$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cf214741-bd14-3a43-bc64-8b18b8e4c9dd.roa File: cf214741-bd14-3a43-bc64-8b18b8e4c9dd.roa (raw, json) Hash identifier: DZRMQLh1txL7nFfXWRZ6SbVM0zc2rh85GDhMI9UB+AA= Subject key identifier: FD:70:AA:14:F7:47:E8:01:3F:FB:1F:C9:34:83:88:63:A0:F4:A0:74 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584E921FAEEDC5CF5EC7762A6A40 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cf214741-bd14-3a43-bc64-8b18b8e4c9dd.roa Signing time: Tue 21 Jul 2026 09:00:12 +0000 ROA not before: Tue 21 Jul 2026 09:00:12 +0000 ROA not after: Mon 19 Oct 2026 09:00:12 +0000 asID: 63172 IP address blocks: 208.53.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:92:1f:ae:ed:c5:cf:5e:c7:76:2a:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jul 21 09:00:12 2026 GMT Not After : Oct 19 09:00:12 2026 GMT Subject: CN=971ee403-ffc4-4e81-80b7-a785f1efec4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fd:65:71:d5:7b:d4:a9:b8:9d:f2:ad:d9:16: fb:36:96:3b:95:f8:8a:d5:14:82:9a:cf:98:ed:1c: 60:f5:cb:bb:ca:ff:a8:8e:6a:ff:0c:2a:0e:d4:b4: d3:fd:c2:e7:87:b6:50:e0:c6:c0:ca:c8:f4:0b:5a: 70:98:4b:68:37:fe:54:68:5a:7d:11:3d:d0:cc:2b: a1:48:a0:32:b2:37:b0:a3:8b:56:c9:bc:56:16:29: 8b:13:e4:2c:2f:ab:7b:9c:e2:29:c0:89:15:7b:04: ec:61:4c:80:75:d7:a1:8e:17:c2:d8:9b:39:8b:f0: 96:97:8b:62:df:be:06:f0:fe:75:56:09:e7:ad:fb: 00:77:f2:7d:eb:5a:37:3d:56:16:36:cf:be:af:95: 75:da:6f:8e:e4:69:4e:f4:6a:a5:a1:f7:87:34:c8: 12:b1:01:13:77:e6:bc:15:60:6f:10:00:cb:92:aa: 1d:99:c3:48:45:06:b9:1c:0b:7b:83:98:66:3c:23: fe:30:6b:3f:06:14:c9:71:ee:65:4e:2e:b6:a6:2a: 43:f9:29:7e:42:ab:f8:25:1e:e0:ad:85:f8:10:9a: 68:63:dc:18:b3:6b:bb:c5:16:9b:1b:33:36:11:48: 40:35:69:b3:5a:a7:d9:45:95:fd:55:78:b1:96:99: f7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:70:AA:14:F7:47:E8:01:3F:FB:1F:C9:34:83:88:63:A0:F4:A0:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cf214741-bd14-3a43-bc64-8b18b8e4c9dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:c6:b8:bd:4d:11:79:73:ce:55:40:12:0e:8b:96:a8:86:ee: 1c:9e:a6:a6:5f:37:dc:5b:96:99:81:8c:d0:8d:42:da:bf:79: 44:72:64:2f:15:1c:ac:5c:f6:0e:f5:64:57:ce:e0:6d:fd:89: 85:15:22:17:45:90:43:c0:24:f4:0f:35:5f:1f:38:ed:94:1a: 3c:72:3d:ba:53:28:a5:10:b2:e3:d0:72:1d:6f:3a:da:66:52: 0c:d3:b4:31:69:28:af:a9:48:bd:05:f3:94:22:1f:02:90:5d: 6f:32:a7:ff:26:b3:e4:57:fe:38:c6:d9:17:a0:17:26:66:af: 3d:b4:64:30:7c:1b:e8:b6:42:b3:56:6e:0e:cb:e1:63:3e:95: 81:32:1b:1b:18:c5:32:fb:dd:eb:99:5c:5a:15:0a:97:3a:22: 68:c9:8e:0f:2c:39:c2:db:99:79:f3:a8:29:82:23:67:82:df: 5f:dc:c8:b2:3e:99:83:15:17:0f:a1:38:6c:96:83:53:8a:d8: 9c:21:a3:69:f2:70:d2:5a:3a:81:56:b5:f0:ad:41:a2:33:2c: ae:6f:65:cb:8b:91:66:e2:20:d6:68:2a:c7:72:1a:36:97:58: 02:d9:cc:c4:6b:d6:21:1e:25:cf:df:c2:6e:b4:ae:f4:83:24: 75:ec:ee:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6SH67txc9ex3YqakAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDcyMTA5MDAxMloXDTI2MTAxOTA5MDAxMlowLzEtMCsGA1UEAxMk OTcxZWU0MDMtZmZjNC00ZTgxLTgwYjctYTc4NWYxZWZlYzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/1lcdV71Km4nfKt2Rb7NpY7lfiK1RSCms+Y 7Rxg9cu7yv+ojmr/DCoO1LTT/cLnh7ZQ4MbAysj0C1pwmEtoN/5UaFp9ET3QzCuh SKAysjewo4tWybxWFimLE+QsL6t7nOIpwIkVewTsYUyAddehjhfC2Js5i/CWl4ti 374G8P51VgnnrfsAd/J961o3PVYWNs++r5V12m+O5GlO9GqlofeHNMgSsQETd+a8 FWBvEADLkqodmcNIRQa5HAt7g5hmPCP+MGs/BhTJce5lTi62pipD+Sl+Qqv4JR7g rYX4EJpoY9wYs2u7xRabGzM2EUhANWmzWqfZRZX9VXixlpn3bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1wqhT3R+gBP/sfyTSDiGOg9KB0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvY2YyMTQ3NDEtYmQxNC0z YTQzLWJjNjQtOGIxOGI4ZTRjOWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0DXmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANjGuL1NEXlzzlVAEg6LlqiG7hyepqZfN9xblpmBjNCNQtq/eURyZC8V HKxc9g71ZFfO4G39iYUVIhdFkEPAJPQPNV8fOO2UGjxyPbpTKKUQsuPQch1vOtpm UgzTtDFpKK+pSL0F85QiHwKQXW8yp/8ms+RX/jjG2RegFyZmrz20ZDB8G+i2QrNW bg7L4WM+lYEyGxsYxTL73euZXFoVCpc6ImjJjg8sOcLbmXnzqCmCI2eC31/cyLI+ mYMVFw+hOGyWg1OK2Jwho2nycNJaOoFWtfCtQaIzLK5vZcuLkWbiINZoKsdyGjaX WALZzMRr1iEeJc/fwm60rvSDJHXs7qU= -----END CERTIFICATE-----Generated at Wed Jul 22 03:09:36 2026 by rpki-client