$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/ae3e7880-cb87-3d85-8e01-d1ee8a570604.roa File: ae3e7880-cb87-3d85-8e01-d1ee8a570604.roa (raw, json) Hash identifier: btSTIGfQQfL2n0tMtUwjwm52QpczR3hP3AQ3n5/N4sk= Subject key identifier: 85:26:C5:50:D7:66:7D:31:CB:F9:39:B8:B9:11:51:3B:32:8C:3C:26 Certificate issuer: /CN=487abf98-3073-43c6-b10e-a615e64ccc65 Certificate serial: 010D0C9F4328584E3A2F72174765B6486D4680C0 Authority key identifier: 50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/ae3e7880-cb87-3d85-8e01-d1ee8a570604.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 16509 IP address blocks: 208.89.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:72:17:47:65:b6:48:6d:46:80:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=487abf98-3073-43c6-b10e-a615e64ccc65 Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=2c6d32bb-add7-4084-89b3-fa080c2280ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f2:d4:26:49:a0:ff:88:84:25:6a:5f:17:a2: 3c:02:dd:42:27:2c:ae:45:f4:f9:42:c7:74:76:ea: a2:70:16:fa:ee:54:4a:51:65:0b:3d:72:22:b3:b3: 92:12:0d:57:31:f2:8d:e0:e8:2c:b4:74:65:3b:ba: 30:e9:d2:3e:d7:dd:0d:cc:19:38:49:0e:44:2b:3c: 64:cf:85:5b:7c:9a:71:31:ac:77:f3:37:b4:31:dd: 26:cb:19:5c:0c:8e:22:6b:e4:1d:47:80:31:3f:a4: 43:62:87:5a:82:d0:d6:2e:c6:dd:ba:98:d5:e6:e4: aa:22:9f:50:85:bd:ba:2a:39:85:5b:67:85:8f:7c: 44:21:3f:7c:10:1c:eb:01:83:6a:9a:42:72:4f:0f: 41:2d:6c:e7:a2:94:03:73:9a:9f:63:1c:b8:85:72: b9:d6:30:0e:0d:a3:53:9f:b6:5a:2b:5d:ae:4d:54: e7:66:8a:a0:ad:47:89:e8:22:fe:05:7d:8c:50:41: eb:c8:67:e9:bd:82:5d:c8:fc:d5:20:9e:08:ee:b5: a9:69:be:a0:5c:b7:72:85:bb:d5:c2:0c:60:3b:45: 70:f1:d5:2c:f1:33:9e:62:56:52:7c:81:c4:f3:45: fc:2d:9a:92:69:af:4b:48:0b:38:5e:88:94:d4:01: bd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:26:C5:50:D7:66:7D:31:CB:F9:39:B8:B9:11:51:3B:32:8C:3C:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/ae3e7880-cb87-3d85-8e01-d1ee8a570604.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl X509v3 Authority Key Identifier: keyid:50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer sbgp-ipAddrBlock: critical IPv4: 208.89.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:35:c9:7b:ba:e0:29:bb:df:b3:16:7c:00:ae:bf:7a:d2:32: 0a:01:03:5f:52:92:b4:de:eb:f8:f1:ad:be:5f:d4:fb:7e:2b: 6f:e2:b6:ff:03:68:f7:8e:fe:62:06:11:dd:64:a8:77:16:f5: b6:c2:a5:67:e1:33:56:1d:3e:47:d1:31:0f:19:d1:54:c5:8a: 79:b8:a2:54:a9:28:d7:4b:f8:4e:bb:e0:6c:ab:25:75:49:eb: c5:2f:e4:1a:ad:68:15:f8:1e:79:9f:24:d1:ce:78:91:50:41: 72:66:5e:1d:7c:0f:95:f2:8d:f7:8d:7f:6d:34:cb:2f:fe:ff: 11:6d:6b:a5:39:eb:5e:4e:3c:66:24:9c:fc:fe:bb:80:79:e9: 28:61:cb:69:2d:1b:76:f6:a4:6f:1c:e3:1f:d5:b0:55:86:7a: fd:6f:38:eb:97:39:6b:c9:84:94:1b:59:81:f2:52:3b:b6:8f: 6d:b7:99:8c:20:cd:e9:1c:5e:52:e2:dd:9e:c5:ce:70:97:f4: 14:f4:5a:b8:79:5f:36:cb:1b:64:e3:01:f6:66:5d:62:bd:51: 4f:4c:ef:9c:71:5c:5c:b1:26:2c:dd:4e:36:26:cd:55:6d:56: aa:f7:71:6b:c4:50:ab:3e:a1:32:d3:be:7a:d3:4e:6d:12:93: d1:60:a1:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE46L3IXR2W2SG1GgMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDg3YWJmOTgtMzA3My00M2M2LWIxMGUtYTYxNWU2NGNj YzY1MB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk MmM2ZDMyYmItYWRkNy00MDg0LTg5YjMtZmEwODBjMjI4MGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvLUJkmg/4iEJWpfF6I8At1CJyyuRfT5Qsd0 duqicBb67lRKUWULPXIis7OSEg1XMfKN4OgstHRlO7ow6dI+190NzBk4SQ5EKzxk z4VbfJpxMax38ze0Md0myxlcDI4ia+QdR4AxP6RDYodagtDWLsbdupjV5uSqIp9Q hb26KjmFW2eFj3xEIT98EBzrAYNqmkJyTw9BLWznopQDc5qfYxy4hXK51jAODaNT n7ZaK12uTVTnZoqgrUeJ6CL+BX2MUEHryGfpvYJdyPzVIJ4I7rWpab6gXLdyhbvV wgxgO0Vw8dUs8TOeYlZSfIHE80X8LZqSaa9LSAs4XoiU1AG9DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUmxVDXZn0xy/k5uLkRUTsyjDwmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdh YmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1ZTY0Y2NjNjUvYWUzZTc4ODAtY2I4Ny0z ZDg1LThlMDEtZDFlZThhNTcwNjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDg3YWJmOTgtMzA3My00M2M2LWIx MGUtYTYxNWU2NGNjYzY1LzQ4N2FiZjk4LTMwNzMtNDNjNi1iMTBlLWE2MTVlNjRj Y2M2NS5jcmwwHwYDVR0jBBgwFoAUUHrkAjzYg+et9qTUFubnFT8KBQowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdhYmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1 ZTY0Y2NjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGU1yXu64Cm737MWfACuv3rSMgoBA19SkrTe6/jxrb5f1Pt+K2/itv8D aPeO/mIGEd1kqHcW9bbCpWfhM1YdPkfRMQ8Z0VTFinm4olSpKNdL+E674GyrJXVJ 68Uv5BqtaBX4HnmfJNHOeJFQQXJmXh18D5XyjfeNf200yy/+/xFta6U5615OPGYk nPz+u4B56Shhy2ktG3b2pG8c4x/VsFWGev1vOOuXOWvJhJQbWYHyUju2j223mYwg zekcXlLi3Z7FznCX9BT0Wrh5XzbLG2TjAfZmXWK9UU9M75xxXFyxJizdTjYmzVVt Vqr3cWvEUKs+oTLTvnrTTm0Sk9Fgobc= -----END CERTIFICATE-----Generated at Wed Jun 24 16:04:58 2026 by rpki-client