$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b75f6ed3-3413-3f26-a8d4-b29816eeca77.roa File: b75f6ed3-3413-3f26-a8d4-b29816eeca77.roa (raw, json) Hash identifier: 5+1SJkVrBQESQ5aeVImcAAA5NZNEiJ5gkLeL7uk2Md4= Subject key identifier: 23:0D:A0:AA:24:D9:A5:C3:43:3A:D2:06:8D:99:F3:10:CA:88:8C:C5 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584F3482789ADB9D824DB796E550 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b75f6ed3-3413-3f26-a8d4-b29816eeca77.roa Signing time: Thu 17 Sep 2026 13:00:12 +0000 ROA not before: Thu 17 Sep 2026 13:00:12 +0000 ROA not after: Wed 16 Dec 2026 14:00:12 +0000 asID: 63172 IP address blocks: 208.53.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:82:78:9a:db:9d:82:4d:b7:96:e5:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Sep 17 13:00:12 2026 GMT Not After : Dec 16 14:00:12 2026 GMT Subject: CN=48c6fe8f-512e-4a6e-a2fd-dbbf1a25b6a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2f:d4:7c:39:13:53:d4:69:c4:40:47:de:3a: a1:59:53:73:a1:8b:94:70:29:81:ac:0f:f6:c0:d2: 27:08:70:3d:87:45:70:df:68:30:a5:53:b5:db:d9: 71:39:9d:f8:0e:ce:64:06:44:89:2c:bd:75:1e:8d: be:d3:6d:58:fe:59:33:87:d1:f5:2e:bf:03:09:28: f6:95:3c:68:6c:59:0f:63:b7:45:2f:c2:6f:c4:4f: 9f:7f:7a:69:8b:80:81:a8:15:d7:2f:7d:49:e4:02: 99:cc:a8:84:47:81:f4:5a:14:be:7b:c3:ec:56:f6: af:00:eb:18:13:f8:a6:12:b1:14:20:85:ac:11:7d: 40:50:f3:96:49:c0:36:27:43:ff:51:8d:8c:0a:6b: 29:e5:7e:da:42:51:54:fb:9d:cf:ef:27:eb:36:60: f7:62:9a:ef:8b:5c:2a:1f:47:97:21:12:ee:cf:c8: ca:34:ea:07:53:cc:9f:d3:9f:19:4a:5d:1c:6b:95: ac:51:e3:fc:75:1c:ae:c3:33:76:cf:2c:4f:f1:b5: c3:ba:bd:74:34:74:d2:8f:36:9e:1f:2d:f2:1f:1e: 37:43:77:56:5d:54:db:79:04:ef:3c:25:17:83:d5: 9c:55:d9:e9:45:71:83:f3:52:19:a0:a3:31:5e:68: 0b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:0D:A0:AA:24:D9:A5:C3:43:3A:D2:06:8D:99:F3:10:CA:88:8C:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b75f6ed3-3413-3f26-a8d4-b29816eeca77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:13:2e:b5:83:3f:84:12:c5:f6:0f:ac:53:95:57:8d:2b:17: eb:e4:cb:30:4d:94:53:05:a4:41:f8:0c:18:25:97:33:ed:db: e6:11:64:6c:1e:52:a6:9d:1d:ff:c2:d2:f5:6f:1c:c1:21:c4: 18:12:61:73:d2:3b:78:f1:10:72:2d:f8:65:d9:9c:8a:b2:e2: 18:ac:c4:d8:ba:b5:b4:b5:1a:d5:38:00:64:f9:cf:e3:26:85: d7:00:ae:67:e2:62:08:9b:18:70:f1:78:47:97:54:da:8c:9e: 8d:e1:89:fa:2d:a7:25:13:01:8b:0b:4e:77:b0:f6:48:1e:8e: e2:97:71:16:ed:da:9b:0c:d2:c3:fc:0b:4f:39:bf:a2:7f:ec: b7:c3:c1:fd:b2:85:a3:02:87:c1:6d:7a:b8:dd:19:6e:e4:f9: a7:05:33:30:c0:b3:e8:e4:cd:1a:a1:d8:d6:8a:3f:0d:c1:95: d2:51:6f:29:6c:12:ac:d6:49:9c:ed:09:34:57:57:b6:f7:c9: 70:ad:b8:18:d8:9f:e8:87:33:67:d7:a0:fd:23:47:84:4b:03: 68:6a:6d:48:b9:f1:59:4b:bc:07:de:92:9f:28:13:a1:73:c9: 0b:78:35:ad:3e:98:44:fa:37:45:65:bf:e1:9b:50:29:80:cd: 1f:63:05:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE80gnia252CTbeW5VAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk NDhjNmZlOGYtNTEyZS00YTZlLWEyZmQtZGJiZjFhMjViNmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvS/UfDkTU9RpxEBH3jqhWVNzoYuUcCmBrA/2 wNInCHA9h0Vw32gwpVO129lxOZ34Ds5kBkSJLL11Ho2+021Y/lkzh9H1Lr8DCSj2 lTxobFkPY7dFL8JvxE+ff3ppi4CBqBXXL31J5AKZzKiER4H0WhS+e8PsVvavAOsY E/imErEUIIWsEX1AUPOWScA2J0P/UY2MCmsp5X7aQlFU+53P7yfrNmD3Yprvi1wq H0eXIRLuz8jKNOoHU8yf058ZSl0ca5WsUeP8dRyuwzN2zyxP8bXDur10NHTSjzae Hy3yHx43Q3dWXVTbeQTvPCUXg9WcVdnpRXGD81IZoKMxXmgL5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMNoKok2aXDQzrSBo2Z8xDKiIzFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYjc1ZjZlZDMtMzQxMy0z ZjI2LWE4ZDQtYjI5ODE2ZWVjYTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0DXkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsTLrWDP4QSxfYPrFOVV40rF+vkyzBNlFMFpEH4DBgllzPt2+YRZGwe UqadHf/C0vVvHMEhxBgSYXPSO3jxEHIt+GXZnIqy4hisxNi6tbS1GtU4AGT5z+Mm hdcArmfiYgibGHDxeEeXVNqMno3hifotpyUTAYsLTnew9kgejuKXcRbt2psM0sP8 C085v6J/7LfDwf2yhaMCh8FterjdGW7k+acFMzDAs+jkzRqh2NaKPw3BldJRbyls EqzWSZztCTRXV7b3yXCtuBjYn+iHM2fXoP0jR4RLA2hqbUi58VlLvAfekp8oE6Fz yQt4Na0+mET6N0Vlv+GbUCmAzR9jBYM= -----END CERTIFICATE-----Generated at Mon Sep 28 11:29:33 2026 by rpki-client