$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/cf72ba59-053f-3de2-833b-4c405ca166b0.roa File: cf72ba59-053f-3de2-833b-4c405ca166b0.roa (raw, json) Hash identifier: ls+ssfvDRP94AvUoPRJchPF/sD118JYJmcxg2NoYFWU= Subject key identifier: D4:71:51:12:25:0D:B2:BA:1F:56:9C:75:35:02:76:12:79:93:0C:51 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584E6F3A1E517F6EE54BE8759B00 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/cf72ba59-053f-3de2-833b-4c405ca166b0.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 14061 IP address blocks: 209.38.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:1e:51:7f:6e:e5:4b:e8:75:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=cbbbe623-e0c9-4c23-99ef-ebf0eb8a371d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:df:0d:a3:74:5f:ca:20:04:3b:1b:dd:e1:01: 2d:57:46:dc:ad:3f:a0:98:85:66:05:36:4c:ee:b6: c1:62:d1:57:e9:7c:29:cb:78:98:46:22:1f:dd:3e: bf:49:66:e1:21:fe:e7:8c:4c:8a:f1:b2:55:b9:49: d3:65:b6:d0:0f:f7:e0:f9:e8:58:78:69:4d:5a:11: 1d:92:19:2f:4c:1c:87:db:73:88:d3:54:64:ea:cb: 2b:c7:f6:d5:5e:a3:10:55:19:bc:8b:cc:b8:bf:ee: 46:39:f5:d3:12:09:71:3a:8c:71:bd:b3:9d:97:0b: a3:04:e3:44:1b:74:96:79:23:db:6c:95:a8:c5:40: 37:90:6a:f7:9d:8b:cb:f6:5e:f3:a1:a0:82:00:c4: 16:32:e9:ae:11:1d:17:03:21:fa:c4:4f:e3:51:78: ae:52:49:40:b7:b2:6c:fc:76:a7:82:29:8e:01:44: ca:ba:a7:70:5a:dd:b4:e3:85:4c:2d:78:a0:0e:3c: 49:d9:96:3f:e3:70:3e:b6:5b:7f:5a:e4:af:5d:03: b7:ce:c2:fd:7a:9f:67:9e:14:05:b6:50:1d:46:52: 0b:5c:c5:33:b1:26:59:82:8a:90:b3:47:e4:62:6a: c8:4a:9b:60:7f:b4:70:63:3f:9e:9e:8f:3a:9e:b5: d8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:71:51:12:25:0D:B2:BA:1F:56:9C:75:35:02:76:12:79:93:0C:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/cf72ba59-053f-3de2-833b-4c405ca166b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 209.38.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:d7:89:4b:5a:63:39:7f:82:eb:20:e2:d7:d9:ed:a4:a8:71: 76:51:4b:35:0b:9f:eb:fd:e1:33:30:ba:f4:f3:30:f3:1b:29: 73:e3:3a:fa:53:a6:0a:34:bb:a8:fa:c2:ec:d7:04:dd:d8:c4: aa:24:dc:2e:a2:62:d0:03:c1:af:10:cc:04:24:5f:fa:2a:f2: 57:da:a9:37:2f:47:28:a5:bb:4b:18:80:9a:3f:75:4f:63:04: c3:29:90:cb:a0:76:31:56:c2:07:10:71:c1:fc:ce:b2:d9:2e: 46:96:cd:dd:5e:64:93:8e:77:6f:01:9a:52:4c:4e:e6:67:a8: a3:00:2f:39:ac:ec:99:3e:ec:42:27:88:8d:fb:bf:3e:9c:a6: ea:5e:24:29:42:07:2b:05:5c:cf:7d:6e:ba:2a:a4:f0:6c:ba: 28:02:54:e4:60:2c:aa:80:9b:91:fa:87:40:6f:4c:c0:89:b4: 26:e7:c9:2d:40:7b:db:a4:17:56:28:d8:bb:03:7f:b4:39:53: a6:e6:d4:8f:9f:fd:fa:64:d7:41:14:7c:92:39:52:1e:b6:57: db:fe:c0:13:fd:4e:8d:fc:eb:e0:00:8e:94:b3:eb:4f:95:2a: e4:51:d6:88:92:33:04:75:30:83:6c:43:59:77:1a:bd:08:ea: f7:c8:cd:ce -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE5vOh5Rf27lS+h1mwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk Y2JiYmU2MjMtZTBjOS00YzIzLTk5ZWYtZWJmMGViOGEzNzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN8No3RfyiAEOxvd4QEtV0bcrT+gmIVmBTZM 7rbBYtFX6Xwpy3iYRiIf3T6/SWbhIf7njEyK8bJVuUnTZbbQD/fg+ehYeGlNWhEd khkvTByH23OI01Rk6ssrx/bVXqMQVRm8i8y4v+5GOfXTEglxOoxxvbOdlwujBONE G3SWeSPbbJWoxUA3kGr3nYvL9l7zoaCCAMQWMumuER0XAyH6xE/jUXiuUklAt7Js /HangimOAUTKuqdwWt2044VMLXigDjxJ2ZY/43A+tlt/WuSvXQO3zsL9ep9nnhQF tlAdRlILXMUzsSZZgoqQs0fkYmrISptgf7RwYz+eno86nrXYVwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNRxURIlDbK6H1acdTUCdhJ5kwxRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvY2Y3MmJhNTktMDUzZi0z ZGUyLTgzM2ItNGM0MDVjYTE2NmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0SYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAJNeJS1pjOX+C6yDi19ntpKhxdlFLNQuf6/3hMzC69PMw8xspc+M6+lOm CjS7qPrC7NcE3djEqiTcLqJi0APBrxDMBCRf+iryV9qpNy9HKKW7SxiAmj91T2ME wymQy6B2MVbCBxBxwfzOstkuRpbN3V5kk453bwGaUkxO5meoowAvOazsmT7sQieI jfu/Ppym6l4kKUIHKwVcz31uuiqk8Gy6KAJU5GAsqoCbkfqHQG9MwIm0JufJLUB7 26QXVijYuwN/tDlTpubUj5/9+mTXQRR8kjlSHrZX2/7AE/1Ojfzr4ACOlLPrT5Uq 5FHWiJIzBHUwg2xDWXcavQjq98jNzg== -----END CERTIFICATE-----Generated at Fri Jul 24 03:22:43 2026 by rpki-client