$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f/2557d927-0341-3c51-afc2-3376ee40d301.roa File: 2557d927-0341-3c51-afc2-3376ee40d301.roa (raw, json) Hash identifier: jde/5g4b0UPp/ZeqaCc9/1srwm9s5Ed5UP/23omrDb8= Subject key identifier: 7F:A5:84:42:5C:9C:DF:ED:8D:18:CC:D1:C3:62:BA:69:E7:5C:4C:FA Certificate issuer: /CN=d8e25869-fb35-4b76-8053-1b6c51bd3c3f Certificate serial: 010D0C9F4328584F549D5B144347C38866572090 Authority key identifier: 55:C5:5C:0C:ED:45:D1:3D:8D:92:AE:1B:FA:AA:A8:17:CB:B9:D7:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f/2557d927-0341-3c51-afc2-3376ee40d301.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 398150 IP address blocks: 208.88.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:5b:14:43:47:c3:88:66:57:20:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8e25869-fb35-4b76-8053-1b6c51bd3c3f Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=d142e542-9044-48d3-80ad-59f074d0f70c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:06:77:d0:4e:36:9b:90:83:df:58:49:e1:3f: d5:c1:46:5d:10:cf:5f:e8:a3:f4:26:db:13:a9:0f: 23:6e:1a:04:8c:c1:46:4f:a6:44:22:68:0d:06:aa: 9e:de:b1:cc:13:20:e9:24:aa:6c:a3:ea:a4:6f:ca: bd:ed:39:e5:fe:83:b5:f3:75:8f:f9:5d:cb:b3:4f: b2:c5:a0:91:6e:54:f9:5f:7a:ab:20:ea:b7:ef:fd: 53:48:1f:af:d5:d6:ab:68:5c:bc:2f:44:a6:68:83: 35:84:aa:81:8a:3b:b6:b1:f9:71:ea:9e:bf:e5:36: 5b:84:dd:d1:d9:f2:24:65:ee:77:40:b4:f2:25:ed: 16:38:5b:07:01:67:a3:3e:25:a0:e7:1c:2a:fc:64: 26:dd:98:c3:1e:f6:d9:9e:4f:28:ba:a9:9e:15:15: 46:a6:91:be:86:5d:91:b6:cb:8d:67:1c:98:99:4d: d7:5b:6a:4c:a0:0b:4c:4b:da:38:bb:ef:4e:f8:ab: 78:69:1a:c9:67:da:e3:20:35:9d:18:c8:c3:73:77: 4c:c5:0d:ae:ea:da:3c:27:87:e9:78:57:8a:16:83: 9f:e6:2c:9c:a7:2e:17:2f:40:23:28:16:48:e8:fe: 82:05:05:41:da:e1:e1:41:b1:a1:a8:db:ea:a4:d7: 8a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:A5:84:42:5C:9C:DF:ED:8D:18:CC:D1:C3:62:BA:69:E7:5C:4C:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f/2557d927-0341-3c51-afc2-3376ee40d301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.crl X509v3 Authority Key Identifier: keyid:55:C5:5C:0C:ED:45:D1:3D:8D:92:AE:1B:FA:AA:A8:17:CB:B9:D7:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.cer sbgp-ipAddrBlock: critical IPv4: 208.88.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:2d:d4:34:59:d6:cc:a1:66:00:6d:f7:21:d5:6b:81:7c:1c: bb:e5:f2:10:83:08:73:c5:40:b5:7b:b7:a9:ae:37:f5:ec:ff: 13:9d:3d:f7:7f:11:02:dc:a5:c6:4a:c3:18:50:96:c9:d2:92: 67:68:88:97:22:82:19:15:1a:7d:e7:b0:b4:ca:e2:e8:43:99: fd:f5:a5:d6:b7:ed:49:9c:02:3f:25:75:22:ec:5a:90:29:6f: 29:f5:99:67:52:c1:7f:42:f3:b1:d9:c4:d6:9a:47:a4:cb:ee: be:27:94:96:84:48:dc:f1:b5:d5:aa:3e:02:6f:15:49:0c:8e: c5:e5:b9:96:08:51:22:03:53:ec:a0:e6:63:45:21:75:ec:9a: 6e:97:1a:bd:ea:3b:36:d7:06:42:ff:d9:55:64:50:1a:73:b7: 8e:61:45:e3:11:b2:1f:64:51:02:86:36:af:2d:46:0c:24:d3: d5:51:91:df:0d:41:0b:2f:29:94:e8:fd:e8:33:5e:49:57:ef: 16:ef:ce:6f:74:3f:c3:02:7c:de:0d:21:f7:85:c9:7e:41:52: 20:07:0a:36:2b:67:e1:7a:22:ed:52:d7:6e:eb:6d:08:1e:76: 1e:4a:72:a6:22:99:d7:71:fe:0c:67:b1:12:08:68:4b:da:b8: 65:14:48:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnVsUQ0fDiGZXIJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDhlMjU4NjktZmIzNS00Yjc2LTgwNTMtMWI2YzUxYmQz YzNmMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ZDE0MmU1NDItOTA0NC00OGQzLTgwYWQtNTlmMDc0ZDBmNzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQZ30E42m5CD31hJ4T/VwUZdEM9f6KP0JtsT qQ8jbhoEjMFGT6ZEImgNBqqe3rHMEyDpJKpso+qkb8q97Tnl/oO183WP+V3Ls0+y xaCRblT5X3qrIOq37/1TSB+v1daraFy8L0SmaIM1hKqBiju2sflx6p6/5TZbhN3R 2fIkZe53QLTyJe0WOFsHAWejPiWg5xwq/GQm3ZjDHvbZnk8ouqmeFRVGppG+hl2R tsuNZxyYmU3XW2pMoAtMS9o4u+9O+Kt4aRrJZ9rjIDWdGMjDc3dMxQ2u6to8J4fp eFeKFoOf5iycpy4XL0AjKBZI6P6CBQVB2uHhQbGhqNvqpNeKUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+lhEJcnN/tjRjM0cNiumnnXEz6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kOGUy NTg2OS1mYjM1LTRiNzYtODA1My0xYjZjNTFiZDNjM2YvMjU1N2Q5MjctMDM0MS0z YzUxLWFmYzItMzM3NmVlNDBkMzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDhlMjU4NjktZmIzNS00Yjc2LTgw NTMtMWI2YzUxYmQzYzNmL2Q4ZTI1ODY5LWZiMzUtNGI3Ni04MDUzLTFiNmM1MWJk M2MzZi5jcmwwHwYDVR0jBBgwFoAUVcVcDO1F0T2Nkq4b+qqoF8u5150wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kOGUyNTg2OS1mYjM1LTRiNzYtODA1My0xYjZj NTFiZDNjM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUt1DRZ1syhZgBt9yHVa4F8HLvl8hCDCHPFQLV7t6muN/Xs/xOdPfd/ EQLcpcZKwxhQlsnSkmdoiJcighkVGn3nsLTK4uhDmf31pda37UmcAj8ldSLsWpAp byn1mWdSwX9C87HZxNaaR6TL7r4nlJaESNzxtdWqPgJvFUkMjsXluZYIUSIDU+yg 5mNFIXXsmm6XGr3qOzbXBkL/2VVkUBpzt45hReMRsh9kUQKGNq8tRgwk09VRkd8N QQsvKZTo/egzXklX7xbvzm90P8MCfN4NIfeFyX5BUiAHCjYrZ+F6Iu1S127rbQge dh5KcqYimddx/gxnsRIIaEvauGUUSHI= -----END CERTIFICATE-----Generated at Wed Sep 30 00:19:01 2026 by rpki-client