$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2333b7d8-3fbe-3875-ad74-81579d6f5e87.roa File: 2333b7d8-3fbe-3875-ad74-81579d6f5e87.roa (raw, json) Hash identifier: g2lawn+8laKSaxPBl3B8OYfo3c69Q4O30qGaz9YLvgA= Subject key identifier: E5:76:56:B3:FD:0D:99:4C:84:AC:C8:47:99:B0:7E:ED:30:95:44:2A Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584CF9B78A21D4C100D5585AB600 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2333b7d8-3fbe-3875-ad74-81579d6f5e87.roa Signing time: Wed 25 Feb 2026 02:00:32 +0000 ROA not before: Wed 25 Feb 2026 02:00:32 +0000 ROA not after: Tue 26 May 2026 01:00:32 +0000 asID: 398420 IP address blocks: 208.89.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f9:b7:8a:21:d4:c1:00:d5:58:5a:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Feb 25 02:00:32 2026 GMT Not After : May 26 01:00:32 2026 GMT Subject: CN=5a694eeb-974f-4cb7-9487-699605b77365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a6:20:33:fe:80:22:1e:c7:47:5d:66:85:e9: 44:f3:a9:61:7b:df:ca:e7:37:dc:5e:7d:7f:3b:bd: 0e:b5:d7:99:fb:29:4b:21:99:57:cb:88:b0:f8:f9: ba:4d:bb:32:e7:8f:de:41:03:ff:5a:5e:58:be:83: 06:88:2c:94:17:c2:5b:aa:ca:14:37:a2:6c:4d:99: 6a:18:e2:cc:48:ef:98:4d:30:53:22:61:48:44:42: c4:da:ac:a5:c6:76:b3:8e:b3:84:8b:20:14:92:3f: df:46:25:cf:54:3e:37:f0:0c:70:05:4a:da:a9:f1: fc:c7:36:a9:54:7d:71:ae:0b:62:9e:f1:34:ca:24: 0e:eb:b2:fb:b0:e9:b8:31:4f:68:12:54:15:20:39: dd:2d:d3:d0:ab:ab:ab:27:87:31:38:e2:b3:f4:16: 54:27:f8:c2:9b:ae:34:6a:9a:10:07:0c:30:b9:b2: 45:c7:eb:11:57:fc:e1:e7:2b:dc:2d:c2:ff:82:a3: f3:b5:54:c4:f5:83:59:91:42:c1:1c:d7:b4:48:57: e8:51:9f:a1:d4:e6:a8:eb:77:eb:d7:f2:3d:39:17: a9:91:e4:5d:55:df:a8:4c:69:15:c7:de:6d:8c:0b: 84:c4:93:19:0a:93:28:ab:3d:1d:e2:b0:37:a4:29: c9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:76:56:B3:FD:0D:99:4C:84:AC:C8:47:99:B0:7E:ED:30:95:44:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2333b7d8-3fbe-3875-ad74-81579d6f5e87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 208.89.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:ab:3c:a1:1e:3f:0c:a3:2d:86:0c:60:50:33:66:05:5b:93: ee:83:b3:2c:ac:c0:62:48:3b:2f:c4:33:13:94:e8:e6:aa:98: 87:dd:83:b8:a6:b7:76:8b:73:da:92:e6:f2:39:e4:81:c1:56: 86:5e:9f:2c:78:6b:b2:7b:03:5c:6a:35:fa:2a:60:3c:90:ab: d4:60:2c:ec:94:c4:64:04:63:a3:eb:c6:0e:6a:15:85:1c:84: 23:bd:51:9d:4a:53:08:b0:2b:a7:e5:6f:ba:40:c4:3d:f6:17: dd:94:35:2d:69:54:fc:e9:81:3c:43:a5:a8:46:a0:cb:64:54: 7e:93:d7:db:41:6b:b6:e9:0b:98:31:66:af:99:c1:09:0f:30: 2a:3e:c1:97:7e:e8:1a:4b:2a:30:29:44:0e:48:cd:7b:f1:1b: 48:da:4e:94:51:85:6f:1e:e1:0f:10:7e:b8:4f:56:c4:92:e8: d1:56:7f:a2:ae:9c:ab:28:50:16:ad:e1:34:8b:80:ba:be:13: a7:11:a6:59:43:cc:e3:20:3d:ba:42:59:ee:60:15:c2:ab:99: 05:7f:c7:34:52:67:16:65:be:6f:79:f0:e9:4b:9a:f9:93:c8: 8b:ad:f2:82:ca:eb:dc:23:5d:96:d1:6e:93:81:4f:a8:7e:90: 4b:d1:3c:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz5t4oh1MEA1VhatgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI2MDIyNTAyMDAzMloXDTI2MDUyNjAxMDAzMlowLzEtMCsGA1UEAxMk NWE2OTRlZWItOTc0Zi00Y2I3LTk0ODctNjk5NjA1Yjc3MzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqYgM/6AIh7HR11mhelE86lhe9/K5zfcXn1/ O70OtdeZ+ylLIZlXy4iw+Pm6Tbsy54/eQQP/Wl5YvoMGiCyUF8JbqsoUN6JsTZlq GOLMSO+YTTBTImFIRELE2qylxnazjrOEiyAUkj/fRiXPVD438AxwBUraqfH8xzap VH1xrgtinvE0yiQO67L7sOm4MU9oElQVIDndLdPQq6urJ4cxOOKz9BZUJ/jCm640 apoQBwwwubJFx+sRV/zh5yvcLcL/gqPztVTE9YNZkULBHNe0SFfoUZ+h1Oao63fr 1/I9ORepkeRdVd+oTGkVx95tjAuExJMZCpMoqz0d4rA3pCnJNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOV2VrP9DZlMhKzIR5mwfu0wlUQqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvMjMzM2I3ZDgtM2ZiZS0z ODc1LWFkNzQtODE1NzlkNmY1ZTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Fk0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6rPKEePwyjLYYMYFAzZgVbk+6DsyyswGJIOy/EMxOU6OaqmIfdg7im t3aLc9qS5vI55IHBVoZenyx4a7J7A1xqNfoqYDyQq9RgLOyUxGQEY6Prxg5qFYUc hCO9UZ1KUwiwK6flb7pAxD32F92UNS1pVPzpgTxDpahGoMtkVH6T19tBa7bpC5gx Zq+ZwQkPMCo+wZd+6BpLKjApRA5IzXvxG0jaTpRRhW8e4Q8QfrhPVsSS6NFWf6Ku nKsoUBat4TSLgLq+E6cRpllDzOMgPbpCWe5gFcKrmQV/xzRSZxZlvm958OlLmvmT yIut8oLK69wjXZbRbpOBT6h+kEvRPGk= -----END CERTIFICATE-----Generated at Mon Mar 2 15:11:02 2026 by rpki-client