$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/af01ca17-7fab-3632-8e8c-cf4b1edbb8d6.roa File: af01ca17-7fab-3632-8e8c-cf4b1edbb8d6.roa (raw, json) Hash identifier: gXYLclRkd0PbAC+yEYDOoIYZPB6VDfZNUSF1pZ1BTPo= Subject key identifier: C7:11:03:23:B8:FE:68:FF:F3:7A:EF:E4:C4:CA:31:D8:6E:D6:7A:4C Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584CA5F7087D79AFECE255E86900 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/af01ca17-7fab-3632-8e8c-cf4b1edbb8d6.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 13576 IP address blocks: 208.53.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:08:7d:79:af:ec:e2:55:e8:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=b18cf51d-47c0-438e-9ea7-c294b90cbf20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:70:13:b9:47:11:ea:41:18:ac:8b:fc:46:a1: 94:cf:cf:9b:92:58:38:ea:07:92:4f:69:8f:bf:52: fd:0e:d2:d1:37:2d:25:73:34:59:38:eb:17:02:f5: 13:ae:42:ab:a7:ce:c1:7f:a7:82:4a:61:e1:2c:97: af:8b:b8:28:a4:7a:51:0f:ab:b5:aa:ee:4d:28:20: 3d:ce:c4:64:b1:d5:bc:e8:31:6b:5f:d3:ff:4c:94: 50:2b:7d:52:4f:e9:19:42:d7:f6:fa:40:ef:a1:fa: a5:95:b1:5f:4b:4c:e3:7d:1a:93:5c:59:f1:9c:90: 4e:cd:0a:40:aa:87:f0:21:e3:39:6a:6f:8c:f1:1a: 9c:e9:5f:93:74:f1:7b:b6:37:fc:30:04:2a:83:62: fd:eb:81:f2:a5:e6:42:59:4a:95:cd:bd:b2:7e:40: 36:36:73:5a:db:10:45:2e:d0:ef:dc:82:d2:0a:0e: 64:4a:36:21:70:15:34:76:83:41:57:40:36:75:dc: b2:cc:09:fc:87:30:ef:57:54:31:95:c7:29:ff:ed: 22:26:f4:c9:82:a1:de:b7:72:07:ea:af:fa:9f:a5: 40:32:43:05:bf:56:80:7a:fc:29:26:05:5a:fe:50: 30:ac:89:29:24:1c:4a:24:50:2d:97:dd:b9:76:f0: 64:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:11:03:23:B8:FE:68:FF:F3:7A:EF:E4:C4:CA:31:D8:6E:D6:7A:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/af01ca17-7fab-3632-8e8c-cf4b1edbb8d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:74:fe:6b:d2:ad:d0:21:77:16:e1:79:bf:90:24:13:51:f8: 27:20:cd:f4:0e:77:0f:02:d1:0f:9f:28:c5:0e:b4:41:7c:e9: 69:14:4e:3c:60:fe:be:c4:a1:b7:01:d1:e2:cd:11:87:32:81: aa:01:6f:26:bf:4d:da:d6:ee:8f:72:b8:f6:bb:61:cd:05:d6: 3c:8a:f3:f5:90:ce:1d:89:10:0a:53:5f:39:9f:58:24:ac:4f: e4:c6:e0:b2:55:42:48:1b:7a:8e:b9:9c:e3:4c:ad:37:f5:de: 8c:b5:d3:f9:3f:0c:a0:36:be:1b:5b:3c:d7:a6:0c:42:5a:e1: 96:62:db:db:d2:36:64:e9:0b:8e:6f:4c:1c:06:43:b9:25:b1: ba:d7:d9:ec:71:bb:c8:99:36:5f:3e:b4:90:1a:33:27:ec:9d: d4:fd:76:47:e3:9a:2b:a8:29:92:56:a1:35:7b:6b:13:e6:21: 98:f7:76:25:33:a7:a3:5b:30:a5:60:aa:bd:36:88:a8:b0:88: 35:8d:f1:81:70:de:4a:75:b8:04:1a:77:84:58:43:37:07:de: 6c:60:11:8c:8d:b0:19:ed:d7:82:cf:c1:da:bc:a9:d0:21:b5: 07:8c:f8:06:23:45:2b:13:6d:42:01:36:57:91:91:ee:78:45: 09:1c:94:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9wh9ea/s4lXoaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk YjE4Y2Y1MWQtNDdjMC00MzhlLTllYTctYzI5NGI5MGNiZjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnATuUcR6kEYrIv8RqGUz8+bklg46geST2mP v1L9DtLRNy0lczRZOOsXAvUTrkKrp87Bf6eCSmHhLJevi7gopHpRD6u1qu5NKCA9 zsRksdW86DFrX9P/TJRQK31ST+kZQtf2+kDvofqllbFfS0zjfRqTXFnxnJBOzQpA qofwIeM5am+M8Rqc6V+TdPF7tjf8MAQqg2L964HypeZCWUqVzb2yfkA2NnNa2xBF LtDv3ILSCg5kSjYhcBU0doNBV0A2ddyyzAn8hzDvV1Qxlccp/+0iJvTJgqHet3IH 6q/6n6VAMkMFv1aAevwpJgVa/lAwrIkpJBxKJFAtl925dvBk6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcRAyO4/mj/83rv5MTKMdhu1npMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYWYwMWNhMTctN2ZhYi0z NjMyLThlOGMtY2Y0YjFlZGJiOGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0DXqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFB0/mvSrdAhdxbheb+QJBNR+CcgzfQOdw8C0Q+fKMUOtEF86WkUTjxg /r7EobcB0eLNEYcygaoBbya/TdrW7o9yuPa7Yc0F1jyK8/WQzh2JEApTXzmfWCSs T+TG4LJVQkgbeo65nONMrTf13oy10/k/DKA2vhtbPNemDEJa4ZZi29vSNmTpC45v TBwGQ7klsbrX2exxu8iZNl8+tJAaMyfsndT9dkfjmiuoKZJWoTV7axPmIZj3diUz p6NbMKVgqr02iKiwiDWN8YFw3kp1uAQad4RYQzcH3mxgEYyNsBnt14LPwdq8qdAh tQeM+AYjRSsTbUIBNleRke54RQkclBo= -----END CERTIFICATE-----Generated at Mon Mar 2 07:13:21 2026 by rpki-client