$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88cca465-78be-4daa-a3c3-ad2fe957745b/822ce805-7e21-3279-80a9-f3b442084477.roa File: 822ce805-7e21-3279-80a9-f3b442084477.roa (raw, json) Hash identifier: Ky+lWM88LIvMj9h+5pT7DKnjyCYmLP6yQeT3PiVcgxA= Subject key identifier: 9F:DC:F1:3B:64:92:62:47:24:AC:10:C6:75:D4:7F:76:EC:CC:72:8F Certificate issuer: /CN=88cca465-78be-4daa-a3c3-ad2fe957745b Certificate serial: 010D0C9F4328584E253EEC80737D5F3E7CFFEDE0 Authority key identifier: 7A:A4:BB:9E:94:E5:52:E3:E3:A3:F8:E8:AD:AC:8E:7B:38:49:E0:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88cca465-78be-4daa-a3c3-ad2fe957745b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88cca465-78be-4daa-a3c3-ad2fe957745b/822ce805-7e21-3279-80a9-f3b442084477.roa Signing time: Fri 12 Jun 2026 09:00:11 +0000 ROA not before: Fri 12 Jun 2026 09:00:11 +0000 ROA not after: Thu 10 Sep 2026 09:00:11 +0000 asID: 21958 IP address blocks: 208.64.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88cca465-78be-4daa-a3c3-ad2fe957745b/88cca465-78be-4daa-a3c3-ad2fe957745b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88cca465-78be-4daa-a3c3-ad2fe957745b/88cca465-78be-4daa-a3c3-ad2fe957745b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88cca465-78be-4daa-a3c3-ad2fe957745b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:25:3e:ec:80:73:7d:5f:3e:7c:ff:ed:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88cca465-78be-4daa-a3c3-ad2fe957745b Validity Not Before: Jun 12 09:00:11 2026 GMT Not After : Sep 10 09:00:11 2026 GMT Subject: CN=ef641f09-85e2-4710-94ca-c357a5e77234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:24:27:a7:80:84:50:45:80:6b:61:33:cc:72: 38:4a:d5:f0:c4:ec:88:ff:e8:fb:dd:e5:13:dd:e0: e7:d3:08:96:46:01:57:c6:b6:d3:dc:28:f7:b8:66: ff:c7:00:32:a8:a1:ad:33:e4:91:3e:6d:6d:58:0a: ed:b2:e1:de:35:6c:0b:b2:24:a3:5a:38:78:38:8e: 54:64:41:9b:cf:6c:b7:46:71:36:8c:cb:61:67:7b: 74:f5:81:69:14:f7:32:be:73:db:08:f3:e5:62:16: c2:06:7a:03:e1:e8:78:f4:de:39:cf:0e:15:d1:14: a1:c7:9c:8d:f9:37:db:b8:da:fe:07:a4:67:3f:57: 4b:8d:39:ef:1c:8c:57:bb:cf:3b:82:29:ed:45:63: 1c:30:e0:a8:5a:c9:ca:56:e0:04:6f:90:91:9d:f6: 84:ee:1c:d2:0c:c3:df:e1:6d:93:49:14:a5:4d:24: 2c:6c:e6:f2:cb:b9:48:46:89:5c:cb:e8:94:b9:4d: 45:12:96:51:11:d6:93:18:c7:e2:e4:83:09:47:9a: 63:20:51:1c:5a:34:86:93:80:f3:86:99:dc:28:b5: 60:75:ad:3b:c4:41:e1:27:40:a8:4b:2a:57:a6:6a: 7e:c8:25:ad:7d:f0:f2:af:2c:2a:fd:a3:d9:b5:66: 3b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:DC:F1:3B:64:92:62:47:24:AC:10:C6:75:D4:7F:76:EC:CC:72:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88cca465-78be-4daa-a3c3-ad2fe957745b/822ce805-7e21-3279-80a9-f3b442084477.