$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/88e1c23f-3271-32f7-88d1-24b93968b4c1.roa File: 88e1c23f-3271-32f7-88d1-24b93968b4c1.roa (raw, json) Hash identifier: AO5JYEqkpJq18GVtWYLeqKeMIxY3UX+ojrnrZCTcGwQ= Subject key identifier: 35:21:AC:79:E7:A9:38:9F:97:8E:66:D8:04:F8:C3:CE:15:AD:19:64 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584E3A2F1A0F93805D51E64A6D40 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/88e1c23f-3271-32f7-88d1-24b93968b4c1.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 1280 IP address blocks: 204.152.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 02 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:1a:0f:93:80:5d:51:e6:4a:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=c52d5c9d-2fa1-4de2-8b3d-ae59be4027b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2b:89:0d:e2:70:47:5f:35:d9:cc:5d:8b:95: d8:9d:83:db:89:39:23:5a:84:4e:28:85:1a:b8:e4: 1d:9f:00:ea:60:28:37:75:ed:4e:81:0e:d2:69:c4: 00:72:f9:69:a3:cc:13:2d:2f:d3:08:4d:ee:c9:d9: 31:72:d7:76:8c:65:70:65:5e:32:ef:5b:97:9d:57: 92:ae:a2:d7:b1:77:1a:20:b4:10:16:4f:8d:5a:64: 4f:fc:01:41:71:7f:7c:2c:03:e5:4a:c4:52:6f:dc: f0:d1:65:5a:1b:ec:26:1f:f8:8c:47:4b:56:7a:ad: f4:8d:47:f1:bd:37:73:3e:e8:c2:c5:fd:7f:86:9c: 2d:c9:29:e7:d3:1d:ef:b4:b1:89:59:41:72:f7:bf: b0:3a:16:43:bb:88:69:cb:56:b7:bf:d7:fc:63:7d: 98:04:3b:86:68:48:4b:0a:32:0e:3d:e6:6c:0d:76: 6e:d4:3e:11:10:47:82:61:5b:49:07:05:54:a8:4f: 7f:d0:c6:4d:75:ac:1d:6f:36:a6:4b:eb:e4:96:9f: 54:23:c8:06:a9:f7:8b:ac:99:86:48:db:bf:a0:e1: 65:4a:ab:63:92:7b:08:c4:5e:5a:6c:6d:8e:5f:ea: c1:2f:56:c5:e0:06:5c:fe:33:63:30:c6:1d:26:d2: 9e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:21:AC:79:E7:A9:38:9F:97:8E:66:D8:04:F8:C3:CE:15:AD:19:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/88e1c23f-3271-32f7-88d1-24b93968b4c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 204.152.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:20:76:90:da:5a:ae:48:ba:e4:0c:c3:68:b4:a9:08:ba:f8: 25:fe:c2:30:90:51:a8:2f:ae:f4:64:b7:a2:cc:57:f2:9e:da: df:64:e5:da:24:ce:17:30:6e:19:1b:d7:ac:c8:91:9b:53:17: 06:2a:f0:7d:b0:ee:7f:c1:f1:d1:88:96:2b:d5:be:c3:cd:55: a6:45:c1:55:90:e4:79:91:40:0d:d5:ea:c9:cf:9d:72:18:43: 5f:cf:8a:1a:ac:a1:16:57:5a:fa:6b:19:04:ea:99:c9:cc:0c: a2:3e:f6:29:29:8d:f0:ca:c6:40:69:df:6c:99:57:6e:0c:26: 94:42:ea:d9:99:d7:01:a1:21:0c:e4:ea:46:59:6c:6d:a9:47: ab:6f:f4:f7:88:a4:56:27:51:3d:86:49:a5:d1:7d:ab:9e:71: 0b:a6:89:3a:0b:95:0d:f5:c6:39:ca:43:47:d0:51:4e:9d:8d: 5d:4a:e4:bf:58:d9:91:4d:aa:40:9e:fb:aa:dd:15:45:2d:ca: 5c:24:f9:83:06:02:25:d4:de:61:bd:11:db:fc:41:1e:f9:fc: 1a:0d:7a:86:0b:34:82:7e:53:58:48:4e:69:e4:1a:48:7b:4d: c9:95:41:bf:02:b2:16:6d:3f:4d:55:25:23:03:ed:ea:a1:44: 72:06:03:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE46LxoPk4BdUeZKbUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk YzUyZDVjOWQtMmZhMS00ZGUyLThiM2QtYWU1OWJlNDAyN2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyuJDeJwR1812cxdi5XYnYPbiTkjWoROKIUa uOQdnwDqYCg3de1OgQ7SacQAcvlpo8wTLS/TCE3uydkxctd2jGVwZV4y71uXnVeS rqLXsXcaILQQFk+NWmRP/AFBcX98LAPlSsRSb9zw0WVaG+wmH/iMR0tWeq30jUfx vTdzPujCxf1/hpwtySnn0x3vtLGJWUFy97+wOhZDu4hpy1a3v9f8Y32YBDuGaEhL CjIOPeZsDXZu1D4REEeCYVtJBwVUqE9/0MZNdawdbzamS+vklp9UI8gGqfeLrJmG SNu/oOFlSqtjknsIxF5abG2OX+rBL1bF4AZc/jNjMMYdJtKe8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUhrHnnqTifl45m2AT4w84VrRlkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvODhlMWMyM2YtMzI3MS0z MmY3LTg4ZDEtMjRiOTM5NjhiNGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJi8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACggdpDaWq5IuuQMw2i0qQi6+CX+wjCQUagvrvRkt6LMV/Ke2t9k5dok zhcwbhkb16zIkZtTFwYq8H2w7n/B8dGIlivVvsPNVaZFwVWQ5HmRQA3V6snPnXIY Q1/PihqsoRZXWvprGQTqmcnMDKI+9ikpjfDKxkBp32yZV24MJpRC6tmZ1wGhIQzk 6kZZbG2pR6tv9PeIpFYnUT2GSaXRfauecQumiToLlQ31xjnKQ0fQUU6djV1K5L9Y 2ZFNqkCe+6rdFUUtylwk+YMGAiXU3mG9Edv8QR75/BoNeoYLNIJ+U1hITmnkGkh7 TcmVQb8CshZtP01VJSMD7eqhRHIGA2g= -----END CERTIFICATE-----Generated at Wed Jul 1 09:30:40 2026 by rpki-client