$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de/ce91baa4-4505-349d-a0fb-18653fe49913.roa File: ce91baa4-4505-349d-a0fb-18653fe49913.roa (raw, json) Hash identifier: lOLjGEe6fq4MKDnzxLovUEpdEdIh0ZdNGVLB4oXILCk= Subject key identifier: FF:42:49:C5:64:2F:17:4D:3B:D5:21:4D:39:04:EA:AF:62:85:88:04 Certificate issuer: /CN=da839ff9-2f32-4c6b-ad01-c0b5bda9b0de Certificate serial: 010D0C9F4328584F5A32DBBD76A615B854877700 Authority key identifier: C6:C9:37:5C:37:E0:05:0F:93:5E:4B:9B:61:92:67:4D:EA:FD:75:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de/ce91baa4-4505-349d-a0fb-18653fe49913.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 8075 IP address blocks: 199.88.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:db:bd:76:a6:15:b8:54:87:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da839ff9-2f32-4c6b-ad01-c0b5bda9b0de Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=4b7e496b-fdb0-4515-9e70-eeffef92c007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6b:58:f5:fc:51:89:3f:b9:96:2a:bc:63:ec: ca:4b:be:76:3d:36:2c:a6:cf:c2:40:8d:b4:33:6d: 89:0b:3b:0d:01:76:99:c0:5c:5d:0f:c4:44:03:44: 63:f5:0c:5c:67:d7:93:52:fb:6b:87:51:4c:bd:12: b9:87:83:c1:83:f8:81:db:d0:dc:ea:fb:7d:9f:77: 9c:97:f4:71:28:4c:cf:3e:b7:e5:1b:83:ba:76:64: f3:b4:16:de:b6:2a:45:53:f0:44:64:df:47:7b:f1: 06:90:0d:ac:78:cd:e1:44:16:4e:cc:4f:f5:d1:df: 1c:d4:db:c2:bf:03:c6:e7:1b:69:91:c4:b1:38:f6: fa:f6:67:f9:6c:e6:51:8e:a4:d0:e7:6f:7d:4c:8b: 49:b7:74:fc:8a:86:d9:4e:3c:56:f5:f8:e2:b7:67: f7:e6:d4:49:58:34:8c:05:c9:7c:7a:1c:88:90:6a: f0:14:38:e3:22:6c:5f:4b:86:16:56:a6:59:3e:a9: 8b:0b:ac:7d:d9:40:32:48:58:91:e3:e9:03:39:6e: ec:23:9f:61:c5:23:bf:44:19:a2:4f:05:8f:79:50: f0:3b:16:98:72:27:03:8a:2f:34:1f:54:64:f1:3e: ac:39:5d:e6:38:53:f4:d9:20:b4:b8:aa:91:e4:1f: 4c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:42:49:C5:64:2F:17:4D:3B:D5:21:4D:39:04:EA:AF:62:85:88:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de/ce91baa4-4505-349d-a0fb-18653fe49913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.crl X509v3 Authority Key Identifier: keyid:C6:C9:37:5C:37:E0:05:0F:93:5E:4B:9B:61:92:67:4D:EA:FD:75:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.cer sbgp-ipAddrBlock: critical IPv4: 199.88.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:18:55:fd:5b:df:02:94:0d:72:5e:d1:d0:1e:01:83:11:cc: d3:4f:1a:f8:fc:80:46:b0:6b:ef:67:7b:f0:0a:f9:62:1e:e7: 49:29:60:bd:ed:04:42:c3:bd:7f:25:41:61:b8:ce:d1:8e:5f: 48:45:1b:f1:e3:ce:10:cf:17:24:90:59:94:5a:29:ca:c6:f5: 21:5f:4d:14:55:3a:5f:21:d7:20:76:0b:c2:4c:08:ae:61:c2: a6:5a:6e:43:d6:28:7b:95:73:fc:41:80:f5:b7:60:92:6d:d8: ca:e0:df:5d:16:91:2d:b7:d2:1e:74:1a:78:46:15:ca:6f:b0: 0b:59:11:a0:73:b3:5a:44:6e:83:e3:67:ec:8f:8c:6d:9e:d5: 80:ab:61:4e:bc:37:5e:d0:c0:a2:5c:36:dc:00:55:b3:59:70: 2f:db:0b:19:b2:47:14:ff:4e:4e:d1:9b:9f:2c:60:45:5a:b3: c6:56:62:98:51:e2:33:66:f8:2d:35:3a:d4:87:be:25:50:44: 77:54:69:0f:d2:f1:34:b4:10:7f:d0:84:64:e9:20:f9:ef:0a: 95:2c:a0:9c:26:b5:3f:5d:20:50:af:bf:e5:96:16:d3:51:10: 30:bc:28:f7:5d:5d:f7:d5:6f:42:40:cd:2d:51:67:5e:b3:27: ef:85:13:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMtu9dqYVuFSHdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE4MzlmZjktMmYzMi00YzZiLWFkMDEtYzBiNWJkYTli MGRlMB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk NGI3ZTQ5NmItZmRiMC00NTE1LTllNzAtZWVmZmVmOTJjMDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2tY9fxRiT+5liq8Y+zKS752PTYsps/CQI20 M22JCzsNAXaZwFxdD8REA0Rj9QxcZ9eTUvtrh1FMvRK5h4PBg/iB29Dc6vt9n3ec l/RxKEzPPrflG4O6dmTztBbetipFU/BEZN9He/EGkA2seM3hRBZOzE/10d8c1NvC vwPG5xtpkcSxOPb69mf5bOZRjqTQ5299TItJt3T8iobZTjxW9fjit2f35tRJWDSM Bcl8ehyIkGrwFDjjImxfS4YWVqZZPqmLC6x92UAySFiR4+kDOW7sI59hxSO/RBmi TwWPeVDwOxaYcicDii80H1Rk8T6sOV3mOFP02SC0uKqR5B9MwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9CScVkLxdNO9UhTTkE6q9ihYgEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kYTgz OWZmOS0yZjMyLTRjNmItYWQwMS1jMGI1YmRhOWIwZGUvY2U5MWJhYTQtNDUwNS0z NDlkLWEwZmItMTg2NTNmZTQ5OTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGE4MzlmZjktMmYzMi00YzZiLWFk MDEtYzBiNWJkYTliMGRlL2RhODM5ZmY5LTJmMzItNGM2Yi1hZDAxLWMwYjViZGE5 YjBkZS5jcmwwHwYDVR0jBBgwFoAUxsk3XDfgBQ+TXkubYZJnTer9dQIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kYTgzOWZmOS0yZjMyLTRjNmItYWQwMS1jMGI1 YmRhOWIwZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1iYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQYVf1b3wKUDXJe0dAeAYMRzNNPGvj8gEawa+9ne/AK+WIe50kpYL3t BELDvX8lQWG4ztGOX0hFG/HjzhDPFySQWZRaKcrG9SFfTRRVOl8h1yB2C8JMCK5h wqZabkPWKHuVc/xBgPW3YJJt2Mrg310WkS230h50GnhGFcpvsAtZEaBzs1pEboPj Z+yPjG2e1YCrYU68N17QwKJcNtwAVbNZcC/bCxmyRxT/Tk7Rm58sYEVas8ZWYphR 4jNm+C01OtSHviVQRHdUaQ/S8TS0EH/QhGTpIPnvCpUsoJwmtT9dIFCvv+WWFtNR EDC8KPddXffVb0JAzS1RZ16zJ++FE/E= -----END CERTIFICATE-----Generated at Wed Oct 21 08:51:45 2026 by rpki-client