$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/f881eafc-5ebb-3e96-b459-1eee0f53ca90.roa File: f881eafc-5ebb-3e96-b459-1eee0f53ca90.roa (raw, json) Hash identifier: 1APaHZjVoYhsNZbDM2KKjYCzVVw6+W6yG53g0ZUBCqw= Subject key identifier: 2B:5B:F2:BE:D5:6C:45:29:AC:B3:37:22:6C:F8:47:00:10:68:99:87 Certificate issuer: /CN=aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2 Certificate serial: 010D0C9F4328584CCBA756963F0BBBBEC17D5DA0 Authority key identifier: 04:A9:78:75:8E:C1:95:1C:A6:2C:2F:0B:FA:32:2F:DB:CB:E3:24:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/f881eafc-5ebb-3e96-b459-1eee0f53ca90.roa Signing time: Sun 08 Feb 2026 14:00:41 +0000 ROA not before: Sun 08 Feb 2026 14:00:41 +0000 ROA not after: Sat 09 May 2026 13:00:41 +0000 asID: 16509 IP address blocks: 209.46.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cb:a7:56:96:3f:0b:bb:be:c1:7d:5d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2 Validity Not Before: Feb 8 14:00:41 2026 GMT Not After : May 9 13:00:41 2026 GMT Subject: CN=8b0cef3c-a31e-40e8-94de-05498f53bb55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:cf:c0:33:52:a5:84:ee:93:7f:42:34:b4:b6: f6:51:48:9c:04:1b:ee:ed:e3:ec:04:49:01:a2:e3: 96:dc:05:92:a0:bd:c1:b0:bc:77:78:f8:d6:f6:5f: 34:89:75:68:82:d0:15:b7:db:72:d1:a9:2c:11:5c: f9:64:7a:d5:bd:f5:a6:52:59:68:4a:0b:4d:b6:6d: 0f:9f:9f:46:67:3a:a2:6f:9d:74:c9:bd:72:ec:69: 20:d4:9a:4e:ad:c2:82:58:05:82:3d:b0:5d:34:a4: 4c:88:48:b3:17:8b:f3:f6:30:7e:2b:87:1d:0b:e8: e3:ac:43:ee:f0:7d:b6:b2:d7:34:90:60:52:51:cf: 77:9c:88:46:dd:99:65:ff:da:7b:5d:a4:0e:98:15: 2e:2b:ae:6d:5e:9e:1f:9d:35:db:b1:9b:f8:19:30: 90:40:41:b6:0b:43:6f:36:08:a9:04:0b:01:b8:af: 8f:89:fb:0a:14:18:cb:ff:d6:24:63:d6:b4:82:a6: 25:20:28:b1:14:d2:22:78:56:5d:ba:73:6c:69:02: 9d:87:2b:7a:0a:49:a9:a3:5a:0c:88:4d:98:04:72: e1:ca:4e:bc:f3:00:c1:15:ae:4f:44:f0:06:88:1e: 0d:29:b9:d7:c5:b9:cc:e8:72:97:63:d6:40:a8:48: bd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:5B:F2:BE:D5:6C:45:29:AC:B3:37:22:6C:F8:47:00:10:68:99:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/f881eafc-5ebb-3e96-b459-1eee0f53ca90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.crl X509v3 Authority Key Identifier: keyid:04:A9:78:75:8E:C1:95:1C:A6:2C:2F:0B:FA:32:2F:DB:CB:E3:24:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer sbgp-ipAddrBlock: critical IPv4: 209.46.