$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/571b8118-104e-3581-a5fe-51b7936e3a4e.roa File: 571b8118-104e-3581-a5fe-51b7936e3a4e.roa (raw, json) Hash identifier: UN+zPxiyFtIxwkS76Ci06yQqHIujN3TXuAC8BbxveOQ= Subject key identifier: 8B:5A:60:E2:11:90:E8:ED:AB:C2:62:ED:60:12:C5:69:27:1C:99:F0 Certificate issuer: /CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b Certificate serial: 010D0C9F4328584E0C1ED968F89DA08E35074F00 Authority key identifier: 6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/571b8118-104e-3581-a5fe-51b7936e3a4e.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 16509 IP address blocks: 208.88.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:d9:68:f8:9d:a0:8e:35:07:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=37fc605a-38f3-4251-bc60-9870e374f44a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:12:13:62:6b:03:0e:7e:bb:f1:3d:98:e1:bf: d7:a8:59:cd:8c:4b:b8:39:c5:45:3c:e7:02:85:77: 3a:5f:f2:a0:ef:b7:4b:40:6b:dc:e0:e9:29:a3:9b: 35:f1:02:49:ca:3a:7b:60:b0:1b:ed:69:f9:55:5a: f6:4c:76:36:92:e3:c2:d8:d3:71:4d:97:c8:36:2c: 0f:92:ec:b3:0e:d5:d8:fb:08:cd:34:63:66:74:69: 5d:1e:11:4e:30:d1:b6:12:cb:9c:e2:ab:04:38:17: 71:5a:27:fd:4d:04:fd:5a:c5:f1:6d:08:eb:84:1c: 5b:de:2e:b2:c7:39:a3:71:d4:96:1c:b2:4a:ac:43: 23:91:6e:c2:d3:8a:cc:ed:c8:a8:50:17:85:bd:80: 8b:30:e3:fa:95:72:fd:60:38:1c:b0:9f:5d:58:69: a7:4e:b6:00:1b:42:27:c3:e4:5a:81:ed:f5:8d:52: 6d:82:10:0c:4a:7a:9b:9e:10:84:b8:b0:84:ac:08: 05:d7:2a:1f:3b:55:93:a9:ec:9a:e5:97:e6:8d:bd: a7:0b:52:a8:ef:1a:d7:2d:98:bc:a2:50:35:90:3e: 57:c6:4e:00:af:37:68:bf:83:d4:18:d9:8a:d0:1a: 10:2c:72:69:b7:28:eb:a2:40:84:86:d2:39:41:83: 40:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:5A:60:E2:11:90:E8:ED:AB:C2:62:ED:60:12:C5:69:27:1C:99:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/571b8118-104e-3581-a5fe-51b7936e3a4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl X509v3 Authority Key Identifier: keyid:6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer sbgp-ipAddrBlock: critical IPv4: 208.88.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:79:28:09:14:01:27:d6:89:f5:4b:53:b4:41:59:9f:15:fe: 3e:bc:c0:5f:4d:94:96:8c:fb:b8:1e:a0:6d:e4:41:e4:8e:52: fc:d6:1f:68:c7:8f:21:0c:06:36:b6:b0:bb:0e:04:04:ee:cf: 0d:d3:3c:1f:e4:70:26:91:c0:7f:c6:44:46:83:f7:e5:f0:d1: 15:72:94:63:b9:d1:56:bf:18:ba:7a:b1:a9:14:23:8e:b8:b6: a7:81:27:ea:61:c4:02:bb:e6:68:7b:0a:84:8a:fa:44:0e:42: 5d:c2:5b:d3:1b:1f:5e:6a:d1:78:8e:98:6d:00:c7:12:d1:cf: 4b:2a:1c:ed:91:6e:56:b2:5e:34:a1:21:01:f2:05:2f:0c:63: 49:31:8e:8b:1b:20:2e:12:66:cc:9d:33:e8:bc:7f:da:ae:21: 64:7a:d1:b8:21:84:49:54:2a:73:e7:89:7f:23:56:f5:49:bd: 08:c3:fb:7d:5a:b5:32:3b:5f:4b:25:66:28:c1:35:0b:c0:b3: 46:ea:e1:fd:f5:c9:4e:25:b4:19:48:1b:9e:1c:7b:1c:6e:97: b4:8c:72:d2:51:94:e9:1f:04:d9:49:21:fc:b3:e4:f1:07:08: 85:ac:dc:43:d6:89:37:82:d8:03:79:2b:ef:d0:b9:27:45:90: bf:9d:05:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHtlo+J2gjjUHTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2ZGI0ZWItNDA0MS00YWY4LWI2NGQtZjJlOGI3YmMw NDhiMB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk MzdmYzYwNWEtMzhmMy00MjUxLWJjNjAtOTg3MGUzNzRmNDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRITYmsDDn678T2Y4b/XqFnNjEu4OcVFPOcC hXc6X/Kg77dLQGvc4Okpo5s18QJJyjp7YLAb7Wn5VVr2THY2kuPC2NNxTZfINiwP kuyzDtXY+wjNNGNmdGldHhFOMNG2Esuc4qsEOBdxWif9TQT9WsXxbQjrhBxb3i6y xzmjcdSWHLJKrEMjkW7C04rM7cioUBeFvYCLMOP6lXL9YDgcsJ9dWGmnTrYAG0In w+Rage31jVJtghAMSnqbnhCEuLCErAgF1yofO1WTqeya5Zfmjb2nC1Ko7xrXLZi8 olA1kD5Xxk4Arzdov4PUGNmK0BoQLHJptyjrokCEhtI5QYNAjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItaYOIRkOjtq8Ji7WASxWknHJnwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iODZk YjRlYi00MDQxLTRhZjgtYjY0ZC1mMmU4YjdiYzA0OGIvNTcxYjgxMTgtMTA0ZS0z NTgxLWE1ZmUtNTFiNzkzNmUzYTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjg2ZGI0ZWItNDA0MS00YWY4LWI2 NGQtZjJlOGI3YmMwNDhiL2I4NmRiNGViLTQwNDEtNGFmOC1iNjRkLWYyZThiN2Jj MDQ4Yi5jcmwwHwYDVR0jBBgwFoAUa8ITUOp05WaWTNRMgjyklz6m1dMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iODZkYjRlYi00MDQxLTRhZjgtYjY0ZC1mMmU4 YjdiYzA0OGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FghMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAR5KAkUASfWifVLU7RBWZ8V/j68wF9NlJaM+7geoG3kQeSOUvzWH2jH jyEMBja2sLsOBATuzw3TPB/kcCaRwH/GREaD9+Xw0RVylGO50Va/GLp6sakUI464 tqeBJ+phxAK75mh7CoSK+kQOQl3CW9MbH15q0XiOmG0AxxLRz0sqHO2RblayXjSh IQHyBS8MY0kxjosbIC4SZsydM+i8f9quIWR60bghhElUKnPniX8jVvVJvQjD+31a tTI7X0slZijBNQvAs0bq4f31yU4ltBlIG54cexxul7SMctJRlOkfBNlJIfyz5PEH CIWs3EPWiTeC2AN5K+/QuSdFkL+dBZo= -----END CERTIFICATE-----Generated at Sun Jun 14 01:03:44 2026 by rpki-client