$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/4dfb2ea7-2c14-31ad-98da-0ae7640e2d8f.roa File: 4dfb2ea7-2c14-31ad-98da-0ae7640e2d8f.roa (raw, json) Hash identifier: vuYsej5NRbDqsWLkx/kfYLZDNs2nYo7emCsPfObiW1w= Subject key identifier: 0F:F9:9F:F5:D2:2F:1D:E9:BE:E2:B2:8C:12:46:B0:82:CB:F1:9A:18 Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F4328584ED861DF924DC35EE0E84943C0 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/4dfb2ea7-2c14-31ad-98da-0ae7640e2d8f.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 25649 IP address blocks: 208.86.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:61:df:92:4d:c3:5e:e0:e8:49:43:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=36caa11e-b8c5-41b8-8d53-e4e71e0d7334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:eb:0f:5f:a4:7a:f1:f4:ae:a2:1f:46:bc:ac: 61:31:01:6c:86:d4:41:b7:87:52:5c:a1:d9:cd:77: 01:d2:04:bb:63:a9:df:39:1e:92:65:ca:08:0f:e5: 4b:2f:8e:bc:3f:33:b5:75:33:54:60:8a:f9:3a:7c: 1a:63:ea:2c:bf:34:bc:b9:31:c0:c4:56:3b:d9:9f: 3f:86:c4:fb:98:25:48:60:b8:08:65:08:ff:51:84: 89:f7:0e:4f:e6:17:a3:42:55:c5:23:ad:16:71:8b: df:dc:f1:06:b1:a1:5c:1e:e2:db:08:9e:7c:51:57: e3:18:6d:f3:b8:04:1a:27:18:52:4c:22:3f:a2:77: 9e:b3:29:c7:70:b2:4d:be:17:8d:26:9b:bb:a5:62: 41:0b:6f:68:5c:17:08:10:aa:1b:c0:39:b1:73:2a: 94:4d:fb:59:f7:65:f9:9e:37:f6:e2:c3:06:62:98: 3f:07:62:fa:e8:29:b9:e1:e5:73:be:5f:80:c8:89: 40:09:f3:a0:71:8c:a9:3b:16:ae:d4:26:d7:34:5f: 1d:76:49:c1:bb:a0:c1:da:f9:a7:6e:cd:cb:0d:31: 85:67:54:9f:9b:83:57:82:2b:69:e8:f8:73:aa:25: ae:ba:36:64:eb:09:98:14:91:fc:cd:a0:21:fe:38: 0c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F9:9F:F5:D2:2F:1D:E9:BE:E2:B2:8C:12:46:B0:82:CB:F1:9A:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/4dfb2ea7-2c14-31ad-98da-0ae7640e2d8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 208.86.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:96:0f:5d:ef:09:85:a0:25:f9:8d:70:41:10:8b:e0:48:ea: 70:51:14:7e:69:ca:73:c1:fb:60:d4:ee:ca:96:57:3e:c3:46: c4:7d:be:6f:e7:5a:69:1f:04:7b:9f:4f:b9:9c:0d:67:4a:40: 07:ad:7d:97:ae:4a:b0:30:23:cd:5a:e9:24:80:c4:fa:d1:c7: 41:5a:da:ef:49:95:db:79:c5:75:98:bc:dc:ca:57:aa:0d:a2: 42:0c:db:87:52:d9:9e:57:24:20:73:19:02:18:53:52:df:3f: 17:e2:ae:85:99:2d:6a:00:37:ba:6f:e8:cc:5b:ba:68:e4:2c: 5b:61:c0:0a:7f:2d:1d:cb:bf:78:22:8b:a1:a9:8c:35:d9:45: d3:18:f1:ed:e3:f2:e3:36:a4:70:5d:6b:5f:e4:e4:13:8e:44: cd:e1:a9:dc:79:0c:e7:23:64:aa:a8:1a:b4:9b:a1:41:14:05: 12:3f:0a:c0:7c:33:59:4a:3e:9d:40:16:1a:19:9d:24:c4:04: 25:c6:33:ae:0b:f9:7c:b7:47:86:69:7f:c7:3f:fc:7a:a5:c8: bd:1e:bc:4d:00:74:50:06:d8:fc:cd:3c:96:9c:c0:a4:da:1e: 0b:6d:ba:2a:b1:ba:ad:b1:1c:6d:16:0b:eb:c6:ce:ad:22:0d: 21:74:b3:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYd+STcNe4OhJQ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk MzZjYWExMWUtYjhjNS00MWI4LThkNTMtZTRlNzFlMGQ3MzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOsPX6R68fSuoh9GvKxhMQFshtRBt4dSXKHZ zXcB0gS7Y6nfOR6SZcoID+VLL468PzO1dTNUYIr5OnwaY+osvzS8uTHAxFY72Z8/ hsT7mCVIYLgIZQj/UYSJ9w5P5hejQlXFI60WcYvf3PEGsaFcHuLbCJ58UVfjGG3z uAQaJxhSTCI/oneesynHcLJNvheNJpu7pWJBC29oXBcIEKobwDmxcyqUTftZ92X5 njf24sMGYpg/B2L66Cm54eVzvl+AyIlACfOgcYypOxau1CbXNF8ddknBu6DB2vmn bs3LDTGFZ1Sfm4NXgitp6PhzqiWuujZk6wmYFJH8zaAh/jgMnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/5n/XSLx3pvuKyjBJGsILL8ZoYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvNGRmYjJlYTctMmMxNC0z MWFkLTk4ZGEtMGFlNzY0MGUyZDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FYsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCWD13vCYWgJfmNcEEQi+BI6nBRFH5pynPB+2DU7sqWVz7DRsR9vm/n WmkfBHufT7mcDWdKQAetfZeuSrAwI81a6SSAxPrRx0Fa2u9Jldt5xXWYvNzKV6oN okIM24dS2Z5XJCBzGQIYU1LfPxfiroWZLWoAN7pv6MxbumjkLFthwAp/LR3Lv3gi i6GpjDXZRdMY8e3j8uM2pHBda1/k5BOORM3hqdx5DOcjZKqoGrSboUEUBRI/CsB8 M1lKPp1AFhoZnSTEBCXGM64L+Xy3R4Zpf8c//HqlyL0evE0AdFAG2PzNPJacwKTa Hgttuiqxuq2xHG0WC+vGzq0iDSF0s9w= -----END CERTIFICATE-----Generated at Sat Aug 22 18:41:09 2026 by rpki-client