$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/c469517e-f64f-3997-bd0a-c9c289dcd6a9.roa File: c469517e-f64f-3997-bd0a-c9c289dcd6a9.roa (raw, json) Hash identifier: uxNRF/TKFOGqcJme+STWtp7eVj8fquGTZoKFTyWxL94= Subject key identifier: 23:5D:72:91:58:F4:50:8B:03:81:0E:87:44:03:1F:33:BA:FF:DA:D4 Certificate issuer: /CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Certificate serial: 010D0C9F4328584CB2874685FEA0483949075280 Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/c469517e-f64f-3997-bd0a-c9c289dcd6a9.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 6079 IP address blocks: 208.58.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:46:85:fe:a0:48:39:49:07:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=97269d9a-26ca-4bb3-bc72-25c9d8725b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:de:d2:8d:9f:d5:8d:84:c9:22:c6:c2:9d:5b: 4f:31:e4:ea:80:da:85:44:20:54:0a:c7:86:53:8d: b3:71:1a:16:73:a0:11:3f:00:ab:b5:bc:b0:51:ec: a2:23:77:de:8b:cc:01:2b:24:8d:24:49:86:6d:81: 62:4c:09:c1:d3:c5:8c:16:5e:1a:06:84:62:21:17: 6f:53:2d:fb:47:6a:69:5f:d6:54:5a:ed:6f:bf:75: d5:e7:9c:91:a7:7c:fa:f0:6f:87:ec:c5:f4:e1:9d: bd:55:86:2a:4e:54:89:10:0a:29:70:64:7f:75:ca: e3:db:6e:9e:99:50:b5:66:03:91:16:94:d7:da:2b: 21:6f:c1:34:7d:aa:53:61:be:c2:bc:4c:0c:23:2b: ef:ae:c1:b5:da:0c:41:79:13:37:64:1e:a8:cb:20: 5a:3d:81:49:14:a6:66:5f:3d:82:c7:9d:85:61:be: 0b:55:d1:d5:56:98:b3:32:47:77:86:54:7e:30:7a: 71:af:ee:27:ac:7b:1d:a3:49:76:10:1e:50:57:63: 17:00:ff:34:34:77:8e:26:e0:64:ae:a9:b8:59:18: 34:ba:fb:62:07:c7:32:29:3d:3b:58:ee:6c:14:51: 26:8d:a9:9c:7a:dd:52:b1:91:c0:53:dd:c6:1a:00: f7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:5D:72:91:58:F4:50:8B:03:81:0E:87:44:03:1F:33:BA:FF:DA:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/c469517e-f64f-3997-bd0a-c9c289dcd6a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl X509v3 Authority Key Identifier: keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer sbgp-ipAddrBlock: critical IPv4: 208.58.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:54:c6:e2:41:8e:c1:0e:6a:6b:8b:90:7c:9a:1c:d6:64:5f: 3a:bf:ca:69:f0:00:ae:29:3c:0e:67:30:da:f4:36:a9:18:a9: 82:43:b3:ba:6e:cf:10:85:93:ab:83:b6:a1:0e:6e:56:16:7c: 3d:a5:10:67:b2:28:6e:f3:06:fa:d5:e4:63:7a:d6:fc:bd:30: d2:87:c2:7d:99:bb:42:f2:3f:e1:97:2d:b5:ed:9b:da:12:96: ca:41:e6:f8:9e:da:3c:cc:65:60:99:d0:75:15:ea:5a:85:5c: 8e:01:2b:62:c3:a6:0d:05:04:8b:fb:5c:c9:7c:1b:47:7e:76: 0f:aa:03:45:6e:bf:a2:02:13:9a:53:a4:24:8f:4e:f5:da:9b: 63:fc:1b:b4:93:e8:35:ae:81:c9:b9:46:1d:ef:38:a9:90:53: 8c:a9:e6:53:50:40:07:e4:fe:0a:14:3e:3d:28:1e:c8:3e:26: db:16:d3:dd:44:82:a8:be:d6:8d:49:79:f6:1e:eb:4f:cf:e6: bb:cb:74:6f:bd:35:65:32:12:6b:63:67:ad:d2:29:00:6c:10: 4a:35:c9:f6:f3:94:81:84:4f:c2:c2:41:46:c6:77:f7:b7:e3: 13:6b:2d:f4:2c:c0:99:ca:32:6b:aa:c6:78:c4:20:a7:04:cc: 38:ca:7a:ef -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEyyh0aF/qBIOUkHUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2 ODczMB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk OTcyNjlkOWEtMjZjYS00YmIzLWJjNzItMjVjOWQ4NzI1YjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt7SjZ/VjYTJIsbCnVtPMeTqgNqFRCBUCseG U42zcRoWc6ARPwCrtbywUeyiI3fei8wBKySNJEmGbYFiTAnB08WMFl4aBoRiIRdv Uy37R2ppX9ZUWu1vv3XV55yRp3z68G+H7MX04Z29VYYqTlSJEAopcGR/dcrj226e mVC1ZgORFpTX2ishb8E0fapTYb7CvEwMIyvvrsG12gxBeRM3ZB6oyyBaPYFJFKZm Xz2Cx52FYb4LVdHVVpizMkd3hlR+MHpxr+4nrHsdo0l2EB5QV2MXAP80NHeOJuBk rqm4WRg0uvtiB8cyKT07WO5sFFEmjamcet1SsZHAU93GGgD36QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCNdcpFY9FCLA4EOh0QDHzO6/9rUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0 NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvYzQ2OTUxN2UtZjY0Zi0z OTk3LWJkMGEtYzljMjg5ZGNkNmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw MTRkZDY4NzMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMB0DowVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAtVTG4kGOwQ5qa4uQfJoc1mRfOr/KafAArik8Dmcw2vQ2qRipgkOzum7P EIWTq4O2oQ5uVhZ8PaUQZ7IobvMG+tXkY3rW/L0w0ofCfZm7QvI/4Zctte2b2hKW ykHm+J7aPMxlYJnQdRXqWoVcjgErYsOmDQUEi/tcyXwbR352D6oDRW6/ogITmlOk JI9O9dqbY/wbtJPoNa6ByblGHe84qZBTjKnmU1BAB+T+ChQ+PSgeyD4m2xbT3USC qL7WjUl59h7rT8/mu8t0b701ZTISa2NnrdIpAGwQSjXJ9vOUgYRPwsJBRsZ397fj E2st9CzAmcoya6rGeMQgpwTMOMp67w== -----END CERTIFICATE-----Generated at Mon Mar 2 14:14:12 2026 by rpki-client