$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f2bf5543-269c-3fbb-bb59-b3484366fb78.roa File: f2bf5543-269c-3fbb-bb59-b3484366fb78.roa (raw, json) Hash identifier: nDY9rjOVFonCOyofwoD0+9udoDNTp0W45Q5RgA+9Feo= Subject key identifier: 51:5A:7C:35:65:3E:96:E7:E7:79:FC:42:47:20:C1:81:8F:FB:82:56 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584EAD1C531218FA902CA5EB0000 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f2bf5543-269c-3fbb-bb59-b3484366fb78.roa Signing time: Fri 31 Jul 2026 01:00:11 +0000 ROA not before: Fri 31 Jul 2026 01:00:11 +0000 ROA not after: Thu 29 Oct 2026 01:00:11 +0000 asID: 398420 IP address blocks: 208.89.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ad:1c:53:12:18:fa:90:2c:a5:eb:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Jul 31 01:00:11 2026 GMT Not After : Oct 29 01:00:11 2026 GMT Subject: CN=32b35447-cbf4-466a-a789-e497fcbd3a0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d3:99:32:87:df:9b:7e:f0:67:a7:f3:e1:70: 7a:90:2a:9f:a6:83:76:3e:4b:64:df:4d:21:3e:56: f9:eb:66:11:56:ee:6e:16:19:3f:fd:b7:90:47:b7: 78:e9:67:51:1f:fb:93:d1:7c:46:20:2d:52:dd:ae: db:fc:60:6a:ad:70:0c:ea:17:19:51:a4:f7:99:67: a2:96:d7:97:7d:5d:f8:18:ef:3a:87:31:4e:bf:2d: 4e:20:89:50:40:96:ec:e9:aa:1d:1d:1e:49:78:23: c1:b9:be:1c:2f:32:1f:7e:d6:78:c1:23:96:c7:81: 6e:c5:e7:87:e0:2c:12:a0:92:36:e5:f5:02:1b:c1: 3e:ee:1b:3c:18:62:ca:be:3c:2f:43:cc:be:12:e7: cb:dc:71:9b:37:d5:47:78:34:cb:7f:6c:d3:73:5d: dc:f5:c4:03:97:c5:52:91:ad:0a:ef:c2:20:be:71: d9:f7:2e:74:93:d0:76:da:5c:67:79:f7:69:13:f5: 4f:d6:f7:07:f3:c6:c3:41:8f:b4:a3:99:c1:e7:5d: 11:f4:97:53:d0:07:ce:55:fe:1e:85:2c:1b:58:c6: c9:da:3a:1a:1e:16:91:f3:88:72:82:3d:92:82:c9: b9:c9:21:15:de:cf:a3:34:06:d1:f1:6e:f2:53:bd: c2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:5A:7C:35:65:3E:96:E7:E7:79:FC:42:47:20:C1:81:8F:FB:82:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f2bf5543-269c-3fbb-bb59-b3484366fb78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 208.89.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:af:b4:de:00:bb:c7:7d:c5:87:d2:b4:89:b0:93:79:54:2c: 08:8f:6b:df:c4:a7:1a:ba:d4:3a:78:e9:0b:7f:03:39:c5:b1: 80:de:be:d7:62:31:bd:da:a9:f8:87:78:5d:5c:37:88:26:50: 6c:4c:8b:6c:9d:4a:e3:c1:91:39:7e:d5:0f:30:82:1a:78:f5: c3:70:84:2d:39:83:48:91:70:3c:1a:79:ed:e7:a7:cb:93:83: f5:80:5d:66:f0:82:d0:b8:4f:74:bd:e9:e1:c4:8f:4f:a9:7e: 0c:58:76:54:80:17:fa:5e:82:28:83:3b:40:8d:a6:bb:be:ec: 0b:04:e2:b4:e5:3b:bc:62:2d:3b:ec:fc:c9:b8:ac:3c:41:d3: db:f7:6c:d5:75:fa:2b:a1:55:a7:6d:58:5c:bb:10:ae:ff:a0: 3f:52:05:57:5e:ab:47:c9:69:f6:af:b1:72:4a:4b:d7:c7:a0: b9:db:bb:e1:c9:50:e4:6e:f4:4f:67:17:8a:f0:3e:4f:82:2f: 36:c7:3a:27:42:c9:72:d1:63:8b:0e:03:77:d5:da:ff:7f:dd: 15:c7:67:ed:9d:3c:01:19:e5:af:1e:eb:e4:46:bf:c2:46:f1: 1b:c6:1a:91:f5:76:f7:e7:04:5c:0f:a9:c1:75:69:0c:3c:13: 79:b7:cc:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6tHFMSGPqQLKXrAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk MzJiMzU0NDctY2JmNC00NjZhLWE3ODktZTQ5N2ZjYmQzYTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNOZMoffm37wZ6fz4XB6kCqfpoN2Pktk300h Plb562YRVu5uFhk//beQR7d46WdRH/uT0XxGIC1S3a7b/GBqrXAM6hcZUaT3mWei lteXfV34GO86hzFOvy1OIIlQQJbs6aodHR5JeCPBub4cLzIfftZ4wSOWx4FuxeeH 4CwSoJI25fUCG8E+7hs8GGLKvjwvQ8y+EufL3HGbN9VHeDTLf2zTc13c9cQDl8VS ka0K78IgvnHZ9y50k9B22lxnefdpE/VP1vcH88bDQY+0o5nB510R9JdT0AfOVf4e hSwbWMbJ2joaHhaR84hygj2Sgsm5ySEV3s+jNAbR8W7yU73CtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFafDVlPpbn53n8QkcgwYGP+4JWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvZjJiZjU1NDMtMjY5Yy0z ZmJiLWJiNTktYjM0ODQzNjZmYjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Fk0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyvtN4Au8d9xYfStImwk3lULAiPa9/Epxq61Dp46Qt/AznFsYDevtdi Mb3aqfiHeF1cN4gmUGxMi2ydSuPBkTl+1Q8wghp49cNwhC05g0iRcDwaee3np8uT g/WAXWbwgtC4T3S96eHEj0+pfgxYdlSAF/pegiiDO0CNpru+7AsE4rTlO7xiLTvs /Mm4rDxB09v3bNV1+iuhVadtWFy7EK7/oD9SBVdeq0fJafavsXJKS9fHoLnbu+HJ UORu9E9nF4rwPk+CLzbHOidCyXLRY4sOA3fV2v9/3RXHZ+2dPAEZ5a8e6+RGv8JG 8RvGGpH1dvfnBFwPqcF1aQw8E3m3zLA= -----END CERTIFICATE-----Generated at Wed Aug 26 13:07:16 2026 by rpki-client