$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/d8ce3f7b-9507-3637-9ed2-0792cb53930c.roa File: d8ce3f7b-9507-3637-9ed2-0792cb53930c.roa (raw, json) Hash identifier: 0kz8jvm6g/dK5hJ+hrQ8RsEbAoYkoKMj1iyUepiLCW8= Subject key identifier: FA:83:19:F4:9C:C7:20:25:A4:16:77:AA:13:8D:76:FE:2E:B9:88:71 Certificate issuer: /CN=487abf98-3073-43c6-b10e-a615e64ccc65 Certificate serial: 010D0C9F4328584EDC924851F862AB2622B07300 Authority key identifier: 50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/d8ce3f7b-9507-3637-9ed2-0792cb53930c.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 14618 IP address blocks: 208.89.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:92:48:51:f8:62:ab:26:22:b0:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=487abf98-3073-43c6-b10e-a615e64ccc65 Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=5e0c97ae-5918-4e2b-a3a3-71284d87d53a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2e:a7:c6:35:0c:47:45:14:b9:80:5b:ce:58: 09:7b:5d:c7:b1:72:d8:b6:ee:01:d6:51:0a:39:b5: b4:cc:33:1a:f7:da:0f:b3:9f:35:2f:7e:26:ae:08: ef:18:9a:82:23:3a:68:52:ae:5f:7e:d5:f3:76:c9: dc:30:4e:20:c9:d8:a5:d1:ed:83:bb:7f:86:1b:71: dc:7c:22:b5:4f:63:70:36:5b:f6:b3:20:d6:a8:61: e5:d2:dc:5c:fa:e5:5d:04:57:0e:3a:ff:fe:5f:a9: 21:d1:62:7f:02:f5:77:00:78:99:b9:66:9d:d4:92: 67:61:7d:d7:c4:6f:98:18:3b:49:d8:a4:a9:ec:05: fb:09:26:9f:70:3e:25:3e:5f:cc:cf:41:ab:da:7b: eb:da:25:12:50:4e:d4:58:ae:da:06:6b:02:50:4f: 3e:a5:94:c1:4f:e9:75:72:08:14:94:40:3e:15:4f: a2:fd:58:45:d9:ce:bb:81:73:6f:1b:1a:61:55:10: f5:94:db:96:c8:0b:a6:60:d6:04:ba:3c:88:3a:9c: 8b:e1:e3:29:59:cd:b1:04:b2:c6:c5:7b:0a:75:67: 5b:c4:04:9b:7a:0d:d7:ed:e5:25:de:e9:60:a8:69: 10:6b:c6:ea:86:66:46:bb:97:08:02:41:99:d1:3b: 86:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:83:19:F4:9C:C7:20:25:A4:16:77:AA:13:8D:76:FE:2E:B9:88:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/d8ce3f7b-9507-3637-9ed2-0792cb53930c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl X509v3 Authority Key Identifier: keyid:50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer sbgp-ipAddrBlock: critical IPv4: 208.89.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:82:ba:f8:8c:64:8c:15:4a:d7:1c:26:37:93:f1:9c:30:e8: 02:c7:7a:a8:d5:7a:4a:4a:ed:50:e2:bb:9f:16:a9:93:58:59: 0f:4e:fa:d9:c7:af:1c:5b:b3:33:c3:b7:37:a8:dd:19:34:9f: cb:e8:2a:c3:47:b4:e1:c7:1b:60:f0:cd:5c:13:ac:e4:3e:81: 4b:e7:b0:d8:a8:34:9d:84:dc:99:11:d0:11:7b:b2:95:b5:0a: 3f:03:0e:f3:77:21:ee:9a:59:fc:37:07:a8:25:6a:66:4c:b1: 6b:9f:55:a0:76:f9:88:0c:45:b7:d8:ee:c0:a5:b3:64:2b:04: a9:52:df:d5:4e:bc:de:b3:c1:e5:a6:6a:07:5c:4d:77:28:07: 26:1e:2a:50:5c:cb:50:50:51:be:be:5a:89:f2:cc:4d:4c:1d: 1a:29:ec:21:ac:bc:7c:79:e4:3b:ca:11:ba:43:2a:94:6a:0e: 44:52:89:a6:34:a3:e5:5c:0e:cf:08:7f:af:86:15:65:c8:96: 60:a0:59:dd:08:60:f7:fb:c5:1c:96:a0:5c:66:06:86:3b:46: fa:4e:92:17:9f:3f:8e:8c:7c:fd:0f:f1:15:f4:40:9e:85:8c: 43:dc:60:e6:90:ca:07:8f:0b:29:78:da:65:a3:fb:89:49:1c: ac:a8:e8:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ckkhR+GKrJiKwcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDg3YWJmOTgtMzA3My00M2M2LWIxMGUtYTYxNWU2NGNj YzY1MB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk NWUwYzk3YWUtNTkxOC00ZTJiLWEzYTMtNzEyODRkODdkNTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi6nxjUMR0UUuYBbzlgJe13HsXLYtu4B1lEK ObW0zDMa99oPs581L34mrgjvGJqCIzpoUq5fftXzdsncME4gydil0e2Du3+GG3Hc fCK1T2NwNlv2syDWqGHl0txc+uVdBFcOOv/+X6kh0WJ/AvV3AHiZuWad1JJnYX3X xG+YGDtJ2KSp7AX7CSafcD4lPl/Mz0Gr2nvr2iUSUE7UWK7aBmsCUE8+pZTBT+l1 cggUlEA+FU+i/VhF2c67gXNvGxphVRD1lNuWyAumYNYEujyIOpyL4eMpWc2xBLLG xXsKdWdbxASbeg3X7eUl3ulgqGkQa8bqhmZGu5cIAkGZ0TuGFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqDGfScxyAlpBZ3qhONdv4uuYhxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdh YmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1ZTY0Y2NjNjUvZDhjZTNmN2ItOTUwNy0z NjM3LTllZDItMDc5MmNiNTM5MzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDg3YWJmOTgtMzA3My00M2M2LWIx MGUtYTYxNWU2NGNjYzY1LzQ4N2FiZjk4LTMwNzMtNDNjNi1iMTBlLWE2MTVlNjRj Y2M2NS5jcmwwHwYDVR0jBBgwFoAUUHrkAjzYg+et9qTUFubnFT8KBQowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdhYmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1 ZTY0Y2NjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECCuviMZIwVStccJjeT8Zww6ALHeqjVekpK7VDiu58WqZNYWQ9O+tnH rxxbszPDtzeo3Rk0n8voKsNHtOHHG2DwzVwTrOQ+gUvnsNioNJ2E3JkR0BF7spW1 Cj8DDvN3Ie6aWfw3B6glamZMsWufVaB2+YgMRbfY7sCls2QrBKlS39VOvN6zweWm agdcTXcoByYeKlBcy1BQUb6+WonyzE1MHRop7CGsvHx55DvKEbpDKpRqDkRSiaY0 o+VcDs8If6+GFWXIlmCgWd0IYPf7xRyWoFxmBoY7RvpOkhefP46MfP0P8RX0QJ6F jEPcYOaQygePCyl42mWj+4lJHKyo6FE= -----END CERTIFICATE-----Generated at Thu Aug 20 23:37:58 2026 by rpki-client