$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0/ebbc521f-229f-33d4-b392-422b87b7ca3a.roa File: ebbc521f-229f-33d4-b392-422b87b7ca3a.roa (raw, json) Hash identifier: Bgz4sHlEsVX2jVRjuGhYTO/JIVGJjahvhBT+Kn8rhoY= Subject key identifier: 46:FC:61:FE:AB:CE:7A:8E:40:CF:E2:EC:4D:FD:B7:ED:C0:C1:E8:22 Certificate issuer: /CN=5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0 Certificate serial: 010D0C9F4328584E8DEFBDA214A2A8C2B96F8900 Authority key identifier: 00:21:DC:B9:5F:0B:35:0C:26:C0:5F:1E:01:76:4D:DE:51:29:3B:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0/ebbc521f-229f-33d4-b392-422b87b7ca3a.roa Signing time: Sun 19 Jul 2026 21:00:12 +0000 ROA not before: Sun 19 Jul 2026 21:00:12 +0000 ROA not after: Sat 17 Oct 2026 21:00:12 +0000 asID: 36824 IP address blocks: 208.88.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0/5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0/5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:ef:bd:a2:14:a2:a8:c2:b9:6f:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0 Validity Not Before: Jul 19 21:00:12 2026 GMT Not After : Oct 17 21:00:12 2026 GMT Subject: CN=5f9ddb3a-bca2-4a6d-9e67-bd80de7772fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:61:be:65:57:50:35:fb:2e:2e:dc:20:99:4c: 07:53:b7:4d:2e:60:55:aa:1c:b5:a4:5f:3a:8c:0e: d3:ae:80:e0:c3:5a:b1:01:cf:05:c3:4b:de:d1:a0: c8:7f:70:99:f2:20:9b:f0:36:6c:e6:bf:d8:06:af: 84:ae:fa:72:8d:9d:b3:7d:fd:9b:f4:6b:87:a7:2f: 70:8f:26:61:4e:16:50:3a:90:2b:fd:cd:b4:d9:a8: 00:39:1c:6a:ec:27:51:65:ce:84:87:e3:15:86:80: 18:9e:e8:a9:c5:f9:49:46:66:80:a5:c1:b5:05:21: b0:21:0b:4f:9b:bb:41:90:f8:29:bb:22:74:dd:a9: 47:c2:2c:e9:6e:4b:f1:72:63:a6:66:f7:8e:87:75: 5f:a0:c0:f4:11:ae:82:d5:51:04:89:6a:d1:da:3f: a1:5f:cd:ac:6c:a4:36:06:da:99:b1:ff:db:3a:8f: b8:4a:da:d5:69:15:ca:73:8f:5e:24:85:07:c1:64: e5:1a:05:49:e7:bc:52:05:71:ac:74:e6:c8:33:af: 72:ca:28:3a:f4:96:a4:bd:fe:71:83:d1:bf:c5:a4: d3:a9:87:af:c0:93:78:33:1b:7a:49:86:ed:9c:c2: 45:67:7d:21:55:f6:ef:b7:ae:df:34:df:a3:12:3f: a2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:FC:61:FE:AB:CE:7A:8E:40:CF:E2:EC:4D:FD:B7:ED:C0:C1:E8:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0/ebbc521f-229f-33d4-b392-422b87b7ca3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0/5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0.crl X509v3 Authority Key Identifier: keyid:00:21:DC:B9:5F:0B:35:0C:26:C0:5F:1E:01:76:4D:DE:51:29:3B:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0.cer sbgp-ipAddrBlock: critical IPv4: 208.88.