$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0cea5272-6b0e-3802-b40c-b4a4e7e412ad.roa File: 0cea5272-6b0e-3802-b40c-b4a4e7e412ad.roa (raw, json) Hash identifier: zoToft/OhqARwuOnSO13PUg8eU8X2LWFHnRfQs5CPmo= Subject key identifier: D0:B9:48:C8:54:6B:E6:5C:E0:74:B0:66:9B:3C:EA:76:AA:07:0B:A6 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584F07D779A9C91054EDEBEC1C00 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0cea5272-6b0e-3802-b40c-b4a4e7e412ad.roa Signing time: Tue 01 Sep 2026 13:00:12 +0000 ROA not before: Tue 01 Sep 2026 13:00:12 +0000 ROA not after: Mon 30 Nov 2026 14:00:12 +0000 asID: 17203 IP address blocks: 208.53.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:07:d7:79:a9:c9:10:54:ed:eb:ec:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Sep 1 13:00:12 2026 GMT Not After : Nov 30 14:00:12 2026 GMT Subject: CN=984dc90c-87df-4fc4-b6aa-4157d88f8883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:20:64:9f:5b:ba:88:9d:65:ce:04:68:9b:97: ed:9b:e5:9c:63:6b:9a:01:f1:bf:09:24:ab:4b:87: 87:71:00:64:1e:46:40:cd:b8:07:ba:bf:40:cb:2f: 64:28:a3:bd:f0:56:50:e6:12:54:65:a6:8e:f9:f2: 6e:4e:3e:3a:bb:70:28:25:6d:da:7e:28:05:c4:77: 8e:a2:b4:2a:cc:2d:f2:ee:2a:f8:53:25:45:7c:e2: e1:21:33:c1:13:b2:27:e3:d0:ba:10:71:ad:d7:ef: cf:69:a3:c1:b9:70:fe:bb:34:98:17:00:41:75:bb: 8c:8c:0a:57:5e:49:4b:16:ca:9e:7a:64:3a:63:40: 04:b5:49:7d:f8:50:ac:86:99:91:1d:d7:d5:82:f1: 48:3b:99:48:42:44:4e:d1:0d:d8:e1:4d:3a:6f:4d: 87:48:2d:97:df:52:61:39:05:1c:35:d0:ad:44:20: 16:49:3e:f3:f6:3b:11:a3:15:5e:7a:72:0d:65:bd: 43:b9:bf:5b:be:1a:5a:5c:bb:38:d2:8d:79:71:8c: 0a:ce:6d:b0:e9:1a:35:bf:1b:fd:2c:ab:93:0e:4f: 9c:f6:a8:c1:20:fd:cf:c6:79:a0:0a:bc:1e:09:ad: b3:90:8f:ad:a5:83:d6:ef:46:07:50:d5:54:b3:c9: cb:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B9:48:C8:54:6B:E6:5C:E0:74:B0:66:9B:3C:EA:76:AA:07:0B:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0cea5272-6b0e-3802-b40c-b4a4e7e412ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:7f:23:1b:fa:63:ac:89:36:26:ea:af:db:5f:3e:55:63:76: ca:60:8f:19:86:bf:44:c3:ac:57:0c:e7:2c:83:7f:78:a6:b2: 4f:60:36:48:4a:21:da:37:ba:59:43:69:ce:30:f1:87:dc:29: e5:fb:4f:ed:5a:9b:92:91:91:2d:ba:37:a0:fd:76:05:13:90: 77:ea:cd:4e:9a:fa:94:f4:ae:e7:00:c3:63:37:cf:63:cf:a3: 09:5a:e7:a4:c3:e8:39:7a:0f:13:30:fa:d7:d1:41:90:01:47: 13:30:73:05:88:ff:aa:31:70:26:2f:97:be:c1:e5:8d:56:37: 81:47:93:7e:93:83:a1:8b:95:41:03:36:7c:c3:73:3e:7f:3e: bb:25:d1:3f:b6:d2:6b:55:ae:66:3d:b6:7d:b2:55:a9:ee:70: fe:89:01:18:34:f1:a8:45:77:ee:25:48:4d:dd:d2:ab:22:3c: c8:0b:cb:34:ee:74:6c:d0:b6:94:7b:95:81:0d:3b:85:8a:63: cc:11:b8:5e:b5:b6:8e:3c:7c:ab:fd:0d:42:2c:e7:37:1d:43: ca:83:fd:78:b7:45:b5:b0:93:88:e1:d0:3a:ac:ce:0e:67:56: 70:9d:e8:29:9a:61:82:68:7a:48:a3:fb:f5:27:3e:cc:1b:2c: ac:95:b9:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8H13mpyRBU7evsHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDkwMTEzMDAxMloXDTI2MTEzMDE0MDAxMlowLzEtMCsGA1UEAxMk OTg0ZGM5MGMtODdkZi00ZmM0LWI2YWEtNDE1N2Q4OGY4ODgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyBkn1u6iJ1lzgRom5ftm+WcY2uaAfG/CSSr S4eHcQBkHkZAzbgHur9Ayy9kKKO98FZQ5hJUZaaO+fJuTj46u3AoJW3afigFxHeO orQqzC3y7ir4UyVFfOLhITPBE7In49C6EHGt1+/PaaPBuXD+uzSYFwBBdbuMjApX XklLFsqeemQ6Y0AEtUl9+FCshpmRHdfVgvFIO5lIQkRO0Q3Y4U06b02HSC2X31Jh OQUcNdCtRCAWST7z9jsRoxVeenINZb1Dub9bvhpaXLs40o15cYwKzm2w6Ro1vxv9 LKuTDk+c9qjBIP3PxnmgCrweCa2zkI+tpYPW70YHUNVUs8nLCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNC5SMhUa+Zc4HSwZps86naqBwumMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMGNlYTUyNzItNmIwZS0z ODAyLWI0MGMtYjRhNGU3ZTQxMmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DXVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADF/Ixv6Y6yJNibqr9tfPlVjdspgjxmGv0TDrFcM5yyDf3imsk9gNkhK Ido3ullDac4w8YfcKeX7T+1am5KRkS26N6D9dgUTkHfqzU6a+pT0rucAw2M3z2PP owla56TD6Dl6DxMw+tfRQZABRxMwcwWI/6oxcCYvl77B5Y1WN4FHk36Tg6GLlUED NnzDcz5/Prsl0T+20mtVrmY9tn2yVanucP6JARg08ahFd+4lSE3d0qsiPMgLyzTu dGzQtpR7lYENO4WKY8wRuF61to48fKv9DUIs5zcdQ8qD/Xi3RbWwk4jh0Dqszg5n VnCd6CmaYYJoekij+/UnPswbLKyVuaw= -----END CERTIFICATE-----Generated at Sat Sep 5 07:38:26 2026 by rpki-client