$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/571b8118-104e-3581-a5fe-51b7936e3a4e.roa File: 571b8118-104e-3581-a5fe-51b7936e3a4e.roa (raw, json) Hash identifier: 8Ucxib7infwgaPWZCXyoEBnX8RwPfesAvyiX2ZvO7DI= Subject key identifier: 5C:31:A1:BA:AE:C4:92:1A:F2:70:0B:38:EE:3F:7D:07:B9:08:13:32 Certificate issuer: /CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b Certificate serial: 010D0C9F4328584EAE81A232F27B3B4A7E627E80 Authority key identifier: 6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/571b8118-104e-3581-a5fe-51b7936e3a4e.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 16509 IP address blocks: 208.88.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:a2:32:f2:7b:3b:4a:7e:62:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=98f48673-7866-4152-bada-052fa8a3dd50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8e:38:f7:2d:34:52:a4:8e:cd:32:d1:14:a6: 32:f8:ae:d9:e7:a8:ea:c7:ed:79:bb:a2:67:b3:c0: 1b:c5:ac:88:96:51:fa:f4:4a:2e:96:5b:4a:a4:8f: ef:51:bd:d3:02:8f:63:c5:ee:7b:d6:db:b2:03:98: a5:b2:58:1b:7b:82:db:d5:1e:73:ff:df:9b:ad:d5: 1a:7f:b9:d8:9d:d9:a5:cb:31:22:b4:cb:a3:a4:50: 8d:41:07:05:3b:01:e9:50:8a:d2:75:ac:3e:77:bb: 96:62:50:11:27:f8:72:df:4b:cb:82:9b:9c:fe:7d: 0b:d5:f6:49:00:87:b9:08:90:9d:20:2a:55:d7:79: 7f:56:6d:05:1c:c9:87:71:17:81:ca:07:3e:75:04: 76:d7:05:f9:b1:e6:dc:1f:e6:b8:8c:40:04:11:ee: 22:27:e1:a0:bd:38:b7:c8:dd:81:ce:35:99:5d:a7: 23:c3:23:4a:c4:8d:81:0e:1e:16:22:a1:25:08:6f: eb:e7:44:26:7f:17:6e:a8:12:1b:78:f1:71:f5:41: 67:3b:44:10:45:e8:b8:0a:d1:10:3d:26:30:3d:9d: 92:65:04:5a:c1:2f:90:71:7a:b9:c1:bb:8e:d9:ff: e5:ea:7b:9d:ca:d2:c3:a1:c7:c6:8b:d6:68:2c:6c: 17:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:31:A1:BA:AE:C4:92:1A:F2:70:0B:38:EE:3F:7D:07:B9:08:13:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/571b8118-104e-3581-a5fe-51b7936e3a4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl X509v3 Authority Key Identifier: keyid:6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer sbgp-ipAddrBlock: critical IPv4: 208.88.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:07:7b:19:60:82:0a:50:aa:18:33:be:16:df:ec:93:52:a3: a9:44:32:13:f7:76:a5:13:04:25:2e:52:21:0d:16:7c:79:39: 07:07:ed:90:2c:23:55:12:db:b7:c6:15:ff:03:10:2b:86:f2: 34:18:1f:95:bd:e1:33:da:97:b8:45:e8:13:d6:e9:c5:ab:93: d7:27:05:e3:9b:c4:26:b2:c9:51:ff:07:ca:41:e5:ec:43:49: a7:0b:9f:9f:47:ee:94:0e:53:ba:63:d7:2c:3a:26:f2:c8:18: e5:b2:0e:cc:b7:0a:6e:70:2a:52:6b:50:aa:be:5b:e7:4d:ea: a3:19:94:27:b4:5f:82:28:c2:d0:2b:a9:56:7b:3b:1a:5f:b0: b7:aa:0f:24:0c:94:d8:c1:3b:66:f3:d2:87:08:6c:c0:05:58: 66:cb:5e:eb:b2:ab:42:83:20:b4:e0:79:e5:0c:e0:4c:a1:11: 5d:d8:ef:e4:4f:0c:43:b6:41:a7:03:d5:fd:d3:e0:50:7c:1a: ad:1a:b3:88:4b:c2:3b:e9:2c:d1:20:b1:97:e6:72:46:bb:88: 71:1d:e6:f6:a5:81:fa:70:9c:87:ab:2f:4a:87:8b:28:3d:fa: 47:85:60:68:0e:b4:18:15:80:52:c3:f7:ed:79:da:0d:cd:55: a4:f8:00:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugaIy8ns7Sn5ifoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2ZGI0ZWItNDA0MS00YWY4LWI2NGQtZjJlOGI3YmMw NDhiMB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk OThmNDg2NzMtNzg2Ni00MTUyLWJhZGEtMDUyZmE4YTNkZDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgY449y00UqSOzTLRFKYy+K7Z56jqx+15u6Jn s8AbxayIllH69EoulltKpI/vUb3TAo9jxe571tuyA5ilslgbe4Lb1R5z/9+brdUa f7nYndmlyzEitMujpFCNQQcFOwHpUIrSdaw+d7uWYlARJ/hy30vLgpuc/n0L1fZJ AIe5CJCdICpV13l/Vm0FHMmHcReBygc+dQR21wX5sebcH+a4jEAEEe4iJ+GgvTi3 yN2BzjWZXacjwyNKxI2BDh4WIqElCG/r50QmfxduqBIbePFx9UFnO0QQRei4CtEQ PSYwPZ2SZQRawS+QcXq5wbuO2f/l6nudytLDocfGi9ZoLGwXNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwxobquxJIa8nALOO4/fQe5CBMyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iODZk YjRlYi00MDQxLTRhZjgtYjY0ZC1mMmU4YjdiYzA0OGIvNTcxYjgxMTgtMTA0ZS0z NTgxLWE1ZmUtNTFiNzkzNmUzYTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjg2ZGI0ZWItNDA0MS00YWY4LWI2 NGQtZjJlOGI3YmMwNDhiL2I4NmRiNGViLTQwNDEtNGFmOC1iNjRkLWYyZThiN2Jj MDQ4Yi5jcmwwHwYDVR0jBBgwFoAUa8ITUOp05WaWTNRMgjyklz6m1dMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iODZkYjRlYi00MDQxLTRhZjgtYjY0ZC1mMmU4 YjdiYzA0OGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FghMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMHexlgggpQqhgzvhbf7JNSo6lEMhP3dqUTBCUuUiENFnx5OQcH7ZAs I1US27fGFf8DECuG8jQYH5W94TPal7hF6BPW6cWrk9cnBeObxCayyVH/B8pB5exD SacLn59H7pQOU7pj1yw6JvLIGOWyDsy3Cm5wKlJrUKq+W+dN6qMZlCe0X4IowtAr qVZ7OxpfsLeqDyQMlNjBO2bz0ocIbMAFWGbLXuuyq0KDILTgeeUM4EyhEV3Y7+RP DEO2QacD1f3T4FB8Gq0as4hLwjvpLNEgsZfmcka7iHEd5valgfpwnIerL0qHiyg9 +keFYGgOtBgVgFLD9+152g3NVaT4AGU= -----END CERTIFICATE-----Generated at Thu Aug 20 23:38:40 2026 by rpki-client