$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f/2557d927-0341-3c51-afc2-3376ee40d301.roa File: 2557d927-0341-3c51-afc2-3376ee40d301.roa (raw, json) Hash identifier: cWePM+XtGwFin8YGSprtQ0IvDCdAcsFTCA5U9wBzj7I= Subject key identifier: 18:7B:C9:1F:F3:BF:E1:49:9D:C3:AF:35:68:C7:33:C5:E9:00:6F:A6 Certificate issuer: /CN=d8e25869-fb35-4b76-8053-1b6c51bd3c3f Certificate serial: 010D0C9F4328584EB2B19C5E92CD6ED5B087EAB4 Authority key identifier: 55:C5:5C:0C:ED:45:D1:3D:8D:92:AE:1B:FA:AA:A8:17:CB:B9:D7:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f/2557d927-0341-3c51-afc2-3376ee40d301.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 398150 IP address blocks: 208.88.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 14 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:9c:5e:92:cd:6e:d5:b0:87:ea:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8e25869-fb35-4b76-8053-1b6c51bd3c3f Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=22cf5322-fee4-4434-80df-74a70243c7c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:08:ae:fb:e0:01:ce:eb:36:7d:41:ac:a4:4c: 09:28:74:7b:5b:ee:7b:e5:df:02:56:2d:b5:10:bf: 3e:5b:4f:90:6a:4b:72:da:8f:dc:1e:cd:5b:8e:18: d3:03:c9:50:48:08:f5:83:a8:e9:08:f9:b2:8e:cf: af:2d:8a:81:5b:0b:f9:ad:9b:78:ee:1d:d0:3c:3a: 02:64:3a:16:4e:14:11:8e:e6:e7:fa:cc:9a:69:93: e0:5c:bc:55:cc:33:3b:ee:41:df:5b:82:af:02:b3: 5e:d1:7b:32:f7:2f:1e:7f:18:96:e2:fb:a3:b2:78: 96:86:e2:17:26:9a:4d:d2:1d:d5:57:d4:4f:35:ae: 1e:fd:05:fa:12:ab:79:57:de:c2:0e:af:23:29:55: 43:9e:19:71:ea:dc:1e:0f:5f:0c:97:37:4e:22:45: c2:33:22:31:e1:8e:05:97:92:0e:34:30:64:93:4c: 61:0c:02:92:69:5d:02:56:42:4e:0b:57:16:35:af: 70:8b:19:1f:75:a7:d1:a6:70:1c:8c:e1:65:63:58: b2:c8:48:94:25:e5:d2:ad:24:3f:96:c9:78:e7:2e: a6:d5:2f:a7:d0:1c:83:2f:10:be:e4:6f:64:77:8a: 2d:3e:f9:59:38:c8:c6:cd:49:51:ba:ed:26:cd:69: 17:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:7B:C9:1F:F3:BF:E1:49:9D:C3:AF:35:68:C7:33:C5:E9:00:6F:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f/2557d927-0341-3c51-afc2-3376ee40d301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.crl X509v3 Authority Key Identifier: keyid:55:C5:5C:0C:ED:45:D1:3D:8D:92:AE:1B:FA:AA:A8:17:CB:B9:D7:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.cer sbgp-ipAddrBlock: critical IPv4: 208.88.