$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/966c0648-5c33-30e3-b6c5-8e88d5a844bc.roa File: 966c0648-5c33-30e3-b6c5-8e88d5a844bc.roa (raw, json) Hash identifier: NOh6dLS/pH3rrjqjqXlI+84o2HyiNLmGtUhmVpbYqh4= Subject key identifier: E8:29:41:1F:64:30:75:DC:23:FC:42:A0:03:14:14:D0:36:68:46:08 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584CD17CA9DE1AC0F4CE0DFBF580 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/966c0648-5c33-30e3-b6c5-8e88d5a844bc.roa Signing time: Tue 10 Feb 2026 16:09:46 +0000 ROA not before: Tue 10 Feb 2026 16:09:46 +0000 ROA not after: Mon 11 May 2026 15:09:46 +0000 asID: 63172 IP address blocks: 208.53.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d1:7c:a9:de:1a:c0:f4:ce:0d:fb:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Feb 10 16:09:46 2026 GMT Not After : May 11 15:09:46 2026 GMT Subject: CN=43213eff-f6af-4187-9e05-551b4c8627a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4b:05:e3:52:85:ab:9a:6f:56:09:70:80:2e: 7b:12:09:52:8a:92:23:c7:bc:7e:ac:5d:76:33:95: 63:6c:89:3a:2f:43:9f:3a:cd:e8:2e:42:84:53:ac: 82:79:20:8a:73:62:76:e1:dd:6f:3d:5b:fc:6b:6e: 80:63:53:71:3d:5d:b3:9e:35:5b:c9:73:ad:2d:40: aa:7c:20:40:5f:8d:f8:ac:83:10:a6:cd:74:18:a3: a6:96:4b:a8:f7:e4:73:b3:84:f2:d9:a9:14:b8:91: ff:91:fb:ff:8c:71:c8:4f:28:e5:c9:14:66:2e:98: 68:0a:49:6f:83:76:50:79:f2:ab:fe:5a:ed:65:d7: 02:aa:18:1e:f2:e0:c6:9a:03:af:c5:cb:90:78:6e: 07:f5:ce:ef:3c:ee:04:7b:00:06:38:82:ca:2d:c1: 3c:f7:b2:1b:a6:ea:4d:80:8e:e3:d7:2b:36:89:88: 95:e7:b7:a4:a8:de:b0:87:00:09:21:0e:76:35:88: 16:a2:da:e6:d7:51:39:e7:64:b8:05:94:18:45:f3: 9a:a7:4b:73:31:03:44:ef:77:35:92:0c:fa:8f:35: d8:81:4a:6a:59:9f:89:ad:4f:7d:18:ff:5f:bf:e6: 9b:e7:37:d9:7c:57:f8:5c:18:a8:cd:eb:ee:36:47: ca:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:29:41:1F:64:30:75:DC:23:FC:42:A0:03:14:14:D0:36:68:46:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/966c0648-5c33-30e3-b6c5-8e88d5a844bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:26:06:00:41:6e:27:42:21:b4:c7:7e:bf:f0:d7:ac:51:57: 31:61:7a:36:2d:ab:01:e9:bd:4d:8a:0f:33:f2:9a:b5:10:af: 27:bc:8e:66:30:8a:85:0f:26:3d:1d:24:8a:24:fd:99:4b:2e: b9:e5:0a:55:4e:b1:e9:a7:73:5a:d5:be:77:de:0f:a8:e5:c1: 1f:8d:f2:6d:27:13:03:fa:35:da:ab:3a:5e:21:a2:5e:cf:52: 04:e8:0d:46:0e:8d:5f:41:cc:0a:d4:16:22:57:4e:47:81:8a: 9e:b6:a9:ea:5e:b1:7f:98:2a:b0:ac:17:d4:e6:0f:ff:d3:cb: 61:76:14:5c:f9:99:a3:76:27:e0:93:33:89:ec:df:f5:0d:0c: ac:b4:39:e8:51:43:d4:b3:dc:b4:85:aa:3c:63:59:58:2a:5a: 7f:d2:2d:8c:45:c8:d5:ab:39:72:de:50:05:fd:44:1a:fd:38: f5:ba:37:af:29:63:1b:d8:e9:3a:06:63:30:00:c1:ae:31:61: 56:fd:58:0c:74:74:ea:c6:09:10:6d:8d:c6:0c:57:d5:8a:df: eb:2e:0f:65:4c:48:7d:e1:1e:b0:16:77:17:89:7f:0c:2f:75: 4b:7c:df:31:b1:6b:88:db:3f:0b:cd:8d:56:69:fb:e2:83:aa: fb:68:6e:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzRfKneGsD0zg379YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDIxMDE2MDk0NloXDTI2MDUxMTE1MDk0NlowLzEtMCsGA1UEAxMk NDMyMTNlZmYtZjZhZi00MTg3LTllMDUtNTUxYjRjODYyN2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkksF41KFq5pvVglwgC57EglSipIjx7x+rF12 M5VjbIk6L0OfOs3oLkKEU6yCeSCKc2J24d1vPVv8a26AY1NxPV2znjVbyXOtLUCq fCBAX434rIMQps10GKOmlkuo9+Rzs4Ty2akUuJH/kfv/jHHITyjlyRRmLphoCklv g3ZQefKr/lrtZdcCqhge8uDGmgOvxcuQeG4H9c7vPO4EewAGOILKLcE897IbpupN gI7j1ys2iYiV57ekqN6whwAJIQ52NYgWotrm11E552S4BZQYRfOap0tzMQNE73c1 kgz6jzXYgUpqWZ+JrU99GP9fv+ab5zfZfFf4XBiozevuNkfKHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOgpQR9kMHXcI/xCoAMUFNA2aEYIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvOTY2YzA2NDgtNWMzMy0z MGUzLWI2YzUtOGU4OGQ1YTg0NGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0DXsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgmBgBBbidCIbTHfr/w16xRVzFhejYtqwHpvU2KDzPymrUQrye8jmYw ioUPJj0dJIok/ZlLLrnlClVOsemnc1rVvnfeD6jlwR+N8m0nEwP6NdqrOl4hol7P UgToDUYOjV9BzArUFiJXTkeBip62qepesX+YKrCsF9TmD//Ty2F2FFz5maN2J+CT M4ns3/UNDKy0OehRQ9Sz3LSFqjxjWVgqWn/SLYxFyNWrOXLeUAX9RBr9OPW6N68p YxvY6ToGYzAAwa4xYVb9WAx0dOrGCRBtjcYMV9WK3+suD2VMSH3hHrAWdxeJfwwv dUt83zGxa4jbPwvNjVZp++KDqvtobv8= -----END CERTIFICATE-----Generated at Mon Mar 2 09:27:36 2026 by rpki-client