$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/8f5dcde3-cde7-377c-a19d-736f822a5fbd.roa File: 8f5dcde3-cde7-377c-a19d-736f822a5fbd.roa (raw, json) Hash identifier: qWLAK9d5Wk5Q9lf+gkdMP309PV/C6+0fn8GqbhKTQaw= Subject key identifier: 82:A2:04:35:53:3E:C2:BC:07:CE:F3:3B:E3:4E:D2:79:2B:81:6A:9C Certificate issuer: /CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b Certificate serial: 010D0C9F4328584F506D5200402651B2CB837300 Authority key identifier: 6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/8f5dcde3-cde7-377c-a19d-736f822a5fbd.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 14618 IP address blocks: 208.88.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:52:00:40:26:51:b2:cb:83:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=ecc4f7bf-167b-408c-aa60-806f2b1bb33d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:22:6b:6f:e7:40:89:95:5b:80:bb:86:49:2f: a7:3b:f1:d8:4a:12:33:41:8b:5f:50:1e:ee:6b:8d: 9f:b4:41:14:68:f1:ea:40:02:09:44:2d:ba:98:83: c3:17:67:c3:cc:44:39:33:10:6c:5b:c0:ff:a7:e3: 82:af:2d:67:04:45:14:ae:dc:31:b6:4b:31:f4:7b: d2:84:2a:61:f8:a3:5d:30:4b:73:cb:e1:c8:92:9e: 9f:f1:2d:ea:4a:c3:18:7d:b9:0e:f6:12:8e:6d:26: 3b:1c:81:4e:90:5e:1f:24:37:8f:87:4b:3d:5f:f9: b4:04:f5:89:9a:86:97:25:a0:55:f1:64:40:20:e5: 7b:e4:0b:c9:53:9b:4c:96:c7:eb:8f:50:8c:52:15: 6c:14:79:1a:e5:27:5d:82:cf:f0:aa:18:4c:23:03: a1:7a:9d:4c:de:3f:15:1e:e4:70:b3:96:13:9f:9e: d5:64:3c:a8:4d:97:fe:89:79:9e:57:3f:5a:94:8d: a0:e4:d2:ae:d1:83:d1:47:32:72:de:6e:27:45:77: 48:02:5f:b4:cf:6f:3c:b0:dc:17:cc:55:be:ed:a5: eb:8a:83:3b:9b:7b:af:ea:eb:5d:1b:df:dc:7f:55: c1:4e:48:14:7d:12:30:0f:77:f5:c3:01:0a:7d:75: 21:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:A2:04:35:53:3E:C2:BC:07:CE:F3:3B:E3:4E:D2:79:2B:81:6A:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/8f5dcde3-cde7-377c-a19d-736f822a5fbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl X509v3 Authority Key Identifier: keyid:6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer sbgp-ipAddrBlock: critical IPv4: 208.88.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:78:e5:43:17:91:97:2f:df:35:3b:fd:f2:57:9c:be:bc:2f: cb:3c:e9:f7:f2:f1:cd:7d:54:93:7d:4a:39:4b:f5:0d:32:85: 35:1c:03:8f:97:30:f1:65:f1:e2:a4:6f:1a:f2:27:13:c1:ce: 8b:9b:79:47:f6:23:c3:20:32:7e:f5:06:ee:ed:7e:c3:80:5d: 22:2c:ff:6b:8b:9c:ec:72:08:5c:8d:d7:8d:9b:db:13:74:0c: 13:2f:9f:15:1a:36:1f:89:37:c1:de:bf:1d:31:99:bd:9d:58: 8f:d5:c8:77:f8:11:69:af:43:9f:2d:43:ba:58:6f:ed:11:c8: 7b:fc:6d:3a:04:01:c3:71:fb:f1:b3:5f:15:a2:1d:c8:a2:9a: 97:3b:ca:9b:47:0f:9a:be:2f:44:e9:bf:e9:ea:a8:8b:45:c1: c2:54:63:38:5f:2c:e6:11:37:34:ba:0e:db:98:1b:5d:16:06: e6:0b:5c:22:43:64:37:e8:1f:eb:0a:fd:3f:8e:40:6a:03:6f: 32:29:b8:14:2b:24:7d:db:a4:c2:01:8f:2b:0c:98:54:be:19: 7c:3e:44:5e:9a:34:17:2a:3b:de:16:2a:b6:bb:8a:ed:48:91: 0f:4e:1c:fd:31:aa:a3:39:4f:54:d9:11:07:1c:a9:e5:da:76: cb:35:52:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbVIAQCZRssuDcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2ZGI0ZWItNDA0MS00YWY4LWI2NGQtZjJlOGI3YmMw NDhiMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk ZWNjNGY3YmYtMTY3Yi00MDhjLWFhNjAtODA2ZjJiMWJiMzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyJrb+dAiZVbgLuGSS+nO/HYShIzQYtfUB7u a42ftEEUaPHqQAIJRC26mIPDF2fDzEQ5MxBsW8D/p+OCry1nBEUUrtwxtksx9HvS hCph+KNdMEtzy+HIkp6f8S3qSsMYfbkO9hKObSY7HIFOkF4fJDePh0s9X/m0BPWJ moaXJaBV8WRAIOV75AvJU5tMlsfrj1CMUhVsFHka5Sddgs/wqhhMIwOhep1M3j8V HuRws5YTn57VZDyoTZf+iXmeVz9alI2g5NKu0YPRRzJy3m4nRXdIAl+0z288sNwX zFW+7aXrioM7m3uv6utdG9/cf1XBTkgUfRIwD3f1wwEKfXUhGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIKiBDVTPsK8B87zO+NO0nkrgWqcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iODZk YjRlYi00MDQxLTRhZjgtYjY0ZC1mMmU4YjdiYzA0OGIvOGY1ZGNkZTMtY2RlNy0z NzdjLWExOWQtNzM2ZjgyMmE1ZmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjg2ZGI0ZWItNDA0MS00YWY4LWI2 NGQtZjJlOGI3YmMwNDhiL2I4NmRiNGViLTQwNDEtNGFmOC1iNjRkLWYyZThiN2Jj MDQ4Yi5jcmwwHwYDVR0jBBgwFoAUa8ITUOp05WaWTNRMgjyklz6m1dMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iODZkYjRlYi00MDQxLTRhZjgtYjY0ZC1mMmU4 YjdiYzA0OGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FghMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFp45UMXkZcv3zU7/fJXnL68L8s86ffy8c19VJN9SjlL9Q0yhTUcA4+X MPFl8eKkbxryJxPBzoubeUf2I8MgMn71Bu7tfsOAXSIs/2uLnOxyCFyN142b2xN0 DBMvnxUaNh+JN8Hevx0xmb2dWI/VyHf4EWmvQ58tQ7pYb+0RyHv8bToEAcNx+/Gz XxWiHciimpc7yptHD5q+L0Tpv+nqqItFwcJUYzhfLOYRNzS6DtuYG10WBuYLXCJD ZDfoH+sK/T+OQGoDbzIpuBQrJH3bpMIBjysMmFS+GXw+RF6aNBcqO94WKra7iu1I kQ9OHP0xqqM5T1TZEQccqeXadss1Urw= -----END CERTIFICATE-----Generated at Tue Sep 29 15:46:57 2026 by rpki-client