$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3d845fc1-12f3-3105-b3d4-0be58de97346.roa File: 3d845fc1-12f3-3105-b3d4-0be58de97346.roa (raw, json) Hash identifier: dWeUo1nnhZYQvTYFj2hAqLEQzuTO+989w2ctTCQKHsU= Subject key identifier: 72:F4:53:1A:1E:AC:8A:49:73:FD:9F:AF:92:F4:32:91:AA:B6:27:7A Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584F093CD6D0ECBB1CB128ECFDC0 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3d845fc1-12f3-3105-b3d4-0be58de97346.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 14061 IP address blocks: 204.48.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:d6:d0:ec:bb:1c:b1:28:ec:fd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=6888ebcd-6e15-44c8-93d2-9a7953cbb55b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0e:a5:ac:eb:2e:07:47:38:f6:0d:03:98:31: 86:0b:62:78:be:fc:ff:22:56:e5:18:91:0b:0e:ab: 97:6c:7a:0b:f0:2e:35:86:8f:d5:a6:6b:b0:0d:02: 6a:30:92:11:4d:75:65:90:b1:2f:ac:25:5c:6e:79: 28:71:cc:b4:21:9e:ce:8e:d7:6d:8b:bc:db:29:fa: 8c:b4:44:00:87:5c:e5:ff:f0:c8:b7:9e:33:d0:60: b5:35:91:89:1c:c2:3f:04:71:4f:c4:e0:fe:18:be: 77:03:32:21:8f:a3:82:40:41:47:b9:b2:e0:fd:9c: a9:69:9e:4f:d3:22:40:a9:32:1e:1f:d7:fd:17:24: a5:e6:ef:fc:ae:10:11:16:8b:80:87:6b:d8:e1:39: a1:94:d8:bc:b0:91:79:b7:4f:ec:ee:97:90:4d:7a: 34:32:41:6e:32:b4:fe:ea:a4:57:48:2f:6e:84:5a: 1b:7f:64:49:01:30:b9:f2:4c:55:44:2c:ac:3b:b8: 33:60:34:25:1d:d2:55:6c:7b:82:37:c5:25:26:69: cd:41:d0:81:20:ae:e4:d7:a8:70:76:87:36:44:dc: 8f:26:4c:ba:3e:1b:ce:00:5f:4b:18:5a:a7:52:e8: 62:41:e3:00:c2:e0:51:13:8f:a6:00:70:48:92:a1: b9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F4:53:1A:1E:AC:8A:49:73:FD:9F:AF:92:F4:32:91:AA:B6:27:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3d845fc1-12f3-3105-b3d4-0be58de97346.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 204.48.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:27:76:c9:de:e8:06:7c:d7:b5:1d:12:9c:f1:00:9e:87:26: 29:ab:44:1c:0a:e4:b8:fa:4a:2c:d1:ef:e9:77:18:18:91:a2: 1e:0d:08:b8:6c:96:9b:e5:79:19:bf:a6:38:f2:9d:fd:61:7e: 40:2c:d1:bb:ab:b4:b3:27:39:a0:1c:ea:46:96:4f:d0:d2:8c: c7:2d:93:df:70:8e:05:45:0f:81:fe:c2:f5:75:7f:bb:cc:27: bf:c1:56:f1:75:06:1e:12:30:d1:9e:30:b9:12:50:55:74:74: d7:36:ad:aa:f0:7b:86:1c:ca:ba:c1:7d:8c:fc:1d:bd:d9:bc: ea:b7:aa:27:4b:a3:9c:d5:1a:4e:6e:f9:01:47:3b:54:4d:e3: 4b:2d:01:89:44:fb:06:05:4d:38:cb:d1:02:6c:05:05:da:30: 2f:46:1c:10:7b:31:c8:50:76:5d:d5:bf:11:2d:26:88:79:a3: 86:05:5c:fb:5b:2c:ae:a7:b1:ee:57:16:75:39:b4:38:bf:34: f3:1d:d6:83:ef:95:b5:d7:d9:ae:6a:e1:ab:ff:f6:ae:22:66: fc:c1:1d:9e:d9:c5:60:40:de:dc:3f:93:65:94:82:59:25:4a: 36:12:79:ef:41:99:b0:51:4b:3d:e4:53:55:6e:cb:35:cf:47: 8e:3f:c2:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPNbQ7LscsSjs/cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk Njg4OGViY2QtNmUxNS00NGM4LTkzZDItOWE3OTUzY2JiNTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApA6lrOsuB0c49g0DmDGGC2J4vvz/IlblGJEL DquXbHoL8C41ho/VpmuwDQJqMJIRTXVlkLEvrCVcbnkoccy0IZ7Ojtdti7zbKfqM tEQAh1zl//DIt54z0GC1NZGJHMI/BHFPxOD+GL53AzIhj6OCQEFHubLg/ZypaZ5P 0yJAqTIeH9f9FySl5u/8rhARFouAh2vY4TmhlNi8sJF5t0/s7peQTXo0MkFuMrT+ 6qRXSC9uhFobf2RJATC58kxVRCysO7gzYDQlHdJVbHuCN8UlJmnNQdCBIK7k16hw doc2RNyPJky6PhvOAF9LGFqnUuhiQeMAwuBRE4+mAHBIkqG5qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHL0UxoerIpJc/2fr5L0MpGqtid6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvM2Q4NDVmYzEtMTJmMy0z MTA1LWIzZDQtMGJlNThkZTk3MzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzDAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkndsne6AZ817UdEpzxAJ6HJimrRBwK5Lj6SizR7+l3GBiRoh4NCLhs lpvleRm/pjjynf1hfkAs0burtLMnOaAc6kaWT9DSjMctk99wjgVFD4H+wvV1f7vM J7/BVvF1Bh4SMNGeMLkSUFV0dNc2rarwe4YcyrrBfYz8Hb3ZvOq3qidLo5zVGk5u +QFHO1RN40stAYlE+wYFTTjL0QJsBQXaMC9GHBB7MchQdl3VvxEtJoh5o4YFXPtb LK6nse5XFnU5tDi/NPMd1oPvlbXX2a5q4av/9q4iZvzBHZ7ZxWBA3tw/k2WUglkl SjYSee9BmbBRSz3kU1VuyzXPR44/woQ= -----END CERTIFICATE-----Generated at Sat Sep 26 20:53:28 2026 by rpki-client