$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/4cfe3449-31ae-3c86-a8d8-afbe3fbb87de.roa File: 4cfe3449-31ae-3c86-a8d8-afbe3fbb87de.roa (raw, json) Hash identifier: qjCA5OljkKZj4/3rr7oME1ddJh1O4cPBBA8lSstvsng= Subject key identifier: C5:29:DA:26:6C:41:CE:3A:BA:2F:5D:67:78:B0:36:51:DE:80:2D:FB Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584CA5F70814D6C9FC22F6E0AA00 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/4cfe3449-31ae-3c86-a8d8-afbe3fbb87de.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 399439 IP address blocks: 208.53.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:08:14:d6:c9:fc:22:f6:e0:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=267cec31-33ed-48b4-8579-b73ec5daf80d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:68:73:e1:77:96:c6:b7:7a:fa:62:81:18:6c: 86:8d:f7:e0:74:7d:dc:a9:46:db:ea:06:19:0f:15: 55:a6:9b:ca:4c:5f:58:98:6a:30:a6:76:6f:ba:7e: 04:d2:32:21:f8:b1:d8:3e:98:f0:6b:e3:43:10:b6: bd:d3:3e:89:cc:5a:0b:e2:b2:f7:b7:f8:56:9d:27: 0a:cd:92:99:13:5c:64:1a:77:6e:80:c2:7f:d9:74: 43:88:25:61:f2:29:94:02:ad:85:1e:9a:ab:de:2a: 79:4a:25:02:66:83:77:2d:50:9a:75:c1:11:5f:ee: af:2c:71:77:44:1e:29:a7:63:b3:0f:ef:fe:c2:54: 18:17:e7:c1:16:d6:c8:e6:63:37:1a:9a:a7:b0:14: e7:9e:ca:56:82:40:59:da:9f:34:b4:c9:47:08:dc: 74:23:03:07:2f:c0:4e:d8:ec:04:5f:5e:8b:6a:1b: 38:29:1c:88:3c:af:28:3c:b3:1a:f9:5c:08:95:c2: e0:bd:c1:fa:d3:a8:b2:6c:73:c8:6e:2f:d2:6d:9f: 19:a0:3d:a7:eb:e5:46:f0:fc:44:cc:fc:85:f8:89: 9c:d4:07:82:70:8f:97:ff:99:57:7a:77:56:62:69: 14:8f:70:c4:2e:67:a9:2c:ec:82:b0:49:b5:f1:a6: c0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:29:DA:26:6C:41:CE:3A:BA:2F:5D:67:78:B0:36:51:DE:80:2D:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/4cfe3449-31ae-3c86-a8d8-afbe3fbb87de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:38:47:3c:24:ab:00:10:f8:f2:fc:83:54:56:01:c8:d0:b5: 39:1a:be:56:c6:f9:be:06:ba:55:3e:5a:ba:a3:87:c9:3d:91: 7a:a5:92:2a:f6:88:29:f5:c5:26:04:a2:a4:1e:dd:bc:c9:ff: f8:a9:b4:50:ee:56:58:f6:09:5c:89:f6:3b:e7:84:d3:91:ea: 45:fc:ba:c9:e9:d9:db:ba:76:e4:92:91:9b:2f:f7:d3:10:01: fd:c8:ed:d7:bb:d1:41:cf:04:14:77:29:d3:a6:08:c5:99:11: 02:da:5b:0b:2b:52:21:85:c1:3f:65:fb:5d:23:47:52:07:38: 1b:ed:91:0b:3a:ac:9f:51:ec:d6:74:73:a4:e0:7f:67:4f:08: 62:24:70:8c:00:3c:2e:32:e3:5f:d9:82:92:20:ce:29:4c:13: 0b:d7:1a:a5:2d:46:e7:83:69:81:fe:f1:77:dd:8a:96:16:d2: 96:c7:96:a6:db:5c:be:8c:af:13:6f:5a:ee:a5:85:f3:f5:89: 60:d4:6c:bc:b5:08:e1:ac:3a:be:02:13:58:ee:37:63:06:7c: 27:8c:ee:a0:ed:79:5e:29:dd:cb:da:ed:88:2b:60:cf:dd:2e: be:2c:0d:ae:04:2d:a3:af:5e:dd:1f:31:02:7f:0b:4a:e4:e8: 3d:ea:40:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9wgU1sn8IvbgqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk MjY3Y2VjMzEtMzNlZC00OGI0LTg1NzktYjczZWM1ZGFmODBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWhz4XeWxrd6+mKBGGyGjffgdH3cqUbb6gYZ DxVVppvKTF9YmGowpnZvun4E0jIh+LHYPpjwa+NDELa90z6JzFoL4rL3t/hWnScK zZKZE1xkGndugMJ/2XRDiCVh8imUAq2FHpqr3ip5SiUCZoN3LVCadcERX+6vLHF3 RB4pp2OzD+/+wlQYF+fBFtbI5mM3GpqnsBTnnspWgkBZ2p80tMlHCNx0IwMHL8BO 2OwEX16Lahs4KRyIPK8oPLMa+VwIlcLgvcH606iybHPIbi/SbZ8ZoD2n6+VG8PxE zPyF+Imc1AeCcI+X/5lXendWYmkUj3DELmepLOyCsEm18abADQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUp2iZsQc46ui9dZ3iwNlHegC37MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNGNmZTM0NDktMzFhZS0z Yzg2LWE4ZDgtYWZiZTNmYmI4N2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0DXeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGk4RzwkqwAQ+PL8g1RWAcjQtTkavlbG+b4GulU+Wrqjh8k9kXqlkir2 iCn1xSYEoqQe3bzJ//iptFDuVlj2CVyJ9jvnhNOR6kX8usnp2du6duSSkZsv99MQ Af3I7de70UHPBBR3KdOmCMWZEQLaWwsrUiGFwT9l+10jR1IHOBvtkQs6rJ9R7NZ0 c6Tgf2dPCGIkcIwAPC4y41/ZgpIgzilMEwvXGqUtRueDaYH+8XfdipYW0pbHlqbb XL6MrxNvWu6lhfP1iWDUbLy1COGsOr4CE1juN2MGfCeM7qDteV4p3cva7YgrYM/d Lr4sDa4ELaOvXt0fMQJ/C0rk6D3qQPU= -----END CERTIFICATE-----Generated at Mon Mar 2 19:27:29 2026 by rpki-client