$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/da3393ae-5314-32d5-9f93-6336f62a4e00.roa File: da3393ae-5314-32d5-9f93-6336f62a4e00.roa (raw, json) Hash identifier: WL76W4NpWe2NElOBsJF+E+8YImDsZW6ALeEk5iaiElA= Subject key identifier: C3:7C:36:78:E1:18:D8:E7:45:B3:46:3F:3B:1E:DB:FC:68:73:56:39 Certificate issuer: /CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23 Certificate serial: 010D0C9F4328584EB57C59EB6EA7038C2729F400 Authority key identifier: CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/da3393ae-5314-32d5-9f93-6336f62a4e00.roa Signing time: Mon 03 Aug 2026 01:00:11 +0000 ROA not before: Mon 03 Aug 2026 01:00:11 +0000 ROA not after: Sun 01 Nov 2026 01:00:11 +0000 asID: 6079 IP address blocks: 146.88.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b5:7c:59:eb:6e:a7:03:8c:27:29:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23 Validity Not Before: Aug 3 01:00:11 2026 GMT Not After : Nov 1 01:00:11 2026 GMT Subject: CN=335eb8b2-6086-4ea0-850d-cfdd8c3c2761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e7:f2:b6:7e:a3:13:d3:2e:60:00:93:c7:b6: ce:87:8f:92:f2:fe:f5:ff:d2:3f:93:50:ca:a2:c6: 28:e1:96:1b:84:f0:cf:91:71:e4:dd:9f:98:d5:3f: f0:2f:22:96:6c:6c:51:44:9d:66:64:4d:3b:77:d8: d7:06:e0:0f:78:68:dd:40:95:43:08:66:6a:6a:05: 5b:03:d6:2a:86:e6:84:fd:6c:fe:c9:7e:56:7a:85: 3c:e2:a1:7e:f1:00:01:27:7c:a9:5f:c0:f3:e5:9e: 42:41:e9:b1:5d:1e:e1:7a:2e:65:1a:40:14:1c:28: 56:3e:24:74:55:77:fe:d2:17:2a:25:a6:c4:35:ae: ef:65:87:01:b6:d4:88:37:00:a2:b8:8a:42:f6:60: df:64:63:2d:5b:b5:07:81:13:28:2a:04:fa:a1:bf: e6:6f:64:cf:38:a3:88:da:e5:f3:6a:c4:da:df:c3: 06:06:dd:ab:67:10:9d:e6:d0:4b:01:b8:de:72:3f: 6f:83:0c:c2:01:9e:96:77:07:12:af:fc:4c:35:aa: b9:91:e2:2c:93:70:72:38:57:54:5f:9f:f5:07:18: 2c:47:ba:63:f4:81:11:60:9e:7f:24:cc:16:41:42: 4d:a9:61:bb:3d:62:92:c4:90:be:67:34:79:49:de: 1f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7C:36:78:E1:18:D8:E7:45:B3:46:3F:3B:1E:DB:FC:68:73:56:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/da3393ae-5314-32d5-9f93-6336f62a4e00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl X509v3 Authority Key Identifier: keyid:CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer sbgp-ipAddrBlock: critical IPv4: 146.88.