$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/9db30f64-7e0b-3608-b7bd-76fce8d76e5e.roa File: 9db30f64-7e0b-3608-b7bd-76fce8d76e5e.roa (raw, json) Hash identifier: avhhWA/pYeigEGArUIk14X560rkH3H7hISCoxCzS/So= Subject key identifier: 92:07:F5:C1:2C:F6:99:30:FF:FA:6B:22:66:11:01:C1:26:FD:01:25 Certificate issuer: /CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b Certificate serial: 010D0C9F4328584E921FABCAF5D122D7209D3B00 Authority key identifier: 6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/9db30f64-7e0b-3608-b7bd-76fce8d76e5e.roa Signing time: Tue 21 Jul 2026 09:00:12 +0000 ROA not before: Tue 21 Jul 2026 09:00:12 +0000 ROA not after: Mon 19 Oct 2026 09:00:12 +0000 asID: 16509 IP address blocks: 208.88.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:92:1f:ab:ca:f5:d1:22:d7:20:9d:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b Validity Not Before: Jul 21 09:00:12 2026 GMT Not After : Oct 19 09:00:12 2026 GMT Subject: CN=9687cfeb-1736-4482-8fb6-217734a99b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f0:8d:4b:e0:6f:69:86:75:22:e5:68:22:a1: fb:74:89:d2:ff:23:47:2b:fb:22:c7:44:8a:be:50: d0:9d:a2:f2:15:cf:47:d1:1d:c3:1a:76:f3:ce:fe: bf:a2:b1:c5:8a:c3:c3:a3:18:fa:55:5e:67:6d:a4: 49:03:de:10:e4:29:64:32:0d:eb:ee:9a:f9:e5:d6: 99:32:d5:5b:e3:65:75:90:85:7b:3e:f2:46:7d:67: 23:4e:f2:03:52:f7:60:dc:8b:5c:57:a5:67:29:f1: d7:22:36:ed:e2:f5:d0:a3:fc:a1:0b:42:c7:d6:da: c2:05:00:59:13:b6:f9:36:76:2d:a0:ff:65:58:f4: 68:82:c4:b0:a7:ca:ef:db:d3:f1:48:f8:ab:61:0e: ce:97:e8:0a:c9:8b:51:8c:2e:de:ac:51:08:a7:7f: 58:28:ea:db:d4:96:31:c4:eb:81:dd:c3:f6:7f:b2: 7e:c3:a6:c9:af:f5:f4:57:58:bf:ee:1a:ea:07:a3: ab:b1:18:73:cc:4f:dc:be:38:04:3d:e9:de:96:3b: 3c:94:c3:55:88:b2:a5:b2:1b:0e:02:af:7c:71:37: 4d:97:a9:5d:e0:f6:6b:13:77:f8:c9:02:86:28:cb: 65:72:c3:e7:40:4b:d0:d9:ad:7d:81:15:d9:cb:8c: 5c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:07:F5:C1:2C:F6:99:30:FF:FA:6B:22:66:11:01:C1:26:FD:01:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/9db30f64-7e0b-3608-b7bd-76fce8d76e5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl X509v3 Authority Key Identifier: keyid:6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer sbgp-ipAddrBlock: critical IPv4: 208.88.