$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ced76a77-e853-3b99-a16f-f047bf73a04c.roa File: ced76a77-e853-3b99-a16f-f047bf73a04c.roa (raw, json) Hash identifier: j16yZTprSR3UTjRDELU9PR0ElcrQDtnZk3ICG0EK+Sw= Subject key identifier: 0E:68:35:C7:E2:D0:04:69:DA:5E:19:77:14:D8:13:CB:B6:6C:7D:79 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584F8578736E1B21F97B11B5A8C0 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ced76a77-e853-3b99-a16f-f047bf73a04c.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 399439 IP address blocks: 208.53.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:73:6e:1b:21:f9:7b:11:b5:a8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=27f431ad-0d3a-4445-b6d7-d4827ed72a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f6:72:c2:58:ef:26:51:59:6e:5a:0a:b4:26: 83:ad:fb:74:db:7d:34:60:fb:b5:50:0a:64:0f:10: d8:c4:cc:c2:d0:f7:c9:06:94:b8:3e:36:53:5e:6a: a3:aa:64:01:05:45:6e:9e:fd:1c:77:0a:40:53:68: 37:d2:60:61:c4:cd:ec:6e:39:fe:01:b3:68:34:52: df:e3:16:7c:8a:5c:fb:22:b4:e8:2d:84:b1:72:29: 52:8d:55:d6:ff:41:d5:ad:93:72:89:68:a7:b6:8e: 5e:7d:c7:a3:ba:d9:c9:03:73:41:95:b9:1d:dc:7a: b5:4d:4a:2f:84:c1:84:e5:77:10:9a:cf:95:1c:9b: a7:fd:f0:ac:fb:30:90:b6:a4:bf:ff:05:5a:c5:76: 9a:f6:39:f4:28:34:d6:5f:c4:cf:88:ca:ee:a0:5d: d3:46:40:5c:a3:1a:51:37:98:96:0f:12:db:1f:51: 91:37:73:6c:f7:ef:f2:56:43:70:0d:9b:65:25:31: bd:8b:d4:14:0b:94:26:04:1a:0f:83:6e:cf:61:ae: b2:af:55:ba:6a:cb:41:a2:c2:ff:11:54:99:b5:45: 8f:a1:42:f1:58:9a:f8:cd:f1:ac:db:09:18:e7:83: a5:90:dd:8f:f6:ac:e1:71:34:da:d9:db:b7:be:4d: 0a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:68:35:C7:E2:D0:04:69:DA:5E:19:77:14:D8:13:CB:B6:6C:7D:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ced76a77-e853-3b99-a16f-f047bf73a04c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:0b:c5:f0:da:cf:88:7e:2d:58:77:7c:fb:5b:58:64:ba:03: 03:7c:65:5a:99:77:f7:59:4c:b1:f8:5f:6b:b1:b2:4c:e4:b7: 79:15:55:d2:7b:75:71:76:1f:7c:a6:42:d5:fc:aa:8b:6b:14: 20:c3:ac:9c:58:3d:a7:8b:f1:02:7b:36:ed:b0:3d:3e:4b:38: b8:3a:89:b6:28:a6:7c:a9:fc:4f:31:32:8e:7b:4a:30:86:76: 71:dc:cf:7f:79:97:68:a5:4b:fa:aa:b4:55:28:7e:77:6e:3c: 2e:01:cc:e2:9e:9c:3c:e3:a2:34:39:be:de:1d:dc:89:b2:ea: 0d:43:1f:33:f5:0d:9b:ed:5b:3c:d9:66:9c:92:b9:db:6a:cb: 98:6f:05:a7:91:5e:60:7a:8b:c5:28:ad:f9:df:b9:d9:2b:69: 83:d9:30:77:c1:b4:ec:f0:72:93:4d:1c:cb:3b:52:eb:17:ed: 03:61:33:e4:47:b6:b7:4c:78:6a:fa:d7:d0:41:ac:72:d3:8a: d7:f5:07:36:94:8f:0d:11:0c:bd:98:00:25:d3:4e:e3:88:93: b1:3d:09:d8:54:b2:c3:7d:ae:46:54:97:5d:e5:3b:c3:3a:4e: c5:f9:97:5f:e4:d4:7e:fb:53:40:5c:f7:7c:e0:1e:be:17:ac: 93:01:a4:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+FeHNuGyH5exG1qMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk MjdmNDMxYWQtMGQzYS00NDQ1LWI2ZDctZDQ4MjdlZDcyYTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/ZywljvJlFZbloKtCaDrft02300YPu1UApk DxDYxMzC0PfJBpS4PjZTXmqjqmQBBUVunv0cdwpAU2g30mBhxM3sbjn+AbNoNFLf 4xZ8ilz7IrToLYSxcilSjVXW/0HVrZNyiWinto5efcejutnJA3NBlbkd3Hq1TUov hMGE5XcQms+VHJun/fCs+zCQtqS//wVaxXaa9jn0KDTWX8TPiMruoF3TRkBcoxpR N5iWDxLbH1GRN3Ns9+/yVkNwDZtlJTG9i9QUC5QmBBoPg27PYa6yr1W6astBosL/ EVSZtUWPoULxWJr4zfGs2wkY54OlkN2P9qzhcTTa2du3vk0KfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5oNcfi0ARp2l4ZdxTYE8u2bH15MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvY2VkNzZhNzctZTg1My0z Yjk5LWExNmYtZjA0N2JmNzNhMDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMLxfDaz4h+LVh3fPtbWGS6AwN8ZVqZd/dZTLH4X2uxskzkt3kVVdJ7 dXF2H3ymQtX8qotrFCDDrJxYPaeL8QJ7Nu2wPT5LOLg6ibYopnyp/E8xMo57SjCG dnHcz395l2ilS/qqtFUofnduPC4BzOKenDzjojQ5vt4d3Imy6g1DHzP1DZvtWzzZ ZpySudtqy5hvBaeRXmB6i8UorfnfudkraYPZMHfBtOzwcpNNHMs7UusX7QNhM+RH trdMeGr619BBrHLTitf1BzaUjw0RDL2YACXTTuOIk7E9CdhUssN9rkZUl13lO8M6 TsX5l1/k1H77U0Bc93zgHr4XrJMBpLg= -----END CERTIFICATE-----Generated at Sun Oct 25 09:16:21 2026 by rpki-client