$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0/ebbc521f-229f-33d4-b392-422b87b7ca3a.roa File: ebbc521f-229f-33d4-b392-422b87b7ca3a.roa (raw, json) Hash identifier: L5LZpPEf/VVTCOiOdw9U0qhgICkfCOAnUJj0EHZyTEo= Subject key identifier: C7:68:9C:38:62:FA:93:27:6C:28:20:90:A8:E5:26:C2:21:55:04:D6 Certificate issuer: /CN=5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0 Certificate serial: 010D0C9F4328584DAE420616B7C53D92B622DEBC Authority key identifier: 00:21:DC:B9:5F:0B:35:0C:26:C0:5F:1E:01:76:4D:DE:51:29:3B:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0/ebbc521f-229f-33d4-b392-422b87b7ca3a.roa Signing time: Thu 30 Apr 2026 18:05:15 +0000 ROA not before: Thu 30 Apr 2026 18:05:15 +0000 ROA not after: Wed 29 Jul 2026 18:05:15 +0000 asID: 36824 IP address blocks: 208.88.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0/5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0/5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ae:42:06:16:b7:c5:3d:92:b6:22:de:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0 Validity Not Before: Apr 30 18:05:15 2026 GMT Not After : Jul 29 18:05:15 2026 GMT Subject: CN=222ffe42-e5e8-49e8-9b57-44367b6c03a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:aa:66:f3:67:47:a5:13:06:5a:3e:31:7e:66: ad:10:35:de:01:18:83:1c:1b:b6:8b:48:05:1e:6e: cf:e7:05:00:71:74:2e:83:48:47:bb:f2:45:5d:ff: 87:bf:1d:ae:0c:0e:9b:f9:bb:21:f0:08:9c:64:21: 0f:bb:69:d9:61:83:18:fa:cb:53:04:5e:4c:71:d8: a0:e1:f0:70:02:87:87:a1:31:07:43:04:8c:42:6d: cd:db:d6:ef:e3:cd:c7:6c:42:d6:59:9d:a7:cb:7c: 59:92:5e:88:02:33:fb:b3:33:4c:3c:b0:c3:f7:ff: c0:c3:e6:98:96:fd:94:b8:71:30:95:ff:8a:30:e9: 96:2e:c9:a2:e0:84:74:d7:b0:db:4e:3a:74:df:8a: 1c:6c:d6:3d:7b:9d:43:9d:c0:bb:c5:aa:6c:6b:46: f8:cf:ef:13:24:44:c7:e0:d3:ee:b5:cb:68:9f:c2: ce:9e:e9:e4:b5:e8:0b:ac:f4:91:ce:b0:1a:f9:b3: f1:64:6d:a2:26:70:53:88:a2:6b:50:50:4e:e2:66: c5:73:49:c1:47:24:77:cc:30:27:65:56:89:7c:33: 60:22:75:fb:88:39:a1:5f:7d:2a:eb:bc:a1:e0:34: 84:ab:03:9c:29:bc:a8:91:64:bc:d7:35:c5:bc:54: b5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:68:9C:38:62:FA:93:27:6C:28:20:90:A8:E5:26:C2:21:55:04:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0/ebbc521f-229f-33d4-b392-422b87b7ca3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0/5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0.crl X509v3 Authority Key Identifier: keyid:00:21:DC:B9:5F:0B:35:0C:26:C0:5F:1E:01:76:4D:DE:51:29:3B:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0.cer sbgp-ipAddrBlock: critical IPv4: 208.88.