$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/d8ce3f7b-9507-3637-9ed2-0792cb53930c.roa File: d8ce3f7b-9507-3637-9ed2-0792cb53930c.roa (raw, json) Hash identifier: v6Sf2l61RzBgkE/8gcL1YNNj+lk/C40RmRAq85ieDPM= Subject key identifier: 52:56:C5:DC:7A:7B:C8:C2:38:88:68:20:80:42:90:28:D5:A3:13:B0 Certificate issuer: /CN=487abf98-3073-43c6-b10e-a615e64ccc65 Certificate serial: 010D0C9F4328584E3A2F734399D154B75A792900 Authority key identifier: 50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/d8ce3f7b-9507-3637-9ed2-0792cb53930c.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 14618 IP address blocks: 208.89.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:73:43:99:d1:54:b7:5a:79:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=487abf98-3073-43c6-b10e-a615e64ccc65 Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=5965825c-4946-4e68-b5b5-d91b43d386b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f9:4d:19:05:89:1f:7f:2b:c6:e4:ef:0e:37: 60:79:3a:c3:db:32:74:60:3d:5f:7f:15:a7:24:81: bd:6a:36:08:53:40:05:ae:03:33:ea:00:39:fd:92: d9:2b:6e:0d:0f:1f:f7:64:03:f3:77:e1:63:c4:02: d9:49:0b:48:4e:3a:15:05:3b:b8:f2:42:6b:f8:f0: 47:07:3e:bb:89:20:fc:0b:a1:41:54:4d:cd:de:d8: 22:86:96:e1:07:d9:ac:f0:92:62:af:4a:f6:21:75: 7b:7b:f7:d3:ed:c7:f7:bb:14:3a:19:72:d8:40:b8: a9:d8:21:1e:11:51:3b:da:c4:7e:0a:09:4f:7e:31: 04:16:bf:55:06:50:8e:8f:6b:45:54:58:0c:65:32: 20:f4:be:57:97:49:66:9f:57:36:14:7f:d3:1d:2e: 3f:27:29:d3:8c:57:8b:52:24:81:91:c2:22:73:c1: 84:b4:38:37:b9:14:93:0b:b2:54:78:3e:e6:97:b7: bb:2b:ec:3b:b6:c2:fa:d5:21:47:a4:f9:94:eb:2d: 79:87:e8:5a:cc:0f:b6:15:31:3e:9c:d2:f0:a8:2d: 7b:c6:c0:f5:5c:0e:e9:40:41:6d:a6:c5:b8:f8:3e: 26:6b:60:dd:0d:1b:35:2e:75:14:32:d9:09:76:b6: ca:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:56:C5:DC:7A:7B:C8:C2:38:88:68:20:80:42:90:28:D5:A3:13:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/d8ce3f7b-9507-3637-9ed2-0792cb53930c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl X509v3 Authority Key Identifier: keyid:50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer sbgp-ipAddrBlock: critical IPv4: 208.89.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:84:91:75:c6:03:12:5d:09:39:6d:18:9f:9d:4b:da:f7:e3: bc:b9:6d:3e:54:b4:8f:5d:29:b9:ae:4e:1a:67:da:8f:16:d4: 0e:49:8a:f1:73:74:a0:e8:4e:63:c1:7b:a6:ae:89:c7:f4:bd: 5c:66:7d:70:26:79:50:b4:ab:e7:af:79:bc:c3:2d:8b:a5:b6: 1a:a3:69:18:44:58:b5:0d:82:bd:ce:fd:fc:d2:8c:67:86:82: 9c:be:bf:85:f0:e3:38:2b:07:11:aa:f5:08:97:2f:54:77:30: e7:49:0c:08:61:29:d2:0d:b7:26:40:68:12:4e:0c:74:0c:3f: 2a:08:9e:16:bd:19:e7:84:4a:a1:4c:87:1e:32:ca:66:4f:91: f8:27:38:2f:dd:bf:99:56:b3:8b:b2:73:8a:75:d7:43:48:e9: 8b:5a:e3:e4:e1:37:2a:8c:e9:66:d9:e8:7f:c1:2d:ec:45:f0: 0e:8f:23:f6:df:2e:26:ca:c8:ae:ad:30:d0:e6:db:64:f4:06: 12:93:dc:6e:63:ef:95:12:88:75:4f:b5:26:0d:ed:f7:f7:81: ae:4e:ec:d2:db:4d:69:51:03:fe:ab:84:e5:2c:d6:27:1b:47: f2:75:1b:ee:d1:45:40:97:61:ab:d0:5d:03:5f:0e:e2:5f:2d: 8e:30:82:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE46L3NDmdFUt1p5KQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDg3YWJmOTgtMzA3My00M2M2LWIxMGUtYTYxNWU2NGNj YzY1MB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk NTk2NTgyNWMtNDk0Ni00ZTY4LWI1YjUtZDkxYjQzZDM4NmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPlNGQWJH38rxuTvDjdgeTrD2zJ0YD1ffxWn JIG9ajYIU0AFrgMz6gA5/ZLZK24NDx/3ZAPzd+FjxALZSQtITjoVBTu48kJr+PBH Bz67iSD8C6FBVE3N3tgihpbhB9ms8JJir0r2IXV7e/fT7cf3uxQ6GXLYQLip2CEe EVE72sR+CglPfjEEFr9VBlCOj2tFVFgMZTIg9L5Xl0lmn1c2FH/THS4/JynTjFeL UiSBkcIic8GEtDg3uRSTC7JUeD7ml7e7K+w7tsL61SFHpPmU6y15h+hazA+2FTE+ nNLwqC17xsD1XA7pQEFtpsW4+D4ma2DdDRs1LnUUMtkJdrbKxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJWxdx6e8jCOIhoIIBCkCjVoxOwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdh YmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1ZTY0Y2NjNjUvZDhjZTNmN2ItOTUwNy0z NjM3LTllZDItMDc5MmNiNTM5MzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDg3YWJmOTgtMzA3My00M2M2LWIx MGUtYTYxNWU2NGNjYzY1LzQ4N2FiZjk4LTMwNzMtNDNjNi1iMTBlLWE2MTVlNjRj Y2M2NS5jcmwwHwYDVR0jBBgwFoAUUHrkAjzYg+et9qTUFubnFT8KBQowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdhYmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1 ZTY0Y2NjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICEkXXGAxJdCTltGJ+dS9r347y5bT5UtI9dKbmuThpn2o8W1A5JivFz dKDoTmPBe6auicf0vVxmfXAmeVC0q+evebzDLYulthqjaRhEWLUNgr3O/fzSjGeG gpy+v4Xw4zgrBxGq9QiXL1R3MOdJDAhhKdINtyZAaBJODHQMPyoInha9GeeESqFM hx4yymZPkfgnOC/dv5lWs4uyc4p110NI6Yta4+ThNyqM6WbZ6H/BLexF8A6PI/bf LibKyK6tMNDm22T0BhKT3G5j75USiHVPtSYN7ff3ga5O7NLbTWlRA/6rhOUs1icb R/J1G+7RRUCXYavQXQNfDuJfLY4wgig= -----END CERTIFICATE-----Generated at Wed Jun 24 16:06:37 2026 by rpki-client