$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cdd2a959-79e8-4909-9586-6fe85194182f/086fcbca-0d5c-365f-8c76-572841aa4b98.roa File: 086fcbca-0d5c-365f-8c76-572841aa4b98.roa (raw, json) Hash identifier: nzQzDpKkucsZ0zTL8m91tLcZy71csOSSZzQ8Hc80Q6M= Subject key identifier: 1F:33:E5:86:02:C4:7F:48:00:90:EE:AC:43:31:08:70:E9:3A:EA:A8 Certificate issuer: /CN=cdd2a959-79e8-4909-9586-6fe85194182f Certificate serial: 010D0C9F4328584DD208CC1002B8D4A83581D280 Authority key identifier: C9:B4:1A:82:3F:22:73:D2:BB:BD:21:8C:DF:6A:D8:E9:EC:08:D9:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cdd2a959-79e8-4909-9586-6fe85194182f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cdd2a959-79e8-4909-9586-6fe85194182f/086fcbca-0d5c-365f-8c76-572841aa4b98.roa Signing time: Wed 13 May 2026 13:39:03 +0000 ROA not before: Wed 13 May 2026 13:39:03 +0000 ROA not after: Tue 11 Aug 2026 13:39:03 +0000 asID: 16509 IP address blocks: 208.71.248.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cdd2a959-79e8-4909-9586-6fe85194182f/cdd2a959-79e8-4909-9586-6fe85194182f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cdd2a959-79e8-4909-9586-6fe85194182f/cdd2a959-79e8-4909-9586-6fe85194182f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cdd2a959-79e8-4909-9586-6fe85194182f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d2:08:cc:10:02:b8:d4:a8:35:81:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdd2a959-79e8-4909-9586-6fe85194182f Validity Not Before: May 13 13:39:03 2026 GMT Not After : Aug 11 13:39:03 2026 GMT Subject: CN=6c2cc3fa-1e49-4683-937d-f920c20c2068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:dd:41:5e:53:72:fc:df:74:ab:b4:13:89:1e: e0:d8:87:3e:f5:5e:36:93:bb:d0:ba:0b:26:a3:82: cb:13:ef:ac:b0:80:7f:e6:64:87:7b:d9:12:f2:98: 1a:0f:fa:98:32:5a:1d:80:f0:86:b7:2f:2e:ae:a4: 2d:52:7a:39:03:8c:0f:7d:0d:07:81:a2:31:17:9c: f8:51:98:7a:8e:f9:d4:7c:f2:f4:f2:29:2b:61:bd: 2f:54:4f:07:71:dd:54:f9:0d:91:4e:d7:37:01:ab: b1:76:23:5d:ba:c8:40:42:9d:06:52:f3:f4:06:d3: 9f:98:1d:24:31:62:02:bb:7d:b3:14:d0:df:9b:bd: 28:7c:4b:39:63:9e:4f:26:87:bf:dd:1b:f3:9d:00: 11:c5:a6:b1:25:f1:c4:9f:82:63:d8:f3:ea:bf:31: 70:df:68:17:f7:6c:bc:77:b5:59:4f:5a:70:40:4e: ec:a6:ce:7c:84:e9:3e:5e:de:13:94:55:9c:41:75: 50:86:a3:36:2e:91:a7:98:a0:17:3d:f3:b9:b6:8c: de:17:86:15:c7:d7:76:02:6d:70:0c:7a:38:35:17: 93:46:35:44:3f:60:f0:c5:ee:59:bc:c9:c5:8d:3b: f3:51:9d:3a:37:af:73:c8:0b:8c:a6:c5:71:f6:e8: a1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:33:E5:86:02:C4:7F:48:00:90:EE:AC:43:31:08:70:E9:3A:EA:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cdd2a959-79e8-4909-9586-6fe85194182f/086fcbca-0d5c-365f-8c76-572841aa4b98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cdd2a959-79e8-4909-9586-6fe85194182f/cdd2a959-79e8-4909-9586-6fe85194182f.crl X509v3 Authority Key Identifier: keyid:C9:B4:1A:82:3F:22:73:D2:BB:BD:21:8C:DF:6A:D8:E9:EC:08:D9:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cdd2a959-79e8-4909-9586-6fe85194182f.cer sbgp-ipAddrBlock: critical IPv4: 208.71.