$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/54915a00-a9aa-3079-9d84-fe591ad1ff1b.roa File: 54915a00-a9aa-3079-9d84-fe591ad1ff1b.roa (raw, json) Hash identifier: 3XojcQLSUwDa1ShdgY3Qp6npnRN0Qp1dwkaBEb9xXR8= Subject key identifier: 07:83:7C:7F:73:E0:0A:0C:2A:75:9E:E4:FE:78:30:C7:26:1A:4F:9F Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584CA5F714370DDB81B00B312480 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/54915a00-a9aa-3079-9d84-fe591ad1ff1b.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 13576 IP address blocks: 208.53.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:14:37:0d:db:81:b0:0b:31:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=9441f5de-abb5-4b69-8cfd-fbeb8758eff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3a:55:ad:11:a6:c0:ba:2d:a5:69:41:36:06: d2:da:e9:57:08:77:af:45:0f:f2:4e:27:0c:e5:9b: 10:0b:4f:6d:88:1b:13:6f:c0:47:20:d7:7e:75:4e: 1e:7f:f1:e6:11:7e:7b:8a:9a:48:e4:e2:d3:bb:44: b9:eb:12:2b:df:e1:70:ba:4a:8c:d1:3f:69:0f:a7: c4:09:59:a5:0c:b8:64:0b:0a:33:da:97:62:91:3a: 70:9b:12:ed:32:de:dc:4a:71:c6:7c:67:d8:72:11: 0b:35:e5:41:81:9d:f9:95:4f:3b:08:5b:01:cd:cb: 63:34:c1:71:a8:5b:91:2c:83:2e:fd:fa:50:4b:f9: 6f:15:11:ee:c6:a2:0a:32:53:75:85:b6:09:5d:77: bb:70:54:91:6e:51:4f:cc:58:ba:1d:7e:7f:f5:40: cb:82:33:a0:56:b5:67:c8:bf:0b:9d:71:c4:af:58: 24:3e:93:49:11:f4:8f:12:08:20:89:c7:c0:cf:85: 61:62:9a:d0:40:58:67:b5:2e:30:aa:79:fc:2f:26: cb:2f:ab:a9:9c:d3:98:b2:68:f9:11:57:4b:d0:98: 3e:81:7c:18:e6:6c:61:5d:88:e8:9d:3b:2e:dd:42: 7a:71:48:2e:14:ec:d5:a0:e1:f9:c5:df:1e:32:ba: 60:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:83:7C:7F:73:E0:0A:0C:2A:75:9E:E4:FE:78:30:C7:26:1A:4F:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/54915a00-a9aa-3079-9d84-fe591ad1ff1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:b6:e7:72:d2:82:f2:8a:d7:17:ca:08:76:5c:eb:6c:87:05: ce:40:ca:7d:74:73:5c:be:5f:7b:8b:7e:35:7e:0c:16:a9:38: ec:d2:70:ab:5f:11:09:ed:21:6b:d1:04:97:aa:9e:62:29:fd: 0a:8c:e5:cf:47:33:35:39:84:20:64:23:63:cb:f1:f8:06:41: f8:f6:a8:fa:61:c2:6e:92:e5:80:8f:bb:88:bb:2e:ac:fd:07: d5:9d:06:27:1a:0a:7d:68:11:91:e9:e4:fc:6c:6a:bd:08:ed: 4c:9e:a1:8f:09:53:45:d9:62:69:93:91:72:52:65:d2:fe:75: 82:d8:44:3e:c8:18:36:74:da:86:30:fd:14:52:05:e8:3b:53: 3c:03:70:24:26:d6:b0:47:71:d3:9c:e3:10:b1:94:ba:cf:b4: ad:6b:9c:c9:d1:a3:f9:83:4b:72:8a:e6:d4:5d:3a:05:5a:7e: 68:c3:98:9d:b4:da:65:03:26:81:70:a3:5a:78:a1:a8:d3:69: f3:da:c6:68:0f:e3:5f:8e:d3:b6:03:8b:ac:62:24:89:52:aa: ea:15:70:f2:85:82:9e:81:ef:e5:fb:d0:d0:5c:9a:e7:2b:17: 4d:d7:71:83:ee:70:e7:18:96:22:00:9d:80:6d:df:67:d1:45: 6e:b1:2c:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9xQ3DduBsAsxJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk OTQ0MWY1ZGUtYWJiNS00YjY5LThjZmQtZmJlYjg3NThlZmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDpVrRGmwLotpWlBNgbS2ulXCHevRQ/yTicM 5ZsQC09tiBsTb8BHINd+dU4ef/HmEX57ippI5OLTu0S56xIr3+FwukqM0T9pD6fE CVmlDLhkCwoz2pdikTpwmxLtMt7cSnHGfGfYchELNeVBgZ35lU87CFsBzctjNMFx qFuRLIMu/fpQS/lvFRHuxqIKMlN1hbYJXXe7cFSRblFPzFi6HX5/9UDLgjOgVrVn yL8LnXHEr1gkPpNJEfSPEgggicfAz4VhYprQQFhntS4wqnn8LybLL6upnNOYsmj5 EVdL0Jg+gXwY5mxhXYjonTsu3UJ6cUguFOzVoOH5xd8eMrpgOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAeDfH9z4AoMKnWe5P54MMcmGk+fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNTQ5MTVhMDAtYTlhYS0z MDc5LTlkODQtZmU1OTFhZDFmZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DXPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+253LSgvKK1xfKCHZc62yHBc5Ayn10c1y+X3uLfjV+DBapOOzScKtf EQntIWvRBJeqnmIp/QqM5c9HMzU5hCBkI2PL8fgGQfj2qPphwm6S5YCPu4i7Lqz9 B9WdBicaCn1oEZHp5Pxsar0I7UyeoY8JU0XZYmmTkXJSZdL+dYLYRD7IGDZ02oYw /RRSBeg7UzwDcCQm1rBHcdOc4xCxlLrPtK1rnMnRo/mDS3KK5tRdOgVafmjDmJ20 2mUDJoFwo1p4oajTafPaxmgP41+O07YDi6xiJIlSquoVcPKFgp6B7+X70NBcmucr F03XcYPucOcYliIAnYBt32fRRW6xLAA= -----END CERTIFICATE-----Generated at Mon Mar 2 14:08:34 2026 by rpki-client