$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/4fcf8fdb-2990-369f-8239-fd79baf2050a.roa File: 4fcf8fdb-2990-369f-8239-fd79baf2050a.roa (raw, json) Hash identifier: ZlJu6v5muKr3HmPz3NWSXwZF+PTpOi52dAHyBfZTH8M= Subject key identifier: E6:50:77:47:A3:69:F9:8A:B2:71:B4:B1:74:93:04:74:43:47:3E:5F Certificate issuer: /CN=cf0a8a9b-3645-438a-a6e6-e0385bffcfef Certificate serial: 010D0C9F4328584EA793F2189E1301ADB771B5C0 Authority key identifier: 8C:2B:1A:CD:7B:06:82:D8:BE:8B:14:5D:07:8E:13:B5:90:3D:5C:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/4fcf8fdb-2990-369f-8239-fd79baf2050a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 14523 IP address blocks: 208.69.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:93:f2:18:9e:13:01:ad:b7:71:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0a8a9b-3645-438a-a6e6-e0385bffcfef Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e4a0ed92-ae85-4e1f-9dae-22d872521e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:10:4a:f8:17:4b:c5:d7:1d:44:a0:ca:c2:d5: ed:f9:e6:73:9c:24:bd:88:a3:ba:eb:97:84:26:c9: 63:5f:bb:89:38:72:02:f7:53:ba:da:1a:49:4d:06: c7:5b:a4:09:55:07:ca:63:88:6d:ed:7e:16:9d:81: 40:b4:52:94:5f:e5:5c:bd:f2:a5:04:ce:3e:12:b3: ee:4b:1f:6d:b6:e7:5e:2c:4a:95:f9:1b:07:f2:58: b4:b0:db:c4:a8:7b:48:82:35:7d:46:3b:bc:6a:a2: fa:00:25:46:2c:ca:34:20:db:cc:25:17:24:a8:5f: 67:61:87:e7:e0:2a:cf:4e:a7:b4:49:e0:c1:db:02: fa:8d:4d:81:ca:c8:f2:47:f6:19:75:18:4e:39:26: 1e:c7:a2:2f:a3:07:67:06:a2:07:1c:73:bc:c6:22: 1b:53:e5:70:3b:52:20:73:85:a4:31:ec:ce:a2:29: 0e:34:21:92:c6:36:61:35:7a:27:05:a6:4b:16:63: b6:46:dc:63:cb:dc:57:e2:5d:f9:2e:91:f1:36:91: b7:f8:8b:4e:5f:7a:b1:55:8c:2b:5c:14:7e:03:bf: 21:5f:75:19:b6:b7:b7:2c:a8:2d:6e:92:cd:80:8c: d3:b0:1e:a6:10:62:6e:de:a0:0d:81:49:54:89:74: c6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:50:77:47:A3:69:F9:8A:B2:71:B4:B1:74:93:04:74:43:47:3E:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/4fcf8fdb-2990-369f-8239-fd79baf2050a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.crl X509v3 Authority Key Identifier: keyid:8C:2B:1A:CD:7B:06:82:D8:BE:8B:14:5D:07:8E:13:B5:90:3D:5C:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.cer sbgp-ipAddrBlock: critical IPv4: 208.69.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:4e:52:fd:a0:f2:8a:d4:1f:3b:4d:a9:60:63:7f:1c:76:99: 59:6d:e1:aa:15:76:d4:25:c5:6e:48:ed:e4:15:af:ef:ac:cf: 24:93:e4:78:b2:29:65:7c:4d:62:f7:22:79:9b:e6:ec:84:29: d7:15:f9:25:4a:ef:3e:8c:d8:21:eb:1c:d9:6c:23:b8:0e:ef: c1:02:80:e4:ff:75:dc:42:f4:81:84:c5:52:93:0d:81:1c:ac: f5:87:9e:ce:67:b5:31:41:c7:b0:9d:1e:ff:f0:ba:6c:89:40: 2b:8a:bd:55:10:e3:a9:9d:65:98:9a:85:b2:8b:fc:23:cc:a4: 32:ce:50:b7:3c:b9:3f:c6:95:32:7f:90:e4:d1:4b:18:19:97: 1a:53:3d:60:41:8a:e6:d4:5e:ca:92:f5:03:47:60:37:b7:31: 4b:e8:b7:40:d1:cb:da:41:70:02:c2:74:eb:7f:84:0c:27:ad: 0d:81:48:c6:bb:b7:fa:3e:28:4b:1b:f5:cd:75:c4:f4:55:f5: 47:7c:33:9f:7a:92:ab:aa:a7:e6:1a:63:28:15:b9:ca:0b:cc: e6:fc:8d:b8:bd:ae:fe:06:da:9e:61:8c:75:fb:81:7b:38:75: 9b:89:2b:26:9e:fe:94:55:18:d7:54:52:9c:b1:25:69:b1:bb: 7f:8a:d3:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nk/IYnhMBrbdxtcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwYThhOWItMzY0NS00MzhhLWE2ZTYtZTAzODViZmZj ZmVmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTRhMGVkOTItYWU4NS00ZTFmLTlkYWUtMjJkODcyNTIxZTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRBK+BdLxdcdRKDKwtXt+eZznCS9iKO665eE JsljX7uJOHIC91O62hpJTQbHW6QJVQfKY4ht7X4WnYFAtFKUX+VcvfKlBM4+ErPu Sx9ttudeLEqV+RsH8li0sNvEqHtIgjV9Rju8aqL6ACVGLMo0INvMJRckqF9nYYfn 4CrPTqe0SeDB2wL6jU2BysjyR/YZdRhOOSYex6IvowdnBqIHHHO8xiIbU+VwO1Ig c4WkMezOoikONCGSxjZhNXonBaZLFmO2Rtxjy9xX4l35LpHxNpG3+ItOX3qxVYwr XBR+A78hX3UZtre3LKgtbpLNgIzTsB6mEGJu3qANgUlUiXTGcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZQd0ejafmKsnG0sXSTBHRDRz5fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZjBh OGE5Yi0zNjQ1LTQzOGEtYTZlNi1lMDM4NWJmZmNmZWYvNGZjZjhmZGItMjk5MC0z NjlmLTgyMzktZmQ3OWJhZjIwNTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2YwYThhOWItMzY0NS00MzhhLWE2 ZTYtZTAzODViZmZjZmVmL2NmMGE4YTliLTM2NDUtNDM4YS1hNmU2LWUwMzg1YmZm Y2ZlZi5jcmwwHwYDVR0jBBgwFoAUjCsazXsGgti+ixRdB44TtZA9XJMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZjBhOGE5Yi0zNjQ1LTQzOGEtYTZlNi1lMDM4 NWJmZmNmZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EVYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFOUv2g8orUHztNqWBjfxx2mVlt4aoVdtQlxW5I7eQVr++szyST5Hiy KWV8TWL3Inmb5uyEKdcV+SVK7z6M2CHrHNlsI7gO78ECgOT/ddxC9IGExVKTDYEc rPWHns5ntTFBx7CdHv/wumyJQCuKvVUQ46mdZZiahbKL/CPMpDLOULc8uT/GlTJ/ kOTRSxgZlxpTPWBBiubUXsqS9QNHYDe3MUvot0DRy9pBcALCdOt/hAwnrQ2BSMa7 t/o+KEsb9c11xPRV9Ud8M596kquqp+YaYygVucoLzOb8jbi9rv4G2p5hjHX7gXs4 dZuJKyae/pRVGNdUUpyxJWmxu3+K0xE= -----END CERTIFICATE-----Generated at Sat Aug 1 11:38:35 2026 by rpki-client