$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/8c39e9e5-bff9-3bf9-b082-a78db797d7b6.roa File: 8c39e9e5-bff9-3bf9-b082-a78db797d7b6.roa (raw, json) Hash identifier: u/DCbMDNZokFTqLCK878dkL0fQV6K20Eg3k690do1WQ= Subject key identifier: D6:33:14:26:3C:05:35:8C:2D:9E:BE:57:07:AE:91:74:6A:6F:C9:F2 Certificate issuer: /CN=0c82e125-4df5-4912-a714-101a1caa5b99 Certificate serial: 010D0C9F4328584F5A32DA99CAEDC55858C5C3D0 Authority key identifier: C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/8c39e9e5-bff9-3bf9-b082-a78db797d7b6.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 54054 IP address blocks: 199.168.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:da:99:ca:ed:c5:58:58:c5:c3:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c82e125-4df5-4912-a714-101a1caa5b99 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=9f53fa78-856b-40b4-8979-f7dfe96d2ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ed:6a:44:93:8d:bf:a4:7d:a8:7c:5d:cb:e1: 40:79:0d:26:f8:e4:16:2b:32:50:be:8b:c3:84:6f: e7:bf:46:db:18:d9:5b:66:61:80:79:36:a3:ff:f4: d7:d5:65:01:f5:84:c4:c9:23:3e:b1:d9:2b:ef:b9: a7:e4:17:d9:98:19:08:4b:a0:29:f1:35:5d:78:d1: bd:b1:ed:f1:ce:fe:c1:b8:da:90:3b:44:f6:01:c8: 5f:95:7b:b8:71:02:67:2e:c1:f8:dd:5c:88:3d:11: 95:19:c0:65:e1:5a:fd:7a:fb:10:e2:ff:fc:8d:3f: 6f:7e:3e:b2:96:50:8b:de:ac:3c:93:68:0e:8d:e5: b6:3d:99:68:63:17:ed:20:da:11:3e:ee:6f:e8:90: 17:2c:f9:57:e8:a3:bd:ba:2a:f5:02:b4:73:f0:8d: c0:c5:ae:1e:7d:0d:1d:7a:38:52:ed:6c:54:9c:53: ac:fc:c1:d2:44:36:c8:37:1d:cf:c9:4b:d3:63:93: 32:8d:c0:4b:29:b4:d6:a3:0e:1c:61:6c:f7:b7:07: 4a:f9:b8:8c:3d:e3:2c:1c:9c:08:cc:39:74:c0:8e: d0:bb:a1:67:ac:f4:0e:8e:d9:65:00:18:2e:6c:df: 91:cc:92:8d:9d:ef:42:dd:4c:31:21:7d:f8:9c:8e: d7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:33:14:26:3C:05:35:8C:2D:9E:BE:57:07:AE:91:74:6A:6F:C9:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/8c39e9e5-bff9-3bf9-b082-a78db797d7b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl X509v3 Authority Key Identifier: keyid:C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer sbgp-ipAddrBlock: critical IPv4: 199.168.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:5f:64:4b:5d:52:0b:98:85:84:d0:df:b0:e3:74:b0:e5:f2: 83:cb:20:a1:29:01:aa:c4:d4:e0:aa:d5:8c:a5:c7:8b:99:a0: 9f:0f:d4:24:02:da:2d:3a:1a:cd:4b:81:1a:f7:38:ab:ea:b7: 71:e2:0f:81:10:c0:a2:8c:ed:00:21:0c:1b:8f:2f:7a:43:06: 48:23:75:77:13:eb:4e:0c:41:33:1e:30:ba:14:16:96:2b:49: 9b:d6:8d:32:78:ba:74:dd:74:ef:99:88:79:4c:9b:12:06:86: a0:76:80:4a:94:36:e5:0f:22:f2:fb:46:ec:3c:52:17:45:5d: 08:65:b6:76:95:2d:99:55:79:98:8d:6f:97:d8:12:d8:34:b7: 43:0f:5b:00:c6:e2:ce:31:5f:e9:ee:df:04:f6:7d:94:a2:c4: ba:b0:cd:fb:08:77:3e:a7:9a:81:3a:5a:75:65:3a:48:6f:20: 46:80:ce:6a:42:74:a7:f8:24:3c:89:1a:a2:5c:b2:4d:fa:5c: 2c:b9:18:1f:7e:91:6c:88:e3:90:11:71:6c:3f:6d:d3:35:da: f7:68:80:cb:99:b3:f2:00:0e:a8:dc:41:4c:53:95:62:da:58: 83:8d:9b:b0:0e:0d:3e:cb:1c:66:34:e4:66:69:8b:24:80:89: 7f:83:d7:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMtqZyu3FWFjFw9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM4MmUxMjUtNGRmNS00OTEyLWE3MTQtMTAxYTFjYWE1 Yjk5MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk OWY1M2ZhNzgtODU2Yi00MGI0LTg5NzktZjdkZmU5NmQyZWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+1qRJONv6R9qHxdy+FAeQ0m+OQWKzJQvovD hG/nv0bbGNlbZmGAeTaj//TX1WUB9YTEySM+sdkr77mn5BfZmBkIS6Ap8TVdeNG9 se3xzv7BuNqQO0T2AchflXu4cQJnLsH43VyIPRGVGcBl4Vr9evsQ4v/8jT9vfj6y llCL3qw8k2gOjeW2PZloYxftINoRPu5v6JAXLPlX6KO9uir1ArRz8I3Axa4efQ0d ejhS7WxUnFOs/MHSRDbINx3PyUvTY5MyjcBLKbTWow4cYWz3twdK+biMPeMsHJwI zDl0wI7Qu6FnrPQOjtllABgubN+RzJKNne9C3UwxIX34nI7XLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYzFCY8BTWMLZ6+VweukXRqb8nyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzgy ZTEyNS00ZGY1LTQ5MTItYTcxNC0xMDFhMWNhYTViOTkvOGMzOWU5ZTUtYmZmOS0z YmY5LWIwODItYTc4ZGI3OTdkN2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGM4MmUxMjUtNGRmNS00OTEyLWE3 MTQtMTAxYTFjYWE1Yjk5LzBjODJlMTI1LTRkZjUtNDkxMi1hNzE0LTEwMWExY2Fh NWI5OS5jcmwwHwYDVR0jBBgwFoAUyDy4ggA7MgjtxRD3UBDgaNSWRPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYzgyZTEyNS00ZGY1LTQ5MTItYTcxNC0xMDFh MWNhYTViOTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx6hYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtfZEtdUguYhYTQ37DjdLDl8oPLIKEpAarE1OCq1Yylx4uZoJ8P1CQC 2i06Gs1LgRr3OKvqt3HiD4EQwKKM7QAhDBuPL3pDBkgjdXcT604MQTMeMLoUFpYr SZvWjTJ4unTddO+ZiHlMmxIGhqB2gEqUNuUPIvL7Ruw8UhdFXQhltnaVLZlVeZiN b5fYEtg0t0MPWwDG4s4xX+nu3wT2fZSixLqwzfsIdz6nmoE6WnVlOkhvIEaAzmpC dKf4JDyJGqJcsk36XCy5GB9+kWyI45ARcWw/bdM12vdogMuZs/IADqjcQUxTlWLa WIONm7AODT7LHGY05GZpiySAiX+D158= -----END CERTIFICATE-----Generated at Thu Oct 15 10:38:21 2026 by rpki-client