$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/32455528-6cbc-3a29-af39-cf2ed16976c1.roa File: 32455528-6cbc-3a29-af39-cf2ed16976c1.roa (raw, json) Hash identifier: GdKaRoCS+pcQnxMdOOn4wsPYV4+ajwlzLbNLQnmHtoQ= Subject key identifier: 81:82:C9:71:EF:40:7E:DA:10:07:4C:65:AD:41:B3:CC:B7:77:4D:1E Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584CD17C1E47D8C2C4F804864EE0 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/32455528-6cbc-3a29-af39-cf2ed16976c1.roa Signing time: Tue 10 Feb 2026 16:08:40 +0000 ROA not before: Tue 10 Feb 2026 16:08:40 +0000 ROA not after: Mon 11 May 2026 15:08:40 +0000 asID: 63172 IP address blocks: 208.53.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d1:7c:1e:47:d8:c2:c4:f8:04:86:4e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Feb 10 16:08:40 2026 GMT Not After : May 11 15:08:40 2026 GMT Subject: CN=c157b045-c79c-485f-896a-51589f8b5b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1e:36:92:6e:b1:ce:74:39:9b:2f:a2:e8:dd: 4c:7b:e6:91:90:5b:20:87:84:9c:cb:e5:51:53:82: a3:a2:f6:90:7e:48:5d:51:50:18:25:a1:25:93:b3: e9:83:99:e7:b5:44:e4:24:3f:93:ce:5e:cd:bb:36: fb:57:e8:a7:ec:c9:dc:3f:0a:54:e3:04:84:06:d3: 56:06:dc:9a:7b:06:f8:c9:da:50:5c:fc:d4:da:26: e3:7e:03:61:f1:c3:55:fe:db:fc:4f:b2:e1:dd:1e: f1:70:02:70:dd:68:94:55:9e:b9:fe:86:d7:67:b5: d4:c0:a8:de:ae:bc:e5:18:0c:78:41:d3:2e:19:94: 26:c4:8e:a5:67:dc:88:23:c0:9b:b4:f8:1f:1e:ee: 59:54:46:a4:c1:ba:a3:35:69:08:b3:ff:78:03:fe: 18:8d:26:b5:4b:ea:b3:5a:87:0e:4a:bf:5d:aa:39: 11:67:a3:97:04:6e:ab:23:fb:2a:87:5b:b4:fa:e0: 22:21:ed:95:1e:da:11:99:48:82:c8:22:20:25:7d: 20:ff:b2:c4:e2:79:b0:cd:8d:78:a1:37:dc:52:97: 58:cb:50:29:c0:8c:cb:10:95:64:77:4f:d1:24:0f: dd:98:ab:c8:f7:c9:c1:0c:7b:7c:7a:2c:fc:f4:cd: f0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:82:C9:71:EF:40:7E:DA:10:07:4C:65:AD:41:B3:CC:B7:77:4D:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/32455528-6cbc-3a29-af39-cf2ed16976c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:f7:17:ce:ae:4c:7f:c0:3a:39:14:90:6a:73:fb:d7:04:a0: 32:36:2a:70:0a:db:fd:e3:a6:01:0d:dc:67:af:a2:e3:0e:ac: fa:97:c5:e9:8e:19:ea:2e:04:f9:48:39:0f:1c:f5:18:b9:37: 20:a4:9c:40:89:1e:ff:5b:6d:6d:98:13:95:60:dc:3c:d9:5c: 00:f3:0d:c8:70:87:97:18:b8:ca:c1:61:56:67:3f:f4:30:10: 6b:35:c2:f9:8a:c3:65:4c:78:7e:69:5c:46:88:5a:c5:50:7c: bf:47:3b:3a:03:94:31:e2:f6:fd:75:18:38:d1:43:ec:d2:02: c6:22:c3:bc:93:b5:84:14:d4:14:72:59:a8:4a:01:1f:f9:ac: 30:a8:02:bd:a8:23:37:79:c1:38:09:6c:6a:16:cf:9f:f7:ac: 9d:c3:59:1e:cd:22:db:ae:f2:38:db:02:6e:97:20:b3:8e:35: 3d:b3:27:e4:a5:99:af:79:6a:87:2f:20:3c:f3:88:d0:b4:15: af:77:11:5c:5a:55:6d:ea:b0:65:57:b0:e7:f3:0b:3f:ed:3f: be:f7:87:ef:d3:58:f1:46:c0:8b:81:37:db:60:00:16:69:ee: b3:de:e4:25:51:e8:22:1c:a9:31:88:00:10:6c:5f:fa:0e:09: 29:23:0f:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzRfB5H2MLE+ASGTuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDIxMDE2MDg0MFoXDTI2MDUxMTE1MDg0MFowLzEtMCsGA1UEAxMk YzE1N2IwNDUtYzc5Yy00ODVmLTg5NmEtNTE1ODlmOGI1YjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxR42km6xznQ5my+i6N1Me+aRkFsgh4Scy+VR U4KjovaQfkhdUVAYJaElk7Ppg5nntUTkJD+Tzl7Nuzb7V+in7MncPwpU4wSEBtNW Btyaewb4ydpQXPzU2ibjfgNh8cNV/tv8T7Lh3R7xcAJw3WiUVZ65/obXZ7XUwKje rrzlGAx4QdMuGZQmxI6lZ9yII8CbtPgfHu5ZVEakwbqjNWkIs/94A/4YjSa1S+qz WocOSr9dqjkRZ6OXBG6rI/sqh1u0+uAiIe2VHtoRmUiCyCIgJX0g/7LE4nmwzY14 oTfcUpdYy1ApwIzLEJVkd0/RJA/dmKvI98nBDHt8eiz89M3wIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGCyXHvQH7aEAdMZa1Bs8y3d00eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMzI0NTU1MjgtNmNiYy0z YTI5LWFmMzktY2YyZWQxNjk3NmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0DXiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEj3F86uTH/AOjkUkGpz+9cEoDI2KnAK2/3jpgEN3GevouMOrPqXxemO GeouBPlIOQ8c9Ri5NyCknECJHv9bbW2YE5Vg3DzZXADzDchwh5cYuMrBYVZnP/Qw EGs1wvmKw2VMeH5pXEaIWsVQfL9HOzoDlDHi9v11GDjRQ+zSAsYiw7yTtYQU1BRy WahKAR/5rDCoAr2oIzd5wTgJbGoWz5/3rJ3DWR7NItuu8jjbAm6XILOONT2zJ+Sl ma95aocvIDzziNC0Fa93EVxaVW3qsGVXsOfzCz/tP773h+/TWPFGwIuBN9tgABZp 7rPe5CVR6CIcqTGIABBsX/oOCSkjD60= -----END CERTIFICATE-----Generated at Mon Mar 2 11:20:36 2026 by rpki-client