$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/08d994b0-98f1-323a-8f29-58eb272417bd.roa File: 08d994b0-98f1-323a-8f29-58eb272417bd.roa (raw, json) Hash identifier: 0ZHPTnFv3pKdCAsNoR4qTbZM98Pjxc+VcdSN7YbT6zw= Subject key identifier: 42:28:E1:BF:06:A6:43:95:DB:E0:A4:35:6B:D3:FA:ED:DD:4E:6D:32 Certificate issuer: /CN=88842878-1050-4df7-822b-ea8ec25db83d Certificate serial: 010D0C9F4328584F63F81B7E3B8F55509EEDEB80 Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/08d994b0-98f1-323a-8f29-58eb272417bd.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 16826 IP address blocks: 198.248.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:1b:7e:3b:8f:55:50:9e:ed:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=40f6e08c-4a8d-4c1e-9297-c71765daea4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5a:cf:81:2a:45:6a:e7:b3:10:c6:e4:c6:d3: 55:97:39:4a:69:c7:5f:e3:20:cc:60:08:82:82:4b: 6e:56:78:fd:50:22:17:55:9f:a8:cf:ed:52:b8:a0: 6f:64:d7:28:1c:b4:b4:3d:91:80:d2:79:01:c5:bd: 57:c9:ce:8c:49:6b:2f:52:4a:4c:27:a5:10:7a:9c: 16:cf:50:6a:86:fa:77:44:de:74:5c:9b:c0:3e:e3: 3c:6b:9c:4a:1d:b9:12:ed:e6:d8:4a:18:17:70:ad: 8f:5a:05:c9:0f:2d:50:3c:35:e9:a5:81:3f:a1:a3: fb:5e:9d:8f:e9:fb:07:3d:b7:a1:d4:f0:8a:ad:46: b7:e7:08:eb:22:db:c5:3c:29:21:34:04:e8:5c:51: d1:c3:33:86:5a:60:67:f9:00:73:1a:d9:0c:23:00: 9d:61:e4:0b:f9:69:6b:32:93:3b:29:6a:28:39:08: b6:f2:b2:ad:9d:fc:64:e3:a0:2f:fe:51:ae:53:40: d4:a0:85:21:32:29:55:bf:24:25:b4:3a:7a:6d:dc: 9d:76:84:92:a4:a0:9e:24:5b:4c:95:ea:fa:66:7d: 91:30:a9:e9:6f:e4:50:e1:59:03:bc:d1:af:d3:72: 5f:c0:a1:16:b3:13:b2:6d:0d:a3:48:a3:47:64:a2: 99:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:28:E1:BF:06:A6:43:95:DB:E0:A4:35:6B:D3:FA:ED:DD:4E:6D:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/08d994b0-98f1-323a-8f29-58eb272417bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl X509v3 Authority Key Identifier: keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer sbgp-ipAddrBlock: critical IPv4: 198.248.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:77:d1:39:9b:cc:34:35:c0:f1:0c:3a:3d:b8:88:03:65:2e: 4a:c3:51:3a:d0:de:f8:cb:95:97:76:e5:d2:40:f9:28:b3:3f: d8:be:f9:bd:93:91:24:c2:fe:6a:f4:cc:7d:d1:fa:b4:d7:75: 33:c1:ae:44:3d:09:1b:66:64:80:78:36:6d:9a:53:bc:cd:a6: ec:3b:35:85:91:ba:f7:15:3a:7e:75:95:86:3b:5e:77:4a:82: 2c:e5:3b:e8:c5:7a:62:d0:f1:d1:d7:0c:2d:aa:bb:df:fd:8a: e0:0e:35:49:3c:61:de:b7:75:3c:2c:6f:00:d1:f9:2a:3e:0c: a2:40:62:87:08:dd:b2:72:a1:15:5b:8c:2b:ca:6a:db:bf:da: da:9e:24:11:64:51:ed:b8:ed:42:ff:bf:1f:66:d9:18:e9:0b: 42:25:5d:99:1e:c5:43:7a:70:dd:aa:36:0d:26:61:75:c8:91: 48:fb:38:1d:44:6f:cb:9e:b7:ab:e1:f8:de:84:94:7b:67:8b: 09:b2:32:05:d4:bd:c2:ce:f3:50:fc:8c:a8:e1:73:72:38:ae: 8e:92:e1:bf:c9:dd:99:b7:20:2b:1c:a0:d0:f8:39:89:13:5b: 36:95:e8:9c:3a:a6:a5:62:12:4f:ce:80:c6:f6:e2:30:02:b2: 59:db:da:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9j+Bt+O49VUJ7t64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg4NDI4NzgtMTA1MC00ZGY3LTgyMmItZWE4ZWMyNWRi ODNkMB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk NDBmNmUwOGMtNGE4ZC00YzFlLTkyOTctYzcxNzY1ZGFlYTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFrPgSpFauezEMbkxtNVlzlKacdf4yDMYAiC gktuVnj9UCIXVZ+oz+1SuKBvZNcoHLS0PZGA0nkBxb1Xyc6MSWsvUkpMJ6UQepwW z1Bqhvp3RN50XJvAPuM8a5xKHbkS7ebYShgXcK2PWgXJDy1QPDXppYE/oaP7Xp2P 6fsHPbeh1PCKrUa35wjrItvFPCkhNAToXFHRwzOGWmBn+QBzGtkMIwCdYeQL+Wlr MpM7KWooOQi28rKtnfxk46Av/lGuU0DUoIUhMilVvyQltDp6bdyddoSSpKCeJFtM ler6Zn2RMKnpb+RQ4VkDvNGv03JfwKEWsxOybQ2jSKNHZKKZbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIo4b8GpkOV2+CkNWvT+u3dTm0yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0 Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1ZGI4M2QvMDhkOTk0YjAtOThmMS0z MjNhLThmMjktNThlYjI3MjQxN2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODg4NDI4NzgtMTA1MC00ZGY3LTgy MmItZWE4ZWMyNWRiODNkLzg4ODQyODc4LTEwNTAtNGRmNy04MjJiLWVhOGVjMjVk YjgzZC5jcmwwHwYDVR0jBBgwFoAUCvQvaSDxqtdtZzyGmgTIgB6tfZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThl YzI1ZGI4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExvhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI930TmbzDQ1wPEMOj24iANlLkrDUTrQ3vjLlZd25dJA+SizP9i++b2T kSTC/mr0zH3R+rTXdTPBrkQ9CRtmZIB4Nm2aU7zNpuw7NYWRuvcVOn51lYY7XndK gizlO+jFemLQ8dHXDC2qu9/9iuAONUk8Yd63dTwsbwDR+So+DKJAYocI3bJyoRVb jCvKatu/2tqeJBFkUe247UL/vx9m2RjpC0IlXZkexUN6cN2qNg0mYXXIkUj7OB1E b8uet6vh+N6ElHtniwmyMgXUvcLO81D8jKjhc3I4ro6S4b/J3Zm3ICscoND4OYkT WzaV6Jw6pqViEk/OgMb24jACslnb2uk= -----END CERTIFICATE-----Generated at Tue Oct 6 19:46:28 2026 by rpki-client