$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/588f7703-3750-4fb6-9651-634426b48a85/f714b6cb-929e-3b31-9edc-51bc67a9687c.roa File: f714b6cb-929e-3b31-9edc-51bc67a9687c.roa (raw, json) Hash identifier: 3uMw43bomm67b7PQ5HTYDwfFHVLYPFC3cZZGv9D8fIk= Subject key identifier: 84:43:20:A2:E6:F9:D1:8A:0E:C6:A9:4F:DF:25:4A:BD:2E:FB:38:F7 Certificate issuer: /CN=588f7703-3750-4fb6-9651-634426b48a85 Certificate serial: 010D0C9F4328584F86DD9C6B2D9D197C7CDB9880 Authority key identifier: 34:49:C4:2C:C8:D4:10:6D:2C:C7:B1:AE:0F:56:81:63:A4:A3:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/588f7703-3750-4fb6-9651-634426b48a85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/588f7703-3750-4fb6-9651-634426b48a85/f714b6cb-929e-3b31-9edc-51bc67a9687c.roa Signing time: Sat 17 Oct 2026 01:00:13 +0000 ROA not before: Sat 17 Oct 2026 01:00:13 +0000 ROA not after: Fri 15 Jan 2027 02:00:13 +0000 asID: 35895 IP address blocks: 199.188.224.0/22 maxlen: 24 204.11.68.0/22 maxlen: 24 2602:ff5e::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/588f7703-3750-4fb6-9651-634426b48a85/588f7703-3750-4fb6-9651-634426b48a85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/588f7703-3750-4fb6-9651-634426b48a85/588f7703-3750-4fb6-9651-634426b48a85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/588f7703-3750-4fb6-9651-634426b48a85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 31 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:86:dd:9c:6b:2d:9d:19:7c:7c:db:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=588f7703-3750-4fb6-9651-634426b48a85 Validity Not Before: Oct 17 01:00:13 2026 GMT Not After : Jan 15 02:00:13 2027 GMT Subject: CN=bc7a3297-224f-42de-9c75-cc55f743af07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b2:0d:0e:58:10:88:12:12:51:b7:17:09:be: f1:30:83:88:f9:b4:e4:8c:da:ad:82:e3:9a:22:f2: 00:44:6a:9a:2f:98:e2:16:ff:e9:59:f1:a9:0b:70: 30:a7:18:48:7e:cc:b6:8d:21:ac:e9:23:f5:8e:51: 68:7b:f6:b8:13:02:93:2c:de:73:38:a5:f0:85:d0: 63:0a:6c:f7:9f:35:a9:a6:1c:6e:1c:33:af:a6:1c: 6e:2c:61:d9:42:3d:d2:8e:6c:f8:3e:c4:fb:a6:ba: 06:e5:55:7d:f2:4e:ca:c3:93:81:88:b5:b1:c7:d5: 3e:00:5e:26:18:08:14:43:6c:b7:7f:20:34:9c:c4: 3d:c9:a3:09:a0:e5:07:d7:ac:53:31:90:94:9b:fd: bd:fe:4e:f6:54:5b:52:95:0e:55:ac:e0:61:9b:bd: 61:8d:23:79:4e:1f:4a:a6:8f:d3:ea:8e:5d:6c:bc: 6a:1c:e3:ef:08:cd:8b:8c:26:60:b2:87:63:49:44: 87:c9:fa:e8:f5:22:11:2d:04:54:2e:7f:a5:6f:56: 4f:10:17:a1:4a:c4:30:52:2d:13:d6:2b:04:a9:2d: f1:b2:57:f6:cc:4e:10:e6:fe:96:d6:7d:54:d5:ea: 5a:0e:67:96:58:6d:88:6f:f2:75:65:f5:66:f9:0f: 5b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:43:20:A2:E6:F9:D1:8A:0E:C6:A9:4F:DF:25:4A:BD:2E:FB:38:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/588f7703-3750-4fb6-9651-634426b48a85/f714b6cb-929e-3b31-9edc-51bc67a9687c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/588f7703-3750-4fb6-9651-634426b48a85/588f7703-3750-4fb6-9651-634426b48a85.crl