$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/6a3cdf50-0115-3be3-8a15-f5ba482c6f68.roa File: 6a3cdf50-0115-3be3-8a15-f5ba482c6f68.roa (raw, json) Hash identifier: +ZhPf4v0dy+GDGrYPbv2R7Bz0+UwO0JQcgSKJgtdhcc= Subject key identifier: 33:03:D3:9A:FC:AD:2C:31:67:34:67:FF:2B:ED:94:FD:B6:08:B4:1B Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584D2644CD1B3F807F8F2D5F5880 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/6a3cdf50-0115-3be3-8a15-f5ba482c6f68.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 13576 IP address blocks: 208.53.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:cd:1b:3f:80:7f:8f:2d:5f:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=370c0b06-33fa-40c5-b457-f3e545a0d9a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:94:25:96:5b:e7:23:d0:98:41:5f:92:45:72: bf:5e:35:f4:73:9d:d7:69:aa:3a:a1:cb:43:ee:f1: bb:df:62:ff:4e:e8:f7:9f:59:5a:17:b3:7a:4c:15: bf:32:42:64:57:69:82:ee:9c:25:74:72:42:96:a9: f0:16:76:7c:a5:79:20:77:fe:fa:5a:0b:52:6f:6e: 75:fb:2c:57:15:10:1b:05:c2:69:6c:fe:27:1e:fe: 33:6e:2a:31:ec:9c:77:ea:18:4d:61:22:89:a3:f5: a9:52:30:10:47:55:07:83:22:8b:a1:41:6e:dc:8e: d6:d5:e4:2e:ea:1c:d6:e2:51:18:50:c8:ff:e8:7c: 33:72:12:fc:09:7d:13:bb:d9:8c:8e:4f:82:9a:a2: 81:37:b5:88:21:95:94:e2:fd:4f:e0:04:17:0b:65: 76:55:b1:02:f3:b1:92:52:75:a1:1f:96:c6:76:7d: ed:79:c3:9f:a0:92:4f:9d:3f:cd:96:0b:71:2c:58: 35:2f:24:c3:0a:87:72:c4:84:71:35:05:88:b0:65: b7:01:db:33:5a:da:24:f2:dc:78:68:bc:b9:0b:c2: fd:ec:93:24:3e:a7:84:43:a8:8d:7e:90:3a:77:77: 40:ca:5d:35:75:e8:85:e3:36:fe:b8:af:60:53:a3: cc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:03:D3:9A:FC:AD:2C:31:67:34:67:FF:2B:ED:94:FD:B6:08:B4:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/6a3cdf50-0115-3be3-8a15-f5ba482c6f68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:02:d2:b0:90:57:1b:29:b4:b5:49:31:f8:e4:a4:53:2d:0d: d7:b0:73:27:e8:83:e8:6a:9d:9c:7c:3b:8e:ef:e6:4c:47:d9: c2:f6:ca:6d:cc:94:7e:ba:62:e5:a1:41:00:42:91:aa:84:fc: 58:c2:d3:da:1f:ef:7e:54:1e:8e:e3:00:0d:68:b4:14:6f:2e: 27:c1:42:fa:cb:bf:8c:bc:8b:6f:db:fb:f5:6e:11:ed:1a:b5: 37:0b:bc:27:df:5c:35:be:9f:dc:4b:cd:25:82:d0:9a:8f:46: 0a:ee:b8:8a:1f:bc:c0:5b:e3:49:48:b7:cb:c8:99:de:b9:7c: 5e:1c:70:79:ca:36:60:c8:c1:d8:9f:df:76:01:5b:9f:e2:20: 21:6e:a9:1d:21:b0:15:90:f7:e7:09:83:92:80:c7:61:1d:a5: 31:24:41:83:08:26:7f:0e:69:fa:eb:78:78:24:03:e9:76:5b: 79:fa:8a:97:91:55:a2:6d:d6:5f:8e:e2:76:5d:59:8b:18:ce: 8c:b6:9d:6a:78:08:ec:91:26:21:cf:a1:d6:e6:ac:5b:e7:2c: 63:39:5b:7f:6b:f8:27:38:a4:94:c4:bc:b6:d2:c0:b0:90:0e: 26:f4:db:9e:6f:95:1b:a5:7c:c8:0c:85:ee:7a:29:eb:1c:ad: 4f:57:42:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRM0bP4B/jy1fWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk MzcwYzBiMDYtMzNmYS00MGM1LWI0NTctZjNlNTQ1YTBkOWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopQlllvnI9CYQV+SRXK/XjX0c53Xaao6octD 7vG732L/Tuj3n1laF7N6TBW/MkJkV2mC7pwldHJClqnwFnZ8pXkgd/76WgtSb251 +yxXFRAbBcJpbP4nHv4zbiox7Jx36hhNYSKJo/WpUjAQR1UHgyKLoUFu3I7W1eQu 6hzW4lEYUMj/6HwzchL8CX0Tu9mMjk+CmqKBN7WIIZWU4v1P4AQXC2V2VbEC87GS UnWhH5bGdn3tecOfoJJPnT/NlgtxLFg1LyTDCodyxIRxNQWIsGW3AdszWtok8tx4 aLy5C8L97JMkPqeEQ6iNfpA6d3dAyl01deiF4zb+uK9gU6PM6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMD05r8rSwxZzRn/yvtlP22CLQbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNmEzY2RmNTAtMDExNS0z YmUzLThhMTUtZjViYTQ4MmM2ZjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQC0rCQVxsptLVJMfjkpFMtDdewcyfog+hqnZx8O47v5kxH2cL2ym3M lH66YuWhQQBCkaqE/FjC09of735UHo7jAA1otBRvLifBQvrLv4y8i2/b+/VuEe0a tTcLvCffXDW+n9xLzSWC0JqPRgruuIofvMBb40lIt8vImd65fF4ccHnKNmDIwdif 33YBW5/iICFuqR0hsBWQ9+cJg5KAx2EdpTEkQYMIJn8OafrreHgkA+l2W3n6ipeR VaJt1l+O4nZdWYsYzoy2nWp4COyRJiHPodbmrFvnLGM5W39r+Cc4pJTEvLbSwLCQ Dib0255vlRulfMgMhe56KescrU9XQis= -----END CERTIFICATE-----Generated at Thu Mar 26 19:31:35 2026 by rpki-client