$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/b8855cc3-4f87-3db2-bb0c-0cb93262ac92.roa File: b8855cc3-4f87-3db2-bb0c-0cb93262ac92.roa (raw, json) Hash identifier: bHA9decAeZK1EBx2yzBjyOtNfXt0yj+AtKlwSTTZxrQ= Subject key identifier: 1B:00:D9:0B:36:2C:41:69:CC:0F:90:F3:DF:94:5A:8C:32:A6:7B:45 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584F4975104C8FBC87A29243B8C0 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/b8855cc3-4f87-3db2-bb0c-0cb93262ac92.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14061 IP address blocks: 159.203.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:10:4c:8f:bc:87:a2:92:43:b8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e3aa6afd-aa6b-4978-82de-6bf3efad95f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:79:25:a1:65:28:15:d4:2c:cb:f5:fb:ab:4b: f8:1a:b9:d0:03:0d:99:7f:79:83:2b:a8:ea:e7:24: 54:de:f7:e0:b3:5d:a7:59:c4:e4:ed:48:60:92:09: 1b:b0:bb:10:cf:63:07:5e:a4:d9:01:7c:c3:f1:d6: 91:b0:46:3e:f0:04:b9:84:42:7f:3b:7f:52:76:a2: a5:e1:05:da:d1:a8:c9:74:8e:f5:bc:87:7f:10:73: 5d:51:67:dd:1a:46:dd:af:fd:1b:27:c7:1a:a1:d2: ba:ba:34:82:58:58:1e:1d:08:f5:c5:92:de:fe:26: 86:f5:2c:49:b5:d1:ac:6e:0c:4f:d2:e3:b5:bb:a6: e3:02:2f:ea:fa:81:d4:ab:27:5e:2c:ed:6d:bf:07: f2:92:1f:19:03:a7:aa:ae:ba:a6:e9:b1:30:ee:e6: 46:bf:a6:05:f4:1e:f8:91:27:03:b5:f6:53:4e:df: 88:8c:33:05:74:1d:2a:84:0b:8f:32:9b:0c:72:31: 0b:a3:4c:b8:b8:62:c6:39:fc:42:36:99:fd:df:08: 1d:86:bf:ca:1b:dd:bb:47:84:84:90:89:d3:83:c9: 9c:44:6f:6e:5a:bf:06:23:a9:0a:06:37:fd:14:46: 4e:02:9a:91:bf:7c:aa:d4:f1:ab:ea:4c:34:ab:dc: 0e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:00:D9:0B:36:2C:41:69:CC:0F:90:F3:DF:94:5A:8C:32:A6:7B:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/b8855cc3-4f87-3db2-bb0c-0cb93262ac92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 159.203.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:c6:af:49:68:2f:d1:0b:15:9b:70:78:53:cd:15:e7:35:32: 1b:a9:26:9b:55:e3:a7:31:00:e6:f7:15:38:9c:5c:2b:dc:5b: a0:25:1a:ac:74:2b:a5:de:98:ba:e1:17:2d:e9:38:16:85:d5: d9:e8:d0:2a:bf:d6:5f:d5:67:56:03:a3:dc:08:80:8a:76:a1: 9d:a9:fc:38:e2:6b:69:63:f4:76:45:4a:86:0b:c7:53:07:96: ab:9b:1a:aa:ea:8b:1c:40:b8:5b:48:cc:da:cf:11:f1:26:5e: 73:23:da:71:32:f1:b2:e4:6b:a4:c6:af:d3:8c:f9:04:b6:03: b6:e3:13:d4:20:f1:4b:86:ec:ff:dc:0a:cb:9c:bc:93:b1:81: f5:20:61:c3:61:0f:e1:2e:b4:e8:84:45:9f:40:45:41:2d:fb: ac:e1:53:35:0e:73:02:fc:9a:68:a7:41:6d:27:e7:dc:2f:46: 55:76:ba:a1:27:86:89:c9:44:51:9d:57:b7:53:ba:61:5f:da: ab:94:90:a6:5c:63:45:c7:a5:0c:cb:b8:1a:e4:0f:26:b7:4d: 2c:60:94:2b:87:ae:98:71:02:dc:23:82:f5:92:d1:a5:d4:48: e0:8c:6d:c1:f8:a4:37:4e:4b:2f:9d:b6:66:e9:74:4e:9f:94: 56:0f:08:d9 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9JdRBMj7yHopJDuMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTNhYTZhZmQtYWE2Yi00OTc4LTgyZGUtNmJmM2VmYWQ5NWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXkloWUoFdQsy/X7q0v4GrnQAw2Zf3mDK6jq 5yRU3vfgs12nWcTk7UhgkgkbsLsQz2MHXqTZAXzD8daRsEY+8AS5hEJ/O39SdqKl 4QXa0ajJdI71vId/EHNdUWfdGkbdr/0bJ8caodK6ujSCWFgeHQj1xZLe/iaG9SxJ tdGsbgxP0uO1u6bjAi/q+oHUqydeLO1tvwfykh8ZA6eqrrqm6bEw7uZGv6YF9B74 kScDtfZTTt+IjDMFdB0qhAuPMpsMcjELo0y4uGLGOfxCNpn93wgdhr/KG927R4SE kInTg8mcRG9uWr8GI6kKBjf9FEZOApqRv3yq1PGr6kw0q9wOpwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBsA2Qs2LEFpzA+Q89+UWowypntFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvYjg4NTVjYzMtNGY4Ny0z ZGIyLWJiMGMtMGNiOTMyNjJhYzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAn8swVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAVsavSWgv0QsVm3B4U80V5zUyG6kmm1XjpzEA5vcVOJxcK9xboCUarHQr pd6YuuEXLek4FoXV2ejQKr/WX9VnVgOj3AiAinahnan8OOJraWP0dkVKhgvHUweW q5saquqLHEC4W0jM2s8R8SZecyPacTLxsuRrpMav04z5BLYDtuMT1CDxS4bs/9wK y5y8k7GB9SBhw2EP4S606IRFn0BFQS37rOFTNQ5zAvyaaKdBbSfn3C9GVXa6oSeG iclEUZ1Xt1O6YV/aq5SQplxjRcelDMu4GuQPJrdNLGCUK4eumHEC3COC9ZLRpdRI 4IxtwfikN05LL522Zul0Tp+UVg8I2Q== -----END CERTIFICATE-----Generated at Fri Sep 25 16:16:35 2026 by rpki-client