$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3c5788b1-7c82-3275-9457-c61ff52b2890.roa File: 3c5788b1-7c82-3275-9457-c61ff52b2890.roa (raw, json) Hash identifier: LjslRuqSH5KJexPaN71qPKY2qseCFKQD3TkPVYU2YxM= Subject key identifier: 26:ED:B6:41:1F:42:59:07:F3:20:31:41:02:AB:BB:66:E8:4A:33:DD Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584EBB11B96E87207C6770BEE580 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3c5788b1-7c82-3275-9457-c61ff52b2890.roa Signing time: Wed 05 Aug 2026 01:00:12 +0000 ROA not before: Wed 05 Aug 2026 01:00:12 +0000 ROA not after: Tue 03 Nov 2026 02:00:12 +0000 asID: 397422 IP address blocks: 208.56.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bb:11:b9:6e:87:20:7c:67:70:be:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Aug 5 01:00:12 2026 GMT Not After : Nov 3 02:00:12 2026 GMT Subject: CN=2edf49b1-5da1-4e2c-aeb8-33e47203543a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:95:42:b5:23:ed:e7:57:53:f1:dc:f2:a2:02: 0e:ed:a7:59:bd:07:12:a2:f4:56:e0:d5:5f:c6:71: c6:39:ac:44:21:d5:14:70:e7:0c:d5:1d:ee:ec:d7: 29:7b:c8:e8:96:6a:a5:fb:99:be:ca:07:22:d5:4b: ae:15:57:9f:02:02:ce:eb:7c:ca:4a:52:7e:e5:2d: ee:74:85:de:fd:86:0d:c3:9c:7b:e1:7b:7a:24:5b: 22:da:38:02:1b:53:00:fd:21:3e:0d:b2:64:e2:30: 38:e2:57:d4:c8:ea:42:79:73:1d:22:26:ea:cc:d2: 93:21:ba:20:09:2b:fb:df:21:85:80:ce:2a:5d:44: 17:8c:27:12:4a:0c:b0:a6:75:95:ef:05:2c:32:27: 05:f6:db:ec:0c:7b:7f:68:a1:3f:fa:0a:1d:ec:96: 72:07:94:c8:82:4b:ce:89:8d:16:83:1a:6e:cc:5b: 0a:a8:37:2f:4c:75:b6:b9:6e:82:8f:d6:44:8d:7f: 9f:26:4b:65:08:0a:24:3e:43:7a:ec:55:74:e4:c1: 1f:e0:06:1a:a6:c3:82:fc:91:12:60:c3:db:35:b8: b7:1d:9a:11:97:d6:b7:8d:2d:38:f5:00:c3:7b:97: 67:95:49:61:86:48:21:4b:d6:93:53:1e:38:a0:58: f4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:ED:B6:41:1F:42:59:07:F3:20:31:41:02:AB:BB:66:E8:4A:33:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3c5788b1-7c82-3275-9457-c61ff52b2890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 208.56.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:d7:94:57:a7:9c:7e:16:74:da:d2:ba:28:ad:63:12:f0:52: a6:4f:ba:04:0c:73:eb:dd:3c:2f:6f:f1:67:87:18:cb:b3:9b: 4b:62:f2:75:9e:4a:c9:ee:78:cc:8a:f5:97:6c:40:69:65:db: 7c:dd:31:3a:d4:81:1e:f4:88:ff:65:bb:0a:ae:e9:93:11:8c: bf:5f:26:2f:17:21:47:20:35:60:0a:7b:d0:f0:9c:93:09:29: 1e:51:77:b2:b0:13:6e:7c:32:53:91:ab:b1:77:40:46:c8:d9: f0:21:cd:93:e2:01:0c:51:c7:e7:ce:2e:1f:9a:f0:aa:e0:27: fc:41:b2:85:12:54:8b:78:51:81:10:8e:e6:1c:ce:48:6a:67: 55:ad:27:65:1e:e8:6c:97:aa:fb:a6:8d:05:be:dc:04:2c:7e: f0:bb:1f:42:ee:a7:cd:f6:66:d0:bd:ea:0d:bc:bb:94:96:2a: 41:c7:0e:ab:06:fc:5c:52:51:56:5a:97:45:b6:b9:4c:72:da: 57:d3:90:47:26:a3:84:55:f0:01:1f:5f:7b:98:f2:aa:bf:6b: be:a8:7f:67:a1:2d:ae:b4:47:27:48:17:f8:da:3a:3c:cd:46: 50:8f:b8:af:10:32:c7:4c:33:68:11:b4:73:26:cd:b3:4f:8c: 9a:78:4a:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE67EbluhyB8Z3C+5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk MmVkZjQ5YjEtNWRhMS00ZTJjLWFlYjgtMzNlNDcyMDM1NDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5VCtSPt51dT8dzyogIO7adZvQcSovRW4NVf xnHGOaxEIdUUcOcM1R3u7Ncpe8jolmql+5m+ygci1UuuFVefAgLO63zKSlJ+5S3u dIXe/YYNw5x74Xt6JFsi2jgCG1MA/SE+DbJk4jA44lfUyOpCeXMdIibqzNKTIbog CSv73yGFgM4qXUQXjCcSSgywpnWV7wUsMicF9tvsDHt/aKE/+god7JZyB5TIgkvO iY0WgxpuzFsKqDcvTHW2uW6Cj9ZEjX+fJktlCAokPkN67FV05MEf4AYapsOC/JES YMPbNbi3HZoRl9a3jS049QDDe5dnlUlhhkghS9aTUx44oFj0NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbttkEfQlkH8yAxQQKru2boSjPdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvM2M1Nzg4YjEtN2M4Mi0z Mjc1LTk0NTctYzYxZmY1MmIyODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DjuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrXlFennH4WdNrSuiitYxLwUqZPugQMc+vdPC9v8WeHGMuzm0ti8nWe SsnueMyK9ZdsQGll23zdMTrUgR70iP9luwqu6ZMRjL9fJi8XIUcgNWAKe9DwnJMJ KR5Rd7KwE258MlORq7F3QEbI2fAhzZPiAQxRx+fOLh+a8KrgJ/xBsoUSVIt4UYEQ juYczkhqZ1WtJ2Ue6GyXqvumjQW+3AQsfvC7H0Lup832ZtC96g28u5SWKkHHDqsG /FxSUVZal0W2uUxy2lfTkEcmo4RV8AEfX3uY8qq/a76of2ehLa60RydIF/jaOjzN RlCPuK8QMsdMM2gRtHMmzbNPjJp4SlI= -----END CERTIFICATE-----Generated at Mon Aug 31 11:24:25 2026 by rpki-client