$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/49082d3e-7584-364a-9da5-2646622120e1.roa File: 49082d3e-7584-364a-9da5-2646622120e1.roa (raw, json) Hash identifier: uVPMP8N4L9Oclv39N8R9XyYyjkhLEoA8oP+IJf/dZqo= Subject key identifier: 6A:D6:9C:F8:56:3D:42:A6:81:2C:53:DB:65:4D:BA:34:4E:20:C5:44 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584CA5F708AAF7730CB156E00700 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/49082d3e-7584-364a-9da5-2646622120e1.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 25732 IP address blocks: 208.53.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:08:aa:f7:73:0c:b1:56:e0:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=2dd4e920-9775-4123-9cae-d1f6655674ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:57:ae:57:be:e1:9a:cb:83:1c:33:f4:04:e1: ee:c3:5d:a0:55:18:30:be:bb:b6:49:90:38:7c:81: 08:94:96:e3:a0:f8:06:ac:f0:1f:91:20:9e:6c:ef: 51:20:4a:31:e1:33:42:bf:98:f2:91:2f:d7:ae:67: b4:e5:97:bc:f3:fd:03:90:3f:77:dd:71:01:0e:25: 8f:e5:4c:3c:42:42:52:9f:cc:fc:5b:b7:1f:0c:df: 9c:5b:f2:1d:81:8b:23:ec:c7:32:90:ca:35:f2:16: 37:0f:2f:fa:9b:ae:b8:1a:92:c3:a2:eb:7d:18:8c: 00:74:75:8a:b0:da:fe:7d:8b:d8:9f:ca:9b:05:4b: 6e:4b:25:6f:7e:74:23:0f:da:2d:00:cd:ed:41:7c: 01:bc:00:40:43:f2:66:b9:39:59:90:23:db:3f:00: f1:37:b1:11:ac:34:4b:f6:14:99:5f:96:a2:22:c1: 08:b8:83:45:d8:7d:69:52:a0:48:d3:93:bd:75:e1: 82:5d:87:ee:42:eb:da:08:b1:7a:f0:97:49:70:ed: 8d:10:e9:c8:a1:3f:76:27:8c:93:f4:36:d4:8d:17: 37:95:4f:8f:01:da:f1:9b:5a:73:4d:d8:f5:7a:4f: 70:e4:89:a6:d0:ae:8f:c6:ba:95:3d:80:fd:c2:69: 6b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D6:9C:F8:56:3D:42:A6:81:2C:53:DB:65:4D:BA:34:4E:20:C5:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/49082d3e-7584-364a-9da5-2646622120e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:e4:9c:3a:ed:bc:cf:02:cf:b6:f2:69:9d:fe:1c:ae:f2:4e: fd:6d:3f:11:33:f3:ef:85:e5:11:49:6b:5b:d1:42:1f:c9:bd: f7:29:e3:70:16:58:50:7e:54:29:83:07:11:81:07:63:88:28: 44:a5:63:35:d6:ae:fa:24:16:f1:49:a3:f1:ff:ea:a9:70:ba: bd:b4:59:47:d0:69:2d:02:c4:7f:02:65:2d:08:7b:ff:23:59: 98:fe:42:f5:f7:8b:c0:c1:54:b9:cb:9e:4a:26:87:d3:6d:1c: 57:7b:f0:e6:fe:a2:f8:77:70:42:a9:4b:35:5a:88:88:4d:ef: 2e:06:72:34:8a:de:a9:4b:cd:ad:47:05:e3:1b:7b:67:45:30: 51:bf:97:63:20:59:a7:b4:5e:76:cf:d0:3d:41:1b:b3:d8:6a: 54:ed:f1:72:45:32:10:2e:05:48:14:05:a0:1b:24:26:85:ab: c0:e7:db:ea:92:41:11:d0:bd:21:35:f1:64:13:25:af:d4:67: 34:cd:c3:8c:77:1c:30:13:f2:05:62:bb:01:88:c4:9a:36:a5: cf:2e:57:6f:20:d3:22:46:f4:13:ad:08:83:c4:f5:dd:c2:ff: da:b1:f9:26:7b:0c:e5:06:2f:69:a7:dd:72:80:70:c1:1d:07: fa:92:36:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9wiq93MMsVbgBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk MmRkNGU5MjAtOTc3NS00MTIzLTljYWUtZDFmNjY1NTY3NGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1euV77hmsuDHDP0BOHuw12gVRgwvru2SZA4 fIEIlJbjoPgGrPAfkSCebO9RIEox4TNCv5jykS/Xrme05Ze88/0DkD933XEBDiWP 5Uw8QkJSn8z8W7cfDN+cW/IdgYsj7McykMo18hY3Dy/6m664GpLDout9GIwAdHWK sNr+fYvYn8qbBUtuSyVvfnQjD9otAM3tQXwBvABAQ/JmuTlZkCPbPwDxN7ERrDRL 9hSZX5aiIsEIuINF2H1pUqBI05O9deGCXYfuQuvaCLF68JdJcO2NEOnIoT92J4yT 9DbUjRc3lU+PAdrxm1pzTdj1ek9w5Imm0K6PxrqVPYD9wmlrewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrWnPhWPUKmgSxT22VNujROIMVEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNDkwODJkM2UtNzU4NC0z NjRhLTlkYTUtMjY0NjYyMjEyMGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DX4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKfknDrtvM8Cz7byaZ3+HK7yTv1tPxEz8++F5RFJa1vRQh/Jvfcp43AW WFB+VCmDBxGBB2OIKESlYzXWrvokFvFJo/H/6qlwur20WUfQaS0CxH8CZS0Ie/8j WZj+QvX3i8DBVLnLnkomh9NtHFd78Ob+ovh3cEKpSzVaiIhN7y4GcjSK3qlLza1H BeMbe2dFMFG/l2MgWae0XnbP0D1BG7PYalTt8XJFMhAuBUgUBaAbJCaFq8Dn2+qS QRHQvSE18WQTJa/UZzTNw4x3HDAT8gViuwGIxJo2pc8uV28g0yJG9BOtCIPE9d3C /9qx+SZ7DOUGL2mn3XKAcMEdB/qSNjE= -----END CERTIFICATE-----Generated at Mon Mar 2 15:56:40 2026 by rpki-client