$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a3c47a65-f108-330e-a1d4-d5a26a2607d1.roa File: a3c47a65-f108-330e-a1d4-d5a26a2607d1.roa (raw, json) Hash identifier: bEkYquoRU8Y6I6H01iioNIEbosl4wgwUozBxTdvhkLw= Subject key identifier: 2B:41:33:24:74:EC:4F:4F:F1:5E:35:94:21:B5:70:7A:D9:C9:4F:23 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584CB981D0D0C25F7089F822B440 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a3c47a65-f108-330e-a1d4-d5a26a2607d1.roa Signing time: Mon 02 Feb 2026 02:00:32 +0000 ROA not before: Mon 02 Feb 2026 02:00:32 +0000 ROA not after: Sun 03 May 2026 01:00:32 +0000 asID: 31898 IP address blocks: 173.199.48.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b9:81:d0:d0:c2:5f:70:89:f8:22:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Feb 2 02:00:32 2026 GMT Not After : May 3 01:00:32 2026 GMT Subject: CN=bf8ef7b0-06f9-48ac-9495-d8ec4991d31b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:27:31:6d:73:fa:e9:37:2e:44:40:2f:c8:50: 42:12:a9:95:ac:b7:a1:89:c5:82:b4:52:32:04:07: 57:ab:a7:30:2b:05:91:7a:14:80:b7:fc:5a:1f:a6: 09:a0:56:de:c2:b4:9e:f5:05:50:78:f6:a6:10:39: 41:49:f8:f5:07:1c:a7:a1:65:af:e9:1e:2d:79:31: 86:df:a2:3e:6b:90:3b:8a:5d:6e:2c:45:85:bf:33: 92:7a:7b:d9:ee:f2:0d:74:60:24:a7:ca:b3:67:3d: f2:98:53:5c:5f:2b:df:76:0c:4e:f2:2a:d4:1b:8a: d3:0e:e9:08:6a:00:fa:88:ad:68:80:5b:d6:d5:9d: c6:cd:49:34:b0:be:45:ef:a3:fb:41:ef:99:a7:0f: 47:aa:01:9e:b9:49:3a:33:a4:cd:75:24:7a:f9:1b: 6f:b9:5f:4d:33:84:cc:b3:ea:e1:1a:17:ec:e7:05: 2c:28:71:48:fc:ac:e4:db:20:f1:4a:11:14:ee:08: d4:d9:76:77:33:96:2b:1f:6d:49:1f:c7:24:59:84: 49:02:3c:88:1d:97:2b:4f:53:20:8c:ff:a1:38:eb: 9c:e4:b8:54:8d:f1:c1:01:fc:f0:7e:47:fc:38:2a: 5d:8d:49:aa:b5:51:0d:e3:52:c4:83:55:68:32:27: 1a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:41:33:24:74:EC:4F:4F:F1:5E:35:94:21:B5:70:7A:D9:C9:4F:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a3c47a65-f108-330e-a1d4-d5a26a2607d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 173.199.48.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:02:9c:f2:df:46:39:88:b1:a5:5d:bb:1d:ae:ce:4e:20:f7: c1:52:ac:7b:ad:33:09:6f:b1:94:4c:09:f7:d2:14:12:18:6c: 41:a5:66:14:f7:e5:a8:08:05:3a:dd:10:23:50:4d:6b:5c:19: a5:bb:5b:de:ed:b7:81:28:d5:61:66:08:52:db:2a:51:49:1c: 70:25:75:1e:74:18:ce:c0:9e:5d:14:e1:c5:5d:0b:1d:cb:4c: ff:df:8b:be:3a:6b:04:a8:6b:fc:c1:9d:74:c9:8d:04:9d:08: cf:9f:2e:20:35:80:22:14:0c:28:63:85:1f:47:25:63:52:35: fe:46:ee:39:9f:5b:a5:8e:37:4b:fb:11:b6:36:ea:a2:81:44: dc:00:f8:be:57:a7:79:8b:14:d4:bd:14:b4:99:a2:4c:2a:91: 48:c1:c0:1f:c9:a7:bd:b0:b0:41:b7:c6:0f:cf:37:1a:4f:d6: 4b:e7:d8:3e:96:92:d8:dd:60:80:c5:45:6c:4b:d8:2a:05:9e: ab:7b:52:24:b5:21:4a:b9:f7:6b:d1:40:6f:5c:ff:b6:a8:14: dd:c2:ad:97:f0:12:58:42:18:fa:a9:78:36:d3:bf:e7:09:df: e0:4e:33:23:ad:ab:67:7a:9a:5a:f0:af:24:ad:e4:df:6b:ef: bc:3d:0e:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy5gdDQwl9wifgitEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDIwMjAyMDAzMloXDTI2MDUwMzAxMDAzMlowLzEtMCsGA1UEAxMk YmY4ZWY3YjAtMDZmOS00OGFjLTk0OTUtZDhlYzQ5OTFkMzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkicxbXP66TcuREAvyFBCEqmVrLehicWCtFIy BAdXq6cwKwWRehSAt/xaH6YJoFbewrSe9QVQePamEDlBSfj1BxynoWWv6R4teTGG 36I+a5A7il1uLEWFvzOSenvZ7vINdGAkp8qzZz3ymFNcXyvfdgxO8irUG4rTDukI agD6iK1ogFvW1Z3GzUk0sL5F76P7Qe+Zpw9HqgGeuUk6M6TNdSR6+RtvuV9NM4TM s+rhGhfs5wUsKHFI/Kzk2yDxShEU7gjU2XZ3M5YrH21JH8ckWYRJAjyIHZcrT1Mg jP+hOOuc5LhUjfHBAfzwfkf8OCpdjUmqtVEN41LEg1VoMicaywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtBMyR07E9P8V41lCG1cHrZyU8jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYTNjNDdhNjUtZjEwOC0z MzBlLWExZDQtZDVhMjZhMjYwN2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrccwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMCnPLfRjmIsaVdux2uzk4g98FSrHutMwlvsZRMCffSFBIYbEGlZhT3 5agIBTrdECNQTWtcGaW7W97tt4Eo1WFmCFLbKlFJHHAldR50GM7Anl0U4cVdCx3L TP/fi746awSoa/zBnXTJjQSdCM+fLiA1gCIUDChjhR9HJWNSNf5G7jmfW6WON0v7 EbY26qKBRNwA+L5Xp3mLFNS9FLSZokwqkUjBwB/Jp72wsEG3xg/PNxpP1kvn2D6W ktjdYIDFRWxL2CoFnqt7UiS1IUq592vRQG9c/7aoFN3CrZfwElhCGPqpeDbTv+cJ 3+BOMyOtq2d6mlrwrySt5N9r77w9Dmk= -----END CERTIFICATE-----Generated at Thu Feb 26 03:30:52 2026 by rpki-client