfXwzcmZ+MVbJkw5GoWvO9Yd5xMd wllsiBX3bLVcX9+bmjxT1UWGKLTAVxMZAHlD7NP0TXf7I4AvZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODQNBcGRRBlYDyAAFkROiWr7SdNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNDkwODJkM2UtNzU4NC0z NjRhLTlkYTUtMjY0NjYyMjEyMGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DX4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALYQN2GWnji/W86Rtjn4vTmYjsVgt4EeeIDpv6cvFHjzxZxzlBJ6OfjC 6oLZIvk2PEb2DdNGBqUe7aYpuZgJh4wvObcIUBSTD2KjboNt5n3+RymDa0/9NX5L QrS8HNOqKjOaLxJsrGcMVzkO3CDpuNjj1jkzXwMcdCVpExUKPBT3EECeValqm+08 PPo9184hBRL65DE93LDALAXiP4e5C46ZoCxagKv8P+UeRf+o54e8IUnFH9TcvHL6 uZPiZcgSCwlRxAy3NusomAApcr6Bssyx0c9AKf3tk1FZH9tDdcQoBzECgdYudIuS 5hU4pWXG+WyFjt4ZoVXlOyfalKtA6k0= -----END CERTIFICATE-----Generated at Sat Sep 5 04:48:22 2026 by rpki-client