X509v3 Authority Key Identifier: keyid:34:49:C4:2C:C8:D4:10:6D:2C:C7:B1:AE:0F:56:81:63:A4:A3:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/588f7703-3750-4fb6-9651-634426b48a85.cer sbgp-ipAddrBlock: critical IPv4: 199.188.224.0/22 204.11.68.0/22 IPv6: 2602:ff5e::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:da:1e:13:95:04:ec:8e:96:ae:eb:06:14:9a:bf:c9:b0:e6: 77:f6:31:ae:24:00:6b:c4:dc:5b:88:3f:75:6a:17:54:ac:e4: 50:e1:a0:b3:92:92:0c:8b:0b:99:2f:c3:9a:3d:d3:8a:1d:80: 3a:1b:29:0d:bc:2d:96:0f:49:69:b1:11:26:53:cc:22:ab:83: 14:cb:0c:4b:08:b1:67:39:98:86:e8:64:47:cd:9d:6c:c3:c5: ca:fb:fe:40:1b:94:0d:af:17:e1:3d:e7:0c:42:77:32:28:f9: ad:dc:07:8d:55:31:30:a9:76:09:dc:32:7c:38:c9:16:56:4d: 28:de:64:a4:a9:e6:c3:37:08:5a:a6:fb:f7:90:ff:1b:29:73: 2e:03:21:0b:25:c4:0c:10:f3:91:35:00:57:01:cb:f1:38:c9: b7:bd:a3:eb:e8:14:24:fd:eb:3c:a0:1c:33:ef:8d:d6:59:e7: 5e:81:e8:e1:74:4a:26:2f:8a:a8:13:02:a3:e4:a8:fe:07:51: a7:4c:e8:4d:6e:a9:7e:2a:97:d9:40:94:44:85:b2:21:1b:43: 73:00:85:3c:3e:e9:8a:7a:31:58:29:4b:db:3d:e2:d8:64:36: 31:86:b9:0f:4a:7e:18:2c:73:11:88:26:6d:0d:93:6e:41:fa: a6:cc:a4:f9 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE+G3ZxrLZ0ZfHzbmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTg4Zjc3MDMtMzc1MC00ZmI2LTk2NTEtNjM0NDI2YjQ4 YTg1MB4XDTI2MTAxNzAxMDAxM1oXDTI3MDExNTAyMDAxM1owLzEtMCsGA1UEAxMk YmM3YTMyOTctMjI0Zi00MmRlLTljNzUtY2M1NWY3NDNhZjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bINDlgQiBISUbcXCb7xMIOI+bTkjNqtguOa IvIARGqaL5jiFv/pWfGpC3AwpxhIfsy2jSGs6SP1jlFoe/a4EwKTLN5zOKXwhdBj Cmz3nzWpphxuHDOvphxuLGHZQj3Sjmz4PsT7proG5VV98k7Kw5OBiLWxx9U+AF4m GAgUQ2y3fyA0nMQ9yaMJoOUH16xTMZCUm/29/k72VFtSlQ5VrOBhm71hjSN5Th9K po/T6o5dbLxqHOPvCM2LjCZgsodjSUSHyfro9SIRLQRULn+lb1ZPEBehSsQwUi0T 1isEqS3xslf2zE4Q5v6W1n1U1epaDmeWWG2Ib/J1ZfVm+Q9bLwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFIRDIKLm+dGKDsapT98lSr0u+zj3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81ODhm NzcwMy0zNzUwLTRmYjYtOTY1MS02MzQ0MjZiNDhhODUvZjcxNGI2Y2ItOTI5ZS0z YjMxLTllZGMtNTFiYzY3YTk2ODdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTg4Zjc3MDMtMzc1MC00ZmI2LTk2 NTEtNjM0NDI2YjQ4YTg1LzU4OGY3NzAzLTM3NTAtNGZiNi05NjUxLTYzNDQyNmI0 OGE4NS5jcmwwHwYDVR0jBBgwFoAUNEnELMjUEG0sx7GuD1aBY6SjExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81ODhmNzcwMy0zNzUwLTRmYjYtOTY1MS02MzQ0 MjZiNDhhODUuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQCx7zgAwQC zAtEMA4EAgACMAgDBgQmAv9eADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAi2h4TlQTsjpau6wYUmr/JsOZ3 9jGuJABrxNxbiD91ahdUrORQ4aCzkpIMiwuZL8OaPdOKHYA6GykNvC2WD0lpsREm U8wiq4MUywxLCLFnOZiG6GRHzZ1sw8XK+/5AG5QNrxfhPecMQncyKPmt3AeNVTEw qXYJ3DJ8OMkWVk0o3mSkqebDNwhapvv3kP8bKXMuAyELJcQMEPORNQBXAcvxOMm3 vaPr6BQk/es8oBwz743WWedegejhdEomL4qoEwKj5Kj+B1GnTOhNbql+KpfZQJRE hbIhG0NzAIU8PumKejFYKUvbPeLYZDYxhrkPSn4YLHMRiCZtDZNuQfqmzKT5 -----END CERTIFICATE-----Generated at Fri Oct 30 05:11:52 2026 by rpki-client