$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cf214741-bd14-3a43-bc64-8b18b8e4c9dd.roa File: cf214741-bd14-3a43-bc64-8b18b8e4c9dd.roa (raw, json) Hash identifier: EdP6soF+/aWozDssvBYa5fIuWd9nu4ZHiGZ35G7kQn8= Subject key identifier: A3:72:33:66:48:B3:A1:7C:D1:82:84:8F:7F:82:97:6F:A6:4F:8D:7E Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584DB1DAD681C1CF6AE1579A8000 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cf214741-bd14-3a43-bc64-8b18b8e4c9dd.roa Signing time: Sat 02 May 2026 01:00:24 +0000 ROA not before: Sat 02 May 2026 01:00:24 +0000 ROA not after: Fri 31 Jul 2026 01:00:24 +0000 asID: 63172 IP address blocks: 208.53.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b1:da:d6:81:c1:cf:6a:e1:57:9a:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: May 2 01:00:24 2026 GMT Not After : Jul 31 01:00:24 2026 GMT Subject: CN=65d36401-e9e1-4468-8aac-b13ac3d578ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:db:b6:26:2a:03:a5:7d:58:9c:6b:2e:aa:82: 98:fb:30:59:14:0d:e4:ba:47:b9:7e:f5:cd:7a:3f: 07:61:be:f4:87:ad:22:67:12:41:71:e4:54:7b:32: 97:1a:c8:02:83:0a:c4:fd:ee:8f:92:c3:8b:8b:ae: 92:99:de:75:5b:85:03:8d:32:54:7d:19:07:44:2e: 9b:6e:e3:71:2d:f8:c8:5a:f2:91:21:c9:02:3b:6e: 78:ab:12:13:5e:39:43:05:42:d9:d5:38:07:da:96: 58:99:22:ff:60:02:de:2c:d8:f3:bc:bb:61:71:0c: 53:2d:e6:fb:11:ac:1d:ba:77:95:aa:ae:aa:20:e5: 9d:4b:c2:6f:c1:71:ce:e2:59:ca:a5:d4:56:e8:21: 74:eb:9b:2d:f3:9f:ba:ac:a4:e1:89:c1:b8:bb:b6: 6d:9e:58:85:a7:ac:2f:18:44:ad:df:79:e5:05:9f: 8a:c3:c9:82:0d:7c:36:fe:33:0f:d9:4c:e2:00:1b: 0a:b4:53:92:38:2f:d8:b0:c1:8b:df:b0:94:06:8f: f8:14:17:b0:52:1b:36:2b:1b:8d:17:14:c5:4e:92: c7:4b:56:e2:3c:7d:f0:43:b0:90:8b:a9:21:b2:22: e7:77:9c:13:d9:24:04:89:aa:c7:5d:69:c5:67:92: 9f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:72:33:66:48:B3:A1:7C:D1:82:84:8F:7F:82:97:6F:A6:4F:8D:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cf214741-bd14-3a43-bc64-8b18b8e4c9dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:58:e7:ce:83:36:ce:2f:bf:31:11:42:7d:54:2e:67:81:90: dc:c1:bd:86:87:98:23:38:66:6d:91:41:44:a1:79:45:94:36: a9:00:55:47:13:b7:3a:87:ae:10:b0:a5:a3:e8:22:1f:a2:4a: 51:06:0e:cc:f6:c3:aa:65:9e:72:9e:52:41:e7:dd:80:30:7d: da:41:9f:62:52:84:48:25:d2:60:d8:de:31:1d:cc:b4:06:64: 9b:aa:5b:50:1d:0a:28:d3:25:46:bf:1b:11:ac:2c:5b:4a:ba: 59:1e:27:d3:89:df:75:d8:1e:cf:b7:6f:9d:ab:19:92:9f:3a: 7e:ce:8c:1b:ea:f6:8f:dd:c6:7c:2f:93:98:26:41:16:a4:8a: 57:f3:87:af:7d:8a:e2:29:7e:dc:41:2a:5c:d9:c5:c6:d7:ba: 6c:67:ab:7a:a0:53:60:40:4d:26:47:65:64:40:73:b3:86:8e: c4:0a:08:95:90:50:c8:b6:cf:c1:04:2e:d7:f5:e7:d0:81:60: be:4b:0f:dd:a4:d9:2a:4f:56:63:8b:a0:9b:a7:99:c1:28:fa: 0f:4a:02:91:7b:bf:da:00:c1:05:c8:05:63:6e:f8:8b:c8:47: 23:ee:3c:78:57:b7:12:19:72:ba:1f:15:6c:42:45:6e:b9:b4: 2f:6e:ab:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2x2taBwc9q4VeagAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDUwMjAxMDAyNFoXDTI2MDczMTAxMDAyNFowLzEtMCsGA1UEAxMk NjVkMzY0MDEtZTllMS00NDY4LThhYWMtYjEzYWMzZDU3OGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtu2JioDpX1YnGsuqoKY+zBZFA3kuke5fvXN ej8HYb70h60iZxJBceRUezKXGsgCgwrE/e6PksOLi66Smd51W4UDjTJUfRkHRC6b buNxLfjIWvKRIckCO254qxITXjlDBULZ1TgH2pZYmSL/YALeLNjzvLthcQxTLeb7 EawduneVqq6qIOWdS8JvwXHO4lnKpdRW6CF065st85+6rKThicG4u7ZtnliFp6wv GESt33nlBZ+Kw8mCDXw2/jMP2UziABsKtFOSOC/YsMGL37CUBo/4FBewUhs2KxuN FxTFTpLHS1biPH3wQ7CQi6khsiLnd5wT2SQEiarHXWnFZ5KfbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNyM2ZIs6F80YKEj3+Cl2+mT41+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvY2YyMTQ3NDEtYmQxNC0z YTQzLWJjNjQtOGIxOGI4ZTRjOWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0DXmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtY586DNs4vvzERQn1ULmeBkNzBvYaHmCM4Zm2RQUSheUWUNqkAVUcT tzqHrhCwpaPoIh+iSlEGDsz2w6plnnKeUkHn3YAwfdpBn2JShEgl0mDY3jEdzLQG ZJuqW1AdCijTJUa/GxGsLFtKulkeJ9OJ33XYHs+3b52rGZKfOn7OjBvq9o/dxnwv k5gmQRakilfzh699iuIpftxBKlzZxcbXumxnq3qgU2BATSZHZWRAc7OGjsQKCJWQ UMi2z8EELtf159CBYL5LD92k2SpPVmOLoJunmcEo+g9KApF7v9oAwQXIBWNu+IvI RyPuPHhXtxIZcrofFWxCRW65tC9uq2s= -----END CERTIFICATE-----Generated at Wed May 13 08:58:23 2026 by rpki-client