$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/af01ca17-7fab-3632-8e8c-cf4b1edbb8d6.roa File: af01ca17-7fab-3632-8e8c-cf4b1edbb8d6.roa (raw, json) Hash identifier: 7ZRPcsX0dxQxgOhzAVzg2WD1+66yVpxq0czBMJHZ1Ww= Subject key identifier: D2:3D:B7:91:24:31:80:B6:46:B2:8C:8F:C8:DD:6D:96:E2:D3:15:B7 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584D869554AA73F7546DE9EDBD8A Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/af01ca17-7fab-3632-8e8c-cf4b1edbb8d6.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 13576 IP address blocks: 208.53.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:54:aa:73:f7:54:6d:e9:ed:bd:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=098afc82-4def-42fd-81ef-a27893855f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0b:f9:53:72:ef:f1:a1:32:db:80:2e:00:e2: 9c:cf:f8:4a:8f:bb:5b:d3:96:cf:d9:c0:44:0b:56: 93:87:e0:5a:a2:96:06:94:96:a7:3f:94:06:e4:90: 14:14:82:b1:53:ac:05:e6:21:f6:83:ea:6b:4e:59: 57:8c:f5:97:05:23:b5:44:72:84:44:6a:89:02:e3: bb:41:c5:3e:9e:a2:ac:4b:0d:82:f1:5c:73:18:70: bf:10:a7:25:b9:bf:7c:8f:ac:88:f7:da:d3:4b:48: c5:fe:be:87:ad:c3:ee:94:8c:e5:27:cc:d0:28:6a: ca:c4:86:30:5d:90:6b:8f:6e:03:98:c0:20:c2:91: 81:57:58:8d:1c:d8:ad:b3:7f:d4:68:4c:1e:5a:e8: fd:a5:28:8a:de:35:d0:50:58:83:02:68:38:66:ad: a4:5a:75:25:b2:64:f3:ec:d9:57:9b:fd:c4:81:21: 9c:58:e8:7a:d1:2a:3e:3b:21:90:ab:cc:cb:bf:78: 68:6b:d7:00:9f:a4:6c:85:ec:d5:10:79:2f:f3:3e: d4:ac:f7:ce:5f:29:21:66:29:43:a8:eb:f0:f0:7d: ac:c4:52:45:6e:b2:2e:a5:4f:bf:03:c1:a3:d7:fd: fd:99:6a:3b:fb:ad:58:2a:05:98:dd:e4:09:17:a5: c5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:3D:B7:91:24:31:80:B6:46:B2:8C:8F:C8:DD:6D:96:E2:D3:15:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/af01ca17-7fab-3632-8e8c-cf4b1edbb8d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:9e:cd:53:a5:40:23:60:5b:53:26:15:4c:3b:69:a8:58:3e: 75:c2:79:94:c2:79:22:a0:39:2d:3f:5c:f4:ed:59:77:54:d4: ba:d5:c8:00:16:ec:b8:95:d6:d2:91:63:1d:c7:ae:c4:7d:e5: 97:86:b0:31:66:6d:02:75:1c:18:b4:f1:dc:02:c2:36:6a:58: 43:10:00:ca:18:fd:5b:7c:28:82:f2:b1:b2:a0:44:f3:25:5a: 5f:09:0a:9c:fc:df:44:2c:f2:b4:27:36:93:97:6b:c0:a2:c3: 88:cf:d9:b7:49:02:36:b0:60:2e:ba:98:3a:ae:34:03:84:e1: a2:18:74:dd:f7:fc:a5:1d:6a:82:08:37:4b:d7:ac:2d:61:54: b0:c7:0c:32:86:7e:2e:1c:fe:07:bf:a6:67:5e:17:74:e8:57: 97:87:c9:78:44:f7:97:1f:06:c7:e1:f2:88:1e:37:98:66:f0: 87:02:76:5d:48:24:83:3c:24:7d:90:e7:d4:7e:30:1f:85:8f: d7:37:7c:2e:1e:fb:a7:ba:eb:24:58:4e:3e:82:1e:2e:3f:c6: 46:a2:96:94:41:9a:ee:6c:ef:18:ae:eb:b7:50:4d:2c:3a:b6: 1c:f2:5f:7d:3a:6f:e9:d8:ea:00:82:88:34:f8:21:df:4c:e9: ad:70:d7:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlVSqc/dUbentvYowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk MDk4YWZjODItNGRlZi00MmZkLTgxZWYtYTI3ODkzODU1ZjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQv5U3Lv8aEy24AuAOKcz/hKj7tb05bP2cBE C1aTh+BaopYGlJanP5QG5JAUFIKxU6wF5iH2g+prTllXjPWXBSO1RHKERGqJAuO7 QcU+nqKsSw2C8VxzGHC/EKclub98j6yI99rTS0jF/r6HrcPulIzlJ8zQKGrKxIYw XZBrj24DmMAgwpGBV1iNHNits3/UaEweWuj9pSiK3jXQUFiDAmg4Zq2kWnUlsmTz 7NlXm/3EgSGcWOh60So+OyGQq8zLv3hoa9cAn6RshezVEHkv8z7UrPfOXykhZilD qOvw8H2sxFJFbrIupU+/A8Gj1/39mWo7+61YKgWY3eQJF6XFtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNI9t5EkMYC2RrKMj8jdbZbi0xW3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYWYwMWNhMTctN2ZhYi0z NjMyLThlOGMtY2Y0YjFlZGJiOGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0DXqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuezVOlQCNgW1MmFUw7aahYPnXCeZTCeSKgOS0/XPTtWXdU1LrVyAAW 7LiV1tKRYx3HrsR95ZeGsDFmbQJ1HBi08dwCwjZqWEMQAMoY/Vt8KILysbKgRPMl Wl8JCpz830Qs8rQnNpOXa8Ciw4jP2bdJAjawYC66mDquNAOE4aIYdN33/KUdaoII N0vXrC1hVLDHDDKGfi4c/ge/pmdeF3ToV5eHyXhE95cfBsfh8ogeN5hm8IcCdl1I JIM8JH2Q59R+MB+Fj9c3fC4e+6e66yRYTj6CHi4/xkailpRBmu5s7xiu67dQTSw6 thzyX306b+nY6gCCiDT4Id9M6a1w1zY= -----END CERTIFICATE-----Generated at Sat Apr 18 01:09:00 2026 by rpki-client