$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023/36e54ae1-0dad-36c9-85d3-8d41fa168234.roa File: 36e54ae1-0dad-36c9-85d3-8d41fa168234.roa (raw, json) Hash identifier: YLg08uoM+xIPnR30z0/FY/LfsT4SXTIxpuKM+kbKPKI= Subject key identifier: 5A:46:FE:B2:0A:28:D1:01:67:23:74:74:06:81:B3:F5:7F:D1:CF:7B Certificate issuer: /CN=88bfa348-1db4-4c2b-8cd7-df6655cb7023 Certificate serial: 010D0C9F4328584F629313DB463170F693B6CC50 Authority key identifier: 64:73:BC:A6:EA:35:23:F8:50:FB:98:8D:F3:07:70:7A:51:41:59:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023/36e54ae1-0dad-36c9-85d3-8d41fa168234.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 395412 IP address blocks: 204.8.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023/88bfa348-1db4-4c2b-8cd7-df6655cb7023.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023/88bfa348-1db4-4c2b-8cd7-df6655cb7023.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:13:db:46:31:70:f6:93:b6:cc:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88bfa348-1db4-4c2b-8cd7-df6655cb7023 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=66a3a6ea-603f-4104-b17f-6568164cf50c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:13:1d:1a:38:b4:c3:0e:a5:58:75:e7:23:a9: da:3c:71:74:1c:ed:e1:4d:41:69:e8:2a:7e:9c:52: d1:3f:c7:56:73:52:6e:5d:c2:0a:38:44:17:82:43: 78:e6:64:83:6c:de:bd:e1:aa:fa:ff:5c:51:4c:b1: 61:ea:4c:fe:b7:72:47:80:c8:78:41:eb:d6:74:d9: c1:c0:c7:ca:a8:82:a6:69:0e:04:e7:36:9e:14:a1: 02:22:40:bf:a1:34:5a:32:70:fd:0f:94:5d:db:ad: 66:14:91:e0:91:f9:a5:09:2d:c4:cd:63:ec:95:9f: 72:28:f1:6a:55:d4:c9:12:1a:71:18:28:8e:fe:62: e4:a4:51:85:f7:64:06:6c:d8:5f:b8:28:9a:82:cf: 32:5a:4a:ac:eb:57:af:f0:27:c1:e9:8f:08:ab:08: 0a:b8:32:ce:dd:3c:3b:29:33:0a:e6:51:5d:b8:a3: b5:9a:9e:b0:e0:f3:b9:f2:77:d9:f0:42:e6:ea:5b: 6d:01:df:17:d6:48:59:29:1e:19:44:e1:08:09:44: fb:20:5a:88:2c:da:86:b3:d9:06:d3:3a:06:0a:66: 8f:d8:65:13:f2:19:83:fc:04:2c:6f:3a:e0:5f:15: f9:ab:40:84:f5:7d:94:99:77:0a:8f:a9:21:09:45: 38:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:46:FE:B2:0A:28:D1:01:67:23:74:74:06:81:B3:F5:7F:D1:CF:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023/36e54ae1-0dad-36c9-85d3-8d41fa168234.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023/88bfa348-1db4-4c2b-8cd7-df6655cb7023.crl X509v3 Authority Key Identifier: keyid:64:73:BC:A6:EA:35:23:F8:50:FB:98:8D:F3:07:70:7A:51:41:59:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023.cer sbgp-ipAddrBlock: critical IPv4: 204.8.