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:de:16:b8:5d:bc:76:55:67:65:d5:51:07:61:97:91:6f:9d: 95:f1:fe:ce:d3:53:4a:05:d9:d8:28:11:cc:23:63:63:e8:53: 75:35:65:f2:e7:38:d9:87:6a:5b:f8:cd:61:51:47:36:d3:b6: d0:6b:a0:ff:1e:a6:3d:5b:34:27:6d:2d:b0:53:a0:2e:a6:58: ea:b3:bc:c9:8a:29:8a:49:b2:65:f5:21:06:9e:48:50:10:63: 2f:d4:90:98:1a:f4:7a:fd:67:c8:b2:40:69:cf:ef:30:94:1b: dd:25:33:43:0a:d0:44:97:05:a5:50:98:14:27:ec:3b:e0:03: b9:3f:40:45:6e:d7:0f:b5:89:23:55:f1:96:90:fa:0e:21:be: cf:b6:f6:dd:9e:25:cd:64:3a:22:d3:58:58:14:09:aa:97:26: 7a:3d:36:ea:91:50:e7:b1:51:a4:50:f2:b9:c1:cc:05:9e:42: 02:cc:33:0c:6c:d2:5d:e4:3a:8b:e4:cf:51:d7:f4:36:e4:67: e6:23:ab:65:52:2a:d8:6d:2d:d9:d2:c2:fa:c1:86:19:05:84: b3:4a:b1:4e:b9:8e:6f:25:15:eb:a4:0c:1b:65:e0:64:56:2c: 7f:f7:2d:38:6e:c4:ff:98:e4:41:e0:00:d0:f7:e0:95:51:25: 0b:1d:d1:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE61fFnrbqcDjCcp9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmJiOTAzYTItNGM4My00YmZhLTk1NzItMzZmYmFmYjg0 YTIzMB4XDTI2MDgwMzAxMDAxMVoXDTI2MTEwMTAxMDAxMVowLzEtMCsGA1UEAxMk MzM1ZWI4YjItNjA4Ni00ZWEwLTg1MGQtY2ZkZDhjM2MyNzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOfytn6jE9MuYACTx7bOh4+S8v71/9I/k1DK osYo4ZYbhPDPkXHk3Z+Y1T/wLyKWbGxRRJ1mZE07d9jXBuAPeGjdQJVDCGZqagVb A9YqhuaE/Wz+yX5WeoU84qF+8QABJ3ypX8Dz5Z5CQemxXR7hei5lGkAUHChWPiR0 VXf+0hcqJabENa7vZYcBttSINwCiuIpC9mDfZGMtW7UHgRMoKgT6ob/mb2TPOKOI 2uXzasTa38MGBt2rZxCd5tBLAbjecj9vgwzCAZ6WdwcSr/xMNaq5keIsk3ByOFdU X5/1BxgsR7pj9IERYJ5/JMwWQUJNqWG7PWKSxJC+ZzR5Sd4fZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMN8NnjhGNjnRbNGPzse2/xoc1Y5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mYmI5 MDNhMi00YzgzLTRiZmEtOTU3Mi0zNmZiYWZiODRhMjMvZGEzMzkzYWUtNTMxNC0z MmQ1LTlmOTMtNjMzNmY2MmE0ZTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZmJiOTAzYTItNGM4My00YmZhLTk1 NzItMzZmYmFmYjg0YTIzL2ZiYjkwM2EyLTRjODMtNGJmYS05NTcyLTM2ZmJhZmI4 NGEyMy5jcmwwHwYDVR0jBBgwFoAUzusqfornrD1acybne0mkRJaEkYowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mYmI5MDNhMi00YzgzLTRiZmEtOTU3Mi0zNmZi YWZiODRhMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkljAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7eFrhdvHZVZ2XVUQdhl5FvnZXx/s7TU0oF2dgoEcwjY2PoU3U1ZfLn ONmHalv4zWFRRzbTttBroP8epj1bNCdtLbBToC6mWOqzvMmKKYpJsmX1IQaeSFAQ Yy/UkJga9Hr9Z8iyQGnP7zCUG90lM0MK0ESXBaVQmBQn7DvgA7k/QEVu1w+1iSNV 8ZaQ+g4hvs+29t2eJc1kOiLTWFgUCaqXJno9NuqRUOexUaRQ8rnBzAWeQgLMMwxs 0l3kOovkz1HX9DbkZ+Yjq2VSKthtLdnSwvrBhhkFhLNKsU65jm8lFeukDBtl4GRW LH/3LThuxP+Y5EHgAND34JVRJQsd0ec= -----END CERTIFICATE-----Generated at Fri Aug 28 18:35:03 2026 by rpki-client