$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d3061db8-c3a5-40b9-9ce9-735cf5f78700/ad5305e6-509b-351e-868a-5ef4f7692250.roa File: ad5305e6-509b-351e-868a-5ef4f7692250.roa (raw, json) Hash identifier: 6TnH0zL4yIyHN5WWzyZzQr8aeDNpfsotoFWd5ZNlsEA= Subject key identifier: 08:3E:37:1A:99:B3:5C:6E:20:02:78:02:A2:F6:E4:50:64:66:6D:A4 Certificate issuer: /CN=d3061db8-c3a5-40b9-9ce9-735cf5f78700 Certificate serial: 010D0C9F4328584CAE5E698BB39E13F693DB6580 Authority key identifier: 49:79:B2:EE:B1:D4:B2:49:DC:8B:DF:23:78:07:1D:9C:2D:09:4C:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d3061db8-c3a5-40b9-9ce9-735cf5f78700.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d3061db8-c3a5-40b9-9ce9-735cf5f78700/ad5305e6-509b-351e-868a-5ef4f7692250.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 398820 IP address blocks: 208.101.230.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d3061db8-c3a5-40b9-9ce9-735cf5f78700/d3061db8-c3a5-40b9-9ce9-735cf5f78700.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d3061db8-c3a5-40b9-9ce9-735cf5f78700/d3061db8-c3a5-40b9-9ce9-735cf5f78700.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d3061db8-c3a5-40b9-9ce9-735cf5f78700.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:69:8b:b3:9e:13:f6:93:db:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3061db8-c3a5-40b9-9ce9-735cf5f78700 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=5987d387-082a-4257-916c-3d8e62b7bc20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e0:c5:c0:d4:90:bb:eb:ea:47:6a:26:e5:11: f0:da:67:15:48:02:d8:90:81:82:8c:17:1e:b6:98: ae:60:55:9f:0f:d4:ac:e6:88:f4:e6:fc:3c:e3:2b: 54:8c:b3:f3:ca:a2:9c:65:b3:4a:76:b8:6e:d0:62: d8:16:ce:3a:74:6b:ed:c1:73:f0:ad:28:bd:24:7f: 84:f1:89:8d:dc:55:41:29:d2:fd:fb:16:0e:21:6a: f4:d8:e6:c2:ec:d5:4c:bf:8c:99:95:21:de:04:b1: 54:d0:10:b9:3f:d1:64:f1:a2:34:59:74:59:72:6d: b7:20:a0:42:1e:96:8c:11:5c:de:d5:1a:c1:ab:6d: 7f:5d:8d:06:63:dd:63:6a:0e:e7:94:3b:52:75:ec: fc:1a:a4:ad:b2:3d:34:9e:d5:13:94:0f:1a:0c:88: 11:20:ef:07:89:c9:30:5e:a2:60:3f:f3:49:28:9b: 9b:18:56:45:23:0a:2c:3b:05:88:64:81:86:28:2e: 0f:a1:47:68:e0:5c:af:8a:23:77:fb:b3:9e:5f:2a: 0e:27:09:59:1d:b4:40:22:0e:80:ea:6a:58:6e:91: fe:96:de:b8:fe:65:f3:63:44:61:49:dd:8c:24:26: a5:a3:4f:5c:55:9c:52:bb:fa:05:d4:2d:fb:b1:b7: 91:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:3E:37:1A:99:B3:5C:6E:20:02:78:02:A2:F6:E4:50:64:66:6D:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d3061db8-c3a5-40b9-9ce9-735cf5f78700/ad5305e6-509b-351e-868a-5ef4f7692250.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d3061db8-c3a5-40b9-9ce9-735cf5f78700/d3061db8-c3a5-40b9-9ce9-735cf5f78700.crl X509v3 Authority Key Identifier: keyid:49:79:B2:EE:B1:D4:B2:49:DC:8B:DF:23:78:07:1D:9C:2D:09:4C:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d3061db8-c3a5-40b9-9ce9-735cf5f78700.cer sbgp-ipAddrBlock: critical IPv4: 208.101.