$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3ce21712-b94a-3447-9f03-1e14d2a7ad98.roa File: 3ce21712-b94a-3447-9f03-1e14d2a7ad98.roa (raw, json) Hash identifier: PcEj6yV2BY7Z4EhWNlmT6pIzl51sKFT80grY9hgI7Yo= Subject key identifier: 11:13:9E:25:3B:02:8E:FB:56:0A:D1:C8:35:49:A3:3E:93:F7:0F:E5 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584F655D75712F478DD80B070DA0 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3ce21712-b94a-3447-9f03-1e14d2a7ad98.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 14061 IP address blocks: 198.232.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:75:71:2f:47:8d:d8:0b:07:0d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=5a87ca2f-3f8b-4374-bb20-c26a795f1b0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:39:e7:10:6e:16:74:32:95:f2:c3:d4:86:1e: 4d:29:6f:41:1e:8d:9a:e9:6b:a4:94:06:cc:22:ad: 92:26:ec:a1:7a:0a:04:da:fc:cb:c6:d6:88:5d:a5: b2:ee:1a:96:87:d4:98:5c:87:cc:72:b2:a7:97:09: 6b:5f:70:44:3f:12:4b:a0:ff:5a:70:d4:cc:0f:a8: 92:0a:98:b8:5c:e1:4c:51:31:da:74:e5:08:c4:2c: ae:df:ee:77:01:d4:ae:12:52:29:5c:3a:fe:19:70: 33:24:2e:e4:99:9b:55:14:94:e1:dc:66:40:ab:bb: 53:5d:dc:ff:ea:37:55:1d:22:e0:e3:77:d8:18:da: 22:23:ed:f2:d1:65:53:a0:3d:c7:3e:60:4e:45:73: c5:fd:5d:43:a0:d3:17:87:48:5b:6b:c9:4d:21:12: 6f:a0:d2:85:88:b1:10:87:4d:0a:bb:ee:78:46:52: 70:8c:a3:85:6c:8e:ef:34:e6:af:2b:cc:ca:f2:6b: 23:17:01:b0:a9:cc:2a:4b:03:ed:98:3b:1d:37:dc: c2:ec:db:68:19:e5:40:a8:20:fb:f2:d0:7d:4e:58: 3e:75:48:2f:1b:ba:8a:5b:ca:fc:6e:08:67:ce:5a: b8:4b:40:bf:07:1c:bc:f4:79:30:f4:9f:ce:0e:c4: 46:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:13:9E:25:3B:02:8E:FB:56:0A:D1:C8:35:49:A3:3E:93:F7:0F:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3ce21712-b94a-3447-9f03-1e14d2a7ad98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 198.232.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:a3:02:ee:4e:8c:1a:87:97:0c:fb:a3:1c:b7:eb:3a:ee:0c: 96:f5:5a:b8:f5:ea:b3:f6:49:1b:a7:60:c2:b7:17:f4:3d:39: 2c:32:f1:9b:f6:f7:f1:d0:d4:33:7c:94:a4:b7:42:8b:01:51: 68:43:0f:19:19:bb:4f:d4:7b:ff:da:92:10:19:b1:23:05:85: 8e:51:65:12:08:88:a4:0c:81:e8:9a:3a:2e:63:8e:db:38:8d: 78:fe:01:f2:ba:ec:13:7d:cf:9b:f3:06:85:e7:c5:e7:e7:39: 1b:c7:39:0b:3a:d1:2b:42:17:57:b4:b6:a5:89:6f:b7:56:4a: d7:16:c1:10:d3:14:46:e4:ee:f2:d1:44:cf:3e:45:9c:1c:68: 40:ac:6e:7c:64:83:50:de:19:21:18:89:92:13:f2:02:93:f0: 2e:8f:7a:fa:3a:49:14:1a:03:cc:c0:51:82:a0:29:67:72:e6: 18:25:b3:67:e5:a3:cb:3e:e4:5e:f6:f4:38:31:52:9d:7c:5c: e1:37:06:e1:63:50:e2:8c:5a:f1:36:0b:9b:7a:2e:48:21:07: 5f:a5:1e:d5:03:2d:3d:bb:e4:bf:22:fd:46:74:f2:c0:aa:c9: ff:29:a5:e4:3b:aa:e1:6b:5f:db:0e:8c:86:ce:62:94:10:cc: 70:94:60:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXXVxL0eN2AsHDaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk NWE4N2NhMmYtM2Y4Yi00Mzc0LWJiMjAtYzI2YTc5NWYxYjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhznnEG4WdDKV8sPUhh5NKW9BHo2a6WuklAbM Iq2SJuyhegoE2vzLxtaIXaWy7hqWh9SYXIfMcrKnlwlrX3BEPxJLoP9acNTMD6iS Cpi4XOFMUTHadOUIxCyu3+53AdSuElIpXDr+GXAzJC7kmZtVFJTh3GZAq7tTXdz/ 6jdVHSLg43fYGNoiI+3y0WVToD3HPmBORXPF/V1DoNMXh0hba8lNIRJvoNKFiLEQ h00Ku+54RlJwjKOFbI7vNOavK8zK8msjFwGwqcwqSwPtmDsdN9zC7NtoGeVAqCD7 8tB9Tlg+dUgvG7qKW8r8bghnzlq4S0C/Bxy89Hkw9J/ODsRGnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBETniU7Ao77VgrRyDVJoz6T9w/lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvM2NlMjE3MTItYjk0YS0z NDQ3LTlmMDMtMWUxNGQyYTdhZDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxuiTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWjAu5OjBqHlwz7oxy36zruDJb1Wrj16rP2SRunYMK3F/Q9OSwy8Zv2 9/HQ1DN8lKS3QosBUWhDDxkZu0/Ue//akhAZsSMFhY5RZRIIiKQMgeiaOi5jjts4 jXj+AfK67BN9z5vzBoXnxefnORvHOQs60StCF1e0tqWJb7dWStcWwRDTFEbk7vLR RM8+RZwcaECsbnxkg1DeGSEYiZIT8gKT8C6Pevo6SRQaA8zAUYKgKWdy5hgls2fl o8s+5F729DgxUp18XOE3BuFjUOKMWvE2C5t6LkghB1+lHtUDLT275L8i/UZ08sCq yf8ppeQ7quFrX9sOjIbOYpQQzHCUYM0= -----END CERTIFICATE-----Generated at Thu Oct 8 20:33:36 2026 by rpki-client