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:aa:89:59:2b:37:a2:75:cb:e0:73:54:c5:08:3a:0d:c0:d6: 25:a1:fb:c5:ae:ff:91:6f:ed:da:17:7f:bc:e1:a7:c7:58:e7: e3:1a:f8:54:33:69:22:20:cf:08:64:a3:cd:52:09:a2:e0:d7: 79:2b:39:3b:26:ec:5b:9b:03:2a:a1:d2:e8:cd:fe:51:f4:2a: e1:eb:a0:37:b4:ce:f0:1f:95:86:76:b9:85:81:eb:c5:1f:79: fa:fa:b2:d7:ef:8a:d4:0b:ef:e1:9b:00:08:45:f2:cc:4a:dd: 70:9d:ab:5a:aa:b6:5e:eb:e0:b5:a7:70:57:4d:90:79:39:c9: 28:29:2b:aa:33:45:68:8a:e6:19:06:72:d3:e1:f3:79:ed:aa: a4:9c:c2:d4:23:0b:df:e8:6c:6b:c7:b5:7b:65:57:ff:79:c6: 92:06:43:a2:43:ad:a5:e1:86:d7:32:48:cc:14:f2:18:ad:d7: 05:d8:d1:73:19:4a:a5:93:da:bc:f2:2c:e5:1d:1b:60:cc:55: 0b:02:56:48:91:39:50:e4:0f:19:7f:24:cf:70:7d:d6:40:c2: d9:c5:72:c0:f2:92:b5:d9:a8:bc:b5:14:08:f6:91:4d:bc:e0: a5:8a:47:fd:07:6e:93:f3:ae:3a:06:f8:89:1a:2e:56:4f:fb: f6:c6:dc:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6N772iFKKowrlviQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ0ZjcwYzgtOWVhNS00ZGM0LTllOWEtZWQ2ZTI1NjRl N2MwMB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk NWY5ZGRiM2EtYmNhMi00YTZkLTllNjctYmQ4MGRlNzc3MmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmG+ZVdQNfsuLtwgmUwHU7dNLmBVqhy1pF86 jA7TroDgw1qxAc8Fw0ve0aDIf3CZ8iCb8DZs5r/YBq+ErvpyjZ2zff2b9GuHpy9w jyZhThZQOpAr/c202agAORxq7CdRZc6Eh+MVhoAYnuipxflJRmaApcG1BSGwIQtP m7tBkPgpuyJ03alHwizpbkvxcmOmZveOh3VfoMD0Ea6C1VEEiWrR2j+hX82sbKQ2 BtqZsf/bOo+4StrVaRXKc49eJIUHwWTlGgVJ57xSBXGsdObIM69yyig69Jakvf5x g9G/xaTTqYevwJN4Mxt6SYbtnMJFZ30hVfbvt67fNN+jEj+iqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEb8Yf6rznqOQM/i7E39t+3AwegiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81ZDRm NzBjOC05ZWE1LTRkYzQtOWU5YS1lZDZlMjU2NGU3YzAvZWJiYzUyMWYtMjI5Zi0z M2Q0LWIzOTItNDIyYjg3YjdjYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNWQ0ZjcwYzgtOWVhNS00ZGM0LTll OWEtZWQ2ZTI1NjRlN2MwLzVkNGY3MGM4LTllYTUtNGRjNC05ZTlhLWVkNmUyNTY0 ZTdjMC5jcmwwHwYDVR0jBBgwFoAUACHcuV8LNQwmwF8eAXZN3lEpOwkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81ZDRmNzBjOC05ZWE1LTRkYzQtOWU5YS1lZDZl MjU2NGU3YzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeqiVkrN6J1y+BzVMUIOg3A1iWh+8Wu/5Fv7doXf7zhp8dY5+Ma+FQz aSIgzwhko81SCaLg13krOTsm7FubAyqh0ujN/lH0KuHroDe0zvAflYZ2uYWB68Uf efr6stfvitQL7+GbAAhF8sxK3XCdq1qqtl7r4LWncFdNkHk5ySgpK6ozRWiK5hkG ctPh83ntqqScwtQjC9/obGvHtXtlV/95xpIGQ6JDraXhhtcySMwU8hit1wXY0XMZ SqWT2rzyLOUdG2DMVQsCVkiROVDkDxl/JM9wfdZAwtnFcsDykrXZqLy1FAj2kU28 4KWKR/0HbpPzrjoG+IkaLlZP+/bG3Bw= -----END CERTIFICATE-----Generated at Fri Jul 24 08:22:36 2026 by rpki-client