$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/1157b3ba-67d7-328f-beb3-1634389c8d57.roa File: 1157b3ba-67d7-328f-beb3-1634389c8d57.roa (raw, json) Hash identifier: +Yr3cBdss+hbA4luInFVmO0GJ0sq+ofL952Ss95lOAk= Subject key identifier: DA:48:D3:DF:C6:2A:E1:B3:23:E9:D7:C7:7C:F5:23:78:C1:A1:E7:0F Certificate issuer: /CN=888d6cc7-0aa2-467e-9649-a453942c2d85 Certificate serial: 010D0C9F4328584F5B7A1F2096CCF6BFC8F4F000 Authority key identifier: 85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/1157b3ba-67d7-328f-beb3-1634389c8d57.roa Signing time: Thu 01 Oct 2026 12:00:04 +0000 ROA not before: Thu 01 Oct 2026 12:00:04 +0000 ROA not after: Wed 30 Dec 2026 13:00:04 +0000 asID: 834 IP address blocks: 199.7.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:7a:1f:20:96:cc:f6:bf:c8:f4:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=888d6cc7-0aa2-467e-9649-a453942c2d85 Validity Not Before: Oct 1 12:00:04 2026 GMT Not After : Dec 30 13:00:04 2026 GMT Subject: CN=a796ff44-95d0-4f61-b9a1-08aeeab8cd55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4b:96:68:95:1b:fb:aa:12:36:c3:fc:4d:88: f4:3d:8e:90:5c:db:f2:b4:c7:29:fd:59:89:af:e9: 08:d7:48:b7:9e:8b:3e:88:b9:db:0e:cd:62:87:b6: dc:10:d3:65:3c:da:8b:e4:27:2c:89:a3:8f:e8:d0: d1:ae:f5:79:4f:04:55:86:65:9a:2d:5e:43:cf:f1: 61:c2:08:79:6c:4d:11:a6:2e:98:ec:e5:47:8e:61: fb:dd:d0:a8:2b:6a:97:ca:68:9e:67:60:da:1e:ed: a6:b8:43:0f:66:83:48:9a:89:2f:50:7c:c7:12:d4: df:30:cf:f7:df:0c:4b:56:f9:a7:e2:69:41:67:25: 2c:81:33:35:8c:4c:4a:4c:a5:f3:f0:ac:a1:a0:67: 83:b6:ce:e8:2b:0f:85:bb:d2:df:0d:38:f3:5e:5d: ca:92:60:de:21:b3:25:ce:e0:ec:f6:95:30:8e:2f: 69:d2:7f:49:76:10:eb:1b:67:94:5f:ac:3a:79:b0: ef:a9:04:90:fd:65:fc:e0:2b:d8:af:33:d9:71:37: f1:e3:0e:1e:9e:6e:8e:2f:f8:c4:33:eb:4e:30:38: bb:cb:66:58:b1:f3:e2:b9:e1:9f:cf:3a:fd:6b:c8: 90:67:44:07:05:85:e2:36:dc:91:26:34:69:c6:18: 24:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:48:D3:DF:C6:2A:E1:B3:23:E9:D7:C7:7C:F5:23:78:C1:A1:E7:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/1157b3ba-67d7-328f-beb3-1634389c8d57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl X509v3 Authority Key Identifier: keyid:85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer sbgp-ipAddrBlock: critical IPv4: 199.7.