$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d332663b-6211-34e0-95f5-db6dd6050caa.roa File: d332663b-6211-34e0-95f5-db6dd6050caa.roa (raw, json) Hash identifier: 3A6b0c0S9ipHmapxn8cSgcW7WFmxE5AvGox6WcUQu2A= Subject key identifier: 3F:9C:58:A2:03:96:12:78:5A:8F:3A:15:AF:32:5E:4D:43:C0:15:C7 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584F093CD7B2774152AA370BB080 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d332663b-6211-34e0-95f5-db6dd6050caa.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 14061 IP address blocks: 144.126.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:d7:b2:77:41:52:aa:37:0b:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=36afb49f-7c5f-4e14-aacb-54de6bbbf39c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5d:e2:42:76:01:5d:7b:fb:cf:a0:3e:cf:1b: 86:5e:c7:62:49:c4:52:3c:93:ae:71:fe:de:6d:df: 7b:34:a7:11:9b:22:33:0d:2c:73:b4:2d:87:78:77: dc:ba:28:22:df:90:09:fe:45:8d:d1:34:60:18:35: 05:63:b5:a0:7a:cf:56:c5:ec:a6:d8:ee:54:7a:2b: b8:2e:4a:fa:45:be:ea:3e:24:d3:92:b4:54:6a:cb: 88:0f:f5:81:81:6f:0d:f2:ee:f5:62:2e:be:89:38: cd:94:a2:3c:7b:aa:2f:da:1a:bf:9c:2c:74:03:1d: d7:e6:e4:7e:df:d2:9b:2a:fc:c0:d5:87:09:63:4f: 65:b5:9b:58:1c:51:9e:e3:5f:df:c5:32:7e:1e:aa: 42:90:2d:65:73:66:2d:36:90:31:6a:9a:d8:8f:91: 3a:f1:9c:1c:2a:5e:2f:64:18:bc:67:24:bb:04:f2: 4a:e7:e7:ab:5d:81:bc:ef:ad:5d:52:df:a6:c9:bf: fc:5a:4b:d7:bd:3f:8f:d1:2f:26:cd:46:f8:f7:c5: e1:a6:d5:0a:21:66:29:de:36:a1:86:ab:eb:09:cd: c9:69:86:9e:93:26:e0:ff:10:c8:75:ed:de:d8:8d: 44:10:2a:7a:ef:41:93:62:31:3f:21:e2:b3:0c:2b: fb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:9C:58:A2:03:96:12:78:5A:8F:3A:15:AF:32:5E:4D:43:C0:15:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d332663b-6211-34e0-95f5-db6dd6050caa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 144.126.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:bc:4d:c9:09:97:95:b2:c1:7f:50:f3:98:d2:56:a4:91:90: 1e:e8:d0:03:04:83:5a:2e:d6:c7:dd:16:91:36:ea:63:5c:40: 3a:27:47:92:03:27:c8:7b:5a:61:34:e3:78:5f:7b:4e:45:44: 64:51:92:c5:46:8f:ad:79:6e:4c:02:9c:b2:80:5d:08:b0:b3: d6:58:a2:01:37:fb:a8:9d:eb:64:87:3c:c4:85:d3:fb:84:d1: 8f:7d:5e:fd:af:93:75:33:3d:c9:ad:89:82:bc:d5:95:31:c9: b5:a6:1f:c5:82:77:66:d2:1c:00:33:c5:6e:48:3b:46:c7:fe: e0:1c:4c:a8:96:48:04:c5:f4:ee:07:1a:a0:2f:0e:2b:94:9e: d6:ff:f4:f4:e0:ab:cb:56:33:4a:b7:50:92:36:d0:cc:39:0e: 57:cc:f0:c5:cb:23:01:25:33:8c:4e:ea:f2:0a:e2:28:47:54: 44:c5:f1:e3:43:b3:1a:e3:df:ef:99:0a:3f:60:cc:f1:98:19: 46:be:b7:3b:30:cf:85:fd:f1:93:4b:d7:b0:2e:2f:25:bb:7f: da:db:df:82:34:96:31:8b:8c:54:a6:48:44:84:66:36:6f:6e: b8:8e:fb:1d:54:b5:fa:f4:10:3b:6c:e5:a2:cb:58:b6:d3:68: c3:91:91:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPNeyd0FSqjcLsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk MzZhZmI0OWYtN2M1Zi00ZTE0LWFhY2ItNTRkZTZiYmJmMzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl3iQnYBXXv7z6A+zxuGXsdiScRSPJOucf7e bd97NKcRmyIzDSxztC2HeHfcuigi35AJ/kWN0TRgGDUFY7Wges9Wxeym2O5Ueiu4 Lkr6Rb7qPiTTkrRUasuID/WBgW8N8u71Yi6+iTjNlKI8e6ov2hq/nCx0Ax3X5uR+ 39KbKvzA1YcJY09ltZtYHFGe41/fxTJ+HqpCkC1lc2YtNpAxaprYj5E68ZwcKl4v ZBi8ZyS7BPJK5+erXYG8761dUt+myb/8WkvXvT+P0S8mzUb498XhptUKIWYp3jah hqvrCc3JaYaekybg/xDIde3e2I1EECp670GTYjE/IeKzDCv77QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+cWKIDlhJ4Wo86Fa8yXk1DwBXHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvZDMzMjY2M2ItNjIxMS0z NGUwLTk1ZjUtZGI2ZGQ2MDUwY2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGkH7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACS8TckJl5WywX9Q85jSVqSRkB7o0AMEg1ou1sfdFpE26mNcQDonR5ID J8h7WmE043hfe05FRGRRksVGj615bkwCnLKAXQiws9ZYogE3+6id62SHPMSF0/uE 0Y99Xv2vk3UzPcmtiYK81ZUxybWmH8WCd2bSHAAzxW5IO0bH/uAcTKiWSATF9O4H GqAvDiuUntb/9PTgq8tWM0q3UJI20Mw5DlfM8MXLIwElM4xO6vIK4ihHVETF8eND sxrj3++ZCj9gzPGYGUa+tzswz4X98ZNL17AuLyW7f9rb34I0ljGLjFSmSESEZjZv briO+x1Utfr0EDts5aLLWLbTaMORkT0= -----END CERTIFICATE-----Generated at Tue Sep 22 14:07:43 2026 by rpki-client