$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/f881eafc-5ebb-3e96-b459-1eee0f53ca90.roa File: f881eafc-5ebb-3e96-b459-1eee0f53ca90.roa (raw, json) Hash identifier: Y3tI8mQSASC4GAee9zQe2Jf59Cb6dWhpheP5p9F9kuo= Subject key identifier: 86:E6:48:9E:F5:52:74:4B:ED:76:AF:F4:55:88:63:1F:3C:F1:20:4F Certificate issuer: /CN=aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2 Certificate serial: 010D0C9F4328584DAC457532EBE84649C737B700 Authority key identifier: 04:A9:78:75:8E:C1:95:1C:A6:2C:2F:0B:FA:32:2F:DB:CB:E3:24:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/f881eafc-5ebb-3e96-b459-1eee0f53ca90.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 16509 IP address blocks: 209.46.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:75:32:eb:e8:46:49:c7:37:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=165c991c-98cc-41cf-abcf-55be0d515e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a3:80:80:e0:45:f1:52:f1:11:1b:d3:77:a1: c1:98:69:8d:1e:0d:71:82:ff:ad:52:b6:fc:3b:5f: b7:9a:66:a5:b2:91:31:74:6e:ac:2e:45:1d:85:de: ff:d6:1a:1e:d9:24:84:36:2c:5a:1c:43:4a:80:b2: e3:63:5e:08:7d:87:c4:16:20:eb:7c:49:08:f6:79: f4:8b:dd:3d:3f:ad:ee:8d:d4:18:23:f2:f5:b6:55: c1:a6:5f:7c:51:aa:4d:9e:eb:fc:fc:18:46:31:6f: c6:9e:8d:51:96:9d:c3:7e:3d:73:1e:68:97:8a:c4: 24:8c:09:48:53:97:f8:84:7e:48:3b:2e:bc:19:c4: a0:93:3a:fd:9a:76:01:77:0f:97:10:8b:ed:3f:02: ee:c0:cd:e9:2c:0a:f2:fd:79:f2:5b:e8:ca:0b:45: df:b5:51:2f:a4:d5:61:20:6d:a5:89:e2:62:7b:8a: b8:e5:53:a2:f1:0a:ac:d9:85:59:72:6c:4d:2a:49: 6c:c1:fd:45:86:51:39:38:c3:d0:38:57:d5:27:19: ce:c2:9c:36:b7:d4:a6:a0:b1:5e:0d:a5:fe:a7:76: 7b:e6:b8:89:e7:3f:d0:4f:17:05:b3:b5:47:54:e9: 46:b0:42:36:21:de:9d:bf:89:38:ab:98:c3:b6:8d: ff:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E6:48:9E:F5:52:74:4B:ED:76:AF:F4:55:88:63:1F:3C:F1:20:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/f881eafc-5ebb-3e96-b459-1eee0f53ca90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.crl X509v3 Authority Key Identifier: keyid:04:A9:78:75:8E:C1:95:1C:A6:2C:2F:0B:FA:32:2F:DB:CB:E3:24:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer sbgp-ipAddrBlock: critical IPv4: 209.46.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:7b:f9:05:9c:f4:32:49:a7:16:6e:68:10:82:1e:66:bb:79: 2e:4c:86:4c:4f:42:29:89:0e:37:f1:9f:50:0d:4b:c9:0f:45: ce:18:fb:35:a4:82:30:fc:f2:73:90:3d:e7:eb:5b:4d:ee:40: e8:e8:ae:ed:1b:a5:09:0c:13:26:8c:3d:7a:87:7f:14:33:e6: e8:21:7f:23:96:d0:41:74:f8:80:f4:5f:28:2b:46:86:74:1b: ad:14:7a:44:49:03:62:39:61:d4:44:f3:83:8b:02:cf:b2:b4: a3:51:02:e1:1f:89:04:b8:20:5a:2d:9b:66:f2:9c:d9:df:1e: 90:40:fc:17:7f:4a:88:27:a6:b2:9e:bb:95:17:f4:93:44:8b: 6c:2a:2d:12:f1:1f:be:ed:47:08:01:a4:ea:42:e8:31:fc:70: 8d:b0:a7:b5:75:00:1a:45:70:28:85:b9:d4:b3:7f:d3:a1:0c: f4:64:94:96:6a:26:1d:45:7c:08:88:35:a5:14:71:76:d6:a3: a3:28:0b:62:9f:c4:69:f9:cb:0d:a3:5e:6e:dd:82:0f:6e:a1: e5:d0:88:ef:01:82:b3:41:39:e0:d4:ad:44:e1:50:94:54:59: 18:3b:ee:a2:4f:9e:52:45:f6:a6:10:62:66:36:29:33:a2:02: aa:34:ab:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRXUy6+hGScc3twAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwM2JlOGMtYjIzYy00ZDgyLTlmOGQtNjRlZDdhOGEz OWQyMB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk MTY1Yzk5MWMtOThjYy00MWNmLWFiY2YtNTViZTBkNTE1ZTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6OAgOBF8VLxERvTd6HBmGmNHg1xgv+tUrb8 O1+3mmalspExdG6sLkUdhd7/1hoe2SSENixaHENKgLLjY14IfYfEFiDrfEkI9nn0 i909P63ujdQYI/L1tlXBpl98UapNnuv8/BhGMW/Gno1Rlp3Dfj1zHmiXisQkjAlI U5f4hH5IOy68GcSgkzr9mnYBdw+XEIvtPwLuwM3pLAry/XnyW+jKC0XftVEvpNVh IG2lieJie4q45VOi8Qqs2YVZcmxNKklswf1FhlE5OMPQOFfVJxnOwpw2t9SmoLFe DaX+p3Z75riJ5z/QTxcFs7VHVOlGsEI2Id6dv4k4q5jDto3/BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbmSJ71UnRL7Xav9FWIYx888SBPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTAz YmU4Yy1iMjNjLTRkODItOWY4ZC02NGVkN2E4YTM5ZDIvZjg4MWVhZmMtNWViYi0z ZTk2LWI0NTktMWVlZTBmNTNjYTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWEwM2JlOGMtYjIzYy00ZDgyLTlm OGQtNjRlZDdhOGEzOWQyL2FhMDNiZThjLWIyM2MtNGQ4Mi05ZjhkLTY0ZWQ3YThh MzlkMi5jcmwwHwYDVR0jBBgwFoAUBKl4dY7BlRymLC8L+jIv28vjJDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTAzYmU4Yy1iMjNjLTRkODItOWY4ZC02NGVk N2E4YTM5ZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0S41MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAt7+QWc9DJJpxZuaBCCHma7eS5MhkxPQimJDjfxn1ANS8kPRc4Y+zWk gjD88nOQPefrW03uQOjoru0bpQkMEyaMPXqHfxQz5ughfyOW0EF0+ID0XygrRoZ0 G60UekRJA2I5YdRE84OLAs+ytKNRAuEfiQS4IFotm2bynNnfHpBA/Bd/SognprKe u5UX9JNEi2wqLRLxH77tRwgBpOpC6DH8cI2wp7V1ABpFcCiFudSzf9OhDPRklJZq Jh1FfAiINaUUcXbWo6MoC2KfxGn5yw2jXm7dgg9uoeXQiO8BgrNBOeDUrUThUJRU WRg77qJPnlJF9qYQYmY2KTOiAqo0qyg= -----END CERTIFICATE-----Generated at Thu Apr 30 12:02:40 2026 by rpki-client