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:8f:00:33:40:01:a3:3c:48:ac:1a:18:67:32:1f:17:91:b0: 8c:a7:59:e0:21:07:c0:d4:46:c0:57:b7:75:87:b3:64:e4:08: 25:1f:08:4a:e2:54:18:bf:a6:2a:50:f1:3f:7b:76:3d:cf:e9: 4c:db:ba:03:29:63:65:ec:17:76:91:e7:83:48:89:82:99:a8: d5:48:5b:01:a0:76:87:c1:df:ca:d1:15:c5:90:f6:a5:02:a8: 3d:27:da:44:e4:7f:05:22:7a:dc:6d:22:98:62:6e:b6:0b:9d: 2a:79:11:08:e1:23:ac:6e:4e:4c:29:b1:83:5a:1a:69:78:18: 0b:45:e0:85:f0:73:c5:81:0c:32:1a:87:30:00:5e:be:60:a6: dc:63:6f:91:3d:2d:79:0d:20:d6:7f:81:76:56:7e:37:38:0a: f1:86:bc:76:aa:b8:97:f3:b6:ee:5d:18:6f:2b:a3:1d:2c:bc: f0:88:de:69:8f:6b:e9:cd:24:e9:24:e9:43:58:0e:bb:f6:c5: 5b:98:68:11:0a:9e:0d:3e:dc:c5:a4:e6:9f:07:0b:24:7e:7b: 67:b2:81:1b:ad:e5:41:ad:f9:63:3a:bf:dc:3d:f1:4c:da:16: cd:b7:22:6b:b3:a8:05:46:5b:b5:1c:ac:5e:44:c3:44:6f:9a: 78:7f:4d:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzLp1aWPwu7vsF9XaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwM2JlOGMtYjIzYy00ZDgyLTlmOGQtNjRlZDdhOGEz OWQyMB4XDTI2MDIwODE0MDA0MVoXDTI2MDUwOTEzMDA0MVowLzEtMCsGA1UEAxMk OGIwY2VmM2MtYTMxZS00MGU4LTk0ZGUtMDU0OThmNTNiYjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs/AM1KlhO6Tf0I0tLb2UUicBBvu7ePsBEkB ouOW3AWSoL3BsLx3ePjW9l80iXVogtAVt9ty0aksEVz5ZHrVvfWmUlloSgtNtm0P n59GZzqib510yb1y7Gkg1JpOrcKCWAWCPbBdNKRMiEizF4vz9jB+K4cdC+jjrEPu 8H22stc0kGBSUc93nIhG3Zll/9p7XaQOmBUuK65tXp4fnTXbsZv4GTCQQEG2C0Nv NgipBAsBuK+PifsKFBjL/9YkY9a0gqYlICixFNIieFZdunNsaQKdhyt6Ckmpo1oM iE2YBHLhyk688wDBFa5PRPAGiB4NKbnXxbnM6HKXY9ZAqEi9mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtb8r7VbEUprLM3Imz4RwAQaJmHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTAz YmU4Yy1iMjNjLTRkODItOWY4ZC02NGVkN2E4YTM5ZDIvZjg4MWVhZmMtNWViYi0z ZTk2LWI0NTktMWVlZTBmNTNjYTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWEwM2JlOGMtYjIzYy00ZDgyLTlm OGQtNjRlZDdhOGEzOWQyL2FhMDNiZThjLWIyM2MtNGQ4Mi05ZjhkLTY0ZWQ3YThh MzlkMi5jcmwwHwYDVR0jBBgwFoAUBKl4dY7BlRymLC8L+jIv28vjJDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTAzYmU4Yy1iMjNjLTRkODItOWY4ZC02NGVk N2E4YTM5ZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0S41MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOPADNAAaM8SKwaGGcyHxeRsIynWeAhB8DURsBXt3WHs2TkCCUfCEri VBi/pipQ8T97dj3P6UzbugMpY2XsF3aR54NIiYKZqNVIWwGgdofB38rRFcWQ9qUC qD0n2kTkfwUietxtIphibrYLnSp5EQjhI6xuTkwpsYNaGml4GAtF4IXwc8WBDDIa hzAAXr5gptxjb5E9LXkNINZ/gXZWfjc4CvGGvHaquJfztu5dGG8rox0svPCI3mmP a+nNJOkk6UNYDrv2xVuYaBEKng0+3MWk5p8HCyR+e2eygRut5UGt+WM6v9w98Uza Fs23ImuzqAVGW7UcrF5Ew0Rvmnh/TVg= -----END CERTIFICATE-----Generated at Mon Mar 2 00:18:29 2026 by rpki-client