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:2b:c0:56:6b:72:8b:91:f7:7d:fd:2c:5c:96:d4:e1:7f:83: 19:34:4c:55:8f:df:8a:93:38:51:e8:b0:20:c6:e4:8a:82:e2: d0:ac:52:fd:bc:2f:a3:d2:ad:37:59:ce:98:17:85:2a:b2:1b: 38:32:8e:15:fa:60:23:a2:92:e6:49:ed:b3:a7:b3:ac:1b:fa: 06:89:12:6f:3e:07:01:83:fa:6d:82:bf:bf:eb:7b:9d:c8:62: ee:be:fa:61:ae:15:cb:da:5b:4a:4f:cd:8e:4b:6f:94:42:71: d1:d6:a2:04:85:2e:d9:a2:a3:d7:93:b2:12:ad:3e:06:8d:1b: 48:a7:c9:49:f2:3c:c8:be:19:2a:66:81:fd:29:07:09:a7:e6: 52:fc:1d:59:35:07:5c:c3:d4:8a:1f:df:93:72:23:e0:b1:04: 22:e4:24:ee:70:f2:f6:7c:0d:83:d7:41:b0:11:a5:a9:66:d0: c7:3c:8a:36:0c:48:b6:34:b9:8c:f9:13:08:47:10:f1:1f:8c: 1e:a8:bf:29:b0:6a:bf:f2:6a:73:af:4a:64:46:c6:b2:f2:bf: 76:aa:6c:1e:2e:7d:1d:fe:49:49:83:eb:ef:c9:3c:8e:b3:3a: a1:8f:64:55:8f:9e:8f:e8:2b:c9:4f:14:62:a0:86:42:0f:fa: ed:18:86:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXmmLs54T9pPbZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDMwNjFkYjgtYzNhNS00MGI5LTljZTktNzM1Y2Y1Zjc4 NzAwMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NTk4N2QzODctMDgyYS00MjU3LTkxNmMtM2Q4ZTYyYjdiYzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+DFwNSQu+vqR2om5RHw2mcVSALYkIGCjBce tpiuYFWfD9Ss5oj05vw84ytUjLPzyqKcZbNKdrhu0GLYFs46dGvtwXPwrSi9JH+E 8YmN3FVBKdL9+xYOIWr02ObC7NVMv4yZlSHeBLFU0BC5P9Fk8aI0WXRZcm23IKBC HpaMEVze1RrBq21/XY0GY91jag7nlDtSdez8GqStsj00ntUTlA8aDIgRIO8Hickw XqJgP/NJKJubGFZFIwosOwWIZIGGKC4PoUdo4FyviiN3+7OeXyoOJwlZHbRAIg6A 6mpYbpH+lt64/mXzY0RhSd2MJCalo09cVZxSu/oF1C37sbeRDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAg+NxqZs1xuIAJ4AqL25FBkZm2kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kMzA2 MWRiOC1jM2E1LTQwYjktOWNlOS03MzVjZjVmNzg3MDAvYWQ1MzA1ZTYtNTA5Yi0z NTFlLTg2OGEtNWVmNGY3NjkyMjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDMwNjFkYjgtYzNhNS00MGI5LTlj ZTktNzM1Y2Y1Zjc4NzAwL2QzMDYxZGI4LWMzYTUtNDBiOS05Y2U5LTczNWNmNWY3 ODcwMC5jcmwwHwYDVR0jBBgwFoAUSXmy7rHUsknci98jeAcdnC0JTAUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kMzA2MWRiOC1jM2E1LTQwYjktOWNlOS03MzVj ZjVmNzg3MDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0GXmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMrwFZrcouR9339LFyW1OF/gxk0TFWP34qTOFHosCDG5IqC4tCsUv28 L6PSrTdZzpgXhSqyGzgyjhX6YCOikuZJ7bOns6wb+gaJEm8+BwGD+m2Cv7/re53I Yu6++mGuFcvaW0pPzY5Lb5RCcdHWogSFLtmio9eTshKtPgaNG0inyUnyPMi+GSpm gf0pBwmn5lL8HVk1B1zD1Iof35NyI+CxBCLkJO5w8vZ8DYPXQbARpalm0Mc8ijYM SLY0uYz5EwhHEPEfjB6ovymwar/yanOvSmRGxrLyv3aqbB4ufR3+SUmD6+/JPI6z OqGPZFWPno/oK8lPFGKghkIP+u0YhqQ= -----END CERTIFICATE-----Generated at Mon Mar 2 08:06:10 2026 by rpki-client