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:5d:27:e8:d1:0a:0e:25:93:53:54:3d:50:ea:ea:76:76:af: af:1a:52:72:0f:2c:de:dd:f0:29:a4:a4:f0:2d:0d:dc:5b:2f: 02:fa:a9:48:c1:40:dd:36:8a:fe:cf:d5:ee:44:34:b4:59:1a: e7:96:26:dc:6f:12:03:78:1a:14:ed:af:87:03:61:5c:b8:e7: c8:82:4a:7d:74:a5:12:79:51:36:e2:b4:f9:2c:33:00:fc:57: c8:82:01:b1:35:d8:95:ca:43:c5:11:70:32:32:4e:4c:c3:e4: c0:2f:67:13:dd:ab:36:19:b3:e9:59:12:5e:21:c6:2f:99:24: 85:2b:81:0e:69:b0:56:5b:01:5d:bd:66:05:51:17:16:d5:c4: 3c:74:56:2e:fb:a3:16:ff:ca:0d:aa:57:5b:29:b5:87:46:df: 13:c1:84:3c:a6:66:65:b1:eb:04:08:a0:03:1d:c4:6f:81:94: ff:fc:2e:9d:25:c4:bd:bd:fa:82:c9:7c:7e:94:d1:d6:39:3d: 0d:f1:33:d1:ed:d8:3b:e1:d4:61:36:4d:e9:18:3c:0f:38:05: af:a5:b4:fc:e0:dc:c4:97:20:14:37:17:52:b9:d0:94:f0:f5: c0:ce:9f:c7:38:49:02:6a:bd:6d:f5:05:db:1d:77:76:92:b6: 92:f5:51:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3SCMwQArjUqDWB0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2RkMmE5NTktNzllOC00OTA5LTk1ODYtNmZlODUxOTQx ODJmMB4XDTI2MDUxMzEzMzkwM1oXDTI2MDgxMTEzMzkwM1owLzEtMCsGA1UEAxMk NmMyY2MzZmEtMWU0OS00NjgzLTkzN2QtZjkyMGMyMGMyMDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN1BXlNy/N90q7QTiR7g2Ic+9V42k7vQugsm o4LLE++ssIB/5mSHe9kS8pgaD/qYMlodgPCGty8urqQtUno5A4wPfQ0HgaIxF5z4 UZh6jvnUfPL08ikrYb0vVE8Hcd1U+Q2RTtc3AauxdiNdushAQp0GUvP0BtOfmB0k MWICu32zFNDfm70ofEs5Y55PJoe/3RvznQARxaaxJfHEn4Jj2PPqvzFw32gX92y8 d7VZT1pwQE7sps58hOk+Xt4TlFWcQXVQhqM2LpGnmKAXPfO5tozeF4YVx9d2Am1w DHo4NReTRjVEP2Dwxe5ZvMnFjTvzUZ06N69zyAuMpsVx9uihGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8z5YYCxH9IAJDurEMxCHDpOuqoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9jZGQy YTk1OS03OWU4LTQ5MDktOTU4Ni02ZmU4NTE5NDE4MmYvMDg2ZmNiY2EtMGQ1Yy0z NjVmLThjNzYtNTcyODQxYWE0Yjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvY2RkMmE5NTktNzllOC00OTA5LTk1 ODYtNmZlODUxOTQxODJmL2NkZDJhOTU5LTc5ZTgtNDkwOS05NTg2LTZmZTg1MTk0 MTgyZi5jcmwwHwYDVR0jBBgwFoAUybQagj8ic9K7vSGM32rY6ewI2c8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9jZGQyYTk1OS03OWU4LTQ5MDktOTU4Ni02ZmU4 NTE5NDE4MmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Ef4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJxdJ+jRCg4lk1NUPVDq6nZ2r68aUnIPLN7d8CmkpPAtDdxbLwL6qUjB QN02iv7P1e5ENLRZGueWJtxvEgN4GhTtr4cDYVy458iCSn10pRJ5UTbitPksMwD8 V8iCAbE12JXKQ8URcDIyTkzD5MAvZxPdqzYZs+lZEl4hxi+ZJIUrgQ5psFZbAV29 ZgVRFxbVxDx0Vi77oxb/yg2qV1sptYdG3xPBhDymZmWx6wQIoAMdxG+BlP/8Lp0l xL29+oLJfH6U0dY5PQ3xM9Ht2Dvh1GE2TekYPA84Ba+ltPzg3MSXIBQ3F1K50JTw 9cDOn8c4SQJqvW31Bdsdd3aStpL1Ufs= -----END CERTIFICATE-----Generated at Sat Jun 6 12:05:19 2026 by rpki-client