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:a5:29:5f:5b:b3:6f:4c:d9:cf:61:ce:57:8f:dd:0d:75:10: e5:d8:4f:7e:53:cc:fe:fa:0d:e3:8a:84:d8:be:66:29:5a:2d: da:63:41:80:eb:bf:b8:65:9d:58:84:27:23:0b:53:58:bd:39: db:bb:1f:71:7f:6f:1a:b0:b2:07:a2:c2:d6:d8:9b:67:0d:83: a3:e4:fc:12:c1:a2:b3:65:ac:66:ed:85:01:46:53:d0:94:40: 29:cf:c9:79:25:66:75:d4:79:f1:e1:c4:79:31:33:85:ec:80: c4:11:e1:cd:85:4b:82:bd:9b:0c:9e:17:8e:40:5e:7d:bb:07: 44:33:b1:df:b3:94:b3:3c:bd:bf:9a:2a:f7:9e:10:4d:6f:9b: b8:2c:34:a6:f6:98:48:35:4f:7b:e8:70:ac:b6:67:06:ae:7d: 2e:83:b4:8e:db:61:c3:b4:1a:f5:69:9b:f1:eb:bd:ed:46:f9: 26:46:b2:ef:cd:95:86:6b:a0:19:c3:ed:ba:11:f4:a6:55:a0: ad:4f:70:c3:82:0d:ef:a9:10:d9:22:d2:64:d3:d5:b7:be:76: b4:75:a2:87:0f:93:ba:a8:82:6e:d3:b6:ac:c5:39:d2:de:22: 87:77:ba:dd:fe:90:b3:0b:8e:44:db:43:f0:2d:dc:b8:bb:13: 72:f5:07:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysZxeks1u1bCH6rQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDhlMjU4NjktZmIzNS00Yjc2LTgwNTMtMWI2YzUxYmQz YzNmMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk MjJjZjUzMjItZmVlNC00NDM0LTgwZGYtNzRhNzAyNDNjN2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Aiu++ABzus2fUGspEwJKHR7W+575d8CVi21 EL8+W0+Qakty2o/cHs1bjhjTA8lQSAj1g6jpCPmyjs+vLYqBWwv5rZt47h3QPDoC ZDoWThQRjubn+syaaZPgXLxVzDM77kHfW4KvArNe0Xsy9y8efxiW4vujsniWhuIX JppN0h3VV9RPNa4e/QX6Eqt5V97CDq8jKVVDnhlx6tweD18MlzdOIkXCMyIx4Y4F l5IONDBkk0xhDAKSaV0CVkJOC1cWNa9wixkfdafRpnAcjOFlY1iyyEiUJeXSrSQ/ lsl45y6m1S+n0ByDLxC+5G9kd4otPvlZOMjGzUlRuu0mzWkX/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBh7yR/zv+FJncOvNWjHM8XpAG+mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kOGUy NTg2OS1mYjM1LTRiNzYtODA1My0xYjZjNTFiZDNjM2YvMjU1N2Q5MjctMDM0MS0z YzUxLWFmYzItMzM3NmVlNDBkMzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDhlMjU4NjktZmIzNS00Yjc2LTgw NTMtMWI2YzUxYmQzYzNmL2Q4ZTI1ODY5LWZiMzUtNGI3Ni04MDUzLTFiNmM1MWJk M2MzZi5jcmwwHwYDVR0jBBgwFoAUVcVcDO1F0T2Nkq4b+qqoF8u5150wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kOGUyNTg2OS1mYjM1LTRiNzYtODA1My0xYjZj NTFiZDNjM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFalKV9bs29M2c9hzleP3Q11EOXYT35TzP76DeOKhNi+ZilaLdpjQYDr v7hlnViEJyMLU1i9Odu7H3F/bxqwsgeiwtbYm2cNg6Pk/BLBorNlrGbthQFGU9CU QCnPyXklZnXUefHhxHkxM4XsgMQR4c2FS4K9mwyeF45AXn27B0Qzsd+zlLM8vb+a KveeEE1vm7gsNKb2mEg1T3vocKy2ZwaufS6DtI7bYcO0GvVpm/Hrve1G+SZGsu/N lYZroBnD7boR9KZVoK1PcMOCDe+pENki0mTT1be+drR1oocPk7qogm7TtqzFOdLe Iod3ut3+kLMLjkTbQ/At3Li7E3L1BzU= -----END CERTIFICATE-----Generated at Thu Aug 13 07:53:17 2026 by rpki-client