$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/8f5dcde3-cde7-377c-a19d-736f822a5fbd.roa File: 8f5dcde3-cde7-377c-a19d-736f822a5fbd.roa (raw, json) Hash identifier: S0kg+oyl9ydLwc47zRY1aPxCOvLZyONe34aDsre2xTE= Subject key identifier: 57:5B:18:B2:1A:2F:28:78:10:1D:DC:51:C9:AF:9A:AF:4C:8D:DD:A1 Certificate issuer: /CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b Certificate serial: 010D0C9F4328584E0C1ED9768E8D5C84DB2AF980 Authority key identifier: 6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/8f5dcde3-cde7-377c-a19d-736f822a5fbd.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 14618 IP address blocks: 208.88.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:d9:76:8e:8d:5c:84:db:2a:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=5374d538-5549-4ac3-b551-0d825f6a097f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:92:40:c1:c8:61:df:93:e1:45:c7:c6:c3:8c: e7:55:3b:29:f1:a0:e7:df:f8:0a:dd:41:6f:12:08: 82:38:fa:56:1a:7f:79:b9:3c:08:09:ec:9a:46:e9: c3:14:1d:5a:2d:79:08:b3:f7:7f:42:21:ea:48:9c: 28:4d:c7:f8:6f:ad:8c:8c:de:95:17:c3:e7:8c:88: 5b:3e:c3:d0:03:47:cb:ce:ee:ce:30:64:df:12:7a: 5c:06:61:e4:ef:4b:5a:4b:61:fc:27:d4:70:c0:f5: 72:74:29:77:e9:92:39:e7:6a:0a:3e:45:d5:92:c6: 23:65:09:bd:79:87:18:56:5b:c8:7f:53:e9:cb:08: 6a:72:8c:e5:67:1e:81:75:b2:62:77:20:31:31:50: 27:01:68:a2:36:41:16:d2:3e:70:2d:55:ad:2d:80: 80:a2:d6:3c:29:92:de:73:6b:7f:d0:f4:bd:17:1e: 69:c9:0f:91:1d:a6:a9:aa:22:b6:10:08:97:88:57: 0d:94:ce:81:67:9e:56:01:42:0e:3f:f2:8f:38:97: ea:f3:b4:b9:13:2b:06:40:00:54:71:b3:f5:98:aa: a4:53:d1:b7:97:73:72:c6:c5:ac:60:93:d4:10:50: 67:54:96:fd:7d:04:83:03:6c:5d:e2:48:00:cb:6f: 02:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:5B:18:B2:1A:2F:28:78:10:1D:DC:51:C9:AF:9A:AF:4C:8D:DD:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/8f5dcde3-cde7-377c-a19d-736f822a5fbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl X509v3 Authority Key Identifier: keyid:6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer sbgp-ipAddrBlock: critical IPv4: 208.88.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:15:9b:bc:7b:72:24:6e:6e:b2:9b:a9:43:8f:82:1f:2a:6b: 55:52:3f:ec:08:ba:d8:cb:34:e7:04:98:99:f8:f2:34:07:3e: 4e:ed:9e:71:4e:f8:f6:51:5f:ab:c9:e0:6e:ab:81:31:8c:4c: 10:2a:be:86:03:8d:0d:28:a7:60:41:f4:a7:5c:cb:42:20:77: 36:f6:fe:8a:6f:4a:81:2c:6c:b7:b9:2a:fe:06:9f:12:94:7b: 10:cf:f4:68:50:ff:48:3b:a4:60:49:01:a3:9d:19:6d:a2:f7: 8a:9c:26:df:ff:ba:a0:4d:fc:e7:c2:b7:be:20:24:c0:df:88: 8b:f8:9f:29:d7:02:f9:61:85:a5:61:ca:f2:4e:19:84:3f:5f: fc:b3:4a:be:6d:c1:b9:d1:30:59:52:5e:6f:5d:e3:3a:f1:fa: 0c:a4:3a:ec:76:9f:fe:61:b4:5e:6b:43:9d:7d:c2:f4:2b:f5: 01:f6:f5:e0:57:d7:a3:65:ca:39:7c:89:6f:05:84:8e:00:f1: 1b:c7:f9:b7:4e:68:64:23:61:84:8f:d9:13:5f:93:dd:50:4e: 66:9d:c8:ee:b2:ec:9d:c6:63:40:fc:d2:28:cf:4a:77:f5:b8: d2:e5:a0:3d:8a:30:8d:80:f7:2e:a1:ae:fd:28:e3:b2:4b:ec: cb:e9:0f:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHtl2jo1chNsq+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2ZGI0ZWItNDA0MS00YWY4LWI2NGQtZjJlOGI3YmMw NDhiMB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk NTM3NGQ1MzgtNTU0OS00YWMzLWI1NTEtMGQ4MjVmNmEwOTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpJAwchh35PhRcfGw4znVTsp8aDn3/gK3UFv EgiCOPpWGn95uTwICeyaRunDFB1aLXkIs/d/QiHqSJwoTcf4b62MjN6VF8PnjIhb PsPQA0fLzu7OMGTfEnpcBmHk70taS2H8J9RwwPVydCl36ZI552oKPkXVksYjZQm9 eYcYVlvIf1PpywhqcozlZx6BdbJidyAxMVAnAWiiNkEW0j5wLVWtLYCAotY8KZLe c2t/0PS9Fx5pyQ+RHaapqiK2EAiXiFcNlM6BZ55WAUIOP/KPOJfq87S5EysGQABU cbP1mKqkU9G3l3NyxsWsYJPUEFBnVJb9fQSDA2xd4kgAy28C6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdbGLIaLyh4EB3cUcmvmq9Mjd2hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iODZk YjRlYi00MDQxLTRhZjgtYjY0ZC1mMmU4YjdiYzA0OGIvOGY1ZGNkZTMtY2RlNy0z NzdjLWExOWQtNzM2ZjgyMmE1ZmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjg2ZGI0ZWItNDA0MS00YWY4LWI2 NGQtZjJlOGI3YmMwNDhiL2I4NmRiNGViLTQwNDEtNGFmOC1iNjRkLWYyZThiN2Jj MDQ4Yi5jcmwwHwYDVR0jBBgwFoAUa8ITUOp05WaWTNRMgjyklz6m1dMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iODZkYjRlYi00MDQxLTRhZjgtYjY0ZC1mMmU4 YjdiYzA0OGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FghMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8Vm7x7ciRubrKbqUOPgh8qa1VSP+wIutjLNOcEmJn48jQHPk7tnnFO +PZRX6vJ4G6rgTGMTBAqvoYDjQ0op2BB9Kdcy0Igdzb2/opvSoEsbLe5Kv4GnxKU exDP9GhQ/0g7pGBJAaOdGW2i94qcJt//uqBN/OfCt74gJMDfiIv4nynXAvlhhaVh yvJOGYQ/X/yzSr5twbnRMFlSXm9d4zrx+gykOux2n/5htF5rQ519wvQr9QH29eBX 16Nlyjl8iW8FhI4A8RvH+bdOaGQjYYSP2RNfk91QTmadyO6y7J3GY0D80ijPSnf1 uNLloD2KMI2A9y6hrv0o47JL7MvpD5U= -----END CERTIFICATE-----Generated at Sat Jun 13 18:54:55 2026 by rpki-client