$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/88ae5900-93cc-3311-a858-b4a65a1fbe39.roa File: 88ae5900-93cc-3311-a858-b4a65a1fbe39.roa (raw, json) Hash identifier: HzW1MyVBoTvyNwOcB8VdcRUFwXMqdeFYOsXV16r4Djc= Subject key identifier: F8:87:C8:86:D1:94:A3:52:2B:83:EC:39:D2:4A:0A:92:CF:C9:12:24 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F90A31AAAF967CBFBBAB5A280 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/88ae5900-93cc-3311-a858-b4a65a1fbe39.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 701 IP address blocks: 68.238.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a3:1a:aa:f9:67:cb:fb:ba:b5:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=c40780a2-e85b-452a-b47d-c7d0c5f20418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:34:cb:35:44:23:be:d7:6f:82:02:72:32:66: 83:6c:f8:82:3f:0f:34:4f:2e:af:83:6d:fa:c4:84: 6e:7c:f0:a9:a3:c4:01:fd:08:8c:04:96:cd:ee:23: 5e:16:f9:9e:24:19:91:10:15:44:51:51:d4:f2:8f: 64:c1:88:29:b9:14:97:44:b9:30:e8:65:57:f4:14: 4f:5d:d8:1c:7f:72:3b:15:b3:91:48:b2:24:99:a5: b0:10:36:aa:d3:9a:d2:a3:8a:b8:30:67:20:d1:59: 0a:77:8b:9c:12:31:b8:d4:2a:01:4f:b9:6a:fe:a3: e7:c9:fa:cc:dd:01:80:eb:2e:a3:96:67:17:48:c9: 6e:c4:86:f0:6a:40:03:f6:22:10:29:f7:4e:d1:a3: 99:de:fd:c0:c6:41:1b:fc:c2:7d:e8:36:de:13:fe: 75:4b:73:60:3d:29:45:12:19:85:62:42:36:a6:0f: 55:87:6f:ae:3f:f5:96:d6:a8:15:62:58:c5:87:6f: 93:c7:37:1a:25:d7:9a:83:68:b2:4e:58:c0:94:44: b5:ad:f2:ae:45:5b:4d:f9:dd:8b:42:1e:a7:fc:25: cd:d6:71:e6:65:e9:e6:a0:48:17:2d:64:68:57:c3: 10:4a:a6:89:9f:c0:51:99:2d:51:c3:e6:27:39:5f: 9a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:87:C8:86:D1:94:A3:52:2B:83:EC:39:D2:4A:0A:92:CF:C9:12:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/88ae5900-93cc-3311-a858-b4a65a1fbe39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.238.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:18:86:63:60:95:5b:a1:1e:95:9e:90:6f:32:9a:58:7b:0b: 30:87:96:1e:7c:e7:9e:21:38:ec:a3:3c:5b:5a:b2:b3:68:b5: 25:7a:52:cf:3b:ce:eb:65:d7:99:1e:49:8c:e4:67:94:28:45: b2:2a:59:b2:45:b7:7d:7b:0c:7f:a7:45:aa:0e:60:73:db:3a: 68:93:6a:dd:25:08:45:24:59:5f:3f:b7:78:66:1f:4e:a7:eb: 67:b4:1d:cc:37:2b:32:11:e4:34:43:6d:f6:0f:07:03:49:3d: 82:75:e7:db:fe:ee:0e:99:4b:fd:99:a0:08:48:d4:43:85:5f: 6c:b7:0d:ec:09:81:44:42:e8:a7:98:4b:93:e5:63:4a:67:85: 36:c7:12:dd:fa:50:0f:74:7c:2f:4e:74:6f:31:58:e0:c1:54: e0:c5:a9:ed:0f:51:b1:04:0c:4c:91:94:57:8e:a0:bd:ed:05: af:34:1b:8d:26:89:78:1f:54:f7:29:4f:02:1c:55:8d:46:a9: f9:c1:0f:76:9d:28:ba:ff:31:d6:ef:61:dd:7c:82:ca:2a:62: 35:97:70:cc:fb:bb:a1:80:c3:c3:dd:09:c5:99:23:45:43:ed: b7:d4:76:53:ae:fa:17:6f:82:47:b1:f0:8b:56:bf:89:40:5b: 75:7d:7d:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+Qoxqq+WfL+7q1ooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk YzQwNzgwYTItZTg1Yi00NTJhLWI0N2QtYzdkMGM1ZjIwNDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTTLNUQjvtdvggJyMmaDbPiCPw80Ty6vg236 xIRufPCpo8QB/QiMBJbN7iNeFvmeJBmREBVEUVHU8o9kwYgpuRSXRLkw6GVX9BRP Xdgcf3I7FbORSLIkmaWwEDaq05rSo4q4MGcg0VkKd4ucEjG41CoBT7lq/qPnyfrM 3QGA6y6jlmcXSMluxIbwakAD9iIQKfdO0aOZ3v3AxkEb/MJ96DbeE/51S3NgPSlF EhmFYkI2pg9Vh2+uP/WW1qgVYljFh2+TxzcaJdeag2iyTljAlES1rfKuRVtN+d2L Qh6n/CXN1nHmZenmoEgXLWRoV8MQSqaJn8BRmS1Rw+YnOV+adwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPiHyIbRlKNSK4PsOdJKCpLPyRIkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODhhZTU5MDAtOTNjYy0z MzExLWE4NTgtYjRhNjVhMWZiZTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERO4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoYhmNglVuhHpWekG8ymlh7CzCHlh58554hOOyjPFtasrNotSV6Us87 zutl15keSYzkZ5QoRbIqWbJFt317DH+nRaoOYHPbOmiTat0lCEUkWV8/t3hmH06n 62e0Hcw3KzIR5DRDbfYPBwNJPYJ159v+7g6ZS/2ZoAhI1EOFX2y3DewJgURC6KeY S5PlY0pnhTbHEt36UA90fC9OdG8xWODBVODFqe0PUbEEDEyRlFeOoL3tBa80G40m iXgfVPcpTwIcVY1GqfnBD3adKLr/MdbvYd18gsoqYjWXcMz7u6GAw8PdCcWZI0VD 7bfUdlOu+hdvgkex8ItWv4lAW3V9ffI= -----END CERTIFICATE-----Generated at Sun Nov 1 05:54:51 2026 by rpki-client