$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ca6a529c-6acf-319e-a4df-448c5b8733f1.roa File: ca6a529c-6acf-319e-a4df-448c5b8733f1.roa (raw, json) Hash identifier: cfEVmD36OdIqJwOOrPRNp5ilQR2WmBUJKI6ExzBNlHk= Subject key identifier: E1:CF:32:95:FE:35:97:A7:15:B2:02:92:1E:4E:81:BA:2D:80:19:04 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584CD17CC787498DE9262B8983C0 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ca6a529c-6acf-319e-a4df-448c5b8733f1.roa Signing time: Tue 10 Feb 2026 16:10:00 +0000 ROA not before: Tue 10 Feb 2026 16:10:00 +0000 ROA not after: Mon 11 May 2026 15:10:00 +0000 asID: 63172 IP address blocks: 208.53.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d1:7c:c7:87:49:8d:e9:26:2b:89:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Feb 10 16:10:00 2026 GMT Not After : May 11 15:10:00 2026 GMT Subject: CN=528a04ea-fbde-4095-9df7-65030ad38373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c7:c5:e6:c4:4f:ff:82:73:e4:7b:4e:6f:e3: 26:70:f9:bd:e8:cd:66:b7:52:09:b7:6a:eb:6d:59: 37:8f:4e:34:da:f1:ec:c2:7d:29:11:21:b3:88:0f: 13:36:0a:ad:16:e2:99:32:42:37:9d:02:99:b4:aa: 55:3f:20:ab:19:87:7a:56:b3:34:3f:78:45:56:16: 86:98:f1:f4:ba:3a:5a:e6:7d:c0:63:96:f7:d2:d8: 89:6f:fd:11:8c:16:0b:c4:83:7f:07:4f:93:97:97: 48:e4:c4:1d:22:6f:02:30:4c:54:48:71:fc:e5:46: c7:1b:b4:36:01:a3:06:c9:70:6d:7b:ab:2c:6c:35: 5b:e9:3d:64:04:21:f9:b4:dd:36:d0:8c:6a:00:75: ff:e0:8e:2d:65:39:d6:e5:51:81:96:3d:17:39:5b: 5b:15:b1:63:ff:cd:85:08:49:36:5f:c1:ef:8f:46: 6b:b1:01:bc:fe:8d:53:10:87:4f:c6:07:bf:2b:c5: ba:e6:29:6c:0f:d3:4f:e5:93:0e:e7:ea:a7:72:4c: 8f:f4:25:10:3c:27:01:d7:af:64:e4:11:4c:e3:16: 76:93:7e:9b:68:5f:94:e5:91:ce:44:0f:6e:7a:a4: cf:06:24:48:f9:d1:0a:0e:9d:35:30:0f:a1:93:62: c0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:CF:32:95:FE:35:97:A7:15:B2:02:92:1E:4E:81:BA:2D:80:19:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ca6a529c-6acf-319e-a4df-448c5b8733f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:4b:1e:55:f8:5b:c6:7e:7e:3e:7e:a3:83:72:8b:31:70:3c: 48:97:48:ec:58:80:27:8d:9e:ca:e5:75:3e:f8:28:10:25:d5: 71:53:fd:29:f8:8d:51:d3:8c:7a:f2:2a:6d:3d:b7:6c:79:b2: 8e:2f:54:4a:a8:4e:6f:02:b0:fb:24:cf:9a:9d:cd:67:c2:52: 27:a0:7d:3c:e6:44:19:5f:0f:38:29:ae:6f:3f:18:dd:ee:15: 69:a7:ef:aa:c6:af:28:7c:97:94:c9:85:82:0b:78:c0:d6:ea: 68:86:39:18:d0:be:9b:1e:e8:21:00:ae:cd:39:e8:e8:9e:8e: 3f:19:50:83:5a:25:a9:a0:99:89:50:90:40:d5:98:1c:98:13: ce:e1:64:5b:73:f7:18:a2:77:73:1a:64:47:2e:0a:3b:b6:49: 88:06:1a:fc:48:86:50:74:cd:a1:0c:24:0b:1d:a9:4b:61:51: 03:0f:b2:0f:0e:b2:4d:e9:61:6b:69:60:35:c0:a7:7f:96:0f: 1c:c5:4d:e0:6d:dd:7b:2e:b1:99:61:94:43:dc:43:1f:ad:2f: 7a:c2:cd:c2:bd:a7:61:b6:a4:13:09:05:6f:55:e3:c8:4c:77: 0d:00:1a:bd:a7:3c:ec:e3:cd:8c:4f:b2:ba:3c:48:5a:df:fb: 2e:b6:e1:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzRfMeHSY3pJiuJg8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDIxMDE2MTAwMFoXDTI2MDUxMTE1MTAwMFowLzEtMCsGA1UEAxMk NTI4YTA0ZWEtZmJkZS00MDk1LTlkZjctNjUwMzBhZDM4MzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisfF5sRP/4Jz5HtOb+MmcPm96M1mt1IJt2rr bVk3j0402vHswn0pESGziA8TNgqtFuKZMkI3nQKZtKpVPyCrGYd6VrM0P3hFVhaG mPH0ujpa5n3AY5b30tiJb/0RjBYLxIN/B0+Tl5dI5MQdIm8CMExUSHH85UbHG7Q2 AaMGyXBte6ssbDVb6T1kBCH5tN020IxqAHX/4I4tZTnW5VGBlj0XOVtbFbFj/82F CEk2X8Hvj0ZrsQG8/o1TEIdPxge/K8W65ilsD9NP5ZMO5+qnckyP9CUQPCcB169k 5BFM4xZ2k36baF+U5ZHORA9ueqTPBiRI+dEKDp01MA+hk2LA/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHPMpX+NZenFbICkh5OgbotgBkEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvY2E2YTUyOWMtNmFjZi0z MTllLWE0ZGYtNDQ4YzViODczM2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DX9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVLHlX4W8Z+fj5+o4NyizFwPEiXSOxYgCeNnsrldT74KBAl1XFT/Sn4 jVHTjHryKm09t2x5so4vVEqoTm8CsPskz5qdzWfCUiegfTzmRBlfDzgprm8/GN3u FWmn76rGryh8l5TJhYILeMDW6miGORjQvpse6CEArs056Oiejj8ZUINaJamgmYlQ kEDVmByYE87hZFtz9xiid3MaZEcuCju2SYgGGvxIhlB0zaEMJAsdqUthUQMPsg8O sk3pYWtpYDXAp3+WDxzFTeBt3XsusZlhlEPcQx+tL3rCzcK9p2G2pBMJBW9V48hM dw0AGr2nPOzjzYxPsro8SFrf+y624dw= -----END CERTIFICATE-----Generated at Mon Mar 2 07:02:11 2026 by rpki-client