$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/88ec12f6-7a05-30e1-ba64-f073e2a900fb.roa File: 88ec12f6-7a05-30e1-ba64-f073e2a900fb.roa (raw, json) Hash identifier: kLwwJSBjWyB9kcGxyShhkJ8i8wcbn0qiRn+318jzALM= Subject key identifier: 81:63:15:6D:BC:B0:79:E9:0A:3B:00:CE:E8:49:39:4F:AB:07:93:3B Certificate issuer: /CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21 Certificate serial: 010D0C9F4328584ED861DFBFD621B1B4F05D6B40 Authority key identifier: 1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/88ec12f6-7a05-30e1-ba64-f073e2a900fb.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 17017 IP address blocks: 168.245.136.0/24 maxlen: 24 208.70.144.0/21 maxlen: 21 2604:7fc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:61:df:bf:d6:21:b1:b4:f0:5d:6b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=b07f5780-aa15-45d3-84f2-270e3f09e0c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:39:99:fd:ca:13:e2:b0:b6:20:85:ef:56:b4: 8a:f3:b9:be:9d:ca:3d:2a:aa:11:a5:4c:53:3e:94: bb:73:0e:22:3e:6a:4b:80:58:3a:d3:b6:57:44:27: 0b:45:6b:fd:63:90:18:3b:a9:19:95:e3:25:5d:ac: 8a:09:44:4f:aa:bb:03:e1:1d:88:28:60:f8:90:5b: aa:18:b0:ac:a3:4e:71:ba:f6:66:f2:23:93:42:09: 62:56:c9:e4:c0:c6:d5:c3:f4:3f:77:ab:5f:fd:c9: 49:92:8e:d1:55:d8:ce:89:e3:b5:a1:4c:8c:99:62: dd:c4:d8:f8:fe:f3:20:12:18:e7:12:f7:9a:d7:28: 69:00:54:b5:05:2c:18:0e:f3:ba:9c:b2:ac:7e:2d: 38:20:7a:c5:6f:ab:22:ae:3f:be:6c:64:69:4d:fc: 70:d0:7a:f3:0f:7c:bf:c9:f3:11:68:e0:ec:45:88: a9:c6:6b:45:26:b5:8d:76:fb:19:ff:78:27:82:bc: 8c:a5:54:cf:a2:b4:b6:be:e6:6d:c6:4a:d1:bf:47: 03:8d:7d:f2:83:24:a9:d1:d4:67:04:6c:d0:54:bc: 2a:c0:9d:d2:65:25:1f:60:9e:8c:db:27:1c:15:b4: 52:52:6c:e6:85:c7:6d:2d:05:88:72:4c:a9:bb:18: e7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:63:15:6D:BC:B0:79:E9:0A:3B:00:CE:E8:49:39:4F:AB:07:93:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/88ec12f6-7a05-30e1-ba64-f073e2a900fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl X509v3 Authority Key Identifier: keyid:1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer sbgp-ipAddrBlock: critical IPv4: 168.245.136.0/24 208.70.144.0/21 IPv6: 2604:7fc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:78:7d:f3:fc:68:ca:ba:32:b0:14:71:de:7b:85:ef:59:80: b0:86:c3:0c:83:1e:72:e4:f6:4f:29:a0:80:2c:88:ba:77:4b: 83:2b:73:fe:b9:9b:bb:31:2b:c8:75:ea:60:2d:c4:0b:93:b6: 72:1e:b5:84:9c:6c:35:62:1f:5e:c3:ff:cc:d3:0b:03:cd:b6: ff:dd:72:ad:9d:64:32:40:cf:49:ae:ab:14:22:5c:54:02:ff: 48:2f:78:dc:90:00:cc:23:1e:51:61:9e:19:1d:ce:67:00:a2: 62:4d:55:d2:ea:f3:88:a4:45:a4:c9:c1:e8:ae:64:4d:a1:eb: 10:cf:88:7f:76:c5:0c:75:09:10:5f:22:d2:64:69:5a:8c:24: 29:73:35:91:87:8b:eb:ac:ad:9d:27:2c:2e:39:ed:55:e8:13: 4f:50:1f:2c:84:85:14:b2:ef:87:62:9c:52:2b:e4:d6:5c:5a: 99:85:01:d0:15:30:10:0a:bd:02:14:64:b5:1e:0f:e1:83:e1: a6:8d:a1:41:31:ba:97:c0:11:41:35:7c:31:1d:f7:aa:61:9a: c4:6a:6d:fc:a7:5c:a9:4c:6c:cd:62:9f:93:43:b4:17:2e:2f: 6e:15:72:70:0f:c0:96:b6:24:af:ab:f9:c4:b4:bc:83:73:22: fb:e0:f4:d0 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE7YYd+/1iGxtPBda0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ0M2FkZmQtZjZlNC00NTA0LTg2ZjAtMmVmYWRmOWQ0 ZDIxMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk YjA3ZjU3ODAtYWExNS00NWQzLTg0ZjItMjcwZTNmMDllMGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjmZ/coT4rC2IIXvVrSK87m+nco9KqoRpUxT PpS7cw4iPmpLgFg607ZXRCcLRWv9Y5AYO6kZleMlXayKCURPqrsD4R2IKGD4kFuq GLCso05xuvZm8iOTQgliVsnkwMbVw/Q/d6tf/clJko7RVdjOieO1oUyMmWLdxNj4 /vMgEhjnEvea1yhpAFS1BSwYDvO6nLKsfi04IHrFb6sirj++bGRpTfxw0HrzD3y/ yfMRaODsRYipxmtFJrWNdvsZ/3gngryMpVTPorS2vuZtxkrRv0cDjX3ygySp0dRn BGzQVLwqwJ3SZSUfYJ6M2yccFbRSUmzmhcdtLQWIckypuxjnjwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFIFjFW28sHnpCjsAzuhJOU+rB5M7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ZDQz YWRmZC1mNmU0LTQ1MDQtODZmMC0yZWZhZGY5ZDRkMjEvODhlYzEyZjYtN2EwNS0z MGUxLWJhNjQtZjA3M2UyYTkwMGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGQ0M2FkZmQtZjZlNC00NTA0LTg2 ZjAtMmVmYWRmOWQ0ZDIxLzRkNDNhZGZkLWY2ZTQtNDUwNC04NmYwLTJlZmFkZjlk NGQyMS5jcmwwHwYDVR0jBBgwFoAUHLPKVHX2AJyrqb/kFUAJQKHvOZ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ZDQzYWRmZC1mNmU0LTQ1MDQtODZmMC0yZWZh ZGY5ZDRkMjEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAqPWIAwQD 0EaQMA0EAgACMAcDBQAmBH/AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADB4ffP8aMq6MrAUcd57he9ZgLCG wwyDHnLk9k8poIAsiLp3S4Mrc/65m7sxK8h16mAtxAuTtnIetYScbDViH17D/8zT CwPNtv/dcq2dZDJAz0muqxQiXFQC/0gveNyQAMwjHlFhnhkdzmcAomJNVdLq84ik RaTJweiuZE2h6xDPiH92xQx1CRBfItJkaVqMJClzNZGHi+usrZ0nLC457VXoE09Q HyyEhRSy74dinFIr5NZcWpmFAdAVMBAKvQIUZLUeD+GD4aaNoUExupfAEUE1fDEd 96phmsRqbfynXKlMbM1in5NDtBcuL24VcnAPwJa2JK+r+cS0vINzIvvg9NA= -----END CERTIFICATE-----Generated at Sun Sep 13 13:22:59 2026 by rpki-client