$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/571b8118-104e-3581-a5fe-51b7936e3a4e.roa File: 571b8118-104e-3581-a5fe-51b7936e3a4e.roa (raw, json) Hash identifier: Wn9WppGD4L8kV6jdi7GBJ9NSIdeMp8glVo/3UlRw0mE= Subject key identifier: AB:90:00:3D:15:29:5B:B0:D0:DE:95:AE:CC:60:B9:67:0F:B9:E5:17 Certificate issuer: /CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b Certificate serial: 010D0C9F4328584B6BC75887F07093FE388E2840 Authority key identifier: 6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/571b8118-104e-3581-a5fe-51b7936e3a4e.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 16509 IP address blocks: 208.88.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:58:87:f0:70:93:fe:38:8e:28:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=ffb28314-a7df-4b77-bebb-6fc41dc566b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:17:53:12:9c:62:8f:16:62:8f:7a:d5:09:ae: 7b:c5:fe:38:7a:ba:2a:b4:35:4e:0d:ce:f0:6d:93: 00:6c:c4:8d:11:64:55:af:5d:6c:6a:9b:4e:6e:9e: 0c:1e:b5:0b:74:61:96:06:38:17:41:99:a9:65:03: 3c:ef:9a:30:08:96:6f:d6:03:e1:2d:c5:4e:ee:22: 2a:70:28:d0:7b:65:ff:48:5b:a9:f8:4a:9e:c7:c6: fd:ba:0d:0c:87:51:c4:74:b7:7b:6a:d2:3d:87:67: 0a:e4:18:64:1b:2d:03:86:44:1c:ff:28:bc:5f:5a: e6:55:56:71:a5:9d:77:48:68:2a:40:3c:e5:d2:3e: 41:bb:35:98:d1:10:d5:64:fc:d2:07:13:f9:ad:6a: 13:58:5c:25:16:7a:70:82:64:33:38:38:34:08:d4: 98:ba:d0:bf:25:bf:5e:b0:39:ee:ac:53:bd:a3:16: ca:00:f2:68:7a:48:08:3d:84:c2:d2:c1:2e:02:65: c7:96:65:9e:0d:47:cd:b3:a6:13:b3:57:ff:15:55: 9a:8a:86:23:1f:06:32:4b:39:e9:71:09:23:59:63: b7:ef:6d:4a:4d:96:37:2b:41:23:81:7f:0e:07:94: 32:97:02:70:86:f8:ee:00:fb:8b:52:96:16:ef:2d: ff:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:90:00:3D:15:29:5B:B0:D0:DE:95:AE:CC:60:B9:67:0F:B9:E5:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/571b8118-104e-3581-a5fe-51b7936e3a4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl X509v3 Authority Key Identifier: keyid:6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer sbgp-ipAddrBlock: critical IPv4: 208.88.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:21:64:d9:b5:38:c1:c2:0c:fa:e4:f8:cc:e0:74:15:1a:86: 9f:2c:fb:63:fc:3b:1c:3f:bc:1d:1f:f5:97:42:3e:43:b5:14: 77:cf:fb:b9:ec:ba:1a:94:be:9d:af:f7:15:48:eb:42:b7:57: 11:ea:ed:cc:38:9f:63:0f:1b:c6:35:4c:4d:44:70:25:85:cf: e7:6e:e0:68:f1:a4:88:2b:f7:c7:54:91:8d:0f:58:50:c5:ae: 71:17:31:e1:a4:af:e1:a7:46:98:b1:3f:30:c9:5f:73:91:fb: e5:22:f7:a7:c9:db:d8:eb:cf:a9:cd:74:42:f6:06:48:7f:f8: 50:25:c2:8c:15:82:b0:97:3f:65:2e:52:76:6d:20:6a:5b:dd: 88:f9:a8:42:d6:39:99:4d:b9:73:8a:fb:f5:fa:53:c1:63:4f: d1:b2:30:5a:38:ef:9e:3d:24:b5:43:ea:49:8d:91:57:17:79: 16:ca:78:b8:9e:da:f3:50:4c:33:7c:34:df:ef:43:2f:67:04: 8c:91:7c:f0:bf:09:ca:d8:b0:ba:1d:03:21:3c:e9:2c:13:6e: 0b:25:d5:63:6b:5f:07:9b:67:5f:b7:07:12:b4:63:93:a5:18: fd:aa:2f:b7:34:29:69:fe:51:04:a1:63:5e:4a:7d:82:fa:2b: 2b:ea:d2:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx1iH8HCT/jiOKEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2ZGI0ZWItNDA0MS00YWY4LWI2NGQtZjJlOGI3YmMw NDhiMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk ZmZiMjgzMTQtYTdkZi00Yjc3LWJlYmItNmZjNDFkYzU2NmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBdTEpxijxZij3rVCa57xf44eroqtDVODc7w bZMAbMSNEWRVr11saptObp4MHrULdGGWBjgXQZmpZQM875owCJZv1gPhLcVO7iIq cCjQe2X/SFup+Eqex8b9ug0Mh1HEdLd7atI9h2cK5BhkGy0DhkQc/yi8X1rmVVZx pZ13SGgqQDzl0j5BuzWY0RDVZPzSBxP5rWoTWFwlFnpwgmQzODg0CNSYutC/Jb9e sDnurFO9oxbKAPJoekgIPYTC0sEuAmXHlmWeDUfNs6YTs1f/FVWaioYjHwYySznp cQkjWWO3721KTZY3K0EjgX8OB5QylwJwhvjuAPuLUpYW7y3/tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKuQAD0VKVuw0N6VrsxguWcPueUXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iODZk YjRlYi00MDQxLTRhZjgtYjY0ZC1mMmU4YjdiYzA0OGIvNTcxYjgxMTgtMTA0ZS0z NTgxLWE1ZmUtNTFiNzkzNmUzYTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjg2ZGI0ZWItNDA0MS00YWY4LWI2 NGQtZjJlOGI3YmMwNDhiL2I4NmRiNGViLTQwNDEtNGFmOC1iNjRkLWYyZThiN2Jj MDQ4Yi5jcmwwHwYDVR0jBBgwFoAUa8ITUOp05WaWTNRMgjyklz6m1dMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iODZkYjRlYi00MDQxLTRhZjgtYjY0ZC1mMmU4 YjdiYzA0OGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FghMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAhZNm1OMHCDPrk+MzgdBUahp8s+2P8Oxw/vB0f9ZdCPkO1FHfP+7ns uhqUvp2v9xVI60K3VxHq7cw4n2MPG8Y1TE1EcCWFz+du4GjxpIgr98dUkY0PWFDF rnEXMeGkr+GnRpixPzDJX3OR++Ui96fJ29jrz6nNdEL2Bkh/+FAlwowVgrCXP2Uu UnZtIGpb3Yj5qELWOZlNuXOK+/X6U8FjT9GyMFo47549JLVD6kmNkVcXeRbKeLie 2vNQTDN8NN/vQy9nBIyRfPC/CcrYsLodAyE86SwTbgsl1WNrXwebZ1+3BxK0Y5Ol GP2qL7c0KWn+UQShY15KfYL6Kyvq0nU= -----END CERTIFICATE-----Generated at Fri Oct 10 21:33:52 2025 by rpki-client