$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/88d98faa-490e-3cc3-acf1-12d0a9356e3e.roa File: 88d98faa-490e-3cc3-acf1-12d0a9356e3e.roa (raw, json) Hash identifier: r6jzIjcgZGr0w0Tj4lOdfDgEDi7gLECAKZ3hWi7owUo= Subject key identifier: 9F:0D:7E:E3:70:BD:D2:C6:A5:C3:0C:EB:AE:E8:FD:1B:A2:F0:64:E6 Certificate issuer: /CN=d498318a-7059-42be-9b60-234aedba5e34 Certificate serial: 010D0C9F4328584F480D440D3C3E67E497700C90 Authority key identifier: 1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/88d98faa-490e-3cc3-acf1-12d0a9356e3e.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 16787 IP address blocks: 2605:1c00:fff0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:44:0d:3c:3e:67:e4:97:70:0c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d498318a-7059-42be-9b60-234aedba5e34 Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=0fb47510-476b-4171-a949-ec1e3cbab64d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:29:3e:dd:f4:e1:60:81:9c:91:7d:a9:34:0a: e9:53:6a:da:2e:19:7e:d6:cb:dd:f9:5a:ed:04:83: 69:66:ed:46:b0:fa:2d:11:ca:32:14:a2:fc:2d:17: 81:92:af:b4:81:29:66:e6:1e:e8:85:82:15:3a:c0: 35:b5:ec:ae:57:2a:0a:e2:0c:f2:a2:63:e4:83:74: 6d:63:37:bf:06:82:f0:f0:9b:8a:e0:c3:6a:5d:f1: d0:29:fd:17:77:c1:64:26:1d:e9:88:ba:46:8f:32: 7c:3a:53:3e:5c:b2:10:13:b3:52:1b:15:5c:2e:e4: eb:40:5b:67:20:ba:61:2a:f3:70:49:07:83:42:1c: ba:3b:68:b2:95:30:22:13:68:0c:aa:ca:77:21:2c: 08:a0:3e:81:20:da:95:8e:23:28:1d:5d:fd:f9:49: 17:5c:2b:14:2f:0c:17:b2:b2:d8:ae:f5:89:ec:17: 16:1f:a2:1c:43:16:f6:5a:1b:a5:b0:32:94:9d:48: 85:44:56:ee:de:64:76:91:2e:17:39:ef:b7:b8:d6: 07:94:d4:6d:cc:c6:f2:0f:47:7d:e2:85:42:a4:1a: e3:02:47:ff:8d:35:bb:23:44:64:6d:74:6a:16:5b: 31:2e:4f:9c:00:57:19:aa:a7:0f:4d:b5:5a:ea:f9: db:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:0D:7E:E3:70:BD:D2:C6:A5:C3:0C:EB:AE:E8:FD:1B:A2:F0:64:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/88d98faa-490e-3cc3-acf1-12d0a9356e3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.crl X509v3 Authority Key Identifier: keyid:1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer sbgp-ipAddrBlock: critical IPv6: 2605:1c00:fff0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:fd:24:a9:5d:10:35:a2:07:cc:26:5b:ee:9f:5a:29:a8:d6: 68:db:6a:54:a9:cd:68:3b:89:2b:5a:79:5d:32:a9:7c:d8:26: d5:7f:8b:25:33:e7:b2:6e:68:ae:c7:69:d4:f2:3e:f7:07:f2: b7:08:3f:95:96:66:9e:b5:4f:3b:a3:b4:55:0a:18:51:af:c3: 0e:73:b0:ff:c6:30:9f:a1:52:22:1b:89:ae:85:a1:39:9c:f6: ad:67:63:e3:1b:66:99:ba:2b:21:8c:b5:80:cb:fa:e6:7c:0e: 9c:19:c5:37:bd:71:1a:2a:2a:62:32:d7:4d:72:9d:5d:e7:dd: e2:aa:c3:ea:e1:95:f2:74:7d:db:7e:4c:5d:0e:38:e4:9b:cc: 17:e2:c7:42:2e:8f:f9:e6:3b:40:86:ab:af:19:33:35:16:72: 56:cd:ee:55:87:ce:c7:c2:ff:f1:26:14:a6:7d:fd:7f:c5:7c: ce:16:80:48:f3:d8:a0:c2:5a:c5:cb:73:42:65:e3:db:6f:9a: dc:b8:e5:ad:df:f3:0a:55:9d:18:e4:6b:c2:51:bf:b5:66:62: 37:42:20:89:78:93:02:9e:f9:c5:a6:48:1a:ec:e9:ad:36:0c: ad:87:b1:ae:56:41:dc:44:ff:95:27:50:3a:15:c9:96:cc:63: 98:36:09:17 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9IDUQNPD5n5JdwDJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ5ODMxOGEtNzA1OS00MmJlLTliNjAtMjM0YWVkYmE1 ZTM0MB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk MGZiNDc1MTAtNDc2Yi00MTcxLWE5NDktZWMxZTNjYmFiNjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCk+3fThYIGckX2pNArpU2raLhl+1svd+Vrt BINpZu1GsPotEcoyFKL8LReBkq+0gSlm5h7ohYIVOsA1teyuVyoK4gzyomPkg3Rt Yze/BoLw8JuK4MNqXfHQKf0Xd8FkJh3piLpGjzJ8OlM+XLIQE7NSGxVcLuTrQFtn ILphKvNwSQeDQhy6O2iylTAiE2gMqsp3ISwIoD6BINqVjiMoHV39+UkXXCsULwwX srLYrvWJ7BcWH6IcQxb2WhulsDKUnUiFRFbu3mR2kS4XOe+3uNYHlNRtzMbyD0d9 4oVCpBrjAkf/jTW7I0RkbXRqFlsxLk+cAFcZqqcPTbVa6vnbzQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ8NfuNwvdLGpcMM667o/Rui8GTmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDk4 MzE4YS03MDU5LTQyYmUtOWI2MC0yMzRhZWRiYTVlMzQvODhkOThmYWEtNDkwZS0z Y2MzLWFjZjEtMTJkMGE5MzU2ZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ5ODMxOGEtNzA1OS00MmJlLTli NjAtMjM0YWVkYmE1ZTM0L2Q0OTgzMThhLTcwNTktNDJiZS05YjYwLTIzNGFlZGJh NWUzNC5jcmwwHwYDVR0jBBgwFoAUG1izrEgJ1ISdOmbgXwic0hDBEWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDk4MzE4YS03MDU5LTQyYmUtOWI2MC0yMzRh ZWRiYTVlMzQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgUcAP/w MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHL9JKldEDWiB8wmW+6fWimo1mjbalSpzWg7iStaeV0yqXzYJtV/ iyUz57JuaK7HadTyPvcH8rcIP5WWZp61TzujtFUKGFGvww5zsP/GMJ+hUiIbia6F oTmc9q1nY+MbZpm6KyGMtYDL+uZ8DpwZxTe9cRoqKmIy101ynV3n3eKqw+rhlfJ0 fdt+TF0OOOSbzBfix0Iuj/nmO0CGq68ZMzUWclbN7lWHzsfC//EmFKZ9/X/FfM4W gEjz2KDCWsXLc0Jl49tvmty45a3f8wpVnRjka8JRv7VmYjdCIIl4kwKe+cWmSBrs 6a02DK2Hsa5WQdxE/5UnUDoVyZbMY5g2CRc= -----END CERTIFICATE-----Generated at Sat Sep 26 12:42:04 2026 by rpki-client