$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/420963fb-a3d2-3813-9896-a813e2840697.roa File: 420963fb-a3d2-3813-9896-a813e2840697.roa (raw, json) Hash identifier: d6VTqRCeCgL4wzbjUuLkXVLSHeAwRfiU+38h53LlzEg= Subject key identifier: B1:99:9A:26:DB:0E:AD:22:48:C0:39:7F:06:B1:D3:ED:ED:72:EC:17 Certificate issuer: /CN=88842878-1050-4df7-822b-ea8ec25db83d Certificate serial: 010D0C9F4328584F2957AFE8D14CD3E9D3CA87B0 Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/420963fb-a3d2-3813-9896-a813e2840697.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 2495 IP address blocks: 198.248.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:af:e8:d1:4c:d3:e9:d3:ca:87:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=3d89b480-d3f6-4bbb-965c-663a714566db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:31:b7:ca:3b:11:fa:23:0f:ff:11:f1:20:ba: 32:41:8e:a9:a3:db:13:7a:0d:e9:a0:73:ba:ce:63: ed:fd:76:32:01:32:46:70:bc:c6:58:9b:b1:0d:78: b9:6e:1f:d6:a4:54:b0:71:4a:d6:4c:9c:87:14:ac: d0:ec:ad:55:d8:31:d5:5b:4e:9a:dc:e9:2f:57:cc: 42:35:9d:9c:10:26:7a:92:59:de:b6:d6:89:ac:be: 06:57:87:31:50:e5:f1:5f:1c:38:14:6c:4e:43:05: 52:a6:e7:9b:08:53:c7:1e:16:fd:b9:01:dd:5b:d5: 6a:30:a2:8c:30:b8:c6:c7:0b:cc:32:72:a9:8e:4a: 7b:f5:be:14:d8:5a:12:b4:27:40:c9:0d:d9:e3:60: 85:91:f6:88:7f:83:8f:af:28:05:53:fa:99:4c:8a: 9e:4f:4e:76:d0:50:07:f0:f3:d8:4a:c8:58:f3:fa: c3:0c:33:cd:ef:bd:fe:66:a1:0b:18:6b:58:db:76: e3:a3:9c:81:5c:20:41:69:4c:74:c9:89:61:33:70: 40:ee:d7:49:10:69:68:74:d9:5a:36:eb:6f:f6:7a: d7:bb:00:6b:18:23:2a:88:d8:59:9e:dc:a6:61:85: cc:e6:e4:f2:b4:c6:54:64:65:9f:ac:a2:69:a8:92: 62:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:99:9A:26:DB:0E:AD:22:48:C0:39:7F:06:B1:D3:ED:ED:72:EC:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/420963fb-a3d2-3813-9896-a813e2840697.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl X509v3 Authority Key Identifier: keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer sbgp-ipAddrBlock: critical IPv4: 198.248.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:36:d8:a7:bb:8d:55:57:fc:c6:9d:e5:ca:bc:e7:2e:f7:e3: 4f:3c:ee:e7:94:1f:7c:1e:22:5a:20:cf:7c:5e:78:20:fe:78: 8b:45:5e:87:da:1d:49:eb:80:50:51:33:5a:c4:31:0b:09:31: b3:5a:38:a3:69:3a:1f:d1:e9:a2:a8:4b:bb:6d:b2:e3:34:f7: 34:54:fd:f7:d3:c0:df:97:ac:bb:ed:e1:f7:ec:a4:53:8a:24: 98:df:ba:ea:af:8a:55:62:8e:a3:3d:a3:90:50:2d:09:fe:6e: fe:1b:a8:86:c4:a4:7a:08:64:0b:20:d5:e2:6f:98:10:b7:e3: aa:cb:ac:4c:6d:d4:a4:c9:63:f4:23:fb:76:ac:e9:e9:a5:7d: 11:9a:f7:fa:55:00:c7:ec:6c:5d:0e:e6:fd:a9:ac:6e:1e:9a: 94:5d:b4:37:21:d4:60:f5:fb:d3:ab:ac:16:2d:b7:69:53:ff: 62:14:fe:a5:75:c5:99:ab:96:50:16:fe:82:d3:e7:94:e0:f0: c9:3b:16:29:83:38:a6:f4:59:73:f1:7b:f3:ba:02:26:9b:fa: 7a:3f:52:6b:97:50:a6:fd:2a:94:ac:ec:99:7a:be:e2:5e:f2: bf:05:79:ce:51:dc:1c:24:54:20:32:3a:f0:5f:66:82:60:00: 4f:1c:e9:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV6/o0UzT6dPKh7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg4NDI4NzgtMTA1MC00ZGY3LTgyMmItZWE4ZWMyNWRi ODNkMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk M2Q4OWI0ODAtZDNmNi00YmJiLTk2NWMtNjYzYTcxNDU2NmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzG3yjsR+iMP/xHxILoyQY6po9sTeg3poHO6 zmPt/XYyATJGcLzGWJuxDXi5bh/WpFSwcUrWTJyHFKzQ7K1V2DHVW06a3OkvV8xC NZ2cECZ6klnettaJrL4GV4cxUOXxXxw4FGxOQwVSpuebCFPHHhb9uQHdW9VqMKKM MLjGxwvMMnKpjkp79b4U2FoStCdAyQ3Z42CFkfaIf4OPrygFU/qZTIqeT0520FAH 8PPYSshY8/rDDDPN773+ZqELGGtY23bjo5yBXCBBaUx0yYlhM3BA7tdJEGlodNla Nutv9nrXuwBrGCMqiNhZntymYYXM5uTytMZUZGWfrKJpqJJipQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGZmibbDq0iSMA5fwax0+3tcuwXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0 Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1ZGI4M2QvNDIwOTYzZmItYTNkMi0z ODEzLTk4OTYtYTgxM2UyODQwNjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODg4NDI4NzgtMTA1MC00ZGY3LTgy MmItZWE4ZWMyNWRiODNkLzg4ODQyODc4LTEwNTAtNGRmNy04MjJiLWVhOGVjMjVk YjgzZC5jcmwwHwYDVR0jBBgwFoAUCvQvaSDxqtdtZzyGmgTIgB6tfZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThl YzI1ZGI4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxvhEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFA22Ke7jVVX/Mad5cq85y7340887ueUH3weIlogz3xeeCD+eItFXofa HUnrgFBRM1rEMQsJMbNaOKNpOh/R6aKoS7ttsuM09zRU/ffTwN+XrLvt4ffspFOK JJjfuuqvilVijqM9o5BQLQn+bv4bqIbEpHoIZAsg1eJvmBC346rLrExt1KTJY/Qj +3as6emlfRGa9/pVAMfsbF0O5v2prG4empRdtDch1GD1+9OrrBYtt2lT/2IU/qV1 xZmrllAW/oLT55Tg8Mk7FimDOKb0WXPxe/O6Aiab+no/UmuXUKb9KpSs7Jl6vuJe 8r8Fec5R3BwkVCAyOvBfZoJgAE8c6a4= -----END CERTIFICATE-----Generated at Sun Sep 13 15:51:06 2026 by rpki-client