$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/a6fd5fc4-a308-35f6-8bb4-e2b10b78f6f4.roa File: a6fd5fc4-a308-35f6-8bb4-e2b10b78f6f4.roa (raw, json) Hash identifier: 929S4RqlGfn3y1aT2DZ8uAivvFL7u3RUuSmuqn22nlA= Subject key identifier: A1:62:08:09:C3:F3:FD:52:F5:4D:97:01:2F:BE:02:56:94:2B:65:B5 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584D8695548624F52FC4D2B2BEC0 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/a6fd5fc4-a308-35f6-8bb4-e2b10b78f6f4.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 13576 IP address blocks: 208.53.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:54:86:24:f5:2f:c4:d2:b2:be:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=582f8e69-5ac5-4315-bfe5-86682a59648a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d0:d0:2d:d8:86:f6:e3:07:35:54:f6:4b:a8: b3:a4:49:21:d0:d7:2a:0c:56:8c:46:fa:14:26:b9: 93:c1:4a:aa:ea:10:b1:e5:ef:4c:b2:f2:85:15:70: 46:c6:aa:26:1c:78:dc:6d:ac:c6:cd:4d:b8:8d:e5: d3:98:fd:9e:6a:b4:bc:1a:41:30:1c:2d:e3:ff:db: 94:45:23:7c:ef:1e:ee:12:74:2e:9c:16:28:a1:23: 9c:19:39:ba:b0:57:00:1f:d2:6a:34:ec:2d:53:e0: 61:0e:24:87:ec:80:5c:00:3c:7c:0f:48:fb:cf:cd: 4a:d2:72:07:70:b8:bc:73:29:d2:ea:36:aa:95:5e: d7:ef:d0:f2:ae:50:78:02:8a:d6:35:20:d5:ab:5d: 2c:98:7f:82:8e:1d:4b:d1:cf:27:3f:58:62:ed:a1: 7d:cd:7a:1d:63:78:e9:24:9e:58:68:e0:fd:cb:d3: 28:b9:09:27:42:4d:f8:0b:d8:04:6e:75:15:71:83: fc:6c:8f:30:91:31:03:37:0d:ab:88:33:c5:00:ff: b0:63:d8:aa:c0:11:49:b0:0a:ff:c3:ee:46:ec:85: b2:a2:87:c1:a8:7b:69:a8:8d:1e:9e:7f:8d:8d:aa: 32:90:d5:f7:9e:78:83:ed:ab:25:56:4b:a3:3a:6d: 26:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:62:08:09:C3:F3:FD:52:F5:4D:97:01:2F:BE:02:56:94:2B:65:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/a6fd5fc4-a308-35f6-8bb4-e2b10b78f6f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:89:44:b2:cd:df:02:27:cb:5f:aa:75:25:a4:e1:e9:0f:ae: 52:fa:cc:99:36:85:8d:0d:1f:6d:d3:8d:e3:0c:12:04:34:d2: 6e:e2:06:a2:8d:22:9e:61:c2:36:e6:1e:df:a8:81:ce:7d:05: b0:c3:39:cb:e9:bc:d8:f1:a1:b9:2d:1b:e4:3e:ce:ba:b3:19: 31:d2:9a:18:66:65:2e:10:b8:4a:f3:20:53:ed:ac:1d:9b:87: 72:f5:7f:de:cb:a7:47:3c:20:81:c9:78:0e:cb:61:3c:20:4d: d8:d4:fd:d7:ec:8b:37:bb:8a:23:bb:5d:d1:ae:0b:e6:38:86: fe:f6:f0:89:85:1e:a8:6c:cf:82:c6:cc:c0:ac:82:41:ee:1d: 32:6c:a8:0a:98:24:c4:a0:a4:11:0c:d2:9c:13:e3:5e:90:b0: ce:f7:6e:53:2f:a4:58:ec:8c:89:f9:ca:a7:df:4c:17:bc:04: 06:06:13:ef:4f:12:24:a3:27:70:29:02:4d:a6:b5:7c:65:e4: 32:3c:d5:4a:85:78:10:0a:95:40:fa:52:10:de:f3:b3:f9:b1: 3c:ff:b4:0b:d9:cf:21:1a:9d:02:7e:8e:7f:53:4e:11:3e:ca: f0:e5:67:9a:21:a1:1c:61:05:8b:25:d1:70:a7:9a:c9:a5:5e: a1:b6:4d:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlVSGJPUvxNKyvsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk NTgyZjhlNjktNWFjNS00MzE1LWJmZTUtODY2ODJhNTk2NDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytDQLdiG9uMHNVT2S6izpEkh0NcqDFaMRvoU JrmTwUqq6hCx5e9MsvKFFXBGxqomHHjcbazGzU24jeXTmP2earS8GkEwHC3j/9uU RSN87x7uEnQunBYooSOcGTm6sFcAH9JqNOwtU+BhDiSH7IBcADx8D0j7z81K0nIH cLi8cynS6jaqlV7X79DyrlB4AorWNSDVq10smH+Cjh1L0c8nP1hi7aF9zXodY3jp JJ5YaOD9y9MouQknQk34C9gEbnUVcYP8bI8wkTEDNw2riDPFAP+wY9iqwBFJsAr/ w+5G7IWyoofBqHtpqI0enn+NjaoykNX3nniD7aslVkujOm0m7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFiCAnD8/1S9U2XAS++AlaUK2W1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYTZmZDVmYzQtYTMwOC0z NWY2LThiYjQtZTJiMTBiNzhmNmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0DXkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSJRLLN3wIny1+qdSWk4ekPrlL6zJk2hY0NH23TjeMMEgQ00m7iBqKN Ip5hwjbmHt+ogc59BbDDOcvpvNjxobktG+Q+zrqzGTHSmhhmZS4QuErzIFPtrB2b h3L1f97Lp0c8IIHJeA7LYTwgTdjU/dfsize7iiO7XdGuC+Y4hv728ImFHqhsz4LG zMCsgkHuHTJsqAqYJMSgpBEM0pwT416QsM73blMvpFjsjIn5yqffTBe8BAYGE+9P EiSjJ3ApAk2mtXxl5DI81UqFeBAKlUD6UhDe87P5sTz/tAvZzyEanQJ+jn9TThE+ yvDlZ5ohoRxhBYsl0XCnmsmlXqG2TZ8= -----END CERTIFICATE-----Generated at Fri Apr 17 20:48:00 2026 by rpki-client