$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/4d4d5c9e-a470-3d19-ade9-b50bd45be3ca.roa File: 4d4d5c9e-a470-3d19-ade9-b50bd45be3ca.roa (raw, json) Hash identifier: 9XCxCTCldrTMypUY4e3jPpj2rW3zptjef1hkyvzoRW4= Subject key identifier: D2:5B:96:98:E5:60:6A:0F:A1:73:62:BE:70:F5:E7:30:71:7C:B6:C4 Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Certificate serial: 010D0C9F4328584D0D425125932D0E77D03F8000 Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/4d4d5c9e-a470-3d19-ade9-b50bd45be3ca.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 14618 IP address blocks: 209.169.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:51:25:93:2d:0e:77:d0:3f:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=230e34e8-7f86-4f5a-bc0e-046d88fe449f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:98:4a:44:5f:d0:db:fe:6b:68:4e:e1:15:02: 00:38:8b:ea:ad:ff:d5:e9:ec:67:3e:8d:f0:da:0d: bf:34:2e:5d:46:51:4a:a3:fd:19:dc:55:60:7a:71: 6d:67:09:4c:30:de:03:b7:0a:89:43:15:bf:8f:7d: 29:8c:10:3c:59:eb:9e:f8:06:80:7f:25:f7:42:dd: aa:e3:7e:ab:a9:f3:83:14:78:12:cf:1b:9c:ab:a8: 76:b8:fd:3e:be:6b:f8:fc:36:b8:68:9f:f4:e4:2c: 01:40:0b:80:5e:ab:cf:32:f0:1e:cc:72:2c:25:ca: aa:4f:3f:3b:ab:66:da:44:5d:ce:6a:22:d2:12:27: 2f:f4:4f:95:b1:cb:a4:65:28:c3:39:24:24:b9:b7: 1e:17:28:bb:32:58:c4:2d:51:f4:71:3e:6c:5e:2b: 21:e5:6f:ea:db:2a:cd:b8:d4:64:2c:fd:44:22:e8: 86:ff:3a:a7:6b:08:02:ae:96:49:40:c9:c3:36:61: 78:92:62:81:69:5f:09:c8:4b:aa:0b:8b:84:27:e0: 6d:7c:09:75:61:b1:3b:7c:68:22:45:c7:02:c0:77: b3:20:fc:24:8e:be:09:37:75:92:f1:70:f6:69:29: 37:63:54:67:c5:24:62:f5:1f:ca:30:fa:de:47:da: 0c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:5B:96:98:E5:60:6A:0F:A1:73:62:BE:70:F5:E7:30:71:7C:B6:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/4d4d5c9e-a470-3d19-ade9-b50bd45be3ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl X509v3 Authority Key Identifier: keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer sbgp-ipAddrBlock: critical IPv4: 209.169.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:56:03:68:63:a8:90:62:ba:08:88:fc:98:c9:96:4a:62:6c: eb:2e:16:75:12:fb:f0:ec:1d:6e:72:38:5d:be:c6:21:7a:eb: e7:1d:85:48:c4:ed:a7:6e:c4:74:4d:df:a4:c5:12:db:80:e1: 78:60:2f:ec:b7:d4:1e:a1:84:18:23:dc:ee:d4:ee:13:27:e9: 82:d8:4e:dc:4d:4c:5a:3e:c9:fc:3f:3f:64:fb:66:4f:7a:21: f8:a0:b9:8e:fe:13:0f:d4:0d:ae:98:66:4e:84:e4:a2:ac:a4: 84:23:36:0b:43:e0:b9:cc:58:11:29:fb:32:fb:8a:b2:a2:a4: 1a:db:46:5d:ca:e6:91:25:2d:b3:a2:da:af:2d:96:21:0b:6e: 88:ae:b6:4e:d3:90:98:09:80:bf:96:d0:4e:8c:48:00:b7:d7: 80:af:e2:36:3a:3a:58:ac:3b:35:e6:92:f6:28:36:8f:b1:cf: c6:ba:1b:78:dd:33:7f:bf:f1:ea:27:41:df:2f:07:6e:9f:85: 08:aa:5b:f8:c6:3a:14:07:90:f8:ca:65:ff:bb:ab:9b:e5:43: ad:53:0d:56:74:e5:91:f2:78:f9:cc:67:c9:8b:f2:98:a9:04: b1:f0:c4:6f:1e:03:c9:9c:9b:7d:f7:d6:14:86:5b:11:10:04: a4:56:8a:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQlElky0Od9A/gAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw MjhiMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk MjMwZTM0ZTgtN2Y4Ni00ZjVhLWJjMGUtMDQ2ZDg4ZmU0NDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArphKRF/Q2/5raE7hFQIAOIvqrf/V6exnPo3w 2g2/NC5dRlFKo/0Z3FVgenFtZwlMMN4DtwqJQxW/j30pjBA8Weue+AaAfyX3Qt2q 436rqfODFHgSzxucq6h2uP0+vmv4/Da4aJ/05CwBQAuAXqvPMvAezHIsJcqqTz87 q2baRF3OaiLSEicv9E+VscukZSjDOSQkubceFyi7MljELVH0cT5sXish5W/q2yrN uNRkLP1EIuiG/zqnawgCrpZJQMnDNmF4kmKBaV8JyEuqC4uEJ+BtfAl1YbE7fGgi RccCwHezIPwkjr4JN3WS8XD2aSk3Y1RnxSRi9R/KMPreR9oM7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJblpjlYGoPoXNivnD15zBxfLbEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvNGQ0ZDVjOWUtYTQ3MC0z ZDE5LWFkZTktYjUwYmQ0NWJlM2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3 MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0 NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0an9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKtWA2hjqJBiugiI/JjJlkpibOsuFnUS+/DsHW5yOF2+xiF66+cdhUjE 7aduxHRN36TFEtuA4XhgL+y31B6hhBgj3O7U7hMn6YLYTtxNTFo+yfw/P2T7Zk96 IfiguY7+Ew/UDa6YZk6E5KKspIQjNgtD4LnMWBEp+zL7irKipBrbRl3K5pElLbOi 2q8tliELboiutk7TkJgJgL+W0E6MSAC314Cv4jY6OlisOzXmkvYoNo+xz8a6G3jd M3+/8eonQd8vB26fhQiqW/jGOhQHkPjKZf+7q5vlQ61TDVZ05ZHyePnMZ8mL8pip BLHwxG8eA8mcm3331hSGWxEQBKRWitk= -----END CERTIFICATE-----Generated at Thu Mar 26 10:11:35 2026 by rpki-client