$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/0e352be7-b541-3b45-bfce-f9c698c6b91c.roa File: 0e352be7-b541-3b45-bfce-f9c698c6b91c.roa (raw, json) Hash identifier: B4hYaIjGGHTe+9kuiP8VholeeHLQnZiiyYrly2KVZro= Subject key identifier: A5:0F:A9:23:9F:EA:1A:5F:F8:F2:46:6F:CA:DA:3C:7D:B2:D4:BC:3D Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584F093CD717F5B1183E9E7AE680 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/0e352be7-b541-3b45-bfce-f9c698c6b91c.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 14061 IP address blocks: 64.225.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:d7:17:f5:b1:18:3e:9e:7a:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=6ff413eb-e1bd-4ed7-9c78-96049d46d332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:af:71:17:1d:44:8e:5b:2d:1c:ec:22:ce:aa: 04:53:72:63:b0:74:0f:0a:a0:ac:80:e8:81:17:05: 5c:31:84:26:3f:38:c0:dc:fd:29:59:40:77:40:4d: e5:eb:38:89:c5:fc:fe:cf:15:eb:fa:bc:a3:42:72: f6:af:76:3d:38:a8:b6:72:ce:3c:5f:f4:2e:8b:8e: 81:8f:14:47:cc:80:e4:c0:03:c8:c0:c9:e1:d3:e0: 7b:fd:16:64:8c:d0:75:81:a7:e3:ba:bf:d5:36:75: 39:2b:41:2b:8e:a2:b8:20:da:00:f1:d0:73:e6:89: c2:bc:39:4b:4b:4a:95:a7:8e:d7:34:4c:ee:49:10: 80:34:96:0e:f2:50:dd:99:07:b7:57:83:72:3b:3f: 82:42:fa:55:a0:47:a0:30:24:9c:d1:bb:32:65:78: c9:d4:0f:71:7d:db:50:0c:85:5b:2e:02:04:24:d2: 9e:81:03:7f:7f:63:ab:e0:83:95:bb:f9:55:16:e4: 9d:df:f9:96:a1:92:14:20:ec:ed:cc:ce:d4:9a:d4: 54:2e:cd:c1:78:4a:23:3b:cd:18:48:6c:bb:84:66: 36:57:12:19:21:90:82:b0:19:1f:e9:ba:d2:1d:0b: a6:26:48:af:a1:ec:10:b4:6d:e8:6b:0c:c0:a2:c5: f2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:0F:A9:23:9F:EA:1A:5F:F8:F2:46:6F:CA:DA:3C:7D:B2:D4:BC:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/0e352be7-b541-3b45-bfce-f9c698c6b91c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 64.225.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:53:57:ba:76:04:aa:0e:e9:34:bc:f7:81:66:f6:eb:ab:1d: 42:14:21:e2:0d:a1:1e:57:ca:60:a9:a6:95:80:66:b8:48:20: c5:cb:12:58:6f:78:19:93:f7:03:c8:0d:b6:39:da:c3:11:11: fd:af:23:d0:07:f3:64:85:e4:ce:b5:f9:bf:de:6c:93:0c:c8: 19:f4:6c:28:b7:eb:3f:c2:00:5b:ae:81:8f:a9:a2:18:63:7b: c1:2f:12:6a:2e:fe:9a:f7:b0:22:e0:d7:5a:ed:9a:a6:75:ba: ad:dd:3c:c2:d1:21:2b:8a:ec:fe:2a:a8:da:0d:f5:98:8b:58: fd:72:9d:8f:46:a2:47:94:08:3b:7a:f2:e5:72:69:36:24:0c: 33:e7:90:56:40:a8:94:9f:b3:57:67:3a:81:69:cf:ac:c4:4b: cb:61:4a:99:a3:73:3e:8d:e7:64:ef:44:4c:c0:01:eb:84:3d: 8d:ed:5f:ea:00:50:03:03:a6:0e:3b:e1:63:47:be:69:7a:2e: 3f:6e:c6:3f:68:d1:e3:52:19:e4:6f:6e:db:61:7a:53:49:1b: e8:87:19:67:49:81:96:45:9d:aa:13:f9:98:d0:9f:68:2d:b8: 8b:b8:fc:29:23:9c:a6:36:e0:ba:85:05:84:0e:7e:4a:7a:21: 58:99:d5:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPNcX9bEYPp565oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk NmZmNDEzZWItZTFiZC00ZWQ3LTljNzgtOTYwNDlkNDZkMzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt69xFx1EjlstHOwizqoEU3JjsHQPCqCsgOiB FwVcMYQmPzjA3P0pWUB3QE3l6ziJxfz+zxXr+ryjQnL2r3Y9OKi2cs48X/Qui46B jxRHzIDkwAPIwMnh0+B7/RZkjNB1gafjur/VNnU5K0ErjqK4INoA8dBz5onCvDlL S0qVp47XNEzuSRCANJYO8lDdmQe3V4NyOz+CQvpVoEegMCSc0bsyZXjJ1A9xfdtQ DIVbLgIEJNKegQN/f2Or4IOVu/lVFuSd3/mWoZIUIOztzM7UmtRULs3BeEojO80Y SGy7hGY2VxIZIZCCsBkf6brSHQumJkivoewQtG3oawzAosXyhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUPqSOf6hpf+PJGb8raPH2y1Lw9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvMGUzNTJiZTctYjU0MS0z YjQ1LWJmY2UtZjljNjk4YzZiOTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQOEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9TV7p2BKoO6TS894Fm9uurHUIUIeINoR5XymCpppWAZrhIIMXLElhv eBmT9wPIDbY52sMREf2vI9AH82SF5M61+b/ebJMMyBn0bCi36z/CAFuugY+pohhj e8EvEmou/pr3sCLg11rtmqZ1uq3dPMLRISuK7P4qqNoN9ZiLWP1ynY9GokeUCDt6 8uVyaTYkDDPnkFZAqJSfs1dnOoFpz6zES8thSpmjcz6N52TvREzAAeuEPY3tX+oA UAMDpg474WNHvml6Lj9uxj9o0eNSGeRvbtthelNJG+iHGWdJgZZFnaoT+ZjQn2gt uIu4/CkjnKY24LqFBYQOfkp6IViZ1cY= -----END CERTIFICATE-----Generated at Tue Sep 22 09:18:27 2026 by rpki-client