$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b2766bb5-22c2-31db-8030-1ac9aa235b14.roa File: b2766bb5-22c2-31db-8030-1ac9aa235b14.roa (raw, json) Hash identifier: nRvKUYuwE7n2qqm3XQmRQo7mr8d0bSPVihFrWr9x0zY= Subject key identifier: 23:99:F9:E9:8F:D7:5B:B6:E8:CD:1C:7B:DF:28:96:E2:37:7C:5A:FE Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584F093CE95C1956E86695A12E00 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b2766bb5-22c2-31db-8030-1ac9aa235b14.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 393417 IP address blocks: 208.53.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:e9:5c:19:56:e8:66:95:a1:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=a454c319-cd6e-48c8-8913-0fa8853c3bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:43:ec:6c:92:f2:b8:eb:a3:97:f2:a3:9f:33: c6:21:d6:88:5b:e9:00:b5:8a:33:d1:e1:c4:a8:2e: bb:7e:c1:fb:c6:5c:15:41:c4:ea:e9:4f:b2:f5:2d: f1:f7:29:e7:2d:12:b6:c6:0b:b5:96:d8:d0:45:8e: 35:74:69:98:70:fa:98:9a:6f:78:62:76:f7:8e:56: 24:25:68:ab:3b:5a:6e:79:3b:48:03:4b:52:07:3a: e8:ae:fe:a6:9d:3d:0d:07:d1:e4:72:46:0c:d6:86: f7:4a:e4:ed:d5:bb:59:26:e1:4e:13:6f:30:3e:1e: 55:ea:90:ed:7e:fe:8e:e9:9d:3a:82:79:d6:03:91: cb:a4:7c:fb:03:96:d5:8d:7f:af:65:c5:6d:a2:16: 8f:bf:7f:c7:19:ca:03:51:69:02:f1:5d:e4:cc:4b: 97:3f:5f:9c:72:fc:5b:73:2f:9d:86:12:04:84:22: 56:07:62:b3:3f:f6:f8:bc:b3:77:60:4a:5b:e8:55: 03:17:d4:78:35:91:5d:2c:0d:9b:e4:30:cb:ad:67: a9:2d:50:94:e6:c7:eb:ee:76:29:02:ce:f1:35:2f: c1:61:d0:83:ee:46:22:e4:93:83:37:36:84:21:bc: ff:74:1f:4d:3a:3c:f7:4e:c0:4d:e2:19:ff:92:62: 96:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:99:F9:E9:8F:D7:5B:B6:E8:CD:1C:7B:DF:28:96:E2:37:7C:5A:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b2766bb5-22c2-31db-8030-1ac9aa235b14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:96:8c:57:45:1b:ec:86:33:d4:34:70:b2:6d:d9:bd:1c:a3: ba:22:d2:27:48:ec:d9:a5:a2:ca:e7:ba:ca:ca:72:65:94:f8: e4:12:01:90:3f:4b:c8:80:9b:45:73:8b:cc:7a:4a:bf:20:78: 0f:ea:9a:55:93:85:f3:52:a0:33:36:77:3d:61:d3:f2:3b:d4: 6e:d2:78:2b:51:7a:cb:40:ca:7f:39:67:21:96:e5:99:34:65: 4d:41:43:df:56:0c:fb:39:85:ee:04:c4:09:58:37:35:21:b3: 3a:7c:6f:6a:2e:14:d1:52:89:76:b2:00:53:ad:06:79:de:e1: fd:1a:ba:55:e5:35:b9:be:c9:f7:c0:ef:b9:09:37:48:81:37: 33:e6:bf:05:7f:f7:38:9e:c3:49:35:48:df:90:28:3c:f0:e0: 7b:0f:d1:65:5d:25:1f:f0:e6:e0:36:94:41:83:31:f6:2e:70: 5f:11:60:19:30:6e:80:94:b7:40:e6:40:d4:a9:50:8c:6a:23: 43:f4:87:30:19:d7:2b:42:92:98:5e:7f:5a:d4:e3:e2:49:97: 79:f6:1c:59:b8:5d:a3:48:dc:74:67:b0:eb:6d:ff:d7:08:1b: c8:d0:01:c0:1d:b6:3a:61:ec:bb:06:32:ad:2a:5c:f5:43:a2: 93:32:ee:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPOlcGVboZpWhLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk YTQ1NGMzMTktY2Q2ZS00OGM4LTg5MTMtMGZhODg1M2MzYmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0PsbJLyuOujl/KjnzPGIdaIW+kAtYoz0eHE qC67fsH7xlwVQcTq6U+y9S3x9ynnLRK2xgu1ltjQRY41dGmYcPqYmm94Ynb3jlYk JWirO1pueTtIA0tSBzrorv6mnT0NB9HkckYM1ob3SuTt1btZJuFOE28wPh5V6pDt fv6O6Z06gnnWA5HLpHz7A5bVjX+vZcVtohaPv3/HGcoDUWkC8V3kzEuXP1+ccvxb cy+dhhIEhCJWB2KzP/b4vLN3YEpb6FUDF9R4NZFdLA2b5DDLrWepLVCU5sfr7nYp As7xNS/BYdCD7kYi5JODNzaEIbz/dB9NOjz3TsBN4hn/kmKWGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOZ+emP11u26M0ce98oluI3fFr+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYjI3NjZiYjUtMjJjMi0z MWRiLTgwMzAtMWFjOWFhMjM1YjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DXUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmWjFdFG+yGM9Q0cLJt2b0co7oi0idI7NmlosrnusrKcmWU+OQSAZA/ S8iAm0Vzi8x6Sr8geA/qmlWThfNSoDM2dz1h0/I71G7SeCtRestAyn85ZyGW5Zk0 ZU1BQ99WDPs5he4ExAlYNzUhszp8b2ouFNFSiXayAFOtBnne4f0aulXlNbm+yffA 77kJN0iBNzPmvwV/9ziew0k1SN+QKDzw4HsP0WVdJR/w5uA2lEGDMfYucF8RYBkw boCUt0DmQNSpUIxqI0P0hzAZ1ytCkphef1rU4+JJl3n2HFm4XaNI3HRnsOtt/9cI G8jQAcAdtjph7LsGMq0qXPVDopMy7s4= -----END CERTIFICATE-----Generated at Sat Sep 5 03:42:22 2026 by rpki-client