$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/08bf3928-b054-3129-9d08-db2f618766b2.roa File: 08bf3928-b054-3129-9d08-db2f618766b2.roa (raw, json) Hash identifier: Vva0EoIJo4wStmC2T024QZe3iouwFlnIBtLYhmO2kDk= Subject key identifier: CA:76:68:AA:B7:26:C2:7F:06:03:34:FF:4C:72:C5:4D:D5:34:53:47 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584F497510412CADCF71B770BBE0 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/08bf3928-b054-3129-9d08-db2f618766b2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14061 IP address blocks: 138.68.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:10:41:2c:ad:cf:71:b7:70:bb:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1c6aa18d-62e4-4530-87f9-b810320bcd3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c1:4e:f7:6b:d6:95:09:f9:59:18:57:35:9e: da:c4:42:3f:01:8a:c8:3a:03:ec:74:64:fc:0f:f5: 38:34:d7:d4:9f:30:2f:f5:8d:b9:1a:b2:24:d9:c2: e0:fc:2f:8e:a9:0c:7a:6a:43:be:03:09:b0:97:cc: 39:0f:22:97:60:37:11:cc:7e:56:e1:68:80:75:fe: 83:0b:b2:93:55:e6:3b:b7:d0:21:7a:3e:7e:82:bc: e9:25:41:97:a3:f1:af:41:d1:43:ba:d9:d6:39:6a: 93:ca:2f:ef:d0:ba:10:9c:4f:b7:fa:27:1c:a1:b1: 9c:8a:fd:31:88:bf:0b:67:f7:35:af:64:19:d3:fa: 68:55:b7:6e:bb:15:64:5b:1b:99:d2:c4:c7:91:de: 7f:08:2b:a8:14:c0:48:7d:b4:44:28:bc:e9:55:2c: 16:b1:4a:da:e9:96:fe:fd:fd:47:56:34:9f:b9:b6: 9f:67:3a:bd:55:91:2a:a6:3b:60:78:69:3f:59:51: c7:4c:d5:83:2d:a1:6f:33:f1:20:3e:c9:77:7e:68: 22:5f:b6:d2:10:8d:b7:36:83:f6:c2:e0:8e:a5:7d: 34:ed:e5:47:16:36:7b:99:69:3f:6c:bb:93:82:30: 09:34:62:43:db:68:5a:38:cc:30:90:e3:25:79:e3: f0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:76:68:AA:B7:26:C2:7F:06:03:34:FF:4C:72:C5:4D:D5:34:53:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/08bf3928-b054-3129-9d08-db2f618766b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 138.68.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:40:5b:c4:11:40:28:76:a6:16:00:c7:1d:8b:a0:1b:74:a9: 9c:10:59:d4:2d:7b:63:58:3f:6c:0d:20:26:32:30:67:4f:2d: a6:1f:c1:42:3e:6b:d4:79:1c:8a:5b:7f:2c:bb:51:05:96:fc: a2:b4:ea:83:8f:f5:84:8a:11:30:7d:e8:6d:ce:67:21:2e:ee: ba:28:f8:70:3d:61:80:3a:6e:d0:59:56:0a:c9:4e:dc:1c:c4: c3:a3:84:66:2d:21:dc:03:96:29:3c:db:9c:d1:8d:cc:00:e8: 37:95:eb:96:69:a5:a7:02:56:ff:13:39:68:b4:68:d8:49:a3: ce:1b:cc:81:27:03:cc:6e:57:f6:9b:73:30:18:6b:68:a8:30: 1d:70:91:29:49:dc:43:e3:df:01:e8:b0:50:ea:0f:1e:d2:37: c5:c4:c9:45:69:21:4e:82:1d:90:01:75:fc:1c:58:cd:37:cb: 71:a3:96:8a:a3:30:a8:f4:fb:78:89:af:14:5c:a6:9d:ad:7a: 55:56:5c:c2:1b:56:b5:8b:0f:3a:34:37:ea:fd:01:da:10:94: a9:5b:7e:53:76:56:4b:53:2c:9b:3f:41:75:de:39:ea:9c:16: 56:59:5e:0d:cd:23:b3:ad:f0:62:89:e7:7a:f8:55:6d:d5:c0: d2:96:93:32 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9JdRBBLK3Pcbdwu+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWM2YWExOGQtNjJlNC00NTMwLTg3ZjktYjgxMDMyMGJjZDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMFO92vWlQn5WRhXNZ7axEI/AYrIOgPsdGT8 D/U4NNfUnzAv9Y25GrIk2cLg/C+OqQx6akO+Awmwl8w5DyKXYDcRzH5W4WiAdf6D C7KTVeY7t9Ahej5+grzpJUGXo/GvQdFDutnWOWqTyi/v0LoQnE+3+iccobGciv0x iL8LZ/c1r2QZ0/poVbduuxVkWxuZ0sTHkd5/CCuoFMBIfbREKLzpVSwWsUra6Zb+ /f1HVjSfubafZzq9VZEqpjtgeGk/WVHHTNWDLaFvM/EgPsl3fmgiX7bSEI23NoP2 wuCOpX007eVHFjZ7mWk/bLuTgjAJNGJD22haOMwwkOMleePwvQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMp2aKq3JsJ/BgM0/0xyxU3VNFNHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvMDhiZjM5MjgtYjA1NC0z MTI5LTlkMDgtZGIyZjYxODc2NmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAikQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAYkBbxBFAKHamFgDHHYugG3SpnBBZ1C17Y1g/bA0gJjIwZ08tph/BQj5r 1Hkcilt/LLtRBZb8orTqg4/1hIoRMH3obc5nIS7uuij4cD1hgDpu0FlWCslO3BzE w6OEZi0h3AOWKTzbnNGNzADoN5XrlmmlpwJW/xM5aLRo2EmjzhvMgScDzG5X9ptz MBhraKgwHXCRKUncQ+PfAeiwUOoPHtI3xcTJRWkhToIdkAF1/BxYzTfLcaOWiqMw qPT7eImvFFymna16VVZcwhtWtYsPOjQ36v0B2hCUqVt+U3ZWS1Msmz9Bdd456pwW VlleDc0js63wYonnevhVbdXA0paTMg== -----END CERTIFICATE-----Generated at Sat Sep 26 11:51:26 2026 by rpki-client