$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/43cb95bf-32bb-367f-b969-2f91bc5ab261.roa File: 43cb95bf-32bb-367f-b969-2f91bc5ab261.roa (raw, json) Hash identifier: VOvCwX4UGuk+xFZiUwpSO2yWma51e9zt0ok8+1LTk5s= Subject key identifier: 6C:7A:B2:30:90:89:6D:70:72:70:13:59:5C:95:A1:AB:28:FF:DC:FB Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584F093CDABCEA8387CE4576D980 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/43cb95bf-32bb-367f-b969-2f91bc5ab261.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 14061 IP address blocks: 68.183.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:da:bc:ea:83:87:ce:45:76:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=dbbca876-bb4a-46f7-99c3-c38997e2207b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9a:66:23:58:79:68:9d:65:98:29:f3:ca:98: 44:66:df:eb:dd:a7:f6:9c:6a:c5:63:26:e6:8d:7a: a7:68:93:36:6d:3c:b9:0b:97:77:c9:7a:7b:06:27: 93:9b:f7:3a:0c:94:ff:2d:0e:96:5b:ff:93:5e:e8: 26:46:af:85:21:bd:b2:ff:12:08:9d:78:c5:6e:ad: 1d:3d:8d:7b:1f:c6:fb:5d:06:b3:ed:28:29:a4:72: 92:f7:6c:92:32:9f:bf:ef:59:1e:67:fe:58:85:52: f1:24:4b:0a:79:15:37:6d:ed:f7:dc:95:a1:c9:a0: 3f:bd:18:f7:00:8d:ce:ba:25:ed:ce:f9:ea:46:fa: 75:ba:ba:be:00:76:b1:40:da:94:79:40:05:19:ad: e0:0c:28:7c:ab:10:4f:f9:73:45:fc:7e:a1:5e:93: 11:f0:62:f8:af:1c:16:00:45:d3:a7:b0:98:35:5d: 49:09:d9:08:74:de:15:61:7f:43:5c:83:7e:a7:42: db:54:23:88:00:54:33:1f:39:92:78:69:a4:df:09: 78:11:ec:52:3b:3f:bb:2c:f6:0b:07:c6:cd:4e:f2: 3f:92:93:ce:a9:b8:1b:a3:83:0b:2f:97:11:65:dd: 02:0b:3c:5a:f8:67:0e:52:58:89:81:d2:56:a1:3e: 85:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:7A:B2:30:90:89:6D:70:72:70:13:59:5C:95:A1:AB:28:FF:DC:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/43cb95bf-32bb-367f-b969-2f91bc5ab261.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 68.183.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:76:9c:4a:11:a4:f4:de:ef:06:8d:c2:f4:cb:4b:65:6e:bb: 4e:0b:d2:b2:35:d1:65:f3:2f:de:21:f0:f3:83:99:0d:68:e1: 19:fc:91:11:07:7c:73:61:88:2b:f9:d6:6d:84:63:10:a7:2d: f6:86:a4:af:c3:06:2b:79:30:a1:ec:71:a2:17:48:3f:ac:ed: 3d:e7:0b:66:4c:32:f4:bc:7d:90:99:c1:69:ad:72:99:e1:c6: 49:17:6d:cd:84:1d:08:9e:d2:2a:bd:6f:fd:8d:ad:6e:7b:ae: 6c:d5:77:07:25:f5:ab:94:dd:ef:af:95:83:6a:5f:f4:ff:47: 38:a6:1c:87:bc:55:ee:a4:1d:6a:47:a7:f3:5a:8a:7d:92:c6: 48:cc:ca:54:32:d2:53:e7:ea:6b:97:ea:4b:34:06:ca:f8:19: a4:16:99:0d:09:36:a8:b8:a0:05:3c:77:2c:4c:e2:ab:7e:d6: fe:33:78:54:f8:0a:4d:54:0f:a8:90:21:ae:a4:0b:14:9d:91: fa:1f:73:22:1b:99:a8:5f:3b:28:fd:cd:4b:43:ea:be:3c:b3: 34:b9:21:a1:61:66:5e:2f:51:35:24:da:88:17:1b:2d:02:1a: aa:16:70:e5:24:8a:04:59:64:c5:a4:2a:8d:1b:d1:14:c4:2b: 24:09:b3:3d -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8JPNq86oOHzkV22YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk ZGJiY2E4NzYtYmI0YS00NmY3LTk5YzMtYzM4OTk3ZTIyMDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25pmI1h5aJ1lmCnzyphEZt/r3af2nGrFYybm jXqnaJM2bTy5C5d3yXp7BieTm/c6DJT/LQ6WW/+TXugmRq+FIb2y/xIInXjFbq0d PY17H8b7XQaz7SgppHKS92ySMp+/71keZ/5YhVLxJEsKeRU3be333JWhyaA/vRj3 AI3OuiXtzvnqRvp1urq+AHaxQNqUeUAFGa3gDCh8qxBP+XNF/H6hXpMR8GL4rxwW AEXTp7CYNV1JCdkIdN4VYX9DXIN+p0LbVCOIAFQzHzmSeGmk3wl4EexSOz+7LPYL B8bNTvI/kpPOqbgbo4MLL5cRZd0CCzxa+GcOUliJgdJWoT6FLwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGx6sjCQiW1wcnATWVyVoaso/9z7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvNDNjYjk1YmYtMzJiYi0z NjdmLWI5NjktMmY5MWJjNWFiMjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARLcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEALHacShGk9N7vBo3C9MtLZW67TgvSsjXRZfMv3iHw84OZDWjhGfyREQd8 c2GIK/nWbYRjEKct9oakr8MGK3kwoexxohdIP6ztPecLZkwy9Lx9kJnBaa1ymeHG SRdtzYQdCJ7SKr1v/Y2tbnuubNV3ByX1q5Td76+Vg2pf9P9HOKYch7xV7qQdaken 81qKfZLGSMzKVDLSU+fqa5fqSzQGyvgZpBaZDQk2qLigBTx3LEziq37W/jN4VPgK TVQPqJAhrqQLFJ2R+h9zIhuZqF87KP3NS0PqvjyzNLkhoWFmXi9RNSTaiBcbLQIa qhZw5SSKBFlkxaQqjRvRFMQrJAmzPQ== -----END CERTIFICATE-----Generated at Tue Sep 22 20:29:38 2026 by rpki-client