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:d3:92:d6:0f:a4:ff:04:37:1d:d1:cc:71:35:d6:a9:73:40: 37:8f:0d:d9:a6:96:8a:06:90:6a:bd:ea:f1:47:c5:1e:9a:52: 31:78:03:43:72:01:41:6e:92:27:c9:de:68:67:91:58:06:5b: a5:28:a5:38:ea:28:d5:ed:6a:6b:d0:84:c1:bb:b4:76:81:92: 4c:3e:4d:a4:42:de:29:67:65:3b:38:40:3a:1d:2f:86:31:a3: dc:e7:52:8f:6c:bf:3a:65:25:51:2c:2a:84:c6:d7:33:db:e5: 5a:3f:67:f0:23:cd:07:6e:c7:49:d9:d0:74:b9:1e:3a:a7:98: 31:19:6d:61:d2:09:b7:37:3d:34:d0:ba:90:6d:d5:75:e4:91: 69:d6:be:b4:76:15:70:78:2d:9c:00:09:67:14:e0:66:e3:3d: 72:df:1b:0c:6f:a8:ca:3a:ff:f5:31:30:fb:c2:a0:20:68:40: c7:c8:fb:a9:98:e3:b0:4e:ed:b3:a5:5e:51:8e:30:4c:84:2f: 03:35:9f:47:07:08:1a:6e:58:74:3c:d2:d3:aa:4d:3b:0b:ee: 16:fa:3f:5b:7d:22:0e:57:68:27:e7:4a:ca:4a:b2:69:42:f5: 1a:b9:49:71:76:2d:73:2f:40:de:31:18:b3:db:fb:80:23:ec: 22:2f:5f:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2uQgYWt8U9krYi3rwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ0ZjcwYzgtOWVhNS00ZGM0LTllOWEtZWQ2ZTI1NjRl N2MwMB4XDTI2MDQzMDE4MDUxNVoXDTI2MDcyOTE4MDUxNVowLzEtMCsGA1UEAxMk MjIyZmZlNDItZTVlOC00OWU4LTliNTctNDQzNjdiNmMwM2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKpm82dHpRMGWj4xfmatEDXeARiDHBu2i0gF Hm7P5wUAcXQug0hHu/JFXf+Hvx2uDA6b+bsh8AicZCEPu2nZYYMY+stTBF5Mcdig 4fBwAoeHoTEHQwSMQm3N29bv483HbELWWZ2ny3xZkl6IAjP7szNMPLDD9//Aw+aY lv2UuHEwlf+KMOmWLsmi4IR017DbTjp034ocbNY9e51DncC7xapsa0b4z+8TJETH 4NPutcton8LOnunktegLrPSRzrAa+bPxZG2iJnBTiKJrUFBO4mbFc0nBRyR3zDAn ZVaJfDNgInX7iDmhX30q67yh4DSEqwOcKbyokWS81zXFvFS1mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdonDhi+pMnbCggkKjlJsIhVQTWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81ZDRm NzBjOC05ZWE1LTRkYzQtOWU5YS1lZDZlMjU2NGU3YzAvZWJiYzUyMWYtMjI5Zi0z M2Q0LWIzOTItNDIyYjg3YjdjYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNWQ0ZjcwYzgtOWVhNS00ZGM0LTll OWEtZWQ2ZTI1NjRlN2MwLzVkNGY3MGM4LTllYTUtNGRjNC05ZTlhLWVkNmUyNTY0 ZTdjMC5jcmwwHwYDVR0jBBgwFoAUACHcuV8LNQwmwF8eAXZN3lEpOwkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81ZDRmNzBjOC05ZWE1LTRkYzQtOWU5YS1lZDZl MjU2NGU3YzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnTktYPpP8ENx3RzHE11qlzQDePDdmmlooGkGq96vFHxR6aUjF4A0Ny AUFukifJ3mhnkVgGW6UopTjqKNXtamvQhMG7tHaBkkw+TaRC3ilnZTs4QDodL4Yx o9znUo9svzplJVEsKoTG1zPb5Vo/Z/AjzQdux0nZ0HS5HjqnmDEZbWHSCbc3PTTQ upBt1XXkkWnWvrR2FXB4LZwACWcU4GbjPXLfGwxvqMo6//UxMPvCoCBoQMfI+6mY 47BO7bOlXlGOMEyELwM1n0cHCBpuWHQ80tOqTTsL7hb6P1t9Ig5XaCfnSspKsmlC 9Rq5SXF2LXMvQN4xGLPb+4Aj7CIvX2Q= -----END CERTIFICATE-----Generated at Tue May 12 21:38:16 2026 by rpki-client