$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/04a09eab-355b-3055-8dec-cbb659cc0dbf.roa File: 04a09eab-355b-3055-8dec-cbb659cc0dbf.roa (raw, json) Hash identifier: 3C6qCOb7o3wWfPOZSXoNvLL5z/kBxKSI+uDGvvMRVJs= Subject key identifier: C8:AA:07:39:EA:B0:14:C6:0A:08:58:D5:E4:5A:11:65:60:AA:7D:E5 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584CA5F7088DBBA7B946E9AFFC80 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/04a09eab-355b-3055-8dec-cbb659cc0dbf.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 13576 IP address blocks: 208.53.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:08:8d:bb:a7:b9:46:e9:af:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=8c68c722-46b7-43d9-aa88-8c20bb2cf448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:36:41:2f:d3:af:1c:81:89:56:97:4b:d0:65: 8d:a1:e5:bb:f4:6c:b2:4b:c5:a4:f0:6c:3c:f1:5e: 97:5b:5a:dd:da:52:89:87:d4:67:c5:cf:43:79:03: b5:03:7d:44:6c:5e:a2:0d:c5:a2:ad:ce:6f:2b:19: 21:cb:3f:be:f0:ff:e0:8e:1f:00:b1:76:4e:37:c5: b3:08:f4:e8:6c:29:98:f1:1c:4f:4d:88:ff:01:3c: e4:97:bb:9b:3a:b6:76:0f:f0:f6:82:23:de:11:cb: bb:b7:0d:3c:d8:1d:8d:cc:d1:e9:80:fd:b2:a0:20: a1:2a:35:08:40:0a:fe:25:56:9e:6b:56:76:39:5f: d3:35:72:1f:76:b0:f6:2b:76:c1:9f:4c:c5:a6:66: e3:71:92:f3:d0:94:77:fd:3b:5d:f4:6e:15:5c:cb: 11:f8:28:90:f8:21:23:d4:5e:09:8e:7c:2a:f6:28: 35:56:25:a8:6c:3d:dd:21:ab:29:b8:5b:ee:8e:15: 13:5c:67:df:52:fc:c6:2e:49:fd:3b:bc:58:0a:92: ef:c2:c4:f4:3b:bd:56:cb:c4:30:6c:83:a3:f2:42: 84:93:d8:02:a2:e3:95:85:e8:de:ed:5b:98:08:96: 87:71:44:fb:53:81:73:41:93:38:36:60:e5:b2:2b: 1c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:AA:07:39:EA:B0:14:C6:0A:08:58:D5:E4:5A:11:65:60:AA:7D:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/04a09eab-355b-3055-8dec-cbb659cc0dbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:bd:f8:16:e4:d3:4f:12:1c:3e:a4:a1:6c:40:8a:e6:cf:66: aa:c7:e3:ab:38:6b:0d:ec:6d:cb:26:28:c6:75:5d:b1:59:66: 79:b2:d2:30:d1:ab:c8:1d:ce:bb:82:c9:53:71:cd:ed:36:33: 10:6b:9d:c1:35:b6:b3:48:26:a8:d1:4e:a3:3b:98:a9:73:28: c2:ab:c7:9c:92:04:6f:2e:b4:52:80:98:ef:48:1d:0b:f2:20: 0b:c3:fe:f5:dd:2f:f3:47:aa:46:52:32:c8:fd:23:db:71:2d: 28:ba:79:15:fe:5a:fa:6f:a6:4f:df:e7:64:56:e5:d2:4e:45: bf:04:26:33:d2:97:27:72:e1:ca:4b:0e:a9:31:83:f2:72:de: b1:c2:0d:60:b2:05:03:46:14:33:36:90:b7:fe:de:04:1f:e9: 2d:58:c8:a3:7e:84:52:3c:b3:3b:4d:df:b1:a8:b5:2f:30:b9: 08:a7:fd:f0:4f:3e:c4:d2:ba:57:ee:c7:a9:f7:cb:29:2b:ae: 71:7b:43:ba:b6:9c:88:da:e1:3e:00:40:58:0c:5c:fa:16:7f: 2e:05:1f:e9:70:42:27:2c:79:19:df:2d:fc:31:5d:a8:c0:87: 66:a8:c7:4e:6f:7b:b4:e2:22:1c:51:39:b0:3d:08:1b:d8:ee: 6b:58:d6:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9wiNu6e5Rumv/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk OGM2OGM3MjItNDZiNy00M2Q5LWFhODgtOGMyMGJiMmNmNDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzZBL9OvHIGJVpdL0GWNoeW79GyyS8Wk8Gw8 8V6XW1rd2lKJh9Rnxc9DeQO1A31EbF6iDcWirc5vKxkhyz++8P/gjh8AsXZON8Wz CPTobCmY8RxPTYj/ATzkl7ubOrZ2D/D2giPeEcu7tw082B2NzNHpgP2yoCChKjUI QAr+JVaea1Z2OV/TNXIfdrD2K3bBn0zFpmbjcZLz0JR3/Ttd9G4VXMsR+CiQ+CEj 1F4Jjnwq9ig1ViWobD3dIaspuFvujhUTXGffUvzGLkn9O7xYCpLvwsT0O71Wy8Qw bIOj8kKEk9gCouOVheje7VuYCJaHcUT7U4FzQZM4NmDlsiscUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMiqBznqsBTGCghY1eRaEWVgqn3lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMDRhMDllYWItMzU1Yi0z MDU1LThkZWMtY2JiNjU5Y2MwZGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0DXsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI69+Bbk008SHD6koWxAiubPZqrH46s4aw3sbcsmKMZ1XbFZZnmy0jDR q8gdzruCyVNxze02MxBrncE1trNIJqjRTqM7mKlzKMKrx5ySBG8utFKAmO9IHQvy IAvD/vXdL/NHqkZSMsj9I9txLSi6eRX+Wvpvpk/f52RW5dJORb8EJjPSlydy4cpL Dqkxg/Jy3rHCDWCyBQNGFDM2kLf+3gQf6S1YyKN+hFI8sztN37GotS8wuQin/fBP PsTSulfux6n3yykrrnF7Q7q2nIja4T4AQFgMXPoWfy4FH+lwQicseRnfLfwxXajA h2aox05ve7TiIhxRObA9CBvY7mtY1mg= -----END CERTIFICATE-----Generated at Mon Mar 2 07:13:21 2026 by rpki-client