$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/9db30f64-7e0b-3608-b7bd-76fce8d76e5e.roa File: 9db30f64-7e0b-3608-b7bd-76fce8d76e5e.roa (raw, json) Hash identifier: 9HkNen6kOfo0gOBwax8KW/z5qgDUOFKPnlOBBoZwPxo= Subject key identifier: 1D:9F:3A:D2:94:8C:55:3A:0B:3C:A4:0D:79:FC:7E:09:F5:DF:C1:FD Certificate issuer: /CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b Certificate serial: 010D0C9F4328584DB1DAD3962CC2258FAF7BAD40 Authority key identifier: 6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/9db30f64-7e0b-3608-b7bd-76fce8d76e5e.roa Signing time: Sat 02 May 2026 01:00:24 +0000 ROA not before: Sat 02 May 2026 01:00:24 +0000 ROA not after: Fri 31 Jul 2026 01:00:24 +0000 asID: 16509 IP address blocks: 208.88.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b1:da:d3:96:2c:c2:25:8f:af:7b:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b Validity Not Before: May 2 01:00:24 2026 GMT Not After : Jul 31 01:00:24 2026 GMT Subject: CN=3b6c5927-498a-4275-b884-29bbcbe8a3be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bd:56:e8:0e:1f:89:b9:e5:47:cd:cb:0c:31: 6f:25:63:8c:a9:05:82:7f:b1:0b:b9:90:73:bc:e1: 92:97:d0:ee:19:00:95:45:7c:ea:45:c5:0d:64:d4: 9c:99:a5:a9:d5:4e:6f:f2:a9:61:69:5a:e6:47:78: 08:93:ed:52:f1:d8:b5:92:6e:ec:fd:cd:4e:d7:ad: f6:58:83:cc:58:39:4b:52:48:16:81:b7:7b:8e:87: bd:46:4f:4e:80:80:9f:f5:4f:58:33:d6:bf:44:f5: 58:98:fd:0b:ec:d4:9c:50:c9:c3:ce:5a:91:59:c2: 49:5e:0f:4d:7c:95:c1:11:64:b3:16:1c:b1:78:fd: dc:c9:24:52:64:dc:dd:6d:ed:e7:25:42:4f:f3:45: 4c:d6:9e:91:6e:f1:f3:bb:fc:f0:89:d5:4d:b0:d5: a8:36:39:4c:fa:fe:b7:a5:77:95:3c:98:90:f7:89: 4c:41:36:ce:01:f2:d3:75:82:7b:f6:da:b6:aa:9c: 49:9c:c5:0e:38:2a:bd:30:a8:cf:c2:fe:69:89:72: 47:d6:b6:b2:91:dc:b4:14:4f:57:98:ed:44:ce:26: c1:1d:d7:6e:af:28:3d:c1:91:57:ef:00:85:b8:dd: e7:2c:68:4e:c3:83:0f:12:84:c1:ee:71:cd:09:0a: a8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:9F:3A:D2:94:8C:55:3A:0B:3C:A4:0D:79:FC:7E:09:F5:DF:C1:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/9db30f64-7e0b-3608-b7bd-76fce8d76e5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl X509v3 Authority Key Identifier: keyid:6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer sbgp-ipAddrBlock: critical IPv4: 208.88.