$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/ff338702-1c9c-37a4-99c5-c2efbf1c824b.roa File: ff338702-1c9c-37a4-99c5-c2efbf1c824b.roa (raw, json) Hash identifier: TBfg2ZrZlYGaeD0ORwtiTbHOkro43dqdOoiEa1TgCn0= Subject key identifier: C7:98:0D:62:E1:30:C8:D7:FC:33:CC:D0:89:EA:31:5A:4A:94:F6:CA Certificate issuer: /CN=88842878-1050-4df7-822b-ea8ec25db83d Certificate serial: 010D0C9F4328584F2957B355FA7BB3A24058A080 Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/ff338702-1c9c-37a4-99c5-c2efbf1c824b.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 2495 IP address blocks: 198.248.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:b3:55:fa:7b:b3:a2:40:58:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=e84324f7-5d87-4466-98f3-ed0ed39ba1e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0a:d6:7e:97:28:a9:58:4b:bd:14:47:e6:ac: 73:cc:0a:ab:2f:92:c0:02:22:e1:5b:0f:0c:f0:7b: 12:9c:fb:0f:c9:f5:1f:d2:5d:a2:e8:69:f3:de:e2: 18:69:c4:7c:c7:1d:96:08:fa:d6:f9:97:e9:00:ba: 55:a5:89:e8:d1:e0:cc:8e:71:a2:66:bb:1f:28:64: c0:c2:db:d6:97:d4:ec:a9:f3:ef:76:17:26:1f:0b: 84:0a:30:2e:92:11:6a:94:04:a8:f4:df:a4:6b:0c: ba:7a:9b:f7:3a:de:a2:c8:75:20:7f:a8:3f:03:19: c4:1d:72:9a:9b:02:77:39:98:61:40:0a:49:06:a4: 04:9d:af:5e:9f:79:c3:ea:ac:db:65:a2:41:db:49: dc:bf:ff:8d:c3:fb:b1:fb:94:2a:57:0b:e0:8a:ec: da:90:92:23:fc:ac:85:36:ba:04:ec:33:eb:43:b3: c7:98:7b:2b:c0:2a:61:fb:bc:00:b5:ac:92:66:ad: 31:cd:36:c9:b0:3d:f2:ff:91:f0:b0:1b:bc:ef:d4: 4e:da:6d:56:19:ad:05:9e:2c:d0:f7:3d:e2:c9:32: f1:55:29:97:17:76:aa:e0:f4:18:de:0a:c2:73:4c: 5f:9c:79:42:34:62:22:88:e7:1a:f8:3f:a0:f9:f7: 7f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:98:0D:62:E1:30:C8:D7:FC:33:CC:D0:89:EA:31:5A:4A:94:F6:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/ff338702-1c9c-37a4-99c5-c2efbf1c824b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl X509v3 Authority Key Identifier: keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer sbgp-ipAddrBlock: critical IPv4: 198.248.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:65:e0:db:85:5f:38:9a:9a:5d:0a:cd:3a:74:24:c5:ab:e5: 04:59:36:40:90:83:10:10:39:06:61:39:e6:ec:d7:c9:57:9c: 8f:49:00:60:d2:e9:a1:bf:25:82:c7:ce:83:97:55:b4:e8:48: 4a:81:35:c4:9c:43:f7:da:8a:7a:1d:99:f7:3c:be:47:95:aa: c2:e1:a9:34:bc:a6:50:14:4e:3b:5e:52:ff:94:e1:28:96:47: 88:05:f5:e9:fc:fe:22:23:22:32:b5:db:de:f5:27:8e:49:cd: 31:51:de:95:07:57:e1:1a:78:3f:71:b3:8f:eb:a7:ba:a8:7f: 90:77:c2:fa:8a:94:1d:37:74:7d:33:ab:46:46:14:24:8f:66: 4d:b9:f1:9c:d6:47:f2:e6:9d:82:95:13:6e:af:03:6d:eb:fa: 4f:46:cf:95:b9:4d:48:09:de:71:49:cd:ce:e9:6c:54:74:38: 07:d6:13:36:75:a6:71:e8:e7:ae:89:10:6e:b9:5e:49:dc:80: d4:16:08:ff:0c:1f:ba:af:8e:2d:73:67:8c:0a:a2:a6:7a:9d: 04:db:36:25:eb:f5:01:a2:d6:ff:55:c1:06:32:1c:27:be:d8: bc:1d:d3:66:d4:ef:f8:f1:02:dd:6c:ee:10:b3:86:2a:99:f1: e0:33:7c:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV7NV+nuzokBYoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg4NDI4NzgtMTA1MC00ZGY3LTgyMmItZWE4ZWMyNWRi ODNkMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk ZTg0MzI0ZjctNWQ4Ny00NDY2LTk4ZjMtZWQwZWQzOWJhMWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwrWfpcoqVhLvRRH5qxzzAqrL5LAAiLhWw8M 8HsSnPsPyfUf0l2i6Gnz3uIYacR8xx2WCPrW+ZfpALpVpYno0eDMjnGiZrsfKGTA wtvWl9TsqfPvdhcmHwuECjAukhFqlASo9N+kawy6epv3Ot6iyHUgf6g/AxnEHXKa mwJ3OZhhQApJBqQEna9en3nD6qzbZaJB20ncv/+Nw/ux+5QqVwvgiuzakJIj/KyF NroE7DPrQ7PHmHsrwCph+7wAtaySZq0xzTbJsD3y/5HwsBu879RO2m1WGa0FnizQ 9z3iyTLxVSmXF3aq4PQY3grCc0xfnHlCNGIiiOca+D+g+fd/VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMeYDWLhMMjX/DPM0InqMVpKlPbKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0 Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1ZGI4M2QvZmYzMzg3MDItMWM5Yy0z N2E0LTk5YzUtYzJlZmJmMWM4MjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODg4NDI4NzgtMTA1MC00ZGY3LTgy MmItZWE4ZWMyNWRiODNkLzg4ODQyODc4LTEwNTAtNGRmNy04MjJiLWVhOGVjMjVk YjgzZC5jcmwwHwYDVR0jBBgwFoAUCvQvaSDxqtdtZzyGmgTIgB6tfZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThl YzI1ZGI4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxvh8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVl4NuFXziaml0KzTp0JMWr5QRZNkCQgxAQOQZhOebs18lXnI9JAGDS 6aG/JYLHzoOXVbToSEqBNcScQ/fainodmfc8vkeVqsLhqTS8plAUTjteUv+U4SiW R4gF9en8/iIjIjK12971J45JzTFR3pUHV+EaeD9xs4/rp7qof5B3wvqKlB03dH0z q0ZGFCSPZk258ZzWR/LmnYKVE26vA23r+k9Gz5W5TUgJ3nFJzc7pbFR0OAfWEzZ1 pnHo566JEG65XkncgNQWCP8MH7qvji1zZ4wKoqZ6nQTbNiXr9QGi1v9VwQYyHCe+ 2Lwd02bU7/jxAt1s7hCzhiqZ8eAzfNc= -----END CERTIFICATE-----Generated at Sun Sep 13 15:02:52 2026 by rpki-client