$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/88ae5900-93cc-3311-a858-b4a65a1fbe39.roa File: 88ae5900-93cc-3311-a858-b4a65a1fbe39.roa (raw, json) Hash identifier: gmNNTBwaShBrsZ7xz4E72pV8JL2zph7/lSsmIeOMUl0= Subject key identifier: 1D:86:B8:4E:6F:9F:94:85:F9:61:81:E1:B1:CE:E4:0F:70:B5:FF:2C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EEEB76B3B71E6A3C946FA07A0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/88ae5900-93cc-3311-a858-b4a65a1fbe39.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 701 IP address blocks: 68.238.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:6b:3b:71:e6:a3:c9:46:fa:07:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=101c50a0-704d-4695-82ae-1b9a016a5300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a3:54:c0:96:a9:ca:8d:71:da:e4:d3:bc:ee: cc:e1:55:82:ad:83:d0:b1:32:da:b8:ff:50:ce:50: a1:05:3a:ab:76:14:ae:bb:9e:d9:af:43:02:e6:64: 62:cc:7a:b8:14:88:72:58:1c:1a:8f:1d:b4:67:85: eb:53:63:0d:93:e9:4a:df:74:e9:0e:42:ff:d8:98: 44:9e:7e:e0:4b:88:f8:3a:05:67:af:1a:72:08:a5: 4e:c2:76:b7:76:8d:93:cd:66:99:4a:a2:8c:79:a1: 20:43:2f:f6:fd:fb:3f:b1:37:21:e9:46:1f:42:11: 7b:7c:e8:17:3a:be:b3:dc:3e:5f:40:09:f4:34:07: 90:37:00:a7:00:5c:6c:00:08:a9:29:72:be:30:ac: 85:cc:fa:62:6f:de:fd:8f:61:78:8f:42:bb:d3:c0: 8a:df:88:37:2d:50:b3:bf:a1:7d:75:87:0a:09:07: cd:75:9b:0b:96:ca:e1:fa:4e:2e:90:71:00:b3:fb: 3b:77:f3:f9:34:c3:be:f8:92:bc:18:ba:5a:10:1e: ef:2e:fe:e6:65:92:c7:c5:c4:4a:87:06:74:41:a6: d4:64:ac:32:57:87:a6:74:2f:e2:af:65:05:8a:40: 50:2a:17:d1:ef:7c:33:84:be:40:00:a8:27:7e:7a: 3f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:86:B8:4E:6F:9F:94:85:F9:61:81:E1:B1:CE:E4:0F:70:B5:FF:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/88ae5900-93cc-3311-a858-b4a65a1fbe39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.238.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:ca:e6:0a:4d:cf:fe:2f:8e:c9:ac:0b:e7:72:74:9c:eb:b6: a9:ea:11:1d:d1:fc:1b:66:78:fc:bf:c3:37:f1:cc:ae:4a:80: 6c:c2:6e:57:fe:2a:bc:d2:48:1f:28:de:be:b7:5b:84:49:56: 45:b5:69:83:56:61:d6:81:1f:c9:24:0d:84:64:f1:83:df:17: dd:48:68:c4:90:ab:53:8f:4c:b0:43:bf:50:e2:91:4b:df:92: ac:a0:6f:99:27:bf:a8:63:58:2f:94:d9:67:9b:b5:f7:9d:69: 82:4f:96:ab:96:61:43:ac:83:30:3a:9c:58:ec:b7:fe:29:0d: b6:b7:b2:e3:d5:27:58:cd:99:c3:b9:89:0a:ff:14:7a:80:f1: b2:3d:7d:d4:52:26:5e:59:05:ae:35:98:a0:34:6f:d9:66:3d: da:8c:7d:db:48:93:91:d4:76:82:da:10:ec:0b:62:bc:bc:1e: 1e:fd:a0:7d:84:46:9c:38:c3:99:37:60:b8:70:2b:79:74:ef: b0:fe:88:93:01:af:2c:29:a1:79:44:ac:1a:74:ff:c1:8b:8f: b4:80:87:da:a8:f7:44:25:18:ed:84:af:94:68:da:8d:04:05: 4c:e3:2d:93:1b:9a:de:8f:08:2d:19:73:5d:73:00:3c:db:89: e8:f5:d6:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut2s7ceajyUb6B6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk MTAxYzUwYTAtNzA0ZC00Njk1LTgyYWUtMWI5YTAxNmE1MzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaNUwJapyo1x2uTTvO7M4VWCrYPQsTLauP9Q zlChBTqrdhSuu57Zr0MC5mRizHq4FIhyWBwajx20Z4XrU2MNk+lK33TpDkL/2JhE nn7gS4j4OgVnrxpyCKVOwna3do2TzWaZSqKMeaEgQy/2/fs/sTch6UYfQhF7fOgX Or6z3D5fQAn0NAeQNwCnAFxsAAipKXK+MKyFzPpib979j2F4j0K708CK34g3LVCz v6F9dYcKCQfNdZsLlsrh+k4ukHEAs/s7d/P5NMO++JK8GLpaEB7vLv7mZZLHxcRK hwZ0QabUZKwyV4emdC/ir2UFikBQKhfR73wzhL5AAKgnfno/4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2GuE5vn5SF+WGB4bHO5A9wtf8sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODhhZTU5MDAtOTNjYy0z MzExLWE4NTgtYjRhNjVhMWZiZTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERO4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKfK5gpNz/4vjsmsC+dydJzrtqnqER3R/BtmePy/wzfxzK5KgGzCblf+ KrzSSB8o3r63W4RJVkW1aYNWYdaBH8kkDYRk8YPfF91IaMSQq1OPTLBDv1DikUvf kqygb5knv6hjWC+U2WebtfedaYJPlquWYUOsgzA6nFjst/4pDba3suPVJ1jNmcO5 iQr/FHqA8bI9fdRSJl5ZBa41mKA0b9lmPdqMfdtIk5HUdoLaEOwLYry8Hh79oH2E Rpw4w5k3YLhwK3l077D+iJMBrywpoXlErBp0/8GLj7SAh9qo90QlGO2Er5Ro2o0E BUzjLZMbmt6PCC0Zc11zADzbiej11o8= -----END CERTIFICATE-----Generated at Sun Sep 13 16:41:31 2026 by rpki-client