$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/4049c44a-f808-3c97-bfb6-a323f04f3436.roa File: 4049c44a-f808-3c97-bfb6-a323f04f3436.roa (raw, json) Hash identifier: qRYNsNeKKka9o69Knq5ULADscLL7yJ664/ZuLWU0T48= Subject key identifier: E3:9C:17:6A:10:54:65:8F:7D:9A:52:69:C2:B3:01:D1:EB:40:05:B6 Certificate issuer: /CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Certificate serial: 010D0C9F4328584C9EFC5FBEB353B90C3FF1C640 Authority key identifier: 88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/4049c44a-f808-3c97-bfb6-a323f04f3436.roa Signing time: Fri 23 Jan 2026 14:00:38 +0000 ROA not before: Fri 23 Jan 2026 14:00:38 +0000 ROA not after: Thu 23 Apr 2026 13:00:38 +0000 asID: 395927 IP address blocks: 208.72.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9e:fc:5f:be:b3:53:b9:0c:3f:f1:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Validity Not Before: Jan 23 14:00:38 2026 GMT Not After : Apr 23 13:00:38 2026 GMT Subject: CN=bcb94e7a-0c76-4d11-9520-c5dbfbadd354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b9:cc:9d:61:4a:a2:8c:16:23:2f:16:8e:4b: c2:0e:85:a3:49:f4:8d:b3:cb:d6:ed:61:92:14:51: 22:67:b5:5f:9e:24:b0:7c:ec:de:a7:cb:4c:f6:22: 3d:c5:68:6b:d6:69:ee:3b:be:2f:c4:b4:c9:bd:29: 7f:8c:37:e9:65:5f:87:46:15:4d:5e:7b:11:3e:13: 08:40:91:48:fb:06:2d:bb:b7:e5:b1:c1:3c:eb:70: 5d:4d:0f:e7:20:31:31:bd:19:76:68:2b:d0:4d:90: ee:44:cd:17:7d:a4:16:b7:59:60:40:0f:c0:da:81: 7e:5e:5c:31:5d:c3:f1:07:87:0d:2d:56:f9:cf:83: 73:29:39:60:8f:79:5f:17:bf:85:c0:d7:2c:b4:9d: 79:59:12:20:fa:16:bd:92:72:0c:c1:cf:6b:06:a1: ff:70:5f:e3:a3:a9:82:21:6c:b3:e3:d2:e0:63:f1: 8a:c3:6b:7a:17:4e:8b:6d:12:c8:d6:19:1a:54:12: 96:0d:79:d2:00:78:60:bb:76:c8:5a:82:30:b6:25: 3f:d2:6a:35:43:0e:4c:e8:a2:0b:02:f1:d5:79:a8: a6:85:4e:ff:9d:a7:ae:e5:c8:1f:4e:ae:64:12:9f: b2:07:86:fc:4f:70:b7:04:2c:62:28:e9:af:62:2f: 23:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:9C:17:6A:10:54:65:8F:7D:9A:52:69:C2:B3:01:D1:EB:40:05:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/4049c44a-f808-3c97-bfb6-a323f04f3436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl X509v3 Authority Key Identifier: keyid:88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer sbgp-ipAddrBlock: critical IPv4: 208.72.