$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ef536fa4-9ed3-345e-ad0e-e6cc3e4bcfc8.roa File: ef536fa4-9ed3-345e-ad0e-e6cc3e4bcfc8.roa (raw, json) Hash identifier: yfTDE2KlD46ptYiJ74V6cuojk3dh0MpiadAaFGtc1sU= Subject key identifier: 8C:EC:D0:0E:E7:02:C2:5A:08:BF:8F:C3:9E:6A:8D:BF:AF:9B:88:9D Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584D67DFCE99F67276AE6DDFB880 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ef536fa4-9ed3-345e-ad0e-e6cc3e4bcfc8.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 16696 IP address blocks: 207.53.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:ce:99:f6:72:76:ae:6d:df:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=67ffda3c-bcf0-4be1-b724-683437412d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:37:08:11:ec:a0:4b:c4:35:70:a0:c3:49:06: c7:ad:42:a9:87:38:ae:22:26:b1:bc:b8:2d:90:9f: 6f:a0:b6:d1:76:11:e4:b9:2e:5e:8b:2e:f6:0b:a8: cc:db:57:fb:90:aa:7c:7f:e6:68:88:e5:2b:7b:0c: e9:58:6d:9f:79:02:94:9e:b7:08:46:9b:6a:96:93: 72:74:1c:4c:42:c2:b3:f2:90:22:42:58:5d:8a:27: 72:64:d6:15:7a:6a:23:f8:eb:df:2e:f4:a2:db:42: a3:99:f9:fc:a3:76:c8:57:c7:36:ae:fe:8a:a7:67: 51:cc:42:7a:83:0d:63:c6:9a:10:d1:d1:16:ef:d3: a0:14:0c:db:96:15:34:de:61:dd:8a:1e:13:3e:23: 88:3c:94:2b:55:d9:f8:8a:86:6d:bd:5e:60:5b:db: 14:a9:9f:95:fa:62:5a:37:99:71:69:95:00:d2:16: f1:c8:dc:e2:f7:90:b3:df:15:3f:12:97:9e:c4:f0: a6:61:6b:68:40:47:6a:10:98:bd:67:ee:c0:4c:f4: cd:6d:26:30:3f:55:14:c1:3f:13:8e:ec:10:1f:bb: e5:ca:64:c5:99:6e:df:ae:d0:eb:dd:da:49:01:b9: ab:df:fa:b1:f1:c2:ed:8e:ee:61:d5:b7:27:87:4e: 5d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:EC:D0:0E:E7:02:C2:5A:08:BF:8F:C3:9E:6A:8D:BF:AF:9B:88:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ef536fa4-9ed3-345e-ad0e-e6cc3e4bcfc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 207.53.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:da:ff:af:87:f9:ca:2c:bc:03:d4:f9:93:3a:a6:28:48:02: b8:eb:72:2c:07:65:ee:f1:72:13:a4:b9:5c:61:1b:ca:b4:e0: a9:71:97:5b:4e:f4:b9:40:1f:f5:0f:2d:42:7d:43:7b:04:f7: 0b:d5:86:1e:63:de:ba:8e:f2:67:ad:0b:9f:21:76:70:68:c7: 0c:4b:96:e1:2a:db:30:c4:04:0c:0e:98:7d:da:01:88:69:cf: 2c:47:9a:6c:37:2f:b2:1b:3b:48:9e:5e:68:c1:59:30:e4:d3: 11:d4:2c:87:bb:fe:2b:14:70:68:a6:92:3a:6c:a3:ce:0a:9d: 19:36:88:4b:96:36:d6:19:c5:0b:46:f5:8a:3e:33:54:98:bb: ce:11:ba:4e:35:99:7b:c1:89:3f:df:ec:0c:04:51:36:ca:e1: fa:2b:1d:10:de:9d:8e:97:b0:d9:98:2b:3e:98:05:84:d2:24: 1b:3e:c9:ab:c5:92:e5:90:00:fe:f0:48:32:2c:2d:be:98:82: 5b:02:3b:02:5a:b2:bc:bd:f4:9d:10:e5:33:a6:66:b5:c5:39: d9:a3:61:e3:2a:40:fd:a9:d3:ee:21:12:f3:4f:c6:3b:56:41: f8:18:03:c8:d8:52:14:a6:40:99:eb:95:b5:20:29:29:f0:77: 43:04:fa:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n386Z9nJ2rm3fuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk NjdmZmRhM2MtYmNmMC00YmUxLWI3MjQtNjgzNDM3NDEyZDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjcIEeygS8Q1cKDDSQbHrUKphziuIiaxvLgt kJ9voLbRdhHkuS5eiy72C6jM21f7kKp8f+ZoiOUrewzpWG2feQKUnrcIRptqlpNy dBxMQsKz8pAiQlhdiidyZNYVemoj+OvfLvSi20Kjmfn8o3bIV8c2rv6Kp2dRzEJ6 gw1jxpoQ0dEW79OgFAzblhU03mHdih4TPiOIPJQrVdn4ioZtvV5gW9sUqZ+V+mJa N5lxaZUA0hbxyNzi95Cz3xU/EpeexPCmYWtoQEdqEJi9Z+7ATPTNbSYwP1UUwT8T juwQH7vlymTFmW7frtDr3dpJAbmr3/qx8cLtju5h1bcnh05dgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzs0A7nAsJaCL+Pw55qjb+vm4idMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZWY1MzZmYTQtOWVkMy0z NDVlLWFkMGUtZTZjYzNlNGJjZmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzXuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAra/6+H+cosvAPU+ZM6pihIArjrciwHZe7xchOkuVxhG8q04Klxl1tO 9LlAH/UPLUJ9Q3sE9wvVhh5j3rqO8metC58hdnBoxwxLluEq2zDEBAwOmH3aAYhp zyxHmmw3L7IbO0ieXmjBWTDk0xHULIe7/isUcGimkjpso84KnRk2iEuWNtYZxQtG 9Yo+M1SYu84Ruk41mXvBiT/f7AwEUTbK4forHRDenY6XsNmYKz6YBYTSJBs+yavF kuWQAP7wSDIsLb6YglsCOwJasry99J0Q5TOmZrXFOdmjYeMqQP2p0+4hEvNPxjtW QfgYA8jYUhSmQJnrlbUgKSnwd0ME+jA= -----END CERTIFICATE-----Generated at Fri Apr 17 10:36:51 2026 by rpki-client