$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/4dfb2ea7-2c14-31ad-98da-0ae7640e2d8f.roa File: 4dfb2ea7-2c14-31ad-98da-0ae7640e2d8f.roa (raw, json) Hash identifier: bw7FtCgwlhFJ+CMyHL6e6DdW/am1aaJDhsPxFiZGdhQ= Subject key identifier: 50:88:68:47:BC:A0:55:25:CD:E8:11:A5:6B:0B:99:8E:7B:44:7E:EB Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F4328584F7A4D8F4479540AD1DDD36190 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/4dfb2ea7-2c14-31ad-98da-0ae7640e2d8f.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 25649 IP address blocks: 208.86.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:8f:44:79:54:0a:d1:dd:d3:61:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=81c0156b-6b4a-4028-8451-bac42cd5f253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c9:4d:3e:94:da:7a:8c:d2:b7:1e:a9:ae:c2: ba:59:3c:9a:64:58:05:13:19:58:b7:7f:97:cc:c1: 60:f2:84:1f:e8:da:6f:fb:8c:36:89:66:f0:51:73: a8:92:07:d5:21:3c:57:98:0b:27:e5:91:61:4c:40: 62:cd:15:69:b4:be:f4:c4:5a:fb:d8:88:96:8f:83: 9c:f6:2c:53:83:d7:d1:08:d0:59:90:12:d2:6f:2d: d7:ca:72:3b:c9:a8:52:d7:f0:2c:12:10:cf:d6:f3: 00:3c:1f:2f:2c:02:96:bc:be:12:e5:44:a3:c4:c2: 98:e6:40:33:92:40:0b:b5:b6:b8:bd:e2:a3:ea:04: 3e:af:5d:b6:f2:c7:7c:2f:36:cf:da:c7:db:f4:ec: de:df:79:a1:0d:68:26:c7:11:f0:fd:f4:b1:64:22: 71:41:f1:a8:8a:e8:18:81:05:89:84:20:5f:37:aa: ae:37:3d:d6:85:2d:4d:65:3a:fa:5b:94:4d:d6:de: ce:cf:ac:2a:c7:5d:3c:77:95:fe:a8:cf:1b:48:c2: c7:0f:4b:a7:b4:9d:f5:70:e1:45:f5:e5:9a:3a:02: b1:9a:57:95:27:47:ec:62:1a:79:d8:9a:15:25:5b: f8:55:5d:7a:d5:90:48:81:f4:27:d5:2c:ec:91:f9: 82:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:88:68:47:BC:A0:55:25:CD:E8:11:A5:6B:0B:99:8E:7B:44:7E:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/4dfb2ea7-2c14-31ad-98da-0ae7640e2d8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 208.86.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:cf:26:20:bc:31:50:ae:01:3b:9a:2d:11:21:9d:e0:0b:bf: 67:49:a4:dd:af:f2:b2:7a:cf:58:7f:b2:2a:49:93:7f:c6:db: dc:4e:da:cd:be:ef:13:63:f6:8f:a4:8f:e1:06:f1:58:7c:77: 08:eb:26:68:16:68:0b:d3:8f:09:0d:cb:5d:87:0d:43:ed:ec: 9a:66:6d:07:9b:db:03:ba:56:06:f8:95:4f:cb:08:3f:4d:08: e1:b0:20:74:cc:6c:70:78:ab:e4:3d:66:17:5e:fa:91:cd:04: d4:9c:9d:d8:8b:81:89:09:85:07:3a:8e:b2:19:d3:81:6d:c9: 2c:26:08:82:3d:be:31:39:f0:ab:1c:cc:85:6f:18:f1:b8:5f: ba:eb:42:77:c8:6e:17:5b:3e:e8:c0:b5:08:0d:64:6e:7d:30: 98:e8:ea:f2:ea:04:81:16:33:93:2e:96:48:1e:20:0e:1e:30: 89:68:64:da:18:8c:19:ec:c2:f0:97:8e:6f:db:02:6b:be:0b: e0:de:1e:cc:0f:71:69:d5:8e:a0:a8:fd:cd:26:d6:ff:d3:9c: 70:bb:34:87:8c:9d:7a:ea:e9:f2:28:3b:d5:56:e9:ac:8b:85: 18:09:ae:2c:b1:50:e8:eb:f5:21:bb:1e:26:58:a8:9c:8b:f1: 6c:b5:3f:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TY9EeVQK0d3TYZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk ODFjMDE1NmItNmI0YS00MDI4LTg0NTEtYmFjNDJjZDVmMjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlslNPpTaeozStx6prsK6WTyaZFgFExlYt3+X zMFg8oQf6Npv+4w2iWbwUXOokgfVITxXmAsn5ZFhTEBizRVptL70xFr72IiWj4Oc 9ixTg9fRCNBZkBLSby3XynI7yahS1/AsEhDP1vMAPB8vLAKWvL4S5USjxMKY5kAz kkALtba4veKj6gQ+r1228sd8LzbP2sfb9Oze33mhDWgmxxHw/fSxZCJxQfGoiugY gQWJhCBfN6quNz3WhS1NZTr6W5RN1t7Oz6wqx108d5X+qM8bSMLHD0untJ31cOFF 9eWaOgKxmleVJ0fsYhp52JoVJVv4VV161ZBIgfQn1SzskfmCeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCIaEe8oFUlzegRpWsLmY57RH7rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvNGRmYjJlYTctMmMxNC0z MWFkLTk4ZGEtMGFlNzY0MGUyZDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FYsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/PJiC8MVCuATuaLREhneALv2dJpN2v8rJ6z1h/sipJk3/G29xO2s2+ 7xNj9o+kj+EG8Vh8dwjrJmgWaAvTjwkNy12HDUPt7JpmbQeb2wO6Vgb4lU/LCD9N COGwIHTMbHB4q+Q9Zhde+pHNBNScndiLgYkJhQc6jrIZ04FtySwmCII9vjE58Ksc zIVvGPG4X7rrQnfIbhdbPujAtQgNZG59MJjo6vLqBIEWM5MulkgeIA4eMIloZNoY jBnswvCXjm/bAmu+C+DeHswPcWnVjqCo/c0m1v/TnHC7NIeMnXrq6fIoO9VW6ayL hRgJriyxUOjr9SG7HiZYqJyL8Wy1P3Q= -----END CERTIFICATE-----Generated at Sun Nov 15 15:03:48 2026 by rpki-client