$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/57540e59-06f8-3554-b0ed-f895e16bdb38.roa File: 57540e59-06f8-3554-b0ed-f895e16bdb38.roa (raw, json) Hash identifier: 4xgyXrLDzP2RBnB6N5UQycLF0yyXwuZcezy25xfJ868= Subject key identifier: 91:AD:B5:83:FE:6C:53:46:6A:0B:41:B7:21:A2:55:08:13:BF:4C:A5 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584F093CD7997D12BB53D8DA0B3F Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/57540e59-06f8-3554-b0ed-f895e16bdb38.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 14061 IP address blocks: 159.89.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:d7:99:7d:12:bb:53:d8:da:0b:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=880253a8-0925-431b-8f6d-6cae235952b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:bc:ab:26:9a:26:76:09:1e:e6:d2:28:79:2b: 9c:e2:ee:83:42:6b:ad:dc:95:5f:8c:be:66:dd:cc: a9:f7:cf:34:58:47:38:98:c7:43:7a:2b:b5:13:e4: ab:e0:91:b2:88:02:3b:55:31:45:a9:42:86:a8:57: 52:61:db:67:c2:c4:6c:6a:d1:78:e8:22:d9:cd:f9: df:69:0f:5a:a8:98:dd:79:46:0e:26:9f:9b:99:bf: 75:39:3a:63:69:fa:06:78:4a:1f:e5:9f:3d:ce:3b: 56:fc:e3:05:8a:7a:f6:29:04:65:42:5c:c5:db:79: a1:88:5a:55:46:26:14:91:52:07:60:ed:70:37:35: 31:c5:99:80:27:c7:61:4d:a4:fb:e2:0d:35:7b:c1: fb:93:c5:1c:b7:7c:42:15:f9:29:3a:7d:97:5c:39: 10:49:67:11:74:eb:fa:a0:65:03:26:07:f9:37:b7: 2f:30:f3:c6:c5:c2:81:62:8c:53:3d:ea:e8:db:10: 15:c9:f9:ff:52:9d:2a:81:2b:ca:5d:45:dc:1d:b7: e5:05:57:a1:0e:6e:da:92:b0:b2:f1:6d:cf:9c:ab: e0:4d:b0:db:6a:ca:b7:af:47:44:e3:70:1b:d1:6d: 56:1d:e9:c0:1e:d8:86:f8:85:39:ba:e9:5e:41:ca: 0f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AD:B5:83:FE:6C:53:46:6A:0B:41:B7:21:A2:55:08:13:BF:4C:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/57540e59-06f8-3554-b0ed-f895e16bdb38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 159.89.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:55:82:f6:ca:89:5b:36:98:60:16:9a:39:fb:36:05:2f:f5: 5d:41:d8:a0:0a:45:45:6e:56:12:9f:bd:01:64:44:31:a4:6a: 6e:68:bd:bc:d6:47:a0:9b:c1:ae:d6:d1:4d:74:ac:58:18:3e: 59:23:96:9a:58:f7:2c:2c:eb:c8:16:6b:ff:ad:bc:ea:e5:ea: ec:70:94:40:7f:b7:1c:43:42:0b:e8:fe:bd:20:67:26:ed:b2: 9b:0e:d4:07:5e:bb:f2:27:10:a8:e6:96:d0:2e:77:13:22:87: c3:f9:36:0b:15:01:de:38:e0:c7:de:eb:58:29:c1:b3:8a:bd: b9:3f:f6:0e:75:3d:47:d6:e1:6f:20:04:c8:5b:25:03:2a:d7: e5:77:d9:4f:2f:fa:a3:d0:5b:c1:5c:50:55:82:88:f7:17:58: 70:91:7f:d7:90:87:e7:33:a6:fe:10:50:bd:09:09:fb:a3:ff: 29:aa:2b:cf:46:63:63:db:5a:3c:91:08:95:19:fb:88:95:50: 29:52:a5:e7:4d:33:3a:97:3c:bf:3a:a7:bd:0f:0c:8f:28:22: a6:b3:c6:60:14:4c:20:53:25:6e:6f:b6:a9:c2:89:87:c6:a5: 7d:29:5e:81:b5:f3:db:93:10:8e:d9:25:c0:6a:73:c4:12:35: d7:ce:0a:0a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8JPNeZfRK7U9jaCz8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk ODgwMjUzYTgtMDkyNS00MzFiLThmNmQtNmNhZTIzNTk1MmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37yrJpomdgke5tIoeSuc4u6DQmut3JVfjL5m 3cyp9880WEc4mMdDeiu1E+Sr4JGyiAI7VTFFqUKGqFdSYdtnwsRsatF46CLZzfnf aQ9aqJjdeUYOJp+bmb91OTpjafoGeEof5Z89zjtW/OMFinr2KQRlQlzF23mhiFpV RiYUkVIHYO1wNzUxxZmAJ8dhTaT74g01e8H7k8Uct3xCFfkpOn2XXDkQSWcRdOv6 oGUDJgf5N7cvMPPGxcKBYoxTPero2xAVyfn/Up0qgSvKXUXcHbflBVehDm7akrCy 8W3PnKvgTbDbasq3r0dE43Ab0W1WHenAHtiG+IU5uuleQcoPOwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJGttYP+bFNGagtBtyGiVQgTv0ylMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvNTc1NDBlNTktMDZmOC0z NTU0LWIwZWQtZjg5NWUxNmJkYjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAn1kwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEATFWC9sqJWzaYYBaaOfs2BS/1XUHYoApFRW5WEp+9AWREMaRqbmi9vNZH oJvBrtbRTXSsWBg+WSOWmlj3LCzryBZr/6286uXq7HCUQH+3HENCC+j+vSBnJu2y mw7UB1678icQqOaW0C53EyKHw/k2CxUB3jjgx97rWCnBs4q9uT/2DnU9R9bhbyAE yFslAyrX5XfZTy/6o9BbwVxQVYKI9xdYcJF/15CH5zOm/hBQvQkJ+6P/Kaorz0Zj Y9taPJEIlRn7iJVQKVKl500zOpc8vzqnvQ8MjygiprPGYBRMIFMlbm+2qcKJh8al fSlegbXz25MQjtklwGpzxBI1184KCg== -----END CERTIFICATE-----Generated at Tue Oct 6 13:57:54 2026 by rpki-client