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:d6:92:41:98:42:91:0b:51:fb:9a:8b:7d:e0:bf:89:61:5c: c2:46:71:6f:b2:cf:e0:ee:bd:e0:f8:41:28:03:0c:71:ba:b0: 57:82:32:63:77:fa:99:05:cf:5d:89:1f:f9:da:0e:40:b4:95: c8:fc:ac:3d:34:6c:c1:d5:37:9e:91:9f:08:bb:89:be:98:2e: b2:5e:a5:33:aa:21:81:10:5d:11:39:39:eb:63:a2:68:b0:18: 44:6a:ce:67:cd:f3:d9:f0:91:86:e7:6c:74:95:6c:45:52:e2: 8e:d6:e9:1f:05:69:3d:4c:e3:cc:b3:0b:e6:32:fd:fd:7a:26: 26:a2:c2:98:c5:86:ab:25:0e:5e:4e:40:6c:63:e8:9f:66:47: 0a:d6:b3:2a:4f:a6:5a:4e:24:6e:ea:4c:e1:bc:42:c1:84:ca: 72:94:3f:d2:d5:67:dc:61:30:f0:77:01:fc:ba:55:66:d3:a6: 5c:75:f3:3b:b7:dc:91:55:30:14:09:4e:82:74:0d:d6:d4:44: cc:04:93:5c:ae:8e:52:98:10:de:cb:d7:a8:ae:43:2d:7f:40: 4e:90:27:70:c9:b9:06:f3:34:d5:68:22:0e:31:32:0d:ca:72: 95:2f:0a:f7:29:55:82:2a:1c:98:64:7d:91:c0:6a:b8:d7:25: 5b:5b:1b:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2x2tOWLMIlj697rUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2ZGI0ZWItNDA0MS00YWY4LWI2NGQtZjJlOGI3YmMw NDhiMB4XDTI2MDUwMjAxMDAyNFoXDTI2MDczMTAxMDAyNFowLzEtMCsGA1UEAxMk M2I2YzU5MjctNDk4YS00Mjc1LWI4ODQtMjliYmNiZThhM2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb1W6A4fibnlR83LDDFvJWOMqQWCf7ELuZBz vOGSl9DuGQCVRXzqRcUNZNScmaWp1U5v8qlhaVrmR3gIk+1S8di1km7s/c1O1632 WIPMWDlLUkgWgbd7joe9Rk9OgICf9U9YM9a/RPVYmP0L7NScUMnDzlqRWcJJXg9N fJXBEWSzFhyxeP3cySRSZNzdbe3nJUJP80VM1p6RbvHzu/zwidVNsNWoNjlM+v63 pXeVPJiQ94lMQTbOAfLTdYJ79tq2qpxJnMUOOCq9MKjPwv5piXJH1raykdy0FE9X mO1EzibBHdduryg9wZFX7wCFuN3nLGhOw4MPEoTB7nHNCQqoSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2fOtKUjFU6CzykDXn8fgn138H9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iODZk YjRlYi00MDQxLTRhZjgtYjY0ZC1mMmU4YjdiYzA0OGIvOWRiMzBmNjQtN2UwYi0z NjA4LWI3YmQtNzZmY2U4ZDc2ZTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjg2ZGI0ZWItNDA0MS00YWY4LWI2 NGQtZjJlOGI3YmMwNDhiL2I4NmRiNGViLTQwNDEtNGFmOC1iNjRkLWYyZThiN2Jj MDQ4Yi5jcmwwHwYDVR0jBBgwFoAUa8ITUOp05WaWTNRMgjyklz6m1dMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iODZkYjRlYi00MDQxLTRhZjgtYjY0ZC1mMmU4 YjdiYzA0OGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPWkkGYQpELUfuai33gv4lhXMJGcW+yz+DuveD4QSgDDHG6sFeCMmN3 +pkFz12JH/naDkC0lcj8rD00bMHVN56Rnwi7ib6YLrJepTOqIYEQXRE5Oetjomiw GERqzmfN89nwkYbnbHSVbEVS4o7W6R8FaT1M48yzC+Yy/f16JiaiwpjFhqslDl5O QGxj6J9mRwrWsypPplpOJG7qTOG8QsGEynKUP9LVZ9xhMPB3Afy6VWbTplx18zu3 3JFVMBQJToJ0DdbURMwEk1yujlKYEN7L16iuQy1/QE6QJ3DJuQbzNNVoIg4xMg3K cpUvCvcpVYIqHJhkfZHAarjXJVtbGyo= -----END CERTIFICATE-----Generated at Sun May 3 15:32:37 2026 by rpki-client