$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0faf5a1c-3f19-30cf-b71a-8b5e3df15dfc.roa File: 0faf5a1c-3f19-30cf-b71a-8b5e3df15dfc.roa (raw, json) Hash identifier: fb5jIaUeGJcNf8w1FQxLrCLFn4c27ScaKCh4BeLl0iw= Subject key identifier: 4A:CD:87:E1:3D:E5:5D:10:E4:BF:E5:BD:D8:09:E9:D0:44:1A:1C:33 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584F34826F16AA1E7E41717A9E80 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0faf5a1c-3f19-30cf-b71a-8b5e3df15dfc.roa Signing time: Thu 17 Sep 2026 13:00:12 +0000 ROA not before: Thu 17 Sep 2026 13:00:12 +0000 ROA not after: Wed 16 Dec 2026 14:00:12 +0000 asID: 63172 IP address blocks: 208.53.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:82:6f:16:aa:1e:7e:41:71:7a:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Sep 17 13:00:12 2026 GMT Not After : Dec 16 14:00:12 2026 GMT Subject: CN=4cd8d78e-321e-45a3-a293-adbbbb48371a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3b:38:b0:8d:9b:26:f0:32:33:70:2a:79:dc: 57:41:f8:a0:05:bf:d4:b3:eb:bb:af:a8:82:33:9b: 2f:fd:77:1d:5d:d8:55:e5:97:60:d1:3b:93:92:d0: fe:e3:ea:45:cb:04:65:ed:bc:52:30:8f:e6:84:85: e7:0e:1c:09:67:43:2b:40:86:e8:f0:5a:1e:62:e6: 93:94:cd:c4:66:a3:ca:ac:bf:36:d9:5a:cc:0f:00: ff:8a:05:79:d2:70:86:42:f4:1a:f5:90:c2:16:6e: 1f:30:06:a4:6d:9e:54:1d:95:3b:8a:a0:d5:62:c5: ae:3e:f2:3e:dd:70:01:ed:05:35:0b:94:34:cb:8e: 76:57:3d:4b:b7:f4:a4:26:d0:76:3c:df:fd:f1:ae: 34:47:28:3b:b5:0d:8f:c2:37:1f:5d:50:33:75:c6: 97:7c:58:27:d5:a8:39:66:41:12:c0:63:e6:64:6d: 11:2a:24:69:37:b3:08:c4:d2:74:de:a1:48:ae:a3: 98:f5:ca:0e:43:dc:65:26:69:e1:17:6e:a8:0a:41: 17:ce:0b:c6:f9:5d:fd:d6:ce:f6:e8:49:d8:f6:c3: 3a:df:29:5d:7a:90:be:ba:77:33:38:52:a7:c1:1f: bd:9f:f3:52:5a:f4:18:ac:4d:26:3c:19:96:45:82: e5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:CD:87:E1:3D:E5:5D:10:E4:BF:E5:BD:D8:09:E9:D0:44:1A:1C:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0faf5a1c-3f19-30cf-b71a-8b5e3df15dfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:76:ac:77:eb:3e:24:75:9e:b6:c0:7b:4b:40:86:ba:39:d7: 9d:47:02:1e:7d:41:41:a5:89:7c:25:14:2c:19:82:14:50:e1: 5d:bb:ad:ef:1e:45:e6:5e:f7:a0:a8:92:3a:81:2e:b6:0b:a9: 66:52:ec:3f:59:b6:43:e2:76:d8:12:ab:0f:dc:62:36:8f:4f: 4b:3d:bf:a9:37:de:c5:db:f7:df:a0:24:24:c4:2d:4e:22:89: 02:78:a5:fc:75:6b:8b:c6:18:31:92:af:db:bf:07:c3:52:10: 93:d5:b4:c6:f4:d7:a4:30:4f:12:41:09:d2:3a:d2:83:1c:63: 6e:a7:df:e8:d2:09:ee:0b:a9:de:b8:5f:d3:60:8e:1c:8d:c6: 1c:5e:ef:eb:b6:6e:79:af:50:c3:8f:85:df:bb:03:5b:ac:54: 31:ab:b8:7f:91:cd:8c:fd:5e:9d:2a:5f:00:81:8f:a0:f6:7f: cf:05:6e:90:c6:a7:3d:58:19:28:20:13:b4:0c:01:ff:3b:c1: db:75:d1:00:cb:18:11:f7:fc:b6:98:a5:e5:85:00:24:67:67: 9f:26:01:57:9a:17:7f:e3:fa:51:a2:4a:42:73:7c:ff:ee:3c: a3:48:3f:1f:61:b0:73:a5:43:92:66:01:71:03:52:f0:b7:76: 17:c5:bb:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE80gm8Wqh5+QXF6noAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk NGNkOGQ3OGUtMzIxZS00NWEzLWEyOTMtYWRiYmJiNDgzNzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDs4sI2bJvAyM3AqedxXQfigBb/Us+u7r6iC M5sv/XcdXdhV5Zdg0TuTktD+4+pFywRl7bxSMI/mhIXnDhwJZ0MrQIbo8FoeYuaT lM3EZqPKrL822VrMDwD/igV50nCGQvQa9ZDCFm4fMAakbZ5UHZU7iqDVYsWuPvI+ 3XAB7QU1C5Q0y452Vz1Lt/SkJtB2PN/98a40Ryg7tQ2PwjcfXVAzdcaXfFgn1ag5 ZkESwGPmZG0RKiRpN7MIxNJ03qFIrqOY9coOQ9xlJmnhF26oCkEXzgvG+V391s72 6EnY9sM63yldepC+unczOFKnwR+9n/NSWvQYrE0mPBmWRYLl2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErNh+E95V0Q5L/lvdgJ6dBEGhwzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMGZhZjVhMWMtM2YxOS0z MGNmLWI3MWEtOGI1ZTNkZjE1ZGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0DXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGx2rHfrPiR1nrbAe0tAhro5151HAh59QUGliXwlFCwZghRQ4V27re8e ReZe96CokjqBLrYLqWZS7D9ZtkPidtgSqw/cYjaPT0s9v6k33sXb99+gJCTELU4i iQJ4pfx1a4vGGDGSr9u/B8NSEJPVtMb016QwTxJBCdI60oMcY26n3+jSCe4Lqd64 X9NgjhyNxhxe7+u2bnmvUMOPhd+7A1usVDGruH+RzYz9Xp0qXwCBj6D2f88FbpDG pz1YGSggE7QMAf87wdt10QDLGBH3/LaYpeWFACRnZ58mAVeaF3/j+lGiSkJzfP/u PKNIPx9hsHOlQ5JmAXEDUvC3dhfFu1U= -----END CERTIFICATE-----Generated at Sat Sep 26 09:16:11 2026 by rpki-client