$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/d6b63973-e180-321f-a02b-4fe3aa4e6b1f.roa File: d6b63973-e180-321f-a02b-4fe3aa4e6b1f.roa (raw, json) Hash identifier: QCwTvMMjGmCvO4VB2Vb+LJKF4Bbdit74KsbK8gD918I= Subject key identifier: 10:E7:88:EF:18:C1:A7:B4:CD:5A:A5:D8:68:18:E9:D8:31:C7:DD:02 Certificate issuer: /CN=88842878-1050-4df7-822b-ea8ec25db83d Certificate serial: 010D0C9F4328584CC611EE392A252F396817AD80 Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/d6b63973-e180-321f-a02b-4fe3aa4e6b1f.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 2495 IP address blocks: 198.248.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:11:ee:39:2a:25:2f:39:68:17:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=1494f5de-043c-47a5-a7c4-0b6670d5a83f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:29:20:3e:6d:cf:f4:5b:71:ea:ae:b9:4c:0a: 47:61:46:7a:35:b2:10:37:23:30:1b:4a:60:3c:0d: 8b:5d:e5:c0:5c:f5:57:c2:90:b7:0a:cf:47:14:d6: c8:82:b0:4c:6b:99:ae:e2:d9:8c:9a:c1:2b:a5:42: 51:36:60:ae:e0:6d:1b:1d:f1:dc:31:de:8c:ac:e6: 7c:98:25:69:40:37:c0:34:aa:a8:cf:6c:15:1d:6f: 90:1d:62:bf:6d:30:cd:c1:65:15:23:d8:71:af:9d: 6a:d8:6e:f4:d4:41:71:cb:a6:ab:7e:36:0e:44:0a: cb:84:8d:60:70:be:1e:1d:a5:9b:6a:0c:d4:23:f9: 76:aa:fb:f0:65:9f:82:e4:33:95:09:b1:ec:b9:99: 11:8a:bc:a5:cd:1f:51:7f:58:7c:13:18:b1:ca:a9: 1d:1c:66:69:2a:72:c1:cd:d2:1d:ba:94:21:43:0a: f4:3d:d6:1e:c4:c3:19:c4:f3:b2:68:e8:5b:bf:fc: aa:6e:58:61:24:2d:88:ec:d0:c1:b8:6f:e5:35:93: 54:3f:f8:04:11:21:fc:86:80:24:c4:ba:e8:bc:55: 58:67:4d:d3:61:1c:2b:58:03:74:f2:1e:dd:b7:cc: cb:e0:3a:6c:38:f4:62:4b:0d:a7:66:d5:84:90:84: 89:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E7:88:EF:18:C1:A7:B4:CD:5A:A5:D8:68:18:E9:D8:31:C7:DD:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/d6b63973-e180-321f-a02b-4fe3aa4e6b1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl X509v3 Authority Key Identifier: keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer sbgp-ipAddrBlock: critical IPv4: 198.248.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:5a:8d:b1:ac:da:b2:1a:7f:b1:0b:99:f3:23:5d:51:98:91: 72:6d:7b:66:77:10:fe:34:62:07:44:8a:37:70:dc:81:4e:7a: 25:ea:49:a9:81:81:76:fb:a6:5d:a8:ab:58:8a:65:39:d2:9a: 73:b5:c1:e9:d5:20:2d:78:40:21:a0:9c:82:53:73:b7:1f:d5: dc:18:bd:f8:01:8e:20:98:85:13:f6:8b:e4:d1:e6:8e:38:91: 23:03:a4:6a:0a:19:ec:79:2e:42:c2:d6:f6:98:90:0b:15:ee: 2a:b4:6a:bd:00:17:bc:3f:e4:5c:46:6f:41:ca:9a:8a:46:ad: 62:ae:dc:29:4c:ab:b3:41:43:65:40:5d:dd:f3:dd:e1:4f:46: 03:ab:a8:26:db:65:6e:54:8f:2c:8e:4c:70:b1:74:2c:0f:bc: ca:37:e5:fd:fa:4b:ef:46:ce:6a:d2:16:ef:d7:51:5d:7b:02: f5:75:9b:1d:f5:91:ad:c6:87:cc:d4:3e:2e:7b:f8:5a:9c:e0: d0:9d:7a:35:a6:9d:ff:f8:84:c4:c2:07:96:d3:84:73:7c:0b: 68:16:74:a8:e1:77:f6:ad:03:2d:02:88:82:15:dc:11:6e:3a: ee:90:91:82:c1:ba:fe:c4:04:b7:a4:cd:19:de:d6:f6:45:af: a2:6f:80:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzGEe45KiUvOWgXrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg4NDI4NzgtMTA1MC00ZGY3LTgyMmItZWE4ZWMyNWRi ODNkMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk MTQ5NGY1ZGUtMDQzYy00N2E1LWE3YzQtMGI2NjcwZDVhODNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCkgPm3P9Ftx6q65TApHYUZ6NbIQNyMwG0pg PA2LXeXAXPVXwpC3Cs9HFNbIgrBMa5mu4tmMmsErpUJRNmCu4G0bHfHcMd6MrOZ8 mCVpQDfANKqoz2wVHW+QHWK/bTDNwWUVI9hxr51q2G701EFxy6arfjYORArLhI1g cL4eHaWbagzUI/l2qvvwZZ+C5DOVCbHsuZkRirylzR9Rf1h8ExixyqkdHGZpKnLB zdIdupQhQwr0PdYexMMZxPOyaOhbv/yqblhhJC2I7NDBuG/lNZNUP/gEESH8hoAk xLrovFVYZ03TYRwrWAN08h7dt8zL4DpsOPRiSw2nZtWEkISJCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDniO8Ywae0zVql2GgY6dgxx90CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0 Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1ZGI4M2QvZDZiNjM5NzMtZTE4MC0z MjFmLWEwMmItNGZlM2FhNGU2YjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODg4NDI4NzgtMTA1MC00ZGY3LTgy MmItZWE4ZWMyNWRiODNkLzg4ODQyODc4LTEwNTAtNGRmNy04MjJiLWVhOGVjMjVk YjgzZC5jcmwwHwYDVR0jBBgwFoAUCvQvaSDxqtdtZzyGmgTIgB6tfZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThl YzI1ZGI4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxvhYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBajbGs2rIaf7ELmfMjXVGYkXJte2Z3EP40YgdEijdw3IFOeiXqSamB gXb7pl2oq1iKZTnSmnO1wenVIC14QCGgnIJTc7cf1dwYvfgBjiCYhRP2i+TR5o44 kSMDpGoKGex5LkLC1vaYkAsV7iq0ar0AF7w/5FxGb0HKmopGrWKu3ClMq7NBQ2VA Xd3z3eFPRgOrqCbbZW5UjyyOTHCxdCwPvMo35f36S+9GzmrSFu/XUV17AvV1mx31 ka3Gh8zUPi57+Fqc4NCdejWmnf/4hMTCB5bThHN8C2gWdKjhd/atAy0CiIIV3BFu Ou6QkYLBuv7EBLekzRne1vZFr6JvgPM= -----END CERTIFICATE-----Generated at Mon Mar 2 18:09:13 2026 by rpki-client