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:70:20:cf:e9:61:8f:41:38:54:9a:f5:82:c2:b8:4a:e5:0d: a0:b9:07:a0:70:81:b4:ee:ca:5f:0d:79:7b:1e:e1:78:f5:60: 48:b8:37:4d:0c:8a:a7:53:dd:30:71:40:1c:c8:5a:47:75:ca: 2f:80:28:8a:91:e5:ef:ad:0d:6f:84:a9:ca:41:c1:a6:3e:7a: 9b:91:55:f8:df:d7:ad:9a:6a:21:69:a1:23:68:09:be:14:23: 49:26:87:d4:b7:4e:6e:6d:ec:da:23:68:e0:37:e6:e3:24:c8: 0e:62:de:e7:8b:6d:68:a7:3e:a0:d0:26:60:c8:75:fb:fe:42: 31:f9:fd:ba:57:ff:4e:bd:a6:84:69:0c:16:ee:f9:2d:45:5b: b6:d1:e7:64:06:15:5d:2b:03:ac:f7:89:1a:41:8d:39:30:1a: 2f:5c:48:91:b8:6c:a0:0d:01:46:5e:8a:5a:de:15:3b:76:0f: ac:94:04:45:52:c3:fa:0d:51:fa:ad:bd:43:9d:17:cd:6b:bc: d7:f1:4a:18:80:c1:80:9d:0a:13:05:fc:bf:e5:b3:5b:21:12: 8f:f7:5d:b2:55:6a:56:fe:33:04:cd:f6:f0:a6:cb:90:40:83: 16:1a:36:25:95:1e:da:57:ad:07:f4:0e:45:ee:0a:19:c9:f9: 71:67:0f:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEye/F++s1O5DD/xxkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M2NTVhYWYtNzZmNC00YmFiLWI0ZjctOGZiMjNjM2Q0 MDExMB4XDTI2MDEyMzE0MDAzOFoXDTI2MDQyMzEzMDAzOFowLzEtMCsGA1UEAxMk YmNiOTRlN2EtMGM3Ni00ZDExLTk1MjAtYzVkYmZiYWRkMzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLnMnWFKoowWIy8WjkvCDoWjSfSNs8vW7WGS FFEiZ7VfniSwfOzep8tM9iI9xWhr1mnuO74vxLTJvSl/jDfpZV+HRhVNXnsRPhMI QJFI+wYtu7flscE863BdTQ/nIDExvRl2aCvQTZDuRM0XfaQWt1lgQA/A2oF+Xlwx XcPxB4cNLVb5z4NzKTlgj3lfF7+FwNcstJ15WRIg+ha9knIMwc9rBqH/cF/jo6mC IWyz49LgY/GKw2t6F06LbRLI1hkaVBKWDXnSAHhgu3bIWoIwtiU/0mo1Qw5M6KIL AvHVeaimhU7/naeu5cgfTq5kEp+yB4b8T3C3BCxiKOmvYi8jQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOcF2oQVGWPfZpSacKzAdHrQAW2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1 NWFhZi03NmY0LTRiYWItYjRmNy04ZmIyM2MzZDQwMTEvNDA0OWM0NGEtZjgwOC0z Yzk3LWJmYjYtYTMyM2YwNGYzNDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2M2NTVhYWYtNzZmNC00YmFiLWI0 ZjctOGZiMjNjM2Q0MDExLzNjNjU1YWFmLTc2ZjQtNGJhYi1iNGY3LThmYjIzYzNk NDAxMS5jcmwwHwYDVR0jBBgwFoAUiHOJW9dIB54yw37e57iTyJjsLBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1NWFhZi03NmY0LTRiYWItYjRmNy04ZmIy M2MzZDQwMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Eg0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpwIM/pYY9BOFSa9YLCuErlDaC5B6BwgbTuyl8NeXse4Xj1YEi4N00M iqdT3TBxQBzIWkd1yi+AKIqR5e+tDW+EqcpBwaY+epuRVfjf162aaiFpoSNoCb4U I0kmh9S3Tm5t7NojaOA35uMkyA5i3ueLbWinPqDQJmDIdfv+QjH5/bpX/069poRp DBbu+S1FW7bR52QGFV0rA6z3iRpBjTkwGi9cSJG4bKANAUZeilreFTt2D6yUBEVS w/oNUfqtvUOdF81rvNfxShiAwYCdChMF/L/ls1shEo/3XbJValb+MwTN9vCmy5BA gxYaNiWVHtpXrQf0DkXuChnJ+XFnD4E= -----END CERTIFICATE-----Generated at Mon Mar 2 13:54:41 2026 by rpki-client