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:60:e5:4b:01:e2:2f:fd:1f:74:e3:3d:d3:ee:ba:01:fc:f9: ba:df:38:52:a8:9e:34:61:44:eb:3b:92:3d:8d:d3:40:a7:1b: 41:98:f1:0a:82:d0:0c:7c:7d:44:19:88:e1:28:e9:e5:0c:ac: 1f:51:fe:0f:06:01:0b:01:57:da:a9:62:55:c7:3b:44:7e:a7: 3f:72:e5:36:d7:c6:33:d5:6a:70:58:b3:e3:09:ba:ff:2f:e3: 3f:1d:47:75:f6:ba:42:c2:67:c2:9c:b2:f7:55:25:aa:1a:01: bd:a3:33:e6:6d:7a:b3:af:1b:68:8e:c3:e7:ab:6e:75:9f:14: 62:aa:5b:10:b3:42:56:97:cc:f3:ac:d0:ba:d4:48:01:77:41: ec:95:68:d8:ca:27:b1:6c:0f:30:c2:3b:3b:a7:9a:c6:fa:00: 0a:06:5b:06:80:48:77:8b:1a:eb:3c:eb:a4:ae:a4:7d:f3:ed: 0b:de:d0:25:c9:82:22:d0:c2:1d:91:cd:f4:ed:ff:c6:f2:b2: 43:85:be:74:fc:5f:5a:86:c0:95:ee:d8:3b:92:68:d0:48:e2: d7:35:31:2d:aa:f3:73:9a:dd:3b:3c:d8:cb:16:2a:da:b6:b1: 0b:e3:25:33:e1:7e:6f:f0:47:f0:5b:6c:ee:34:34:ff:1e:40: 27:7d:2c:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6SH6vK9dEi1yCdOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2ZGI0ZWItNDA0MS00YWY4LWI2NGQtZjJlOGI3YmMw NDhiMB4XDTI2MDcyMTA5MDAxMloXDTI2MTAxOTA5MDAxMlowLzEtMCsGA1UEAxMk OTY4N2NmZWItMTczNi00NDgyLThmYjYtMjE3NzM0YTk5YjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfCNS+BvaYZ1IuVoIqH7dInS/yNHK/six0SK vlDQnaLyFc9H0R3DGnbzzv6/orHFisPDoxj6VV5nbaRJA94Q5ClkMg3r7pr55daZ MtVb42V1kIV7PvJGfWcjTvIDUvdg3ItcV6VnKfHXIjbt4vXQo/yhC0LH1trCBQBZ E7b5NnYtoP9lWPRogsSwp8rv29PxSPirYQ7Ol+gKyYtRjC7erFEIp39YKOrb1JYx xOuB3cP2f7J+w6bJr/X0V1i/7hrqB6OrsRhzzE/cvjgEPeneljs8lMNViLKlshsO Aq98cTdNl6ld4PZrE3f4yQKGKMtlcsPnQEvQ2a19gRXZy4xcNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJIH9cEs9pkw//prImYRAcEm/QElMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iODZk YjRlYi00MDQxLTRhZjgtYjY0ZC1mMmU4YjdiYzA0OGIvOWRiMzBmNjQtN2UwYi0z NjA4LWI3YmQtNzZmY2U4ZDc2ZTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjg2ZGI0ZWItNDA0MS00YWY4LWI2 NGQtZjJlOGI3YmMwNDhiL2I4NmRiNGViLTQwNDEtNGFmOC1iNjRkLWYyZThiN2Jj MDQ4Yi5jcmwwHwYDVR0jBBgwFoAUa8ITUOp05WaWTNRMgjyklz6m1dMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iODZkYjRlYi00MDQxLTRhZjgtYjY0ZC1mMmU4 YjdiYzA0OGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpg5UsB4i/9H3TjPdPuugH8+brfOFKonjRhROs7kj2N00CnG0GY8QqC 0Ax8fUQZiOEo6eUMrB9R/g8GAQsBV9qpYlXHO0R+pz9y5TbXxjPVanBYs+MJuv8v 4z8dR3X2ukLCZ8KcsvdVJaoaAb2jM+ZterOvG2iOw+erbnWfFGKqWxCzQlaXzPOs 0LrUSAF3QeyVaNjKJ7FsDzDCOzunmsb6AAoGWwaASHeLGus866SupH3z7Qve0CXJ giLQwh2RzfTt/8byskOFvnT8X1qGwJXu2DuSaNBI4tc1MS2q83Oa3Ts82MsWKtq2 sQvjJTPhfm/wR/BbbO40NP8eQCd9LLc= -----END CERTIFICATE-----Generated at Fri Jul 24 18:02:56 2026 by rpki-client