$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/af01ca17-7fab-3632-8e8c-cf4b1edbb8d6.roa File: af01ca17-7fab-3632-8e8c-cf4b1edbb8d6.roa (raw, json) Hash identifier: dZePBSBkup4Q8ACOKjUV7cz3scAMIkWlKS859kA19nM= Subject key identifier: E8:BA:B5:0D:3F:12:74:E1:17:9C:9F:99:D7:14:78:EB:07:48:36:01 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584E66DA166BDC01292E93ECA5C0 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/af01ca17-7fab-3632-8e8c-cf4b1edbb8d6.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 13576 IP address blocks: 208.53.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:16:6b:dc:01:29:2e:93:ec:a5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=49ab8e70-5d9a-4595-834c-c919a573b833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c9:9e:b8:5c:15:77:0d:84:77:0d:60:95:f4: 4e:88:43:0b:31:7e:40:13:71:3f:e5:b8:3f:6a:e3: 8a:a1:29:e1:2a:e5:cc:be:c1:aa:2f:00:f9:04:ca: e1:8c:64:ca:f7:0d:71:81:86:5e:ea:ce:9f:f8:a4: 00:1e:db:62:af:ac:33:50:0e:79:24:1f:87:03:2a: 5f:c8:90:22:e4:ec:c1:bf:9b:94:43:61:40:f8:09: 88:33:d9:fd:ba:41:21:97:e0:8d:4c:d8:df:54:0d: 77:b2:ab:41:f2:eb:7b:58:27:37:5e:65:5c:28:59: e4:9b:44:90:f0:ef:f0:d8:2d:a9:d3:f2:33:42:68: b7:e4:f6:6f:db:72:31:ce:d8:8d:a1:6a:7a:de:ee: ef:22:22:da:43:f8:10:47:4c:74:f2:36:44:1e:d8: 8a:b7:fb:16:29:ae:bc:f0:aa:da:ad:2b:67:8a:6a: 16:e2:1c:52:16:4c:94:b2:0a:15:0d:7f:f0:9b:53: 0b:6d:84:bf:7f:e0:17:dd:f1:1c:e2:d8:3e:32:a3: 4c:4d:f0:62:ed:0d:42:c7:b5:bb:76:ba:3b:d2:1e: e3:66:e8:83:b9:4c:c9:69:12:72:d9:0d:b5:be:d0: f3:3b:b7:be:67:b5:c8:12:b9:61:31:13:ad:8b:cd: 7b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:BA:B5:0D:3F:12:74:E1:17:9C:9F:99:D7:14:78:EB:07:48:36:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/af01ca17-7fab-3632-8e8c-cf4b1edbb8d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:2c:dd:3d:a0:a8:10:98:88:be:8f:6c:66:17:fe:5b:00:9b: 85:e6:ea:0b:e7:ac:76:c5:60:ba:3f:37:fc:0b:14:f7:38:58: 72:58:e9:6a:48:dd:42:f8:4e:22:5d:1c:1e:d7:17:47:d7:b2: e2:7f:bc:54:92:08:4d:2d:92:8c:51:08:1d:26:cc:c2:c6:9b: 5c:31:56:87:b7:6d:a7:9f:ad:49:19:fb:56:2c:85:f7:47:42: a2:f5:e8:30:2a:1e:34:15:0f:82:cf:5a:ae:d2:52:13:e7:c5: c0:ee:80:8f:8f:5e:c6:6a:e4:c4:57:f5:56:53:04:db:8f:c1: 9e:de:68:c2:1c:d3:6b:b1:c1:d1:21:02:52:5f:45:1d:c8:1b: 80:6a:71:59:19:29:bf:ce:be:8c:ea:d5:63:b7:3c:67:15:00: 94:e3:90:5a:4c:17:ed:23:64:bd:9c:e9:f0:64:10:29:9b:62: 0b:79:da:64:26:1f:b8:82:b0:a3:e5:8f:9e:24:e5:27:2f:c8: 27:95:fb:28:19:1f:7c:66:3c:15:b8:be:77:5d:ac:48:97:b0: 3b:f5:11:f6:7e:4f:b1:d0:17:aa:cd:ce:a1:ac:61:cb:9f:f6: fd:d1:58:b5:24:b4:10:f1:3f:f3:dd:66:2f:55:ff:44:be:25: 88:12:91:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2hZr3AEpLpPspcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk NDlhYjhlNzAtNWQ5YS00NTk1LTgzNGMtYzkxOWE1NzNiODMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcmeuFwVdw2Edw1glfROiEMLMX5AE3E/5bg/ auOKoSnhKuXMvsGqLwD5BMrhjGTK9w1xgYZe6s6f+KQAHttir6wzUA55JB+HAypf yJAi5OzBv5uUQ2FA+AmIM9n9ukEhl+CNTNjfVA13sqtB8ut7WCc3XmVcKFnkm0SQ 8O/w2C2p0/IzQmi35PZv23IxztiNoWp63u7vIiLaQ/gQR0x08jZEHtiKt/sWKa68 8KrarStnimoW4hxSFkyUsgoVDX/wm1MLbYS/f+AX3fEc4tg+MqNMTfBi7Q1Cx7W7 dro70h7jZuiDuUzJaRJy2Q21vtDzO7e+Z7XIErlhMROti817mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOi6tQ0/EnThF5yfmdcUeOsHSDYBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYWYwMWNhMTctN2ZhYi0z NjMyLThlOGMtY2Y0YjFlZGJiOGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0DXqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEs3T2gqBCYiL6PbGYX/lsAm4Xm6gvnrHbFYLo/N/wLFPc4WHJY6WpI 3UL4TiJdHB7XF0fXsuJ/vFSSCE0tkoxRCB0mzMLGm1wxVoe3baefrUkZ+1YshfdH QqL16DAqHjQVD4LPWq7SUhPnxcDugI+PXsZq5MRX9VZTBNuPwZ7eaMIc02uxwdEh AlJfRR3IG4BqcVkZKb/Ovozq1WO3PGcVAJTjkFpMF+0jZL2c6fBkECmbYgt52mQm H7iCsKPlj54k5ScvyCeV+ygZH3xmPBW4vnddrEiXsDv1EfZ+T7HQF6rNzqGsYcuf 9v3RWLUktBDxP/PdZi9V/0S+JYgSkYc= -----END CERTIFICATE-----Generated at Wed Jul 22 01:11:17 2026 by rpki-client