$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/8f5dcde3-cde7-377c-a19d-736f822a5fbd.roa File: 8f5dcde3-cde7-377c-a19d-736f822a5fbd.roa (raw, json) Hash identifier: b7/ENv5itKCCJ10cFbl/XcaFvIaDaKAQjY/gnKiRTaU= Subject key identifier: 26:EE:A5:18:B9:E2:77:87:82:26:30:A9:35:4D:9C:5A:DD:B3:3C:3F Certificate issuer: /CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b Certificate serial: 010D0C9F4328584B6BC7589AECE1AA84560E1080 Authority key identifier: 6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/8f5dcde3-cde7-377c-a19d-736f822a5fbd.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 14618 IP address blocks: 208.88.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:58:9a:ec:e1:aa:84:56:0e:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=488ec5cf-5c8a-4941-ae31-f87fda5c12f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e3:79:a2:8e:bc:fc:a6:33:62:21:07:44:0e: 5f:0d:cb:1a:89:70:b8:44:89:90:16:49:ed:b3:5b: 9a:5d:ea:c8:9c:49:45:82:3b:69:27:cd:a2:96:4e: ba:1d:f3:36:e6:d4:20:7a:fb:f4:b4:1b:7f:d3:c6: e8:20:88:53:3b:7d:35:b4:cd:41:3e:e7:3e:be:b0: db:61:bc:e6:02:92:da:3a:69:b6:d9:82:eb:9c:6c: f3:e9:fa:3c:08:b4:ea:fb:6f:12:07:ed:4d:f6:50: f5:c2:0e:14:4c:81:37:7e:3b:6b:57:db:c2:8d:41: b0:84:8d:33:2f:8f:2c:78:73:ca:90:f9:99:19:d1: 00:7b:4b:7d:04:15:6e:f0:74:7d:85:21:86:1a:f0: c4:7a:9a:d1:d4:54:69:28:f1:72:36:de:43:61:ee: 91:be:cb:97:ec:e8:7f:e0:9c:d4:78:3c:74:aa:1f: 5f:d0:93:ae:b3:d7:53:5d:0a:02:32:6c:ba:aa:5c: 09:ff:a2:47:8c:03:15:6c:74:3e:a5:d1:da:b5:cb: 4e:19:e1:e2:a0:21:bb:81:6f:4d:93:7b:37:14:e9: 21:a3:19:1c:6f:04:d6:0e:13:d1:95:c3:2b:58:7d: 9a:04:c3:ea:08:36:34:da:7c:1b:d1:09:e0:fe:6c: 92:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:EE:A5:18:B9:E2:77:87:82:26:30:A9:35:4D:9C:5A:DD:B3:3C:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/8f5dcde3-cde7-377c-a19d-736f822a5fbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl X509v3 Authority Key Identifier: keyid:6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer sbgp-ipAddrBlock: critical IPv4: 208.88.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:c5:3d:89:d6:29:3b:3f:71:31:11:84:93:d7:12:3e:d9:20: a1:f2:de:4d:3b:cc:4c:fd:fa:de:22:72:74:ef:05:1d:58:76: 73:e0:4e:c1:b5:31:9f:64:33:43:e2:f5:9a:94:6f:f6:e9:58: 51:de:14:61:65:21:f6:cc:5d:64:95:78:a5:74:72:a2:e9:75: c1:8f:60:aa:1b:53:c1:a8:08:17:72:c0:76:0b:70:c5:b8:0a: 47:4a:cc:5c:34:b9:ba:5b:07:c5:58:9d:e0:7c:6e:d4:95:9a: fc:f9:f2:20:f8:b1:4a:71:70:04:5f:ad:05:37:2d:3b:73:ce: fe:02:29:6a:83:db:44:bd:13:e7:8a:8a:14:45:44:a8:82:90: b0:d9:38:36:42:0f:ec:38:29:36:a6:c4:d2:99:93:f8:30:51: 0a:19:af:e3:85:8b:ea:08:0d:37:85:cb:42:bd:95:4d:2c:db: ce:e0:25:1e:3f:6f:9f:80:14:c8:01:a5:34:6d:98:34:b5:6f: 39:73:53:15:35:ca:e1:1b:b5:db:81:4b:2d:85:22:b9:9f:81: 11:bd:14:47:56:29:fb:e1:41:2d:53:3c:0f:25:27:1e:89:7a: 04:cc:6b:6d:6d:87:4f:be:5a:5e:01:5e:d2:6f:58:53:8e:f2: 31:d2:00:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx1ia7OGqhFYOEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2ZGI0ZWItNDA0MS00YWY4LWI2NGQtZjJlOGI3YmMw NDhiMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NDg4ZWM1Y2YtNWM4YS00OTQxLWFlMzEtZjg3ZmRhNWMxMmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+N5oo68/KYzYiEHRA5fDcsaiXC4RImQFknt s1uaXerInElFgjtpJ82ilk66HfM25tQgevv0tBt/08boIIhTO301tM1BPuc+vrDb YbzmApLaOmm22YLrnGzz6fo8CLTq+28SB+1N9lD1wg4UTIE3fjtrV9vCjUGwhI0z L48seHPKkPmZGdEAe0t9BBVu8HR9hSGGGvDEeprR1FRpKPFyNt5DYe6RvsuX7Oh/ 4JzUeDx0qh9f0JOus9dTXQoCMmy6qlwJ/6JHjAMVbHQ+pdHatctOGeHioCG7gW9N k3s3FOkhoxkcbwTWDhPRlcMrWH2aBMPqCDY02nwb0Qng/mySiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbupRi54neHgiYwqTVNnFrdszw/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iODZk YjRlYi00MDQxLTRhZjgtYjY0ZC1mMmU4YjdiYzA0OGIvOGY1ZGNkZTMtY2RlNy0z NzdjLWExOWQtNzM2ZjgyMmE1ZmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjg2ZGI0ZWItNDA0MS00YWY4LWI2 NGQtZjJlOGI3YmMwNDhiL2I4NmRiNGViLTQwNDEtNGFmOC1iNjRkLWYyZThiN2Jj MDQ4Yi5jcmwwHwYDVR0jBBgwFoAUa8ITUOp05WaWTNRMgjyklz6m1dMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iODZkYjRlYi00MDQxLTRhZjgtYjY0ZC1mMmU4 YjdiYzA0OGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FghMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjFPYnWKTs/cTERhJPXEj7ZIKHy3k07zEz9+t4icnTvBR1YdnPgTsG1 MZ9kM0Pi9ZqUb/bpWFHeFGFlIfbMXWSVeKV0cqLpdcGPYKobU8GoCBdywHYLcMW4 CkdKzFw0ubpbB8VYneB8btSVmvz58iD4sUpxcARfrQU3LTtzzv4CKWqD20S9E+eK ihRFRKiCkLDZODZCD+w4KTamxNKZk/gwUQoZr+OFi+oIDTeFy0K9lU0s287gJR4/ b5+AFMgBpTRtmDS1bzlzUxU1yuEbtduBSy2FIrmfgRG9FEdWKfvhQS1TPA8lJx6J egTMa21th0++Wl4BXtJvWFOO8jHSAHU= -----END CERTIFICATE-----Generated at Fri Oct 10 21:30:12 2025 by rpki-client