$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/4ed3df11-b22e-31aa-af9a-6ea26dc8f2e8.roa File: 4ed3df11-b22e-31aa-af9a-6ea26dc8f2e8.roa (raw, json) Hash identifier: e1JLLG0x3zVHvVIOR7t2kQaaBR1IQxiet4ZcruwhFiI= Subject key identifier: 8D:17:B2:6D:C5:41:11:1E:08:B5:30:AD:1D:E5:61:2E:17:61:D4:FE Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584E66DA1C6BAABB2EDF377BA700 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/4ed3df11-b22e-31aa-af9a-6ea26dc8f2e8.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 393417 IP address blocks: 208.53.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:1c:6b:aa:bb:2e:df:37:7b:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=617bd953-5446-4c82-b466-1f490a7696dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:59:d1:39:8b:ca:e7:dc:a3:9a:21:43:85:df: 6a:c7:3f:ad:ad:26:68:cf:91:c1:93:8a:90:af:ba: 28:33:6e:19:69:7f:2f:56:1d:cd:3d:e5:de:56:09: 7a:5f:90:9d:6e:ae:b5:ea:1c:2d:42:4f:19:44:52: 2f:3f:31:e3:3f:cc:8c:26:21:fd:c7:d8:4b:16:b9: f0:04:3c:85:f7:7d:29:96:27:58:4c:4f:d8:06:d8: 6d:6e:61:32:3f:6d:32:a3:2b:a9:ee:cd:f4:fd:23: ec:e9:32:6e:93:3c:2d:c9:c3:83:31:fe:00:d0:7a: ec:f0:72:31:19:74:5f:dd:f6:b4:e6:4c:ad:72:54: b6:19:8b:c8:75:cf:c2:b5:28:86:e4:d8:b3:1b:e8: fe:f5:37:15:e9:3c:8c:71:49:cd:87:78:83:c9:e5: 53:f9:05:40:0d:15:78:a6:26:a9:0c:7c:32:9d:89: 07:6a:7f:26:c5:88:c9:7e:ff:53:7e:e7:64:f8:90: f4:0a:9f:11:7b:72:8e:8a:bd:f4:bf:53:9c:92:a3: a2:b7:27:bb:8b:02:1e:c1:f7:82:a8:7e:09:7f:50: 2a:9e:42:f9:0a:93:12:fd:82:66:ba:96:9a:5e:72: 04:21:52:56:8d:0e:07:ca:91:81:11:fb:92:a3:e8: c7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:17:B2:6D:C5:41:11:1E:08:B5:30:AD:1D:E5:61:2E:17:61:D4:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/4ed3df11-b22e-31aa-af9a-6ea26dc8f2e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:20:e5:71:88:ad:39:4a:80:e1:a2:29:52:0b:04:cf:52:79: ad:70:d1:05:33:21:e1:a0:25:29:83:85:96:3a:27:80:14:ae: 32:0c:64:14:ed:f4:cc:0b:ba:77:6b:ca:40:f1:cc:0f:ae:72: d2:55:7e:23:4f:ea:35:18:48:79:84:dd:3f:74:ce:6f:f0:44: 7b:1b:c7:47:69:41:a8:b9:63:29:47:1e:23:18:8d:8e:31:b6: 88:a0:29:a3:f6:68:be:6d:35:00:ef:13:9e:e5:86:40:bc:aa: 7b:9f:9f:64:01:e3:ca:31:32:07:e8:59:a3:af:06:dd:47:12: 64:88:4b:8e:8c:12:6a:56:58:ac:3d:ce:30:16:83:73:24:2e: b1:c2:62:bd:24:11:ab:06:c4:ff:72:96:b2:75:b7:2f:87:20: 75:24:1e:52:a4:84:6c:74:03:18:14:11:e7:dd:e9:07:9c:6e: 04:b1:ea:ee:0f:72:d0:eb:50:41:80:38:45:2f:49:fc:e9:26: b6:8f:08:14:47:55:f0:f7:78:a8:7b:5e:53:58:cf:da:be:35: 59:32:03:29:f2:e2:b2:7b:da:2f:6d:1e:44:63:2e:67:96:9e: 1f:0a:77:01:fd:f2:ae:7c:09:15:44:ce:8e:dd:9e:8d:8e:9f: 37:23:7c:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2hxrqrsu3zd7pwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk NjE3YmQ5NTMtNTQ0Ni00YzgyLWI0NjYtMWY0OTBhNzY5NmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFnROYvK59yjmiFDhd9qxz+trSZoz5HBk4qQ r7ooM24ZaX8vVh3NPeXeVgl6X5Cdbq616hwtQk8ZRFIvPzHjP8yMJiH9x9hLFrnw BDyF930plidYTE/YBthtbmEyP20yoyup7s30/SPs6TJukzwtycODMf4A0Hrs8HIx GXRf3fa05kytclS2GYvIdc/CtSiG5NizG+j+9TcV6TyMcUnNh3iDyeVT+QVADRV4 piapDHwynYkHan8mxYjJfv9Tfudk+JD0Cp8Re3KOir30v1OckqOitye7iwIewfeC qH4Jf1AqnkL5CpMS/YJmupaaXnIEIVJWjQ4HypGBEfuSo+jHswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0Xsm3FQREeCLUwrR3lYS4XYdT+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNGVkM2RmMTEtYjIyZS0z MWFhLWFmOWEtNmVhMjZkYzhmMmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DXPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcg5XGIrTlKgOGiKVILBM9Sea1w0QUzIeGgJSmDhZY6J4AUrjIMZBTt 9MwLundrykDxzA+uctJVfiNP6jUYSHmE3T90zm/wRHsbx0dpQai5YylHHiMYjY4x toigKaP2aL5tNQDvE57lhkC8qnufn2QB48oxMgfoWaOvBt1HEmSIS46MEmpWWKw9 zjAWg3MkLrHCYr0kEasGxP9ylrJ1ty+HIHUkHlKkhGx0AxgUEefd6QecbgSx6u4P ctDrUEGAOEUvSfzpJraPCBRHVfD3eKh7XlNYz9q+NVkyAyny4rJ72i9tHkRjLmeW nh8KdwH98q58CRVEzo7dno2OnzcjfH0= -----END CERTIFICATE-----Generated at Wed Jul 22 03:08:15 2026 by rpki-client