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:d0:a1:0c:b7:f8:d5:30:9e:72:87:ce:a1:a6:74:e2:94:05: 11:d0:85:f9:ab:c2:14:11:df:59:1e:b6:cb:59:f1:25:12:7c: 83:0f:e6:4f:7f:14:1d:54:b1:be:44:8d:70:9a:28:d7:93:64: a6:c8:48:9d:d4:57:fe:fc:5c:be:a9:55:d9:3e:c5:85:5a:f8: a6:78:ae:f5:de:eb:bf:01:8a:17:b8:fa:ba:9e:8a:eb:ef:56: 08:d2:88:ba:ec:54:d2:8b:d7:c0:39:16:46:e6:db:76:6c:34: c0:a2:c8:09:30:77:8e:cc:a7:b5:b1:4c:be:24:1b:a7:13:a5: ea:92:96:04:18:15:e4:31:ea:2d:32:60:00:9d:a9:f8:1c:9b: e3:ba:ec:8c:69:61:a9:ff:2d:8a:7b:4c:79:09:a0:8f:28:75: 48:2e:b0:71:f5:2a:30:d8:c5:a8:55:6f:ed:53:df:45:80:1f: 88:c1:7a:d0:8b:3c:22:67:ee:ba:96:8f:af:11:a3:11:d6:4e: e9:30:42:48:e2:1c:04:3b:d3:0c:ac:f1:9c:01:a4:b5:dc:4b: 57:00:6c:f9:c2:15:e9:0e:26:91:f0:1e:76:6f:ce:7c:f7:c5: e5:b5:b9:08:4d:19:17:0f:7d:e5:27:54:90:b9:d2:86:0f:95: 83:14:7a:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikxPbRjFw9pO2zFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhiZmEzNDgtMWRiNC00YzJiLThjZDctZGY2NjU1Y2I3 MDIzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk NjZhM2E2ZWEtNjAzZi00MTA0LWIxN2YtNjU2ODE2NGNmNTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhMdGji0ww6lWHXnI6naPHF0HO3hTUFp6Cp+ nFLRP8dWc1JuXcIKOEQXgkN45mSDbN694ar6/1xRTLFh6kz+t3JHgMh4QevWdNnB wMfKqIKmaQ4E5zaeFKECIkC/oTRaMnD9D5Rd261mFJHgkfmlCS3EzWPslZ9yKPFq VdTJEhpxGCiO/mLkpFGF92QGbNhfuCiags8yWkqs61ev8CfB6Y8IqwgKuDLO3Tw7 KTMK5lFduKO1mp6w4PO58nfZ8ELm6lttAd8X1khZKR4ZROEICUT7IFqILNqGs9kG 0zoGCmaP2GUT8hmD/AQsbzrgXxX5q0CE9X2UmXcKj6khCUU4HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFpG/rIKKNEBZyN0dAaBs/V/0c97MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84OGJm YTM0OC0xZGI0LTRjMmItOGNkNy1kZjY2NTVjYjcwMjMvMzZlNTRhZTEtMGRhZC0z NmM5LTg1ZDMtOGQ0MWZhMTY4MjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvODhiZmEzNDgtMWRiNC00YzJiLThj ZDctZGY2NjU1Y2I3MDIzLzg4YmZhMzQ4LTFkYjQtNGMyYi04Y2Q3LWRmNjY1NWNi NzAyMy5jcmwwHwYDVR0jBBgwFoAUZHO8puo1I/hQ+5iN8wdwelFBWXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84OGJmYTM0OC0xZGI0LTRjMmItOGNkNy1kZjY2 NTVjYjcwMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAjqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnQoQy3+NUwnnKHzqGmdOKUBRHQhfmrwhQR31ketstZ8SUSfIMP5k9/ FB1Usb5EjXCaKNeTZKbISJ3UV/78XL6pVdk+xYVa+KZ4rvXe678Bihe4+rqeiuvv VgjSiLrsVNKL18A5Fkbm23ZsNMCiyAkwd47Mp7WxTL4kG6cTpeqSlgQYFeQx6i0y YACdqfgcm+O67IxpYan/LYp7THkJoI8odUgusHH1KjDYxahVb+1T30WAH4jBetCL PCJn7rqWj68RoxHWTukwQkjiHAQ70wys8ZwBpLXcS1cAbPnCFekOJpHwHnZvznz3 xeW1uQhNGRcPfeUnVJC50oYPlYMUeoc= -----END CERTIFICATE-----Generated at Wed Oct 7 13:45:01 2026 by rpki-client