$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/38cff7ac-79e5-37d1-8a91-3327b27ea983.roa File: 38cff7ac-79e5-37d1-8a91-3327b27ea983.roa (raw, json) Hash identifier: wfPbO+G03WxOX5+8L+p03puGtrDEuHWCLBd73OW4esY= Subject key identifier: 80:E4:B7:1A:7D:02:37:57:19:41:DD:A8:38:B5:75:5C:65:13:C9:A9 Certificate issuer: /CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Certificate serial: 010D0C9F4328584E2D9F0D82E04CA7D1BFAA0F40 Authority key identifier: F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/38cff7ac-79e5-37d1-8a91-3327b27ea983.roa Signing time: Mon 15 Jun 2026 09:00:12 +0000 ROA not before: Mon 15 Jun 2026 09:00:12 +0000 ROA not after: Sun 13 Sep 2026 09:00:12 +0000 asID: 46408 IP address blocks: 208.84.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2d:9f:0d:82:e0:4c:a7:d1:bf:aa:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Validity Not Before: Jun 15 09:00:12 2026 GMT Not After : Sep 13 09:00:12 2026 GMT Subject: CN=1beba6b6-a8de-4f81-9662-97cc720cad80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9d:f2:e4:f2:35:81:7b:1a:f7:8b:df:bd:d2: e9:d8:ea:fe:8d:72:b2:cb:c7:bf:0e:49:4d:75:cc: db:58:9a:ca:3d:57:a2:3b:23:fb:a6:6a:a4:0f:94: 2b:1d:6a:3c:45:82:2e:98:c6:5d:42:57:57:23:3c: 35:73:22:32:27:65:87:d6:87:57:bb:a3:f4:c3:f9: ed:71:5d:9a:60:a9:a6:eb:45:9c:94:60:8a:d3:c1: 23:80:ac:ae:61:48:75:59:0c:9c:98:67:a9:ed:9f: 66:8f:c5:72:82:87:4d:8d:50:ea:64:21:ed:29:a1: 66:eb:fe:e2:c3:52:30:63:4a:1c:4f:c1:cc:88:3b: 32:ea:d4:86:a1:5e:dd:09:f2:50:34:eb:b7:bd:c3: 2b:0f:f9:eb:07:da:2c:41:35:a2:e9:74:aa:82:f9: c6:17:84:55:da:ed:8c:16:bc:ef:7b:51:ef:3e:82: 06:ea:b2:51:a4:f5:61:40:44:61:8f:53:67:ca:d0: 2c:b0:86:6e:5b:35:f6:99:d6:a2:00:8d:bf:f4:78: 5e:14:d7:1f:2c:8c:46:a1:49:65:29:34:52:70:8a: 40:d0:3c:d3:cf:3c:00:d5:91:0c:a4:66:f4:b7:1e: 26:ac:4c:c9:d1:d0:ba:0f:e0:09:32:2e:ad:5f:89: 8c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E4:B7:1A:7D:02:37:57:19:41:DD:A8:38:B5:75:5C:65:13:C9:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/38cff7ac-79e5-37d1-8a91-3327b27ea983.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl X509v3 Authority Key Identifier: keyid:F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer sbgp-ipAddrBlock: critical IPv4: 208.84.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:59:ae:ba:5a:57:37:d3:bc:70:a7:37:9b:4b:5d:be:f4:c6: a1:05:3b:ca:dc:27:ae:f2:bb:95:ac:71:d5:63:ab:58:ba:9f: 8d:d6:ea:b5:c9:d7:62:8f:f7:7c:04:12:00:99:1a:2f:c0:45: b5:44:f1:9b:77:20:db:e0:36:2e:17:b7:34:74:39:61:df:81: 04:ff:d7:7f:11:77:86:9c:70:78:55:6b:f7:a1:e9:4a:56:a3: dc:e6:f0:a9:11:e4:1a:4f:64:ea:09:43:9c:c8:b9:27:87:10: 53:b5:40:11:81:92:9a:1d:81:24:8d:23:35:9c:78:00:40:9f: 9a:6e:3c:eb:1a:a6:ba:a5:ca:7d:90:5e:02:5c:96:34:6a:46: 63:3d:8b:26:9d:e3:01:24:3d:17:70:59:91:50:6d:32:3d:09: da:26:f3:db:32:d3:91:14:11:e3:2a:c1:5c:a5:b7:73:dc:48: 7b:08:82:a1:54:c8:91:e0:bc:aa:4a:8c:9c:8f:8a:74:c1:af: ae:e6:36:a1:c8:1b:ef:4e:db:1f:33:60:a7:1a:e4:4b:6e:b8: 98:28:54:0b:03:ae:c3:dd:a0:96:99:0d:57:d5:0d:09:af:71: 98:e9:b5:e6:c8:ed:a6:a3:20:37:67:05:f1:48:a6:74:16:cd: 42:3f:7a:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4tnw2C4Eyn0b+qD0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkZjJlN2YtOGU4My00MzJhLThjMjctNTU0Njk0NGRk YTRiMB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk MWJlYmE2YjYtYThkZS00ZjgxLTk2NjItOTdjYzcyMGNhZDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh53y5PI1gXsa94vfvdLp2Or+jXKyy8e/DklN dczbWJrKPVeiOyP7pmqkD5QrHWo8RYIumMZdQldXIzw1cyIyJ2WH1odXu6P0w/nt cV2aYKmm60WclGCK08EjgKyuYUh1WQycmGep7Z9mj8VygodNjVDqZCHtKaFm6/7i w1IwY0ocT8HMiDsy6tSGoV7dCfJQNOu3vcMrD/nrB9osQTWi6XSqgvnGF4RV2u2M Frzve1HvPoIG6rJRpPVhQERhj1NnytAssIZuWzX2mdaiAI2/9HheFNcfLIxGoUll KTRScIpA0DzTzzwA1ZEMpGb0tx4mrEzJ0dC6D+AJMi6tX4mM8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDktxp9AjdXGUHdqDi1dVxlE8mpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRm MmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2OTQ0ZGRhNGIvMzhjZmY3YWMtNzllNS0z N2QxLThhOTEtMzMyN2IyN2VhOTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDVkZjJlN2YtOGU4My00MzJhLThj MjctNTU0Njk0NGRkYTRiL2Q1ZGYyZTdmLThlODMtNDMyYS04YzI3LTU1NDY5NDRk ZGE0Yi5jcmwwHwYDVR0jBBgwFoAU901L3g55e/8+XSHXuRqpy68UFwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRmMmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2 OTQ0ZGRhNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FTIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJZrrpaVzfTvHCnN5tLXb70xqEFO8rcJ67yu5WscdVjq1i6n43W6rXJ 12KP93wEEgCZGi/ARbVE8Zt3INvgNi4XtzR0OWHfgQT/138Rd4accHhVa/eh6UpW o9zm8KkR5BpPZOoJQ5zIuSeHEFO1QBGBkpodgSSNIzWceABAn5puPOsaprqlyn2Q XgJcljRqRmM9iyad4wEkPRdwWZFQbTI9Cdom89sy05EUEeMqwVylt3PcSHsIgqFU yJHgvKpKjJyPinTBr67mNqHIG+9O2x8zYKca5EtuuJgoVAsDrsPdoJaZDVfVDQmv cZjptebI7aajIDdnBfFIpnQWzUI/ehQ= -----END CERTIFICATE-----Generated at Tue Jul 14 11:59:30 2026 by rpki-client