$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cfb25938-1fe8-3fef-8d37-b7d1cddafc15.roa File: cfb25938-1fe8-3fef-8d37-b7d1cddafc15.roa (raw, json) Hash identifier: +j1ndo/e2gOp3zJGT3wKgLvpvsodQjw9qpF+xTNz57U= Subject key identifier: FB:AE:10:51:AC:E6:0F:89:81:3B:97:17:F5:8F:D8:B5:B2:CE:BC:63 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584EFCACCA23AF50CA5C899E0420 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cfb25938-1fe8-3fef-8d37-b7d1cddafc15.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 13576 IP address blocks: 209.151.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:ca:23:af:50:ca:5c:89:9e:04:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=a2f5a1c3-6063-4c61-b8b8-fc457ae105c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:09:08:fc:59:37:d6:b9:cf:77:48:a7:a7:06: 11:87:1e:ae:f6:c8:81:77:07:1c:ad:80:71:20:be: 05:27:f2:8d:e5:5b:3b:e6:4b:e9:f6:53:6a:9f:56: 8a:73:85:5c:db:bb:13:3d:5d:7a:61:ac:ba:a1:fe: c3:e2:2f:5a:01:9c:6a:13:c3:2f:88:f0:1b:4b:80: 4d:fb:f0:6c:37:b1:e7:5c:33:e9:ea:9e:59:2a:78: 04:f1:6c:db:29:f5:b9:ee:62:c8:f8:5f:74:c0:3d: 52:bd:6b:fc:49:c9:77:a6:ee:0a:4e:1b:8c:ee:76: c7:c7:4f:23:79:07:9b:73:6f:b4:bc:c4:cc:ce:25: 57:da:f6:fd:ca:70:91:f0:61:a6:3f:28:5b:52:24: b0:d4:ed:7d:e6:0c:1b:d9:69:bc:1a:74:71:2f:7d: a7:4a:28:40:47:83:10:4d:84:33:d3:d8:d8:a1:f6: 7c:6c:db:9c:fa:31:c5:7e:0a:c4:46:d6:a0:b6:0f: a0:b5:7e:d5:88:72:0a:74:31:7b:2e:64:23:fb:3c: 7b:3c:e1:e2:ba:9b:e3:38:bf:e9:73:f1:fe:f6:f4: 4d:d2:ff:65:63:9e:b8:90:26:1e:43:d6:ec:31:f7: 2f:73:7d:ca:1c:0a:b9:9c:b7:d4:b6:26:a7:3c:0c: 89:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:AE:10:51:AC:E6:0F:89:81:3B:97:17:F5:8F:D8:B5:B2:CE:BC:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cfb25938-1fe8-3fef-8d37-b7d1cddafc15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 209.151.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:a3:da:12:81:2e:75:12:7c:8f:50:fd:70:9b:57:1d:f7:ed: ba:a8:9d:2d:74:35:9d:16:e1:37:a9:8d:55:3f:03:59:c7:8d: 82:64:63:30:50:af:34:9e:3a:3e:ae:58:99:74:37:57:ef:ee: d4:a9:ea:d5:78:a4:d7:7c:6e:bf:70:b2:85:c4:ae:06:9b:c4: a7:ad:45:35:7d:22:22:63:bd:2b:ee:3c:a7:04:d2:d8:d1:4a: 3c:fc:ff:69:35:46:16:ea:25:a0:7d:11:0c:d3:bb:59:8f:0f: ac:04:04:c1:91:51:77:27:e0:c2:ee:72:ca:97:fc:e3:fa:44: 1d:b8:13:77:5d:7c:5f:8e:77:d7:cd:47:42:a9:77:44:31:b8: df:8e:08:d2:25:09:05:e5:75:be:51:22:52:46:88:aa:16:b1: 60:7c:3a:0f:d8:fd:80:6f:5a:bc:70:82:6e:d0:ab:2b:6b:76: d7:b6:24:4d:18:b9:d8:20:e6:c0:56:56:e9:e3:85:9d:db:79: 79:fb:34:23:fc:ad:6d:0e:71:87:c6:e9:50:cd:f1:71:33:b8: 58:97:ec:bd:38:df:54:95:c8:45:ec:59:46:b9:a5:76:6c:c2: a6:89:eb:b9:68:02:e2:51:52:58:4d:2e:dd:8c:fd:6a:b9:25: 02:a8:f8:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rMojr1DKXImeBCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk YTJmNWExYzMtNjA2My00YzYxLWI4YjgtZmM0NTdhZTEwNWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAkI/Fk31rnPd0inpwYRhx6u9siBdwccrYBx IL4FJ/KN5Vs75kvp9lNqn1aKc4Vc27sTPV16Yay6of7D4i9aAZxqE8MviPAbS4BN +/BsN7HnXDPp6p5ZKngE8WzbKfW57mLI+F90wD1SvWv8Scl3pu4KThuM7nbHx08j eQebc2+0vMTMziVX2vb9ynCR8GGmPyhbUiSw1O195gwb2Wm8GnRxL32nSihAR4MQ TYQz09jYofZ8bNuc+jHFfgrERtagtg+gtX7ViHIKdDF7LmQj+zx7POHiupvjOL/p c/H+9vRN0v9lY564kCYeQ9bsMfcvc33KHAq5nLfUtianPAyJpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPuuEFGs5g+JgTuXF/WP2LWyzrxjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvY2ZiMjU5MzgtMWZlOC0z ZmVmLThkMzctYjdkMWNkZGFmYzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Ze1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKej2hKBLnUSfI9Q/XCbVx337bqonS10NZ0W4TepjVU/A1nHjYJkYzBQ rzSeOj6uWJl0N1fv7tSp6tV4pNd8br9wsoXErgabxKetRTV9IiJjvSvuPKcE0tjR Sjz8/2k1RhbqJaB9EQzTu1mPD6wEBMGRUXcn4MLucsqX/OP6RB24E3ddfF+Od9fN R0Kpd0QxuN+OCNIlCQXldb5RIlJGiKoWsWB8Og/Y/YBvWrxwgm7Qqytrdte2JE0Y udgg5sBWVunjhZ3beXn7NCP8rW0OcYfG6VDN8XEzuFiX7L0431SVyEXsWUa5pXZs wqaJ67loAuJRUlhNLt2M/Wq5JQKo+MY= -----END CERTIFICATE-----Generated at Sat Sep 5 05:55:46 2026 by rpki-client