$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/3f9d2fae-fd49-33bf-8645-afba9150e12c.roa File: 3f9d2fae-fd49-33bf-8645-afba9150e12c.roa (raw, json) Hash identifier: /fgbNOBfb35yZFY90vl6bFvQOHpip/4+O9d3gULNPXk= Subject key identifier: CA:DA:54:08:2A:F0:69:7C:8A:A1:9A:50:8E:3C:79:F1:3A:7F:DA:FD Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F4328584F7E7DBC25D83B2280849EB380 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/3f9d2fae-fd49-33bf-8645-afba9150e12c.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 5050 IP address blocks: 192.88.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:bc:25:d8:3b:22:80:84:9e:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=666a015e-2504-4307-8b49-8d3cd20eb2f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f2:a8:13:40:93:51:fa:02:ff:83:da:1f:33: 9c:19:66:e9:6a:b1:86:16:e8:58:c5:2d:4a:d2:92: ff:99:07:b0:a2:f3:73:bd:dd:ff:3d:4e:6d:da:6c: e3:dd:4a:a9:96:10:5b:72:89:d7:6c:2f:37:84:2c: 0a:37:90:9a:3e:f0:c9:a0:24:99:21:ce:91:11:11: 7d:6a:eb:21:e3:ce:9b:0b:72:d0:12:d2:ac:c1:e4: 4b:a2:d3:02:75:fa:4f:32:95:a8:04:79:3a:66:02: 11:a5:d2:4c:b5:16:ce:46:38:23:54:5b:40:1c:b6: f6:7c:e8:7a:27:60:12:52:0c:5b:77:6f:33:13:58: 66:a7:41:88:5c:25:8d:2e:6f:7b:a0:14:5f:d7:16: aa:cc:32:a4:e8:6e:74:00:49:5a:df:57:0f:f7:4e: 29:72:96:69:2f:13:68:b8:92:0b:07:d5:b9:f4:fe: d2:a6:30:54:fd:cc:6b:62:87:ac:fe:fd:71:5f:f7: 81:d9:71:2c:6a:24:9e:82:bd:70:a0:03:37:8d:4f: 90:92:38:ee:9a:be:a9:69:53:36:5e:0a:66:95:dd: 69:f6:e8:05:ef:ed:14:08:ea:54:07:46:ae:a3:e4: a8:e8:0c:0c:1b:86:f0:63:25:90:32:25:31:a8:87: a0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:DA:54:08:2A:F0:69:7C:8A:A1:9A:50:8E:3C:79:F1:3A:7F:DA:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/3f9d2fae-fd49-33bf-8645-afba9150e12c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 192.88.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:a8:f8:6b:36:58:79:6f:9b:97:f0:f9:5d:cf:6c:8f:00:78: 63:8b:67:7f:ac:25:9c:02:4e:ce:30:16:8c:e4:c1:4b:89:23: c0:40:04:fa:44:9d:81:31:9d:76:b2:c5:ab:32:ff:89:ae:a7: 1e:65:73:b3:bb:87:86:d2:56:9d:f8:75:56:1b:ce:67:3c:93: 8f:20:61:f9:cf:be:32:57:16:cd:0c:13:b0:8d:7d:bd:a7:49: 2e:a1:05:20:e6:47:46:84:74:db:4a:1e:b8:6b:93:6a:f2:25: a5:8b:b7:bc:f0:10:48:fa:3a:f6:f0:6d:b6:d5:43:14:e3:f0: b8:0f:b0:dd:44:4f:43:97:68:fa:e4:48:c0:bc:7b:56:6f:44: 9a:88:c4:94:25:8d:c7:56:f3:7b:8a:56:bd:31:21:1b:fb:af: e6:87:34:1b:ea:3a:53:ce:11:56:d3:e5:cc:42:57:f3:57:bc: fe:7f:f5:58:ba:5d:ed:df:fe:cb:83:6c:f8:b8:0d:16:6c:4a: 66:6d:ff:61:49:19:56:7f:ee:c8:c5:d8:32:92:17:4c:0c:09: 42:1d:fb:01:eb:c7:b4:27:a0:00:1d:6c:51:78:c1:c1:a8:84: 82:05:86:ee:0e:5f:c3:5e:e5:13:f6:cd:9e:c0:8a:71:16:83: 28:c8:8c:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fbwl2DsigISes4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk NjY2YTAxNWUtMjUwNC00MzA3LThiNDktOGQzY2QyMGViMmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvKoE0CTUfoC/4PaHzOcGWbparGGFuhYxS1K 0pL/mQewovNzvd3/PU5t2mzj3UqplhBbconXbC83hCwKN5CaPvDJoCSZIc6RERF9 aush486bC3LQEtKsweRLotMCdfpPMpWoBHk6ZgIRpdJMtRbORjgjVFtAHLb2fOh6 J2ASUgxbd28zE1hmp0GIXCWNLm97oBRf1xaqzDKk6G50AEla31cP904pcpZpLxNo uJILB9W59P7SpjBU/cxrYoes/v1xX/eB2XEsaiSegr1woAM3jU+Qkjjumr6paVM2 Xgpmld1p9ugF7+0UCOpUB0auo+So6AwMG4bwYyWQMiUxqIeg1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMraVAgq8Gl8iqGaUI48efE6f9r9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvM2Y5ZDJmYWUtZmQ0OS0z M2JmLTg2NDUtYWZiYTkxNTBlMTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFhyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKo+Gs2WHlvm5fw+V3PbI8AeGOLZ3+sJZwCTs4wFozkwUuJI8BABPpE nYExnXayxasy/4mupx5lc7O7h4bSVp34dVYbzmc8k48gYfnPvjJXFs0ME7CNfb2n SS6hBSDmR0aEdNtKHrhrk2ryJaWLt7zwEEj6OvbwbbbVQxTj8LgPsN1ET0OXaPrk SMC8e1ZvRJqIxJQljcdW83uKVr0xIRv7r+aHNBvqOlPOEVbT5cxCV/NXvP5/9Vi6 Xe3f/suDbPi4DRZsSmZt/2FJGVZ/7sjF2DKSF0wMCUId+wHrx7QnoAAdbFF4wcGo hIIFhu4OX8Ne5RP2zZ7AinEWgyjIjNo= -----END CERTIFICATE-----Generated at Wed Nov 4 17:07:17 2026 by rpki-client