$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/78d7aa01-4523-3098-9ce6-5a3ee414b7d3.roa File: 78d7aa01-4523-3098-9ce6-5a3ee414b7d3.roa (raw, json) Hash identifier: DvrYKO2FtCoXnPRuSYfvMCRpnypv7xTZSpysl29rax4= Subject key identifier: 2F:9A:8B:0E:C8:8F:95:C0:B4:27:88:AA:D6:BA:FE:B8:20:2F:E7:FC Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584F093CD730E6903E67D88B1600 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/78d7aa01-4523-3098-9ce6-5a3ee414b7d3.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 14061 IP address blocks: 206.189.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:d7:30:e6:90:3e:67:d8:8b:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=bf7df2fe-0d56-4e44-ac91-d5b0ef400fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5e:ff:f6:79:bb:f7:b3:60:63:30:e4:37:a9: 92:da:fc:d8:62:96:a3:b6:c8:69:99:c5:9d:1a:28: b5:e5:58:d1:f6:73:5c:a0:56:f7:c9:e5:41:f8:d1: f4:c6:71:b3:d1:2d:50:5a:75:4b:4f:b1:8f:59:1c: 4e:3d:8b:1d:05:5e:8b:f0:15:45:68:a0:b4:21:61: 35:e3:78:e5:20:8e:02:7e:ec:f5:47:ea:86:e3:fa: 55:f7:f2:03:45:25:13:94:90:9a:cd:3f:fc:e1:76: cd:9b:6d:65:3d:23:30:fe:41:38:88:0e:85:28:a0: 9d:4c:23:b2:eb:cb:aa:42:c3:30:ea:b4:6c:6e:a9: 88:e6:76:de:3a:a5:cb:c1:c8:9e:50:36:bc:9c:49: 99:d4:4e:13:c1:1b:a6:27:00:c7:80:44:39:cb:84: 50:66:d9:39:c3:b6:f5:4d:c3:52:00:2c:78:b1:16: 0a:da:d8:40:00:62:b0:9c:ca:2d:c2:44:ab:c4:75: 89:9e:72:a1:47:cb:f9:f1:bf:72:c4:b7:62:63:72: 12:d3:81:45:34:99:3a:d5:37:df:81:6f:9c:43:51: 42:fe:78:c0:73:ae:c6:0e:72:ff:24:23:cb:e9:dd: 42:7e:99:92:70:c2:71:16:e5:d0:93:13:ed:f0:d9: 56:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:9A:8B:0E:C8:8F:95:C0:B4:27:88:AA:D6:BA:FE:B8:20:2F:E7:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/78d7aa01-4523-3098-9ce6-5a3ee414b7d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 206.189.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:c5:f7:2e:d2:a9:6a:6f:e4:53:94:12:0d:89:fd:ba:8f:3d: 7b:8b:4d:26:d6:32:46:b7:4a:32:02:5f:52:26:11:b3:b5:42: 38:8d:e6:74:e1:45:2c:56:43:4f:31:0c:c6:6d:16:e8:8b:5f: 8b:ff:54:81:9f:9a:53:b4:84:f8:fc:e8:cc:23:11:94:b7:9e: 0c:11:39:fa:db:95:9b:6b:36:ef:67:e2:13:a8:ab:15:77:91: 3a:61:60:83:b8:9d:90:5d:fe:c2:4a:4c:98:d7:d3:25:af:98: e9:9c:ae:50:3b:26:24:cd:8f:92:48:07:b5:64:30:22:d6:05: c1:c2:c4:01:c3:40:6e:42:65:dd:4e:07:e5:07:fa:2f:df:7f: 43:9c:a3:0d:50:3b:3d:c1:a2:ca:e9:b2:8c:82:d8:9d:e3:4b: 93:5d:eb:87:2c:5b:6a:e1:32:57:f1:2e:81:e6:2d:73:4d:1e: 65:aa:d1:b7:8a:3d:5a:52:20:c6:de:bc:ca:0f:27:9d:36:c8: 9f:22:f7:4d:55:f2:14:97:63:8a:76:44:df:64:da:36:94:1d: c3:73:e7:06:bf:cf:a1:e3:ed:79:c0:86:37:b0:93:3a:d4:ec: ca:86:fb:5e:b9:6f:1b:bd:56:7a:33:4a:18:d8:49:86:5d:38: e2:64:56:f0 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8JPNcw5pA+Z9iLFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk YmY3ZGYyZmUtMGQ1Ni00ZTQ0LWFjOTEtZDViMGVmNDAwZmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV7/9nm797NgYzDkN6mS2vzYYpajtshpmcWd Gii15VjR9nNcoFb3yeVB+NH0xnGz0S1QWnVLT7GPWRxOPYsdBV6L8BVFaKC0IWE1 43jlII4Cfuz1R+qG4/pV9/IDRSUTlJCazT/84XbNm21lPSMw/kE4iA6FKKCdTCOy 68uqQsMw6rRsbqmI5nbeOqXLwcieUDa8nEmZ1E4TwRumJwDHgEQ5y4RQZtk5w7b1 TcNSACx4sRYK2thAAGKwnMotwkSrxHWJnnKhR8v58b9yxLdiY3IS04FFNJk61Tff gW+cQ1FC/njAc67GDnL/JCPL6d1CfpmScMJxFuXQkxPt8NlW9wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFC+aiw7Ij5XAtCeIqta6/rggL+f8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvNzhkN2FhMDEtNDUyMy0z MDk4LTljZTYtNWEzZWU0MTRiN2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAzr0wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAkcX3LtKpam/kU5QSDYn9uo89e4tNJtYyRrdKMgJfUiYRs7VCOI3mdOFF LFZDTzEMxm0W6Itfi/9UgZ+aU7SE+PzozCMRlLeeDBE5+tuVm2s272fiE6irFXeR OmFgg7idkF3+wkpMmNfTJa+Y6ZyuUDsmJM2PkkgHtWQwItYFwcLEAcNAbkJl3U4H 5Qf6L99/Q5yjDVA7PcGiyumyjILYneNLk13rhyxbauEyV/EugeYtc00eZarRt4o9 WlIgxt68yg8nnTbInyL3TVXyFJdjinZE32TaNpQdw3PnBr/PoePtecCGN7CTOtTs yob7XrlvG71WejNKGNhJhl044mRW8A== -----END CERTIFICATE-----Generated at Tue Sep 22 16:48:39 2026 by rpki-client