$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0b086a3b-20d0-3e15-af4c-f69eddcfe886.roa File: 0b086a3b-20d0-3e15-af4c-f69eddcfe886.roa (raw, json) Hash identifier: fdoBY75++fao3l2NyNmSkbZ7TzUeeiGyDmj1rPXaSKI= Subject key identifier: D5:D1:93:F0:4A:B8:9E:94:8D:B2:C7:60:C7:DC:19:62:B7:76:7F:03 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584F093CE8DB15143486A908D4E0 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0b086a3b-20d0-3e15-af4c-f69eddcfe886.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 13576 IP address blocks: 208.53.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:e8:db:15:14:34:86:a9:08:d4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=39c8fc2f-8c3e-43e7-bd84-3155e8d5395b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bb:4e:b2:5a:e2:8d:8f:b9:48:78:20:04:ff: 78:82:16:1c:2c:9a:b3:89:79:99:6c:44:82:c2:07: 57:8a:8a:02:37:62:0b:81:81:f2:8d:5f:0d:3d:b5: 19:56:15:62:21:04:4b:dd:60:b5:90:5f:4c:e0:8f: 2c:6e:01:11:a3:4b:23:ca:e7:b5:83:da:0a:c4:a8: f4:02:6b:60:d0:e7:89:a9:a6:af:89:64:bf:3c:b6: 7e:e8:b8:15:49:41:f5:a3:ca:cd:f8:d7:75:3e:03: 2a:b2:3e:32:a0:38:f0:14:36:67:db:25:4e:5b:3a: 8a:b6:e4:40:c5:f7:62:70:53:46:5f:6b:3b:fc:30: cf:13:52:e5:1e:aa:9a:65:c7:80:64:a4:d8:2d:e2: 01:a8:55:ef:4b:6d:77:0b:a8:59:b1:24:3b:9c:c1: d4:6a:de:4d:fb:13:d8:64:3a:11:cd:27:fb:c3:f6: b8:16:e4:5a:42:80:60:d7:7a:07:b4:46:80:c1:9c: f7:7c:57:62:15:f6:02:fd:65:e6:f3:ec:7d:79:94: ea:e1:d4:47:81:82:30:fc:c3:4b:4e:1c:91:35:3e: 68:ac:da:b8:c5:0d:b0:83:ac:35:74:5f:b5:82:92: 7a:45:26:57:ab:a1:68:39:c7:4d:10:a6:ca:02:75: 0e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D1:93:F0:4A:B8:9E:94:8D:B2:C7:60:C7:DC:19:62:B7:76:7F:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0b086a3b-20d0-3e15-af4c-f69eddcfe886.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:8c:03:65:fa:88:b6:de:16:ee:17:0b:e0:2f:81:3f:d7:b2: 66:ae:18:34:e3:cb:48:50:fe:42:0b:20:62:e1:05:ea:7c:47: 08:f3:4b:19:c3:64:dd:9a:b8:09:a1:b0:1a:32:70:35:90:47: 8a:a4:a6:40:43:13:af:fb:fb:76:62:e2:11:cc:36:8b:76:47: 54:c0:27:9b:fd:6f:1d:e2:6a:e0:cb:37:3c:2a:1e:a0:58:18: 8a:4d:d1:36:c1:20:db:44:b1:ed:65:30:10:80:db:34:96:f5: 5d:ce:e4:08:30:7d:5c:c9:88:f8:fb:28:44:e5:a6:c3:e5:db: 74:c5:cf:f3:80:63:25:86:40:9f:13:f1:79:fc:01:31:35:72: 1d:50:12:86:49:95:dd:92:07:2c:f7:56:54:04:7e:89:b0:c5: 2c:ce:8b:4d:7c:6c:e4:f6:27:37:ef:49:19:ea:8a:52:26:40: ac:3c:50:3a:a3:b3:02:80:9d:6f:9f:f1:e4:bd:3d:a7:59:89: ce:e3:67:58:98:80:fe:f9:75:2d:5a:5f:73:c3:ca:d9:bc:50: cf:22:fa:05:ed:7c:d9:a1:c7:7c:af:45:e2:d2:31:80:5a:55: a1:59:43:2a:8e:97:3c:c9:9c:10:a5:02:a0:f7:09:c9:26:6b: 38:81:7c:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPOjbFRQ0hqkI1OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk MzljOGZjMmYtOGMzZS00M2U3LWJkODQtMzE1NWU4ZDUzOTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLtOslrijY+5SHggBP94ghYcLJqziXmZbESC wgdXiooCN2ILgYHyjV8NPbUZVhViIQRL3WC1kF9M4I8sbgERo0sjyue1g9oKxKj0 Amtg0OeJqaaviWS/PLZ+6LgVSUH1o8rN+Nd1PgMqsj4yoDjwFDZn2yVOWzqKtuRA xfdicFNGX2s7/DDPE1LlHqqaZceAZKTYLeIBqFXvS213C6hZsSQ7nMHUat5N+xPY ZDoRzSf7w/a4FuRaQoBg13oHtEaAwZz3fFdiFfYC/WXm8+x9eZTq4dRHgYIw/MNL ThyRNT5orNq4xQ2wg6w1dF+1gpJ6RSZXq6FoOcdNEKbKAnUOSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXRk/BKuJ6UjbLHYMfcGWK3dn8DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMGIwODZhM2ItMjBkMC0z ZTE1LWFmNGMtZjY5ZWRkY2ZlODg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0DXGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6MA2X6iLbeFu4XC+AvgT/XsmauGDTjy0hQ/kILIGLhBep8RwjzSxnD ZN2auAmhsBoycDWQR4qkpkBDE6/7+3Zi4hHMNot2R1TAJ5v9bx3iauDLNzwqHqBY GIpN0TbBINtEse1lMBCA2zSW9V3O5AgwfVzJiPj7KETlpsPl23TFz/OAYyWGQJ8T 8Xn8ATE1ch1QEoZJld2SByz3VlQEfomwxSzOi018bOT2JzfvSRnqilImQKw8UDqj swKAnW+f8eS9PadZic7jZ1iYgP75dS1aX3PDytm8UM8i+gXtfNmhx3yvReLSMYBa VaFZQyqOlzzJnBClAqD3CckmaziBfAQ= -----END CERTIFICATE-----Generated at Sat Sep 5 04:48:29 2026 by rpki-client