$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b1c86e78-67c7-333a-928e-a0cff3179bb3.roa File: b1c86e78-67c7-333a-928e-a0cff3179bb3.roa (raw, json) Hash identifier: Tr2N/J12C3zuv4P671tBA9VS2kpmk/Ah/I9YjmqxYQk= Subject key identifier: 1A:60:31:8B:41:64:84:2F:AC:5D:20:22:0A:17:AD:E4:9A:94:C1:13 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584CA5F7080153FE0E67A4650400 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b1c86e78-67c7-333a-928e-a0cff3179bb3.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 13576 IP address blocks: 208.53.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:08:01:53:fe:0e:67:a4:65:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=95ba3ea9-79f5-4c2c-a327-6ce7e48d73ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:29:50:28:b6:91:7c:d3:0f:59:7d:3e:6f:c9: 0c:56:24:06:43:bd:8f:85:bd:53:88:65:f9:65:ff: 26:5c:1d:b9:f2:80:14:e1:fd:33:c3:a0:d5:4d:0b: ad:af:d3:dd:cf:5f:f7:5c:94:0c:2c:17:fe:88:a9: 58:4f:3b:d3:6c:ba:25:8f:8d:8b:65:f6:36:03:03: 9f:25:43:ab:e5:1c:09:f7:82:8b:fd:b5:5e:b1:0e: c5:8b:97:05:11:bf:cd:8d:6a:d7:ca:cf:bf:41:49: d3:b7:08:dc:9b:5c:4f:cf:a8:8d:7a:ca:e0:8a:4e: 10:da:0c:7a:6e:bd:c1:18:5e:c7:7c:b3:87:e8:a1: af:a9:0c:26:0c:3c:aa:de:4f:a3:5b:a1:3b:cd:5e: 25:61:86:25:c9:04:ec:b4:5e:8a:3e:dd:da:cd:b2: e6:be:73:d1:5f:69:31:22:4e:5d:26:99:cd:61:b4: dc:47:06:ee:d7:ff:0a:f0:a6:c6:2d:c3:24:06:63: 31:dd:48:5c:61:2c:9c:83:a4:e5:b1:6c:f7:5c:5d: ae:c9:2c:68:c6:a5:7f:d5:e9:19:8a:43:ca:3d:e5: 1a:e5:e2:82:80:72:07:15:d1:dd:4b:7b:65:18:9f: fb:bb:bf:ee:9f:43:37:77:fe:13:4c:4b:bd:9a:55: 18:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:60:31:8B:41:64:84:2F:AC:5D:20:22:0A:17:AD:E4:9A:94:C1:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b1c86e78-67c7-333a-928e-a0cff3179bb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:71:09:2b:d9:95:0f:ed:f3:f3:6a:b5:4b:be:03:fc:1b:9e: b6:f0:17:dd:93:dd:c0:bf:87:44:ee:2f:3f:1b:c3:b0:6c:a8: df:5c:f0:6c:b1:4d:23:52:94:34:32:23:b1:b9:7f:5e:81:ef: da:1e:9e:a1:1f:e3:4f:eb:02:f8:7b:d2:43:bb:19:42:18:b7: b8:32:9e:57:bd:31:75:7c:76:76:41:e6:71:c5:5f:21:01:0a: 44:20:78:23:1f:27:62:9e:27:66:8c:2e:cc:44:ff:82:3c:fa: 1c:97:af:6a:26:6f:b1:80:c3:68:f3:3a:9b:8f:ff:d2:25:e3: 78:45:7f:34:bd:8a:c6:b3:3b:bc:97:15:da:ab:1d:7c:73:7f: 5f:cd:17:f9:d2:01:63:6c:15:86:67:95:e9:21:08:49:27:59: e4:00:23:12:28:d5:8a:55:6e:a4:f7:bc:ec:6f:54:6b:da:de: b8:03:ac:f4:8e:7a:df:02:27:06:a5:bd:93:ba:8f:3a:27:72: 1b:82:d6:48:e8:6b:7d:59:89:34:eb:c6:44:84:ab:35:91:3b: a1:5a:66:24:b5:ee:3c:20:13:15:63:03:ee:b3:4d:e1:42:45: 43:89:1e:46:ca:a1:5d:c4:38:e5:44:b9:4e:e8:3c:74:a7:c8: 85:55:a4:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9wgBU/4OZ6RlBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk OTViYTNlYTktNzlmNS00YzJjLWEzMjctNmNlN2U0OGQ3M2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwylQKLaRfNMPWX0+b8kMViQGQ72Phb1TiGX5 Zf8mXB258oAU4f0zw6DVTQutr9Pdz1/3XJQMLBf+iKlYTzvTbLolj42LZfY2AwOf JUOr5RwJ94KL/bVesQ7Fi5cFEb/NjWrXys+/QUnTtwjcm1xPz6iNesrgik4Q2gx6 br3BGF7HfLOH6KGvqQwmDDyq3k+jW6E7zV4lYYYlyQTstF6KPt3azbLmvnPRX2kx Ik5dJpnNYbTcRwbu1/8K8KbGLcMkBmMx3UhcYSycg6TlsWz3XF2uySxoxqV/1ekZ ikPKPeUa5eKCgHIHFdHdS3tlGJ/7u7/un0M3d/4TTEu9mlUYUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpgMYtBZIQvrF0gIgoXreSalMETMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYjFjODZlNzgtNjdjNy0z MzNhLTkyOGUtYTBjZmYzMTc5YmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0DXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMNxCSvZlQ/t8/NqtUu+A/wbnrbwF92T3cC/h0TuLz8bw7BsqN9c8Gyx TSNSlDQyI7G5f16B79oenqEf40/rAvh70kO7GUIYt7gynle9MXV8dnZB5nHFXyEB CkQgeCMfJ2KeJ2aMLsxE/4I8+hyXr2omb7GAw2jzOpuP/9Il43hFfzS9isazO7yX FdqrHXxzf1/NF/nSAWNsFYZnlekhCEknWeQAIxIo1YpVbqT3vOxvVGva3rgDrPSO et8CJwalvZO6jzonchuC1kjoa31ZiTTrxkSEqzWRO6FaZiS17jwgExVjA+6zTeFC RUOJHkbKoV3EOOVEuU7oPHSnyIVVpCs= -----END CERTIFICATE-----Generated at Mon Mar 2 17:45:02 2026 by rpki-client