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88cca465-78be-4daa-a3c3-ad2fe957745b/88cca465-78be-4daa-a3c3-ad2fe957745b.crl X509v3 Authority Key Identifier: keyid:7A:A4:BB:9E:94:E5:52:E3:E3:A3:F8:E8:AD:AC:8E:7B:38:49:E0:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88cca465-78be-4daa-a3c3-ad2fe957745b.cer sbgp-ipAddrBlock: critical IPv4: 208.64.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:25:85:ea:72:aa:e4:5e:b5:69:ed:b7:95:f1:b5:51:57:b5: 3b:78:c0:cd:d2:72:e4:fb:6a:f7:85:cd:bf:ff:47:af:45:ac: 7d:69:3f:ff:0a:21:4d:ce:1e:e5:e2:1a:04:6c:c4:ab:85:e9: ab:57:1d:f8:54:c4:95:00:c1:9f:33:bb:39:3c:25:56:6f:a8: 30:ab:c5:4b:f4:8f:1f:d5:c3:50:2d:60:12:ed:b5:67:79:70: 1a:50:f3:61:0d:e8:64:96:7d:4a:ed:81:40:73:e9:65:3d:0c: 04:57:02:ef:d6:0a:4c:91:79:01:38:1d:da:87:f5:67:d5:6b: 1e:eb:9f:ae:b1:0b:b0:3b:df:b5:dc:01:8d:6c:73:16:b8:c3: 22:d3:b8:78:5c:a0:19:3c:97:ad:9c:98:5a:92:60:d4:6c:d9: 0d:5f:36:85:31:2f:12:d3:ec:f8:5d:43:7c:8f:73:ca:6f:0a: 33:bd:bd:c8:0e:f4:d7:97:04:cf:2f:d1:e3:37:0f:1b:70:12: 2a:fb:ef:af:cc:bd:26:90:41:34:f8:e5:37:f2:13:3d:24:76: 32:33:0a:aa:1e:5c:ba:e6:08:63:71:ee:03:4f:6e:5d:8a:6f: c4:2d:b8:cd:fe:51:d6:bc:7c:6a:71:42:8b:52:9f:3d:6d:3d: 86:45:d5:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4lPuyAc31fPnz/7eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhjY2E0NjUtNzhiZS00ZGFhLWEzYzMtYWQyZmU5NTc3 NDViMB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk ZWY2NDFmMDktODVlMi00NzEwLTk0Y2EtYzM1N2E1ZTc3MjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCQnp4CEUEWAa2EzzHI4StXwxOyI/+j73eUT 3eDn0wiWRgFXxrbT3Cj3uGb/xwAyqKGtM+SRPm1tWArtsuHeNWwLsiSjWjh4OI5U ZEGbz2y3RnE2jMthZ3t09YFpFPcyvnPbCPPlYhbCBnoD4eh49N45zw4V0RShx5yN +TfbuNr+B6RnP1dLjTnvHIxXu887gintRWMcMOCoWsnKVuAEb5CRnfaE7hzSDMPf 4W2TSRSlTSQsbObyy7lIRolcy+iUuU1FEpZREdaTGMfi5IMJR5pjIFEcWjSGk4Dz hpncKLVgda07xEHhJ0CoSypXpmp+yCWtffDyrywq/aPZtWY7ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/c8TtkkmJHJKwQxnXUf3bszHKPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84OGNj YTQ2NS03OGJlLTRkYWEtYTNjMy1hZDJmZTk1Nzc0NWIvODIyY2U4MDUtN2UyMS0z Mjc5LTgwYTktZjNiNDQyMDg0NDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvODhjY2E0NjUtNzhiZS00ZGFhLWEz YzMtYWQyZmU5NTc3NDViLzg4Y2NhNDY1LTc4YmUtNGRhYS1hM2MzLWFkMmZlOTU3 NzQ1Yi5jcmwwHwYDVR0jBBgwFoAUeqS7npTlUuPjo/jorayOezhJ4HswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS84OGNjYTQ2NS03OGJlLTRkYWEtYTNjMy1hZDJm ZTk1Nzc0NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0EAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHElhepyquRetWntt5XxtVFXtTt4wM3ScuT7aveFzb//R69FrH1pP/8K IU3OHuXiGgRsxKuF6atXHfhUxJUAwZ8zuzk8JVZvqDCrxUv0jx/Vw1AtYBLttWd5 cBpQ82EN6GSWfUrtgUBz6WU9DARXAu/WCkyReQE4HdqH9WfVax7rn66xC7A737Xc AY1scxa4wyLTuHhcoBk8l62cmFqSYNRs2Q1fNoUxLxLT7PhdQ3yPc8pvCjO9vcgO 9NeXBM8v0eM3DxtwEir776/MvSaQQTT45TfyEz0kdjIzCqoeXLrmCGNx7gNPbl2K b8QtuM3+Uda8fGpxQotSnz1tPYZF1ao= -----END CERTIFICATE-----Generated at Sat Jun 13 23:45:21 2026 by rpki-client