$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/6c29d9ad-4af2-349c-8d9d-aa11c53aa4e1.roa File: 6c29d9ad-4af2-349c-8d9d-aa11c53aa4e1.roa (raw, json) Hash identifier: 8p4eFLy7yS6d4J6itOhzsNi4wsSpZKemTJ1Lszjt0Zs= Subject key identifier: 8F:47:56:1C:BB:27:37:87:BD:A1:7D:1C:AF:EA:BD:B0:4D:F5:7A:3F Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584EE38CA832739C39FCAC921DC0 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/6c29d9ad-4af2-349c-8d9d-aa11c53aa4e1.roa Signing time: Wed 19 Aug 2026 13:00:11 +0000 ROA not before: Wed 19 Aug 2026 13:00:11 +0000 ROA not after: Tue 17 Nov 2026 14:00:11 +0000 asID: 394996 IP address blocks: 209.38.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:8c:a8:32:73:9c:39:fc:ac:92:1d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Aug 19 13:00:11 2026 GMT Not After : Nov 17 14:00:11 2026 GMT Subject: CN=5e3a0132-922d-4019-b032-1b06c8366499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7f:f2:e7:c3:a3:71:6b:ed:c5:27:2f:24:9c: 80:65:61:39:25:27:50:a1:da:f7:cf:cb:79:ac:f6: 21:5b:46:26:43:38:b9:81:b1:1b:f9:f3:fd:5d:c0: 0f:ec:5c:d4:11:ed:8a:4c:d2:78:5a:65:50:b0:4b: 3a:7f:a9:d2:f0:26:9e:f1:36:13:d9:77:9c:ec:25: e4:e8:4e:66:e8:89:f4:47:6f:15:27:b7:e0:ff:db: 31:89:1f:4f:2b:2f:61:2f:eb:84:3c:4a:0e:74:90: b6:cb:d1:5a:7e:00:67:95:b8:dd:a5:18:0c:14:82: 85:42:86:10:7d:14:54:ff:3b:11:15:5d:42:50:2c: d5:85:9d:76:49:82:48:ca:93:ed:9a:98:dc:e8:93: d7:5a:1c:57:44:78:70:06:e3:02:73:f4:68:a9:07: 9e:f3:41:17:71:02:74:c8:1a:25:3e:f4:ec:e9:85: 4a:29:d4:b1:b9:9c:ec:2e:9c:d1:4f:fc:37:d6:af: 12:56:be:0c:15:02:44:f6:4a:cf:5f:31:52:47:d0: 02:ed:52:7d:f4:ff:c8:ec:8b:ad:cf:8b:c1:92:45: 34:4f:44:47:79:5a:93:24:d5:d4:2a:5d:98:52:51: e6:50:c7:27:b4:8c:85:c7:d0:b0:9e:3a:b6:88:7e: 30:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:47:56:1C:BB:27:37:87:BD:A1:7D:1C:AF:EA:BD:B0:4D:F5:7A:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/6c29d9ad-4af2-349c-8d9d-aa11c53aa4e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 209.38.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:38:10:b2:06:95:9d:31:5e:2c:25:26:57:ba:4d:9e:75:c9: e7:77:58:f7:6b:ad:fa:ed:75:93:d0:8c:94:35:8b:10:b9:14: 1e:3c:6a:37:09:9e:fd:bc:9c:7f:f7:8d:41:34:12:3b:e9:12: b2:69:ef:0e:1c:3d:d7:33:e9:79:8e:40:8d:f4:c9:d3:b3:9c: 08:6d:97:ad:1d:9b:13:3b:06:b6:56:0d:38:f1:08:89:c6:d7: b5:e7:ef:1f:1e:4f:a5:4e:79:9f:e3:23:c4:b9:96:04:c1:e9: 5d:2b:9f:a7:10:71:93:b6:24:12:50:9c:c1:13:46:69:cd:db: ff:14:36:ec:10:4d:f9:8c:7d:f4:14:16:bb:28:bb:81:14:60: f6:d5:05:b3:23:e2:78:d6:71:c1:7d:26:56:b4:44:87:03:50: 0f:e1:ca:5d:46:49:8e:a9:ae:1a:eb:89:10:50:24:f8:fe:35: 1b:ef:25:bb:fe:58:c7:b4:3e:f3:05:49:f1:75:5d:6c:47:53: 8f:de:d9:0e:2e:6a:04:33:fd:bf:18:37:8d:b7:96:19:8d:29: 4a:fb:4d:3a:58:8e:15:6a:15:11:03:e7:1f:c2:33:74:45:d3: 4e:72:6a:24:24:d8:72:6b:4c:af:dd:36:8b:58:07:28:8a:e2: c4:82:14:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjKgyc5w5/KySHcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk NWUzYTAxMzItOTIyZC00MDE5LWIwMzItMWIwNmM4MzY2NDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3/y58OjcWvtxScvJJyAZWE5JSdQodr3z8t5 rPYhW0YmQzi5gbEb+fP9XcAP7FzUEe2KTNJ4WmVQsEs6f6nS8Cae8TYT2Xec7CXk 6E5m6In0R28VJ7fg/9sxiR9PKy9hL+uEPEoOdJC2y9FafgBnlbjdpRgMFIKFQoYQ fRRU/zsRFV1CUCzVhZ12SYJIypPtmpjc6JPXWhxXRHhwBuMCc/RoqQee80EXcQJ0 yBolPvTs6YVKKdSxuZzsLpzRT/w31q8SVr4MFQJE9krPXzFSR9AC7VJ99P/I7Iut z4vBkkU0T0RHeVqTJNXUKl2YUlHmUMcntIyFx9Cwnjq2iH4wTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9HVhy7JzeHvaF9HK/qvbBN9Xo/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvNmMyOWQ5YWQtNGFmMi0z NDljLThkOWQtYWExMWM1M2FhNGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SYDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFs4ELIGlZ0xXiwlJle6TZ51yed3WPdrrfrtdZPQjJQ1ixC5FB48ajcJ nv28nH/3jUE0EjvpErJp7w4cPdcz6XmOQI30ydOznAhtl60dmxM7BrZWDTjxCInG 17Xn7x8eT6VOeZ/jI8S5lgTB6V0rn6cQcZO2JBJQnMETRmnN2/8UNuwQTfmMffQU Frsou4EUYPbVBbMj4njWccF9Jla0RIcDUA/hyl1GSY6prhrriRBQJPj+NRvvJbv+ WMe0PvMFSfF1XWxHU4/e2Q4uagQz/b8YN423lhmNKUr7TTpYjhVqFRED5x/CM3RF 005yaiQk2HJrTK/dNotYByiK4sSCFMI= -----END CERTIFICATE-----Generated at Fri Aug 21 00:18:19 2026 by rpki-client