$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/bde956a1-6e2e-3242-be5c-cd2e2f445e7e.roa File: bde956a1-6e2e-3242-be5c-cd2e2f445e7e.roa (raw, json) Hash identifier: hMV1nlOLeh458KjrMw9RgsZnySdTIJTqWbQ1o0MvGL8= Subject key identifier: E4:35:CD:49:25:4F:96:3B:DC:CF:09:9E:FE:4E:67:5B:85:C7:97:0B Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584FAB2898BD87033CDBB2425300 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/bde956a1-6e2e-3242-be5c-cd2e2f445e7e.roa Signing time: Fri 30 Oct 2026 01:00:13 +0000 ROA not before: Fri 30 Oct 2026 01:00:13 +0000 ROA not after: Thu 28 Jan 2027 02:00:13 +0000 asID: 14061 IP address blocks: 157.230.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ab:28:98:bd:87:03:3c:db:b2:42:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Oct 30 01:00:13 2026 GMT Not After : Jan 28 02:00:13 2027 GMT Subject: CN=ab1e95d3-3cf7-40e0-8b4f-62212f40af59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1d:eb:e1:f7:d1:99:a9:1a:49:16:d8:36:e8: f5:ec:b2:0a:54:60:27:a6:f1:aa:75:e8:20:8c:33: 77:06:55:39:02:8d:3d:68:42:2e:60:d8:0d:e3:4c: f5:6f:be:11:fc:7a:27:47:22:c9:b4:5d:fb:1a:ba: 06:29:75:4f:61:32:c5:d8:16:24:30:c2:f6:ca:28: 57:b1:88:8d:00:e6:eb:ce:b4:6b:ae:52:29:01:3f: 40:51:7c:02:3c:14:68:c1:5a:00:06:3d:47:63:e5: ea:c9:b8:e7:14:40:26:83:19:b6:ec:3e:5a:c6:9d: b1:14:ed:62:17:e5:5d:3f:62:bb:76:1b:a7:98:c2: e4:55:57:61:36:87:3c:3e:eb:8c:c8:93:35:53:d5: 81:5d:7c:85:bc:e5:ae:0e:9b:d2:4a:a6:c2:65:c4: 99:14:47:01:23:e0:5e:91:e7:43:fa:4f:36:bb:50: b9:1c:1a:4b:24:f9:8d:48:f3:3e:b2:f1:d9:39:e9: 4a:15:21:1d:c9:a4:85:ab:08:db:a5:6d:d4:75:2e: 64:e7:e9:5a:a7:8c:6c:85:f3:8a:68:e9:da:1a:06: 1f:27:80:0e:01:00:b9:e6:0b:4a:18:da:d7:b3:24: da:42:7a:de:93:48:d0:92:a6:2b:6d:88:58:e9:5f: 5f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:35:CD:49:25:4F:96:3B:DC:CF:09:9E:FE:4E:67:5B:85:C7:97:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/bde956a1-6e2e-3242-be5c-cd2e2f445e7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 157.230.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:56:17:71:fb:cc:dc:25:92:c5:4e:80:63:97:e8:98:24:0d: 19:f1:35:8c:ba:4c:72:9a:10:da:c8:b6:da:06:92:b3:f9:ff: fe:d1:ee:cb:ea:e8:a4:08:7b:12:c8:1d:80:26:7c:ee:0a:3e: 60:ce:9c:64:bf:7f:93:8c:73:02:94:3c:37:16:1f:37:3a:ba: 85:84:9c:35:b0:ed:26:ce:c9:c9:31:e5:88:5f:14:a4:a5:46: 7a:a2:5e:b6:48:ca:b9:da:e5:25:4e:f9:1c:27:99:2a:a8:89: f8:f3:51:73:c6:08:81:98:33:55:e3:93:47:81:b5:3a:44:81: 21:8a:9a:28:da:08:15:18:c3:ab:20:b9:7a:18:a4:43:18:43: 38:50:b0:61:39:27:d3:42:85:53:3d:a2:4c:c2:fa:28:c5:a0: fb:75:e1:f7:34:8b:b4:9c:97:47:83:73:a9:bb:fa:f2:96:6a: e6:1a:9e:b2:d6:db:19:15:9f:36:4d:ad:10:05:a3:69:89:0c: fa:13:11:a4:9e:c7:96:3b:36:cb:31:4e:68:62:3f:95:ea:dd: a9:33:6c:6c:da:b0:8f:ac:38:9c:4f:2e:73:84:3a:0a:c5:e2: 50:10:01:ac:b3:13:cb:70:ca:95:6f:e9:ac:2e:97:a7:bf:55: ab:2f:45:a2 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE+rKJi9hwM827JCUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI2MTAzMDAxMDAxM1oXDTI3MDEyODAyMDAxM1owLzEtMCsGA1UEAxMk YWIxZTk1ZDMtM2NmNy00MGUwLThiNGYtNjIyMTJmNDBhZjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsR3r4ffRmakaSRbYNuj17LIKVGAnpvGqdegg jDN3BlU5Ao09aEIuYNgN40z1b74R/HonRyLJtF37GroGKXVPYTLF2BYkMML2yihX sYiNAObrzrRrrlIpAT9AUXwCPBRowVoABj1HY+XqybjnFEAmgxm27D5axp2xFO1i F+VdP2K7dhunmMLkVVdhNoc8PuuMyJM1U9WBXXyFvOWuDpvSSqbCZcSZFEcBI+Be kedD+k82u1C5HBpLJPmNSPM+svHZOelKFSEdyaSFqwjbpW3UdS5k5+lap4xshfOK aOnaGgYfJ4AOAQC55gtKGNrXsyTaQnrek0jQkqYrbYhY6V9fuQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFOQ1zUklT5Y73M8Jnv5OZ1uFx5cLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvYmRlOTU2YTEtNmUyZS0z MjQyLWJlNWMtY2QyZTJmNDQ1ZTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAneYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEARlYXcfvM3CWSxU6AY5fomCQNGfE1jLpMcpoQ2si22gaSs/n//tHuy+ro pAh7EsgdgCZ87go+YM6cZL9/k4xzApQ8NxYfNzq6hYScNbDtJs7JyTHliF8UpKVG eqJetkjKudrlJU75HCeZKqiJ+PNRc8YIgZgzVeOTR4G1OkSBIYqaKNoIFRjDqyC5 ehikQxhDOFCwYTkn00KFUz2iTML6KMWg+3Xh9zSLtJyXR4Nzqbv68pZq5hqestbb GRWfNk2tEAWjaYkM+hMRpJ7Hljs2yzFOaGI/lerdqTNsbNqwj6w4nE8uc4Q6CsXi UBABrLMTy3DKlW/prC6Xp79Vqy9Fog== -----END CERTIFICATE-----Generated at Sun Nov 15 21:12:38 2026 by rpki-client