$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/a8b2cf8e-5352-36e9-8065-b9e49d8fbf55.roa File: a8b2cf8e-5352-36e9-8065-b9e49d8fbf55.roa (raw, json) Hash identifier: pT+cdmu6zrtbSO6V+ZKfiKK1lbSoZmfH2qf3B7Oyd2I= Subject key identifier: BF:7E:93:61:EE:73:C4:D5:77:FE:19:61:5A:99:D9:05:E0:BD:20:AB Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584EA17A8930186E2382D89DD880 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/a8b2cf8e-5352-36e9-8065-b9e49d8fbf55.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 22652 IP address blocks: 208.88.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:89:30:18:6e:23:82:d8:9d:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=705f7d17-1db6-4592-b051-400174a8838d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0b:ca:84:cb:1c:a2:40:1d:05:7b:a1:6d:88: 7a:13:47:2d:5d:7f:ba:42:15:93:98:d2:c3:32:50: 80:af:4a:14:60:59:9f:0e:ba:ce:6d:2d:51:83:81: 64:fb:53:80:0c:6c:7d:c4:cb:f3:f6:e8:2f:b5:42: df:e3:e2:17:54:7a:8e:91:65:ad:88:f2:e5:5f:37: 2f:bd:6d:b7:39:ce:ff:93:24:e4:51:ad:6f:1d:cc: eb:12:c0:ad:f6:9c:96:b9:36:c6:27:30:a9:c3:71: 62:c8:75:1c:1d:37:3f:7a:d1:9d:b0:b1:1b:2e:61: 09:3f:b3:11:ca:ee:55:1e:13:4d:6e:c2:9a:06:f1: af:9a:19:79:2d:fc:ff:f8:35:6b:e0:d6:75:2f:b4: 2f:90:09:46:7e:c3:ee:6b:81:fb:59:95:52:87:04: 61:51:95:8d:6c:1e:9b:be:13:ef:63:8d:83:14:4c: 67:65:94:e9:0c:5e:0d:1b:b1:c7:55:1e:4e:c4:1e: 14:2a:a5:88:e7:0c:c7:b2:e6:cf:f8:e7:61:2e:0a: 44:e6:26:6b:49:6d:6b:3d:6b:23:db:ad:09:c2:18: 10:f3:0f:45:eb:0e:19:ab:7f:66:cb:cd:26:db:25: 7c:6a:e5:78:25:13:ae:9c:a6:e3:cb:e4:ef:ec:f7: 3a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7E:93:61:EE:73:C4:D5:77:FE:19:61:5A:99:D9:05:E0:BD:20:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/a8b2cf8e-5352-36e9-8065-b9e49d8fbf55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 208.88.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:95:0f:a8:55:a7:e1:cf:7a:e4:ac:0c:c3:06:e8:e6:bf:49: 4b:0f:b9:1d:a4:7b:d0:f4:a4:66:64:20:71:6e:75:e8:e6:18: 9e:cc:2a:ee:92:2d:32:48:f8:fa:2e:0a:86:58:80:71:46:65: 96:05:e6:3a:f6:3a:ec:b4:82:bc:d4:a5:19:3f:30:6d:0b:17: ea:25:8c:52:35:54:2f:41:ae:00:ab:4c:b8:b7:67:b7:f2:a4: 76:39:87:d8:74:04:03:dc:9d:82:a1:89:22:4f:4d:f2:0f:cc: 65:e9:ef:90:1a:2d:6e:2c:44:1c:c7:47:00:9d:06:83:12:f0: d1:d0:64:59:9b:a4:51:41:08:33:bd:43:90:c3:8e:d5:6d:b6: 95:5c:c1:82:4f:d2:4b:4c:6e:c6:63:78:77:61:a2:df:83:eb: a0:2b:58:d0:8c:19:e9:56:07:45:a8:d7:43:6c:03:77:c8:c3: e3:0a:56:52:a2:96:0f:47:c6:6e:75:f6:e8:09:dc:71:81:88: e9:f1:ec:f3:55:5b:d1:a6:9d:7e:5b:0b:8b:13:e0:ef:d1:a2: 91:4d:35:ee:38:89:8d:dd:da:ca:09:c3:30:1e:d5:7b:8e:8b: 6a:55:a2:e3:ac:d4:64:75:ce:6d:cd:1f:b4:6d:89:ca:23:e8: 1a:44:5a:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6heokwGG4jgtid2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk NzA1ZjdkMTctMWRiNi00NTkyLWIwNTEtNDAwMTc0YTg4MzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwvKhMscokAdBXuhbYh6E0ctXX+6QhWTmNLD MlCAr0oUYFmfDrrObS1Rg4Fk+1OADGx9xMvz9ugvtULf4+IXVHqOkWWtiPLlXzcv vW23Oc7/kyTkUa1vHczrEsCt9pyWuTbGJzCpw3FiyHUcHTc/etGdsLEbLmEJP7MR yu5VHhNNbsKaBvGvmhl5Lfz/+DVr4NZ1L7QvkAlGfsPua4H7WZVShwRhUZWNbB6b vhPvY42DFExnZZTpDF4NG7HHVR5OxB4UKqWI5wzHsubP+OdhLgpE5iZrSW1rPWsj 260JwhgQ8w9F6w4Zq39my80m2yV8auV4JROunKbjy+Tv7Pc6jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9+k2Huc8TVd/4ZYVqZ2QXgvSCrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvYThiMmNmOGUtNTM1Mi0z NmU5LTgwNjUtYjllNDlkOGZiZjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FhsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGVD6hVp+HPeuSsDMMG6Oa/SUsPuR2ke9D0pGZkIHFudejmGJ7MKu6S LTJI+PouCoZYgHFGZZYF5jr2Ouy0grzUpRk/MG0LF+oljFI1VC9BrgCrTLi3Z7fy pHY5h9h0BAPcnYKhiSJPTfIPzGXp75AaLW4sRBzHRwCdBoMS8NHQZFmbpFFBCDO9 Q5DDjtVttpVcwYJP0ktMbsZjeHdhot+D66ArWNCMGelWB0Wo10NsA3fIw+MKVlKi lg9Hxm519ugJ3HGBiOnx7PNVW9GmnX5bC4sT4O/RopFNNe44iY3d2soJwzAe1XuO i2pVouOs1GR1zm3NH7Rticoj6BpEWuA= -----END CERTIFICATE-----Generated at Tue Jul 28 19:44:28 2026 by rpki-client