$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/8f5dcde3-cde7-377c-a19d-736f822a5fbd.roa File: 8f5dcde3-cde7-377c-a19d-736f822a5fbd.roa (raw, json) Hash identifier: 3deHjsLHGiymmbq+JEt0cbUDUCoVp9ktpXAIZcurqYA= Subject key identifier: 7A:FB:B0:E8:B6:F8:C9:A2:38:27:C8:D3:62:B8:C1:2B:8E:6B:89:18 Certificate issuer: /CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b Certificate serial: 010D0C9F4328584D2BDA1C89A6468E1DAF9A3500 Authority key identifier: 6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/8f5dcde3-cde7-377c-a19d-736f822a5fbd.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 14618 IP address blocks: 208.88.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:1c:89:a6:46:8e:1d:af:9a:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=75923037-da15-4c63-afc7-f63ba4b27178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:47:51:27:4b:00:13:e6:62:ec:00:1a:88:a6: 86:a9:64:f5:ce:b3:4d:3b:98:dd:96:41:5e:19:b0: c6:88:31:b9:2b:68:9e:7c:41:e2:73:b3:fb:6c:2b: 3b:f5:28:67:17:11:0f:03:2f:41:7d:19:3a:56:fa: bf:ec:f4:d2:ce:a5:86:7e:c8:f4:cf:6d:c1:2b:6a: b6:97:d1:c5:9e:ad:f4:dd:5d:99:53:41:bc:d5:37: d4:9b:de:aa:cd:0f:07:56:a5:54:a7:ab:6d:70:55: 80:3e:27:07:47:b1:4d:ac:ac:03:9b:73:f0:4f:70: 88:48:47:53:3e:42:f6:4b:6f:55:30:d2:de:1f:38: d5:4c:6e:3b:d6:8e:9d:37:b1:ca:cd:9b:60:c1:f6: 10:8b:55:84:a4:74:d3:fc:ce:4f:c4:c3:60:a4:c1: 1b:65:02:ef:30:bd:17:f2:52:df:d9:a2:58:0b:c2: 6f:04:fb:1e:57:31:14:5f:0d:40:c9:e4:62:2d:af: 57:c1:5e:a9:63:31:5a:b7:70:d8:44:cd:72:16:67: 32:67:d8:d8:5b:3d:31:1f:a8:73:30:5b:de:3d:c4: c9:0f:1b:e8:e9:8d:21:9b:1c:91:0e:b0:c8:82:6c: d2:66:e9:95:e1:9e:65:b9:6e:cc:d4:04:ef:66:d4: cf:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:FB:B0:E8:B6:F8:C9:A2:38:27:C8:D3:62:B8:C1:2B:8E:6B:89:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/8f5dcde3-cde7-377c-a19d-736f822a5fbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl X509v3 Authority Key Identifier: keyid:6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer sbgp-ipAddrBlock: critical IPv4: 208.88.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:c3:78:2e:0b:77:37:40:cf:a2:01:8f:39:f4:66:21:ef:5e: 32:61:3b:8c:7f:96:72:8e:0e:09:60:4d:bb:a3:37:29:fe:f9: 06:bd:e3:8e:81:c4:f9:60:96:c0:74:57:54:36:5c:02:9f:d4: e9:83:60:1b:ce:be:2f:b4:5b:0d:c2:1d:9b:18:26:4a:b3:e0: 4c:01:d7:4d:b7:8e:1a:65:51:6d:70:a3:49:41:dc:4b:1e:de: 5f:0c:17:22:5c:8f:43:d7:15:80:9c:21:4e:f5:64:a2:6e:fe: 59:c9:73:79:44:b6:ce:4e:e6:b5:fa:bb:98:3a:06:34:9c:f2: 65:b3:1d:3f:ea:cc:37:af:c6:a2:a6:02:bd:72:06:07:9a:0c: 9e:d7:c4:cf:da:bc:fc:7e:05:98:36:f0:dc:37:13:8c:2e:85: 5c:27:1d:6e:b1:36:a1:5d:c9:0c:ef:5f:ac:35:4b:92:87:35: 0a:35:f7:6e:91:60:53:38:60:38:09:f0:72:38:0a:aa:c0:17: 23:6f:55:68:4e:33:42:f9:88:56:bd:be:e5:55:26:a2:2e:31: 18:b2:9b:6c:c0:63:0e:fe:68:90:ee:be:60:41:c2:6d:36:27: d2:3a:a1:7c:40:91:4b:b1:2f:1c:a2:30:f9:95:79:4b:4a:16: c8:9c:f3:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2hyJpkaOHa+aNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2ZGI0ZWItNDA0MS00YWY4LWI2NGQtZjJlOGI3YmMw NDhiMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk NzU5MjMwMzctZGExNS00YzYzLWFmYzctZjYzYmE0YjI3MTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUdRJ0sAE+Zi7AAaiKaGqWT1zrNNO5jdlkFe GbDGiDG5K2iefEHic7P7bCs79ShnFxEPAy9BfRk6Vvq/7PTSzqWGfsj0z23BK2q2 l9HFnq303V2ZU0G81TfUm96qzQ8HVqVUp6ttcFWAPicHR7FNrKwDm3PwT3CISEdT PkL2S29VMNLeHzjVTG471o6dN7HKzZtgwfYQi1WEpHTT/M5PxMNgpMEbZQLvML0X 8lLf2aJYC8JvBPseVzEUXw1AyeRiLa9XwV6pYzFat3DYRM1yFmcyZ9jYWz0xH6hz MFvePcTJDxvo6Y0hmxyRDrDIgmzSZumV4Z5luW7M1ATvZtTPCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHr7sOi2+MmiOCfI02K4wSuOa4kYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iODZk YjRlYi00MDQxLTRhZjgtYjY0ZC1mMmU4YjdiYzA0OGIvOGY1ZGNkZTMtY2RlNy0z NzdjLWExOWQtNzM2ZjgyMmE1ZmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjg2ZGI0ZWItNDA0MS00YWY4LWI2 NGQtZjJlOGI3YmMwNDhiL2I4NmRiNGViLTQwNDEtNGFmOC1iNjRkLWYyZThiN2Jj MDQ4Yi5jcmwwHwYDVR0jBBgwFoAUa8ITUOp05WaWTNRMgjyklz6m1dMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iODZkYjRlYi00MDQxLTRhZjgtYjY0ZC1mMmU4 YjdiYzA0OGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FghMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPDeC4LdzdAz6IBjzn0ZiHvXjJhO4x/lnKODglgTbujNyn++Qa9446B xPlglsB0V1Q2XAKf1OmDYBvOvi+0Ww3CHZsYJkqz4EwB1023jhplUW1wo0lB3Ese 3l8MFyJcj0PXFYCcIU71ZKJu/lnJc3lEts5O5rX6u5g6BjSc8mWzHT/qzDevxqKm Ar1yBgeaDJ7XxM/avPx+BZg28Nw3E4wuhVwnHW6xNqFdyQzvX6w1S5KHNQo1926R YFM4YDgJ8HI4CqrAFyNvVWhOM0L5iFa9vuVVJqIuMRiym2zAYw7+aJDuvmBBwm02 J9I6oXxAkUuxLxyiMPmVeUtKFsic8+k= -----END CERTIFICATE-----Generated at Thu Mar 19 15:34:42 2026 by rpki-client