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:fe:d5:1b:bc:a8:e2:15:cb:c4:75:b2:0a:4f:9b:53:87:e5: d4:dd:0a:96:b0:6a:bf:e6:88:c8:7b:c8:04:ed:1a:1d:46:45: 50:aa:22:f3:36:17:6f:8c:b5:36:b6:5b:c6:26:91:19:6c:b1: 9d:ff:5c:b1:1b:d8:14:0f:06:43:be:5c:96:7e:b2:75:47:a2: 19:10:16:ea:12:2e:47:39:10:6d:6f:b9:c3:0f:e8:4e:c5:24: 08:02:89:74:84:bc:48:73:63:9f:fc:38:da:dd:74:a3:4f:da: 16:a5:64:66:a4:c6:b4:fe:5a:63:15:16:86:20:94:0d:f5:89: 81:63:1f:34:26:c5:f3:66:eb:23:b5:73:75:0e:c6:b1:e6:c8: bf:ed:69:68:a9:d7:8b:87:26:69:76:61:45:c3:de:b9:ee:1f: b6:b2:08:54:ee:60:fc:d7:1c:49:97:0c:a3:0f:e4:67:a9:b9: 62:91:b5:9b:de:68:65:82:c1:a0:42:34:86:44:32:86:af:9d: d9:f3:50:4b:96:e8:5a:0e:d6:28:ab:2b:39:24:90:5b:f8:08: 96:8d:a5:d5:1b:27:5c:6d:f0:d1:a6:c6:8f:c3:a1:db:99:c7: d7:03:a7:60:87:a5:75:e8:63:17:74:e7:d2:37:7a:13:fd:28: 59:4d:25:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9beh8glsz2v8j08AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg4ZDZjYzctMGFhMi00NjdlLTk2NDktYTQ1Mzk0MmMy ZDg1MB4XDTI2MTAwMTEyMDAwNFoXDTI2MTIzMDEzMDAwNFowLzEtMCsGA1UEAxMk YTc5NmZmNDQtOTVkMC00ZjYxLWI5YTEtMDhhZWVhYjhjZDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kuWaJUb+6oSNsP8TYj0PY6QXNvytMcp/VmJ r+kI10i3nos+iLnbDs1ih7bcENNlPNqL5CcsiaOP6NDRrvV5TwRVhmWaLV5Dz/Fh wgh5bE0Rpi6Y7OVHjmH73dCoK2qXymieZ2DaHu2muEMPZoNImokvUHzHEtTfMM/3 3wxLVvmn4mlBZyUsgTM1jExKTKXz8KyhoGeDts7oKw+Fu9LfDTjzXl3KkmDeIbMl zuDs9pUwji9p0n9JdhDrG2eUX6w6ebDvqQSQ/WX84CvYrzPZcTfx4w4enm6OL/jE M+tOMDi7y2ZYsfPiueGfzzr9a8iQZ0QHBYXiNtyRJjRpxhgkCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpI09/GKuGzI+nXx3z1I3jBoecPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ODhk NmNjNy0wYWEyLTQ2N2UtOTY0OS1hNDUzOTQyYzJkODUvMTE1N2IzYmEtNjdkNy0z MjhmLWJlYjMtMTYzNDM4OWM4ZDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODg4ZDZjYzctMGFhMi00NjdlLTk2 NDktYTQ1Mzk0MmMyZDg1Lzg4OGQ2Y2M3LTBhYTItNDY3ZS05NjQ5LWE0NTM5NDJj MmQ4NS5jcmwwHwYDVR0jBBgwFoAUhZ7JvEc6T40fyGuPSOeyqr56VrIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ODhkNmNjNy0wYWEyLTQ2N2UtOTY0OS1hNDUz OTQyYzJkODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxweNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3+1Ru8qOIVy8R1sgpPm1OH5dTdCpawar/miMh7yATtGh1GRVCqIvM2 F2+MtTa2W8YmkRlssZ3/XLEb2BQPBkO+XJZ+snVHohkQFuoSLkc5EG1vucMP6E7F JAgCiXSEvEhzY5/8ONrddKNP2halZGakxrT+WmMVFoYglA31iYFjHzQmxfNm6yO1 c3UOxrHmyL/taWip14uHJml2YUXD3rnuH7ayCFTuYPzXHEmXDKMP5GepuWKRtZve aGWCwaBCNIZEMoavndnzUEuW6FoO1iirKzkkkFv4CJaNpdUbJ1xt8NGmxo/DoduZ x9cDp2CHpXXoYxd059I3ehP9KFlNJag= -----END CERTIFICATE-----Generated at Thu Oct 8 20:19:27 2026 by rpki-client