$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/6051541d-6587-3c04-9e8b-47f341d02531.roa File: 6051541d-6587-3c04-9e8b-47f341d02531.roa (raw, json) Hash identifier: Z3Yjz4DF1jFfGV2jum/7r+J+ONC/MVIFnHsrDwjHpBc= Subject key identifier: 1A:E0:9E:1D:E2:6C:68:8B:B7:4F:2A:D3:2A:CB:6E:5A:E4:23:64:19 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584CA5F707BFB7F1D7C844A04800 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/6051541d-6587-3c04-9e8b-47f341d02531.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 13576 IP address blocks: 208.53.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:07:bf:b7:f1:d7:c8:44:a0:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=e3579ae0-1492-41af-9b8a-a6ef2a225af1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cc:f5:e2:14:22:96:c2:7b:78:93:e6:06:74: f8:9a:cc:fc:c2:3f:68:92:78:aa:45:be:d1:f9:7e: 04:88:18:9c:83:19:c9:b1:e2:c8:3e:c2:c7:6f:81: 13:c9:1e:94:2d:86:aa:c8:2b:ec:20:53:18:e7:4e: c4:ba:7c:d9:7e:f3:44:cb:1f:22:e2:78:c2:2c:81: fc:7c:ff:b8:ea:0e:3c:d0:83:46:f6:e5:06:06:50: 58:5e:7e:38:17:be:79:1e:d7:8e:a8:da:8e:05:f0: c9:25:e7:88:5e:19:1e:23:30:55:29:15:d7:fa:b8: 6d:8f:0d:32:cb:43:84:cf:b3:5e:76:67:76:aa:dd: f0:8d:d6:d9:8e:d8:3b:86:b9:35:9b:73:66:1e:9f: c0:e6:b3:78:fa:6b:0d:b8:45:a5:6e:f7:76:36:2f: 87:74:86:17:0e:56:bd:88:68:31:c7:77:aa:49:9b: 6d:6f:be:db:28:ff:e8:c3:00:f3:17:42:90:43:4e: 2f:df:49:a1:ea:36:55:0b:10:24:e3:28:4b:15:a0: 3f:9a:d0:ab:16:51:26:d8:96:ce:d3:b6:0e:1b:40: 5d:96:79:20:3b:17:b4:1b:9a:42:38:a5:b6:87:c9: a3:41:bd:50:a4:a9:a1:a4:bd:9b:47:d5:39:58:15: 77:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E0:9E:1D:E2:6C:68:8B:B7:4F:2A:D3:2A:CB:6E:5A:E4:23:64:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/6051541d-6587-3c04-9e8b-47f341d02531.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:2d:3c:31:f8:36:b1:f6:e2:43:32:e4:e6:8f:34:7e:f7:a4: d2:df:31:bf:6b:5d:2f:e8:b9:fe:82:81:bd:1d:ea:59:c1:29: 23:30:bd:67:a7:ba:6d:78:ab:b9:8c:76:2b:69:c4:75:ad:81: 0e:cd:fc:4e:5f:12:92:e9:a6:c5:47:81:c9:af:ee:21:d3:f1: 48:85:7f:9c:f3:20:c0:c2:f8:82:e3:2b:74:d4:76:02:b9:76: 37:b5:27:16:f9:cc:33:47:a4:6b:4c:a7:54:53:46:f7:c3:2e: e0:ad:98:76:55:1e:20:71:a7:e5:49:38:4c:8f:1f:1a:76:4e: 93:85:ff:5e:67:21:97:f7:95:dc:8e:ff:7e:21:bf:34:26:31: 4b:d6:d5:83:f8:30:13:82:f2:03:e4:61:1b:68:0c:6e:b7:fb: 70:9e:22:3e:6d:fd:c6:79:1d:46:8e:ed:06:f7:08:5e:11:e3: 68:6c:d1:d6:16:f8:cf:8d:4a:b7:44:f0:38:d7:be:84:b4:61: 6e:9b:1a:4a:6f:fe:1c:96:4e:56:a7:12:31:fd:3e:c4:c7:cd: cd:30:90:56:1d:60:00:d4:5b:07:60:28:21:b9:cf:1a:7c:33: 29:12:1b:67:f7:38:e5:b5:1c:a3:d3:3d:d0:4a:89:55:52:78: 71:8b:33:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9we/t/HXyESgSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk ZTM1NzlhZTAtMTQ5Mi00MWFmLTliOGEtYTZlZjJhMjI1YWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusz14hQilsJ7eJPmBnT4msz8wj9okniqRb7R +X4EiBicgxnJseLIPsLHb4ETyR6ULYaqyCvsIFMY507EunzZfvNEyx8i4njCLIH8 fP+46g480ING9uUGBlBYXn44F755HteOqNqOBfDJJeeIXhkeIzBVKRXX+rhtjw0y y0OEz7Nedmd2qt3wjdbZjtg7hrk1m3NmHp/A5rN4+msNuEWlbvd2Ni+HdIYXDla9 iGgxx3eqSZttb77bKP/owwDzF0KQQ04v30mh6jZVCxAk4yhLFaA/mtCrFlEm2JbO 07YOG0BdlnkgOxe0G5pCOKW2h8mjQb1QpKmhpL2bR9U5WBV3wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrgnh3ibGiLt08q0yrLblrkI2QZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNjA1MTU0MWQtNjU4Ny0z YzA0LTllOGItNDdmMzQxZDAyNTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DXTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAotPDH4NrH24kMy5OaPNH73pNLfMb9rXS/ouf6Cgb0d6lnBKSMwvWen um14q7mMditpxHWtgQ7N/E5fEpLppsVHgcmv7iHT8UiFf5zzIMDC+ILjK3TUdgK5 dje1Jxb5zDNHpGtMp1RTRvfDLuCtmHZVHiBxp+VJOEyPHxp2TpOF/15nIZf3ldyO /34hvzQmMUvW1YP4MBOC8gPkYRtoDG63+3CeIj5t/cZ5HUaO7Qb3CF4R42hs0dYW +M+NSrdE8DjXvoS0YW6bGkpv/hyWTlanEjH9PsTHzc0wkFYdYADUWwdgKCG5zxp8 MykSG2f3OOW1HKPTPdBKiVVSeHGLM78= -----END CERTIFICATE-----Generated at Mon Mar 2 13:41:47 2026 by rpki-client