$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/571b8118-104e-3581-a5fe-51b7936e3a4e.roa File: 571b8118-104e-3581-a5fe-51b7936e3a4e.roa (raw, json) Hash identifier: KyKEBvVzJs3hCgyuiao1N7vXEcyP3c1EpJdjCPbOpxc= Subject key identifier: 8A:40:E3:83:AE:12:C6:F2:AA:DA:54:B2:A2:C6:AC:44:B8:1E:D9:1B Certificate issuer: /CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b Certificate serial: 010D0C9F4328584D2BDA1C7624D9AB03B8ABD640 Authority key identifier: 6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/571b8118-104e-3581-a5fe-51b7936e3a4e.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 16509 IP address blocks: 208.88.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:1c:76:24:d9:ab:03:b8:ab:d6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=903dfe0e-83c2-47b8-8602-251c49032871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fd:96:45:30:84:a4:71:25:87:31:94:04:46: 1a:41:0c:24:d1:94:01:68:b8:88:5f:88:b7:ff:4f: 21:02:6d:30:1d:7e:d5:f9:27:1b:21:10:40:9e:08: aa:6c:34:93:ee:a7:97:7a:37:69:78:b1:66:2e:5f: b9:d1:dc:00:07:0e:c0:69:26:09:81:39:29:d5:9f: f4:44:b7:f5:1b:53:0e:47:14:3c:90:ca:5a:aa:4b: c2:e8:b2:a2:60:1b:fc:e7:25:de:65:1e:11:f2:88: a6:9c:82:33:25:09:84:79:7a:b2:11:43:f3:03:5f: 3a:ec:77:94:7e:4a:48:39:1c:95:a0:16:b8:7f:76: ac:89:55:03:9b:de:a1:07:27:fc:f5:35:28:13:5e: c6:7c:73:91:49:8c:79:41:28:a7:1c:00:09:53:63: 02:3b:42:64:0a:44:e7:68:2f:a1:3d:65:c1:20:81: 7a:19:2c:ca:05:a1:96:de:7f:97:69:82:62:de:e3: 21:5c:09:70:ba:f6:ad:e0:6c:0c:fd:ae:83:56:28: 96:a8:95:77:7d:13:01:f4:4f:ad:ba:41:fa:01:55: 09:6c:dd:e6:28:a8:d3:1f:c3:4a:65:a5:7d:5c:8c: 82:7e:c5:51:96:b9:07:38:11:b4:ea:94:90:95:eb: 63:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:40:E3:83:AE:12:C6:F2:AA:DA:54:B2:A2:C6:AC:44:B8:1E:D9:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/571b8118-104e-3581-a5fe-51b7936e3a4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl X509v3 Authority Key Identifier: keyid:6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer sbgp-ipAddrBlock: critical IPv4: 208.88.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:c5:1e:9e:a7:0c:f1:ad:aa:36:45:d6:52:63:bd:eb:07:2c: f6:15:30:7c:34:98:94:48:29:a9:b9:cb:6c:a4:8f:36:a1:c7: e2:27:de:f3:3c:f6:d7:38:44:e8:ee:fb:9d:07:fe:37:f3:89: 89:9a:07:c3:45:3b:11:a2:aa:10:80:7a:1b:c7:6d:0a:2f:4a: 6b:3b:7e:bb:fa:1d:b2:ce:d5:73:54:94:d5:bf:57:76:36:bf: e5:ab:dd:27:c5:b1:53:da:50:65:46:fa:95:56:c9:29:37:8b: 8b:a1:44:4e:7c:c2:72:0e:e2:dc:34:83:73:33:74:7d:0d:91: 1c:92:cb:a0:b1:4f:33:05:bc:9a:e8:3c:20:1f:2a:e2:df:03: cc:5c:02:bc:46:d8:42:68:b8:d8:a3:64:ea:73:71:27:40:46: 61:37:ac:75:d4:cb:a6:64:d3:81:97:98:70:7a:90:5f:f1:0c: 3d:46:05:ef:92:f6:99:52:46:61:b8:01:27:06:73:34:49:99: 6a:21:bd:e6:0e:a9:85:93:53:1f:cc:7c:ea:7f:f0:1f:04:ce: 6c:ac:b7:2a:a5:1c:ff:a8:08:a8:2e:52:f2:72:5e:a9:e9:a6: 4b:ac:13:2f:fd:2d:f0:91:08:88:92:e7:ab:88:26:36:30:47: da:a5:bd:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2hx2JNmrA7ir1kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2ZGI0ZWItNDA0MS00YWY4LWI2NGQtZjJlOGI3YmMw NDhiMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk OTAzZGZlMGUtODNjMi00N2I4LTg2MDItMjUxYzQ5MDMyODcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/2WRTCEpHElhzGUBEYaQQwk0ZQBaLiIX4i3 /08hAm0wHX7V+ScbIRBAngiqbDST7qeXejdpeLFmLl+50dwABw7AaSYJgTkp1Z/0 RLf1G1MORxQ8kMpaqkvC6LKiYBv85yXeZR4R8oimnIIzJQmEeXqyEUPzA1867HeU fkpIORyVoBa4f3asiVUDm96hByf89TUoE17GfHORSYx5QSinHAAJU2MCO0JkCkTn aC+hPWXBIIF6GSzKBaGW3n+XaYJi3uMhXAlwuvat4GwM/a6DViiWqJV3fRMB9E+t ukH6AVUJbN3mKKjTH8NKZaV9XIyCfsVRlrkHOBG06pSQletjmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIpA44OuEsbyqtpUsqLGrES4HtkbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iODZk YjRlYi00MDQxLTRhZjgtYjY0ZC1mMmU4YjdiYzA0OGIvNTcxYjgxMTgtMTA0ZS0z NTgxLWE1ZmUtNTFiNzkzNmUzYTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjg2ZGI0ZWItNDA0MS00YWY4LWI2 NGQtZjJlOGI3YmMwNDhiL2I4NmRiNGViLTQwNDEtNGFmOC1iNjRkLWYyZThiN2Jj MDQ4Yi5jcmwwHwYDVR0jBBgwFoAUa8ITUOp05WaWTNRMgjyklz6m1dMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iODZkYjRlYi00MDQxLTRhZjgtYjY0ZC1mMmU4 YjdiYzA0OGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FghMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfFHp6nDPGtqjZF1lJjvesHLPYVMHw0mJRIKam5y2ykjzahx+In3vM8 9tc4ROju+50H/jfziYmaB8NFOxGiqhCAehvHbQovSms7frv6HbLO1XNUlNW/V3Y2 v+Wr3SfFsVPaUGVG+pVWySk3i4uhRE58wnIO4tw0g3MzdH0NkRySy6CxTzMFvJro PCAfKuLfA8xcArxG2EJouNijZOpzcSdARmE3rHXUy6Zk04GXmHB6kF/xDD1GBe+S 9plSRmG4AScGczRJmWohveYOqYWTUx/MfOp/8B8EzmystyqlHP+oCKguUvJyXqnp pkusEy/9LfCRCIiS56uIJjYwR9qlvbo= -----END CERTIFICATE-----Generated at Thu Mar 19 12:33:30 2026 by rpki-client