$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/1d1bdec8-4fd6-3f71-a5b7-9b80adda0609.roa File: 1d1bdec8-4fd6-3f71-a5b7-9b80adda0609.roa (raw, json) Hash identifier: UoMRKGLD+D1f6hw5B/Kku7Cpu64aneofFeifkF4eSnw= Subject key identifier: D4:74:B1:5A:EC:A9:64:64:16:67:07:00:A0:21:48:EE:5D:53:EA:88 Certificate issuer: /CN=e8c73746-18f6-4692-80c6-1d7b3e93659a Certificate serial: 010D0C9F4328584F03A79092AD285C936056A5B0 Authority key identifier: 37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/1d1bdec8-4fd6-3f71-a5b7-9b80adda0609.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 19318 IP address blocks: 198.96.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:90:92:ad:28:5c:93:60:56:a5:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8c73746-18f6-4692-80c6-1d7b3e93659a Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=dde02974-4af5-4607-9a3f-4b8bcca036ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:66:8e:20:9a:10:85:b6:d9:c5:74:5b:af:dc: e7:36:6f:9a:85:38:57:9e:0e:2e:08:0e:0e:4a:63: 5c:cb:29:bb:4b:b7:01:9b:c5:98:0e:b0:e7:20:16: fd:ca:7b:bd:0c:c0:eb:05:c6:1f:4a:b7:7a:89:da: 8f:fa:74:f8:e1:83:22:4e:89:ee:aa:5d:60:a0:d4: 2a:38:58:0b:e5:14:4e:42:a5:20:f5:67:3c:c0:60: a3:32:60:93:b7:a6:5d:9c:ac:05:9a:de:f2:ad:f7: 72:b3:e2:82:b6:aa:2b:b4:17:d9:b8:01:72:77:2d: 01:2d:78:6c:19:8d:d3:cd:fd:5d:7c:2f:28:78:18: 76:e7:d3:07:7d:5b:5d:dd:f7:02:fb:3a:89:de:8d: b0:c2:f0:c6:31:d8:84:d5:93:09:ba:27:a1:c3:70: b6:55:dc:b5:1c:06:2e:1d:75:4d:e2:59:47:28:0b: 88:d7:da:ac:d5:4e:0d:a1:5e:af:3e:5b:a6:fa:d0: 6f:b4:44:8d:76:92:e0:3e:ed:bc:e3:4e:81:30:42: 8b:09:39:eb:f0:9e:51:96:a8:47:37:ea:0b:58:99: da:48:21:47:48:0a:5e:f8:2c:3c:8c:97:e8:45:83: ee:64:c0:2f:54:3f:27:7b:02:78:2d:45:76:b6:e3: 95:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:74:B1:5A:EC:A9:64:64:16:67:07:00:A0:21:48:EE:5D:53:EA:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/1d1bdec8-4fd6-3f71-a5b7-9b80adda0609.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl X509v3 Authority Key Identifier: keyid:37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer sbgp-ipAddrBlock: critical IPv4: 198.96.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:e6:bb:3f:61:1e:5c:a0:3a:f5:1c:62:33:30:cc:86:a1:9c: 67:1c:91:65:30:5a:02:0c:80:e8:56:c6:87:e5:30:43:04:9b: a6:01:a2:5d:82:6f:d3:38:62:eb:d1:2c:ec:b7:5f:b6:38:43: 7a:4c:54:50:28:68:19:81:7c:f1:0e:29:ee:26:f0:c0:4d:73: 92:c0:f5:24:d2:e3:cc:a7:d0:65:b3:a2:43:2f:b3:ce:11:3f: 8a:cb:a0:74:95:2f:ad:e4:7b:99:7e:38:98:ff:d0:1c:4b:9c: 87:34:28:0d:6d:fc:5f:93:16:62:99:0f:8e:d3:de:30:8c:f3: 06:64:a5:d9:07:7a:a6:84:e6:83:fd:3c:6c:6e:78:c3:c2:0f: 8f:fe:65:50:54:e9:dd:f0:7c:35:38:91:a4:eb:2f:eb:3a:bd: 7b:5d:87:4f:8a:aa:b1:3b:18:a1:8e:a4:5a:f4:61:2b:b6:92: 0d:89:7d:27:3c:ca:84:b9:56:74:01:9b:ea:e0:84:51:68:a6: 4b:39:88:1a:f1:f7:21:bb:bc:b2:45:a2:36:6f:c4:6d:c8:3b: c4:d3:eb:c1:e2:9f:65:47:29:72:4a:c2:f8:d2:16:30:22:28: 1a:3a:c3:d5:15:39:f5:3f:06:7d:05:fa:18:65:0d:ee:af:bf: bd:55:8a:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp5CSrShck2BWpbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThjNzM3NDYtMThmNi00NjkyLTgwYzYtMWQ3YjNlOTM2 NTlhMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk ZGRlMDI5NzQtNGFmNS00NjA3LTlhM2YtNGI4YmNjYTAzNmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32aOIJoQhbbZxXRbr9znNm+ahThXng4uCA4O SmNcyym7S7cBm8WYDrDnIBb9ynu9DMDrBcYfSrd6idqP+nT44YMiTonuql1goNQq OFgL5RROQqUg9Wc8wGCjMmCTt6ZdnKwFmt7yrfdys+KCtqortBfZuAFydy0BLXhs GY3Tzf1dfC8oeBh259MHfVtd3fcC+zqJ3o2wwvDGMdiE1ZMJuiehw3C2Vdy1HAYu HXVN4llHKAuI19qs1U4NoV6vPlum+tBvtESNdpLgPu28406BMEKLCTnr8J5RlqhH N+oLWJnaSCFHSApe+Cw8jJfoRYPuZMAvVD8newJ4LUV2tuOVdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNR0sVrsqWRkFmcHAKAhSO5dU+qIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lOGM3 Mzc0Ni0xOGY2LTQ2OTItODBjNi0xZDdiM2U5MzY1OWEvMWQxYmRlYzgtNGZkNi0z ZjcxLWE1YjctOWI4MGFkZGEwNjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZThjNzM3NDYtMThmNi00NjkyLTgw YzYtMWQ3YjNlOTM2NTlhL2U4YzczNzQ2LTE4ZjYtNDY5Mi04MGM2LTFkN2IzZTkz NjU5YS5jcmwwHwYDVR0jBBgwFoAUNwqXWXTVXmOGt2p3uKhHHC7BMdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lOGM3Mzc0Ni0xOGY2LTQ2OTItODBjNi0xZDdi M2U5MzY1OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxmBYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbmuz9hHlygOvUcYjMwzIahnGcckWUwWgIMgOhWxoflMEMEm6YBol2C b9M4YuvRLOy3X7Y4Q3pMVFAoaBmBfPEOKe4m8MBNc5LA9STS48yn0GWzokMvs84R P4rLoHSVL63ke5l+OJj/0BxLnIc0KA1t/F+TFmKZD47T3jCM8wZkpdkHeqaE5oP9 PGxueMPCD4/+ZVBU6d3wfDU4kaTrL+s6vXtdh0+KqrE7GKGOpFr0YSu2kg2JfSc8 yoS5VnQBm+rghFFopks5iBrx9yG7vLJFojZvxG3IO8TT68Hin2VHKXJKwvjSFjAi KBo6w9UVOfU/Bn0F+hhlDe6vv71Vik4= -----END CERTIFICATE-----Generated at Wed Sep 23 00:11:55 2026 by rpki-client