$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2333b7d8-3fbe-3875-ad74-81579d6f5e87.roa File: 2333b7d8-3fbe-3875-ad74-81579d6f5e87.roa (raw, json) Hash identifier: nFys8EFhf1PscMxseQ3BOmCsczBukRQzv0PMYqJKSp8= Subject key identifier: 23:9B:A4:BA:40:0D:29:AD:27:52:7E:A0:F4:8C:FA:C3:92:34:B6:0A Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584DDA55CEE1AE21AA657BAA6FA4 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2333b7d8-3fbe-3875-ad74-81579d6f5e87.roa Signing time: Sat 16 May 2026 13:00:31 +0000 ROA not before: Sat 16 May 2026 13:00:31 +0000 ROA not after: Fri 14 Aug 2026 13:00:31 +0000 asID: 398420 IP address blocks: 208.89.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:da:55:ce:e1:ae:21:aa:65:7b:aa:6f:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: May 16 13:00:31 2026 GMT Not After : Aug 14 13:00:31 2026 GMT Subject: CN=7c8bbe78-07d7-4672-adec-3d0b56a95462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:fa:6e:0c:31:1c:d4:36:45:fc:c7:ac:0b:8b: cb:32:46:bb:4a:27:fb:bc:73:ee:4e:2d:5b:7e:ac: a8:a7:b1:08:8b:55:0e:d7:84:a5:91:90:a8:fe:1c: f6:8b:85:ed:ca:84:74:ba:14:75:c8:e5:c5:46:32: 1a:ff:44:d4:8c:3b:f0:05:67:6d:09:24:d6:9c:a6: f3:fd:78:b2:92:58:87:75:40:d2:c8:31:d4:5d:b8: 39:40:9d:6d:56:b3:65:6e:06:d1:e0:dc:09:47:b7: 10:83:7f:d6:cb:fe:07:cf:9e:32:fb:d5:d7:56:ff: 79:2c:3d:57:b0:90:20:06:48:c2:21:60:f6:7e:7e: f7:ae:bd:82:36:bb:1a:18:12:a5:92:d6:8c:53:a1: ac:ca:10:15:5c:df:9d:be:92:5c:81:e2:c1:d9:9b: 1a:15:cd:37:48:a6:ec:e7:72:e3:f3:9c:0a:d3:da: 8f:76:e9:75:98:20:ea:8f:cd:33:a0:26:cc:81:da: 40:cc:b1:da:74:02:24:30:21:98:9a:43:ea:23:c2: b3:4e:4e:f3:31:60:d1:b8:7a:4f:b9:e3:2d:f0:2b: fa:7e:c0:c4:6a:92:2a:b3:40:9d:e6:a6:9e:8a:71: 94:4e:e3:d5:05:54:13:b8:5e:ab:a9:d5:0e:f7:bc: aa:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:9B:A4:BA:40:0D:29:AD:27:52:7E:A0:F4:8C:FA:C3:92:34:B6:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2333b7d8-3fbe-3875-ad74-81579d6f5e87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 208.89.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:7c:20:8e:f6:9c:b7:c4:58:04:d7:36:90:af:a9:0b:15:19: 0f:1a:bc:2f:23:25:4c:bc:e0:43:69:2a:eb:e4:9e:ff:10:bb: 60:c6:d1:fa:37:f8:c0:e0:51:91:a0:37:c4:f5:33:cb:aa:ee: e4:31:64:84:81:de:2e:83:0e:eb:23:a8:78:2d:61:ca:81:39: 30:63:be:84:6f:2a:17:34:47:80:33:fc:24:38:c5:48:43:c8: f0:19:6e:e3:72:82:8c:b7:62:09:36:eb:8e:20:1e:d8:d6:51: bb:72:8e:e7:00:35:24:42:67:b2:8d:23:84:1f:bf:30:1e:8c: f5:58:59:f7:77:53:47:e1:da:29:21:91:d3:5e:ee:18:c5:e1: f9:96:3b:b7:54:66:c2:88:0a:ec:2a:2d:3b:9c:5c:d8:46:4e: 42:a3:34:64:25:80:6c:46:41:b8:32:c7:c0:10:83:38:04:80: 51:5c:02:ed:6d:fe:5b:be:d0:d0:e9:84:4c:7f:a9:8a:82:0d: c5:48:8a:06:8a:6c:0d:e9:cf:53:55:85:ec:25:2e:c1:8f:01: 27:34:4e:92:34:ac:36:b4:4b:98:e8:2f:93:4b:8b:4d:c6:2b: d9:b6:1b:79:41:69:6e:fb:9a:a3:10:d3:c7:33:0a:b2:d5:06: 64:42:d3:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3aVc7hriGqZXuqb6QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI2MDUxNjEzMDAzMVoXDTI2MDgxNDEzMDAzMVowLzEtMCsGA1UEAxMk N2M4YmJlNzgtMDdkNy00NjcyLWFkZWMtM2QwYjU2YTk1NDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vpuDDEc1DZF/MesC4vLMka7Sif7vHPuTi1b fqyop7EIi1UO14SlkZCo/hz2i4XtyoR0uhR1yOXFRjIa/0TUjDvwBWdtCSTWnKbz /XiykliHdUDSyDHUXbg5QJ1tVrNlbgbR4NwJR7cQg3/Wy/4Hz54y+9XXVv95LD1X sJAgBkjCIWD2fn73rr2CNrsaGBKlktaMU6GsyhAVXN+dvpJcgeLB2ZsaFc03SKbs 53Lj85wK09qPdul1mCDqj80zoCbMgdpAzLHadAIkMCGYmkPqI8KzTk7zMWDRuHpP ueMt8Cv6fsDEapIqs0Cd5qaeinGUTuPVBVQTuF6rqdUO97yq0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCObpLpADSmtJ1J+oPSM+sOSNLYKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvMjMzM2I3ZDgtM2ZiZS0z ODc1LWFkNzQtODE1NzlkNmY1ZTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Fk0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJ8II72nLfEWATXNpCvqQsVGQ8avC8jJUy84ENpKuvknv8Qu2DG0fo3 +MDgUZGgN8T1M8uq7uQxZISB3i6DDusjqHgtYcqBOTBjvoRvKhc0R4Az/CQ4xUhD yPAZbuNygoy3Ygk2644gHtjWUbtyjucANSRCZ7KNI4QfvzAejPVYWfd3U0fh2ikh kdNe7hjF4fmWO7dUZsKICuwqLTucXNhGTkKjNGQlgGxGQbgyx8AQgzgEgFFcAu1t /lu+0NDphEx/qYqCDcVIigaKbA3pz1NVhewlLsGPASc0TpI0rDa0S5joL5NLi03G K9m2G3lBaW77mqMQ08czCrLVBmRC048= -----END CERTIFICATE-----Generated at Sat Jun 13 22:57:09 2026 by rpki-client