$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d804a065-83d8-315c-862b-f13fb15f699a.roa File: d804a065-83d8-315c-862b-f13fb15f699a.roa (raw, json) Hash identifier: yYG939FdL/E4+uVKsgZJHTig+h3O2xO3P5elHDCCzJ8= Subject key identifier: A8:71:99:63:97:72:45:E5:68:2A:C4:58:64:5F:CB:67:08:DD:BC:FB Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584F093CDB5BB84C0A2617DEBF00 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d804a065-83d8-315c-862b-f13fb15f699a.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 14061 IP address blocks: 165.232.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:db:5b:b8:4c:0a:26:17:de:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=3c3784d5-acc4-4c69-ac70-3060260cd9df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5a:52:73:83:7c:c7:c6:57:5d:46:48:7b:6f: f9:83:b1:c5:5a:88:3a:68:a5:dc:29:9d:7b:a3:71: f7:b6:a7:b0:29:57:1d:34:02:17:89:91:6c:ec:0e: 58:be:da:88:a6:62:93:ab:44:b0:6e:ff:26:6e:f4: 15:9a:cd:e2:54:17:0e:11:f6:96:d7:ae:ed:d8:d9: 6c:ba:04:50:db:87:59:4e:3f:a4:d6:06:63:ca:08: 68:dd:07:d1:e0:62:1e:59:4c:80:f8:d5:ee:fd:11: a2:e2:64:cb:1d:e2:44:b0:31:7c:39:40:1e:11:51: 30:80:b2:86:8f:86:4b:8a:a3:bd:50:71:78:e7:8d: 6b:9f:65:9e:6c:db:31:7e:50:02:a5:5d:c7:98:e8: 2c:57:a2:c4:1a:74:3c:90:7f:75:0e:7d:30:5e:ce: b6:a6:49:7a:e1:e3:f1:98:7d:53:86:9e:11:1b:f2: 85:c7:86:6c:fb:b0:fa:44:46:13:64:fd:67:a5:42: f4:9f:4a:d2:08:99:e4:2c:c7:0b:4e:37:c0:a5:e5: a9:c6:db:2f:2f:80:97:fc:15:e1:ea:c4:08:28:c0: a1:a7:8b:02:92:c4:83:cc:60:4f:09:d5:11:c0:ab: 00:fb:3d:9f:10:73:48:ac:a7:4c:71:20:44:9d:68: fd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:71:99:63:97:72:45:E5:68:2A:C4:58:64:5F:CB:67:08:DD:BC:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d804a065-83d8-315c-862b-f13fb15f699a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 165.232.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:90:0b:e8:98:16:2c:01:a8:bb:84:5a:58:96:d2:22:ef:00: f8:19:fb:18:e8:23:8b:e2:d7:18:77:2a:f6:e1:3d:53:26:41: f4:96:af:33:0d:de:9f:ef:8b:90:2d:52:bd:b9:8f:ad:4e:5d: e1:77:48:9b:f5:22:3c:a8:b4:60:b2:2e:84:d3:2c:51:f0:a6: 0a:0c:1a:49:d4:39:14:9a:46:d3:ed:55:da:14:85:cc:8d:13: a5:b3:de:eb:1c:a3:2a:cf:f7:b6:05:f2:6b:7d:2d:51:ee:13: 4b:02:65:26:a3:fe:b6:8b:2d:62:7d:86:6e:dd:40:c9:1c:27: 1b:4c:0e:4c:be:c1:6a:6f:d7:cd:cc:87:69:e6:74:d8:6e:2e: 3f:5d:5d:ca:b9:15:a5:8f:19:d3:ad:67:75:61:ed:ac:97:bf: 14:f0:f1:f5:2b:1f:06:6c:59:bd:c4:89:2d:b8:c0:90:d5:70: 2d:9b:61:d2:58:d6:11:94:6e:e3:7c:e7:21:9e:1f:63:57:3c: f6:ef:69:6d:70:6c:ec:4d:cf:e4:46:d7:f0:cc:88:03:df:7c: 1a:d8:6f:d6:cb:b4:fb:00:e7:c9:6a:03:42:1c:79:c1:57:31: 88:00:a1:f1:e6:f4:33:1c:34:0f:32:15:12:b6:a4:97:cf:fa: 59:ba:37:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPNtbuEwKJhfevwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk M2MzNzg0ZDUtYWNjNC00YzY5LWFjNzAtMzA2MDI2MGNkOWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulpSc4N8x8ZXXUZIe2/5g7HFWog6aKXcKZ17 o3H3tqewKVcdNAIXiZFs7A5YvtqIpmKTq0Swbv8mbvQVms3iVBcOEfaW167t2Nls ugRQ24dZTj+k1gZjygho3QfR4GIeWUyA+NXu/RGi4mTLHeJEsDF8OUAeEVEwgLKG j4ZLiqO9UHF4541rn2WebNsxflACpV3HmOgsV6LEGnQ8kH91Dn0wXs62pkl64ePx mH1Thp4RG/KFx4Zs+7D6REYTZP1npUL0n0rSCJnkLMcLTjfApeWpxtsvL4CX/BXh 6sQIKMChp4sCksSDzGBPCdURwKsA+z2fEHNIrKdMcSBEnWj9yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhxmWOXckXlaCrEWGRfy2cI3bz7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvZDgwNGEwNjUtODNkOC0z MTVjLTg2MmItZjEzZmIxNWY2OTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGpeiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOQC+iYFiwBqLuEWliW0iLvAPgZ+xjoI4vi1xh3KvbhPVMmQfSWrzMN 3p/vi5AtUr25j61OXeF3SJv1IjyotGCyLoTTLFHwpgoMGknUORSaRtPtVdoUhcyN E6Wz3uscoyrP97YF8mt9LVHuE0sCZSaj/raLLWJ9hm7dQMkcJxtMDky+wWpv183M h2nmdNhuLj9dXcq5FaWPGdOtZ3Vh7ayXvxTw8fUrHwZsWb3EiS24wJDVcC2bYdJY 1hGUbuN85yGeH2NXPPbvaW1wbOxNz+RG1/DMiAPffBrYb9bLtPsA58lqA0IcecFX MYgAofHm9DMcNA8yFRK2pJfP+lm6N74= -----END CERTIFICATE-----Generated at Mon Sep 28 05:49:19 2026 by rpki-client