$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e6408ffc-6cc4-3d4c-bfc5-f633864e2b0f.roa File: e6408ffc-6cc4-3d4c-bfc5-f633864e2b0f.roa (raw, json) Hash identifier: 4NcPRBLocRmUqSG1p8Fea0S7odPoxUobVbFf0+VU4DA= Subject key identifier: 68:D1:98:D6:CA:3C:F1:84:B9:6C:DE:42:98:49:43:B7:8E:80:C5:96 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584F093CE9677A54782594A5F708 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e6408ffc-6cc4-3d4c-bfc5-f633864e2b0f.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 36013 IP address blocks: 208.53.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:e9:67:7a:54:78:25:94:a5:f7:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=302c9023-f229-48e7-a897-2392c82745b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3f:83:ad:96:c8:6a:ea:c2:c6:e5:71:c6:b0: 44:96:c5:07:bd:a1:46:d5:ac:e8:ed:34:4d:a3:d8: cc:4a:aa:f4:66:d9:e4:35:c9:c6:b1:ba:7b:bd:54: dc:d5:ed:d1:b9:69:2c:c1:cc:53:3c:af:0d:eb:a0: 9a:1f:8f:38:58:4c:20:2f:5b:fe:58:c4:5d:fa:86: 9a:72:84:2f:a0:75:6c:01:cd:66:73:84:af:f5:72: d8:06:a7:77:5b:8f:e4:a9:9e:c2:0f:88:82:28:df: 50:2b:28:39:3b:c9:b0:c9:20:86:cc:2b:d6:d6:af: 47:0e:a6:15:ee:06:9e:1a:8a:62:c5:73:ad:5e:01: 88:e4:2f:f9:27:12:04:d0:28:4c:77:ae:94:09:f2: aa:9d:36:52:4b:a4:d8:65:36:ac:05:c8:53:28:c1: 69:9f:44:3a:87:0f:30:b1:18:6b:d1:2f:c0:84:16: fb:76:b2:a9:c8:90:06:22:4d:cb:c3:dd:e2:2f:22: 24:4c:2b:3d:e2:43:88:b9:94:17:bc:61:dd:1b:66: 23:7b:e5:ab:2d:f0:86:6e:1e:b5:ed:ce:92:df:92: 14:04:de:34:1c:0a:56:6e:69:6f:d3:9a:ad:57:92: 4d:d8:d9:2d:95:74:4c:a7:7a:2d:9e:7e:8b:44:1d: 04:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D1:98:D6:CA:3C:F1:84:B9:6C:DE:42:98:49:43:B7:8E:80:C5:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e6408ffc-6cc4-3d4c-bfc5-f633864e2b0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:ed:e0:93:d0:7b:c3:9a:d5:82:bc:6d:14:1c:86:6e:6c:b7: 0c:35:a5:5e:87:c7:1f:64:9e:9f:03:40:df:70:41:8c:9c:22: de:f1:93:58:03:29:52:41:fb:5f:20:27:73:1b:4e:35:0f:39: 6a:cd:11:54:99:78:6c:36:c2:a2:b3:43:ba:05:26:17:d6:e9: bf:86:3d:8c:e0:77:3f:a0:91:13:36:c5:91:65:cc:1c:cf:b4: c8:12:d2:22:9e:ab:22:42:2f:bd:17:bd:71:e4:d7:67:80:96: c6:cb:51:a7:18:94:00:76:4c:e0:88:4a:53:ce:79:71:42:08: dd:25:17:95:85:af:49:47:3a:ac:87:3f:6c:8e:ae:53:f6:25: e7:2e:04:4c:0a:c1:f7:5a:e2:cc:74:03:89:c5:4e:c5:b1:59: bd:41:09:93:d3:5e:ab:a1:a2:a2:b9:3c:2f:15:84:3f:fa:a7: 06:8c:f3:71:b8:e7:fa:28:2e:4c:b9:86:0a:57:42:a4:bb:52: 97:3e:9d:51:7e:e7:bc:12:fa:c7:38:b1:f5:78:1a:08:3f:97: 26:43:c7:aa:1d:bf:d3:57:54:40:57:0a:28:a0:d6:75:da:e5: ae:7c:f8:b2:75:87:d3:c9:27:48:83:9b:67:e0:2e:09:54:d2: fe:12:b7:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPOlnelR4JZSl9wgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk MzAyYzkwMjMtZjIyOS00OGU3LWE4OTctMjM5MmM4Mjc0NWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT+DrZbIaurCxuVxxrBElsUHvaFG1azo7TRN o9jMSqr0ZtnkNcnGsbp7vVTc1e3RuWkswcxTPK8N66CaH484WEwgL1v+WMRd+oaa coQvoHVsAc1mc4Sv9XLYBqd3W4/kqZ7CD4iCKN9QKyg5O8mwySCGzCvW1q9HDqYV 7gaeGopixXOtXgGI5C/5JxIE0ChMd66UCfKqnTZSS6TYZTasBchTKMFpn0Q6hw8w sRhr0S/AhBb7drKpyJAGIk3Lw93iLyIkTCs94kOIuZQXvGHdG2Yje+WrLfCGbh61 7c6S35IUBN40HApWbmlv05qtV5JN2NktlXRMp3otnn6LRB0ECQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjRmNbKPPGEuWzeQphJQ7eOgMWWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZTY0MDhmZmMtNmNjNC0z ZDRjLWJmYzUtZjYzMzg2NGUyYjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DXcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK/t4JPQe8Oa1YK8bRQchm5stww1pV6Hxx9knp8DQN9wQYycIt7xk1gD KVJB+18gJ3MbTjUPOWrNEVSZeGw2wqKzQ7oFJhfW6b+GPYzgdz+gkRM2xZFlzBzP tMgS0iKeqyJCL70XvXHk12eAlsbLUacYlAB2TOCISlPOeXFCCN0lF5WFr0lHOqyH P2yOrlP2JecuBEwKwfda4sx0A4nFTsWxWb1BCZPTXquhoqK5PC8VhD/6pwaM83G4 5/ooLky5hgpXQqS7Upc+nVF+57wS+sc4sfV4Ggg/lyZDx6odv9NXVEBXCiig1nXa 5a58+LJ1h9PJJ0iDm2fgLglU0v4St5w= -----END CERTIFICATE-----Generated at Sat Sep 5 04:12:59 2026 by rpki-client