$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0cfefe06-bce2-35d9-81c7-b24d8dbbf2cb.roa File: 0cfefe06-bce2-35d9-81c7-b24d8dbbf2cb.roa (raw, json) Hash identifier: PMPLqRkDXl+OqW0kdSch8mYubIRbSNiPfy+ZdeFbuFA= Subject key identifier: 49:F1:C1:95:31:BC:92:8F:B0:F4:A2:45:C3:E8:D3:4C:26:5B:76:D1 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584D86955384ACE2DF51C6AFFA80 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0cfefe06-bce2-35d9-81c7-b24d8dbbf2cb.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 13576 IP address blocks: 208.53.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:53:84:ac:e2:df:51:c6:af:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=2e9d08b6-990a-4c73-bef9-aa7a2ee8209b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ae:2d:05:9d:bd:57:35:92:14:a2:64:66:19: 20:4a:26:ef:37:2d:cf:56:db:49:04:ae:b6:06:45: 95:fc:fe:f6:17:34:04:c8:6f:e9:dd:27:cf:94:c8: 07:2a:68:88:04:10:a0:7d:79:44:5a:d4:99:84:05: b4:f7:e4:29:54:4f:f8:38:f9:d9:7b:cd:8a:71:7a: 22:3a:ec:f4:20:cb:df:66:c6:96:5e:af:8e:74:63: d3:56:7d:67:71:0d:7c:7c:83:a1:ac:77:94:2e:2c: bd:6d:ba:de:bb:76:92:24:93:3a:67:93:8e:85:a5: e1:63:65:b5:02:f9:85:49:e6:fc:3b:b4:32:cc:ec: 3b:2d:d6:b3:08:53:e2:1e:44:06:14:86:53:34:a0: ce:bd:e2:ac:ff:ea:24:29:3b:e5:ba:4d:df:88:a1: 53:59:f6:1a:bf:f2:29:6d:b1:c6:a9:d0:a2:b5:9a: 9f:6c:f5:49:be:5d:f0:64:e5:0b:5f:f6:e1:13:22: 39:ba:46:6d:4f:78:ea:0d:64:7c:5f:fb:f4:bf:23: 3e:6a:c2:4c:3f:30:e9:03:14:81:28:73:a4:e3:26: 9f:de:da:4c:12:79:55:ab:e3:02:89:b2:51:72:32: ae:d8:45:32:4a:a5:15:b6:8f:04:fd:88:3c:3b:22: f0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F1:C1:95:31:BC:92:8F:B0:F4:A2:45:C3:E8:D3:4C:26:5B:76:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0cfefe06-bce2-35d9-81c7-b24d8dbbf2cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:ee:dd:fb:ab:c0:94:47:a1:f4:65:75:a8:6e:3b:30:c9:4a: a1:6c:74:aa:70:05:3c:32:63:8a:4b:41:01:de:1c:bf:e1:0d: 3d:cd:1c:71:02:ab:fc:0d:01:20:a5:69:19:23:c8:7a:42:95: 0c:3d:50:db:78:2d:23:47:8f:ff:04:0f:2a:c5:84:26:2e:68: c7:91:a3:a6:b7:49:8a:d5:ad:8d:5f:ca:22:65:09:ef:07:66: 11:f2:02:68:fa:c8:25:f2:fe:dd:a6:f3:6c:08:3d:83:6b:50: 08:86:d0:32:4b:37:e0:9f:33:1c:43:84:1a:f8:a3:b2:42:05: 75:e6:69:31:b2:95:3f:73:de:90:22:49:0a:da:70:80:7b:68: 72:25:e1:2c:24:8b:d8:6d:b0:ec:2f:fd:5f:ba:a9:c7:10:9a: ae:1d:ab:5b:9c:44:f5:27:56:14:dc:d2:62:02:c5:51:40:09: a7:9b:46:71:04:f7:30:9e:1f:37:8c:5d:dc:7f:cf:6b:0b:84: 5c:7c:d9:76:55:5b:1c:b6:bd:96:02:7c:13:17:2a:b9:4b:5a: f2:a6:ba:e5:22:dd:00:b3:b8:83:e3:7e:6d:a0:0c:20:63:1a: 2a:79:e1:1f:d4:4d:e1:41:f1:71:59:e5:35:25:7d:25:04:a3: 03:1a:52:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlVOErOLfUcav+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk MmU5ZDA4YjYtOTkwYS00YzczLWJlZjktYWE3YTJlZTgyMDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq4tBZ29VzWSFKJkZhkgSibvNy3PVttJBK62 BkWV/P72FzQEyG/p3SfPlMgHKmiIBBCgfXlEWtSZhAW09+QpVE/4OPnZe82KcXoi Ouz0IMvfZsaWXq+OdGPTVn1ncQ18fIOhrHeULiy9bbreu3aSJJM6Z5OOhaXhY2W1 AvmFSeb8O7QyzOw7LdazCFPiHkQGFIZTNKDOveKs/+okKTvluk3fiKFTWfYav/Ip bbHGqdCitZqfbPVJvl3wZOULX/bhEyI5ukZtT3jqDWR8X/v0vyM+asJMPzDpAxSB KHOk4yaf3tpMEnlVq+MCibJRcjKu2EUySqUVto8E/Yg8OyLwtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnxwZUxvJKPsPSiRcPo00wmW3bRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMGNmZWZlMDYtYmNlMi0z NWQ5LTgxYzctYjI0ZDhkYmJmMmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DXFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL3u3furwJRHofRldahuOzDJSqFsdKpwBTwyY4pLQQHeHL/hDT3NHHEC q/wNASClaRkjyHpClQw9UNt4LSNHj/8EDyrFhCYuaMeRo6a3SYrVrY1fyiJlCe8H ZhHyAmj6yCXy/t2m82wIPYNrUAiG0DJLN+CfMxxDhBr4o7JCBXXmaTGylT9z3pAi SQracIB7aHIl4Swki9htsOwv/V+6qccQmq4dq1ucRPUnVhTc0mICxVFACaebRnEE 9zCeHzeMXdx/z2sLhFx82XZVWxy2vZYCfBMXKrlLWvKmuuUi3QCzuIPjfm2gDCBj Gip54R/UTeFB8XFZ5TUlfSUEowMaUqY= -----END CERTIFICATE-----Generated at Fri Apr 17 19:35:55 2026 by rpki-client