$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/56839789-9117-3bbe-a93a-9673ed9152fd.roa File: 56839789-9117-3bbe-a93a-9673ed9152fd.roa (raw, json) Hash identifier: cGL7qKcES0EZcQmaMGQ8lrPnVp7OtwbGxlgKHfyqNJA= Subject key identifier: 45:FA:4D:4E:5D:A9:F1:58:F5:B7:DF:8D:65:30:2E:42:E0:56:AD:7F Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584ECBD1DAF07D1D74E5C9B290A0 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/56839789-9117-3bbe-a93a-9673ed9152fd.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 25899 IP address blocks: 208.56.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:da:f0:7d:1d:74:e5:c9:b2:90:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=a350bb5a-4428-4f31-a8a3-d2a4d1bf3943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:02:b1:09:62:39:04:e6:a1:f8:15:e7:01:d6: 07:3e:5b:be:b5:33:89:35:05:cf:1f:30:29:6a:2b: 0e:2d:b0:4e:62:44:65:b5:53:2f:a8:d2:16:81:55: cf:2d:48:38:07:3b:e0:d5:56:82:e3:d1:4c:f9:c8: 45:5d:bd:b4:6c:ed:95:4a:7c:2d:a5:d5:f8:1d:10: f2:e2:75:e1:e3:ef:0e:a4:53:6f:6b:05:a1:3e:4c: d6:8d:e8:65:fc:ac:0a:d2:44:1e:c5:6a:82:ea:9c: 37:74:65:fe:bf:c6:e8:06:37:8b:c4:bd:c0:e6:8a: 4c:92:70:dd:56:4c:b6:89:22:56:0c:65:da:fc:fc: 0c:dc:46:9d:f1:94:f8:33:0d:c3:99:63:28:dc:19: 0e:bb:49:fa:6f:c2:33:bf:06:23:f4:61:01:7c:63: 99:29:23:49:4d:c9:e4:b5:a2:5f:91:43:6e:13:a5: 27:04:ca:ae:63:98:75:c1:10:68:a3:1f:96:b1:e7: 2d:42:3d:c5:0a:97:7a:9f:f1:95:09:24:d1:7c:c2: f4:02:da:63:2e:ce:78:41:29:a0:54:af:bb:82:42: c3:84:0e:01:99:8c:a5:36:a5:14:d8:d1:4b:ac:ae: be:13:63:ff:b0:dc:c5:4b:6d:9f:49:89:52:67:7f: f1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:FA:4D:4E:5D:A9:F1:58:F5:B7:DF:8D:65:30:2E:42:E0:56:AD:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/56839789-9117-3bbe-a93a-9673ed9152fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 208.56.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:0c:5b:2d:38:f6:03:0f:cb:83:01:14:6a:36:a6:ad:c6:06: 5d:8f:52:a9:11:8f:aa:57:a4:c4:7f:4e:47:e5:72:fe:06:0e: 0e:ba:f1:9c:75:45:fc:01:c7:c1:60:10:db:79:5d:9b:42:1b: a8:37:d9:ab:9c:fd:a6:7e:7e:84:81:29:2f:d0:06:29:a0:c3: 39:5d:69:0a:40:0b:c0:d1:71:4e:14:9c:3f:08:1e:f9:a4:80: 51:09:eb:c8:f1:6a:c0:56:85:e8:e8:ab:a6:9e:64:36:99:d3: fe:1e:53:3f:3c:09:fe:91:53:ac:e8:32:7f:96:2c:63:e1:a7: 90:be:1d:0c:28:16:46:36:fd:d3:ce:95:c7:18:fd:c4:56:bf: 65:03:c5:ba:41:9a:d7:6a:99:a7:f9:a6:43:c6:96:4a:79:c7: 95:b4:87:ac:90:6e:c9:57:5c:e4:76:b2:72:25:b3:ac:68:88: 02:53:e3:e3:be:f1:f5:3f:b4:fc:10:9a:4e:69:b2:1d:c6:dc: a7:60:d8:bd:af:8e:04:c0:1e:ae:e2:8c:c6:58:9d:56:ed:ed: 30:31:1d:25:6a:e0:7c:32:aa:11:4e:eb:db:87:b9:21:9c:f9: f2:69:78:72:80:4b:6d:90:70:28:4c:ff:a9:e9:0b:19:5c:07: d7:dd:c9:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0drwfR105cmykKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk YTM1MGJiNWEtNDQyOC00ZjMxLWE4YTMtZDJhNGQxYmYzOTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgKxCWI5BOah+BXnAdYHPlu+tTOJNQXPHzAp aisOLbBOYkRltVMvqNIWgVXPLUg4Bzvg1VaC49FM+chFXb20bO2VSnwtpdX4HRDy 4nXh4+8OpFNvawWhPkzWjehl/KwK0kQexWqC6pw3dGX+v8boBjeLxL3A5opMknDd Vky2iSJWDGXa/PwM3Ead8ZT4Mw3DmWMo3BkOu0n6b8IzvwYj9GEBfGOZKSNJTcnk taJfkUNuE6UnBMquY5h1wRBoox+WsectQj3FCpd6n/GVCSTRfML0AtpjLs54QSmg VK+7gkLDhA4BmYylNqUU2NFLrK6+E2P/sNzFS22fSYlSZ3/xOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEX6TU5dqfFY9bffjWUwLkLgVq1/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvNTY4Mzk3ODktOTExNy0z YmJlLWE5M2EtOTY3M2VkOTE1MmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0DjoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEMWy049gMPy4MBFGo2pq3GBl2PUqkRj6pXpMR/Tkflcv4GDg668Zx1 RfwBx8FgENt5XZtCG6g32auc/aZ+foSBKS/QBimgwzldaQpAC8DRcU4UnD8IHvmk gFEJ68jxasBWhejoq6aeZDaZ0/4eUz88Cf6RU6zoMn+WLGPhp5C+HQwoFkY2/dPO lccY/cRWv2UDxbpBmtdqmaf5pkPGlkp5x5W0h6yQbslXXOR2snIls6xoiAJT4+O+ 8fU/tPwQmk5psh3G3Kdg2L2vjgTAHq7ijMZYnVbt7TAxHSVq4HwyqhFO69uHuSGc +fJpeHKAS22QcChM/6npCxlcB9fdyTA= -----END CERTIFICATE-----Generated at Mon Aug 31 11:24:56 2026 by rpki-client