$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/b9bb34a8-3fb4-3229-af76-b084da323030.roa File: b9bb34a8-3fb4-3229-af76-b084da323030.roa (raw, json) Hash identifier: 27TZy/RExE461OhNRMoGdtCcb8/AqFk0ruXDYIJgHQc= Subject key identifier: 2B:7A:03:B4:4A:B4:96:2B:75:0A:B5:5E:A7:FA:AB:1B:2D:A3:D9:3D Certificate issuer: /CN=88e058e6-ff68-4d5d-b7b8-04d1661ec235 Certificate serial: 010D0C9F4328584F2C225E1A54C6C366D16E1CC0 Authority key identifier: 7F:1F:72:F4:8D:1D:D7:6F:87:2D:2D:EA:F2:15:9E:CA:D3:6A:2D:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/b9bb34a8-3fb4-3229-af76-b084da323030.roa Signing time: Mon 14 Sep 2026 13:00:12 +0000 ROA not before: Mon 14 Sep 2026 13:00:12 +0000 ROA not after: Sun 13 Dec 2026 14:00:12 +0000 asID: 20 IP address blocks: 128.151.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2c:22:5e:1a:54:c6:c3:66:d1:6e:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88e058e6-ff68-4d5d-b7b8-04d1661ec235 Validity Not Before: Sep 14 13:00:12 2026 GMT Not After : Dec 13 14:00:12 2026 GMT Subject: CN=a968d84f-7b8a-45a5-b0ef-340433abc83e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3a:e5:fe:f6:b2:0d:e4:6b:cf:8f:55:f3:ad: b3:f3:9f:bc:2c:a1:41:82:53:14:3e:ca:95:26:20: 68:5c:cb:fd:88:e6:e5:cd:cc:d9:1c:28:b4:de:ac: fa:e0:c3:d7:5e:fc:fb:c1:b4:2d:22:6a:24:6b:02: 22:78:49:e8:ab:02:35:37:a6:3a:8b:62:8d:01:6e: 1c:93:58:69:ab:11:39:fb:b8:f6:d0:04:1d:2e:f8: d9:b4:6b:0c:e3:aa:29:a5:fb:17:ff:01:f9:bf:45: 7d:4e:77:2b:1e:9d:b8:31:1d:01:1b:a9:0e:5c:e5: 60:1b:41:45:75:d7:82:b4:43:ed:97:af:9c:d3:b4: 25:27:a6:c6:ea:f8:ac:74:12:7f:e7:b5:c3:dc:9d: df:92:aa:a0:b3:d5:fb:28:bd:e3:6f:ea:56:07:64: 9e:55:9b:00:26:02:f9:88:90:56:0b:df:b9:34:6b: f9:54:a2:03:9a:40:55:50:66:00:73:02:61:bd:7f: 15:95:74:8c:b2:87:39:48:bf:5b:55:6d:ec:95:73: 07:74:61:9b:45:7a:4f:b0:3a:7e:3a:f2:da:e6:f5: f7:35:e2:3f:0f:45:62:5d:d4:59:1c:fa:b0:90:40: f2:03:43:c7:d8:85:69:79:88:0f:27:6a:63:1d:b1: 9c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:7A:03:B4:4A:B4:96:2B:75:0A:B5:5E:A7:FA:AB:1B:2D:A3:D9:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/b9bb34a8-3fb4-3229-af76-b084da323030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.crl X509v3 Authority Key Identifier: keyid:7F:1F:72:F4:8D:1D:D7:6F:87:2D:2D:EA:F2:15:9E:CA:D3:6A:2D:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer sbgp-ipAddrBlock: critical IPv4: 128.151.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:cd:a3:08:d5:11:b7:9b:f6:c6:e9:c0:65:df:7d:1c:8f:e7: 1e:f3:8e:60:09:a4:f4:f3:98:69:39:da:c7:e1:4e:9f:4d:b9: b4:64:2c:77:a0:b3:2d:b5:1d:5c:59:54:0f:b5:3b:84:61:62: 05:ad:67:92:50:88:55:24:e0:22:bf:a9:6b:e3:1f:1b:8d:29: 8e:e9:09:1c:4d:34:77:3f:29:60:ac:cf:db:68:d0:f7:75:1c: d8:d4:eb:23:6b:50:ef:4c:1a:81:ad:cc:91:a9:f5:d7:78:cd: 1e:df:f2:44:17:56:48:2e:ef:71:5c:cc:18:09:fa:0b:dd:2a: 42:fa:2f:37:fd:ac:23:40:ba:b2:b9:17:a5:b6:5b:7d:1c:70: 03:90:d8:e8:ea:17:6a:9c:25:e8:eb:57:c2:e7:ee:8d:44:e1: e0:88:cf:2a:59:9c:3f:d7:78:41:66:54:78:03:97:14:45:92: 3d:06:db:d5:df:08:2e:b5:b1:53:6a:0e:30:d5:43:9d:52:2f: c6:53:ba:81:12:5a:db:8b:bb:51:ef:f9:4e:22:a5:5d:ac:1b: a2:21:32:af:b6:1d:be:16:e0:61:1a:13:20:de:ab:68:e9:2b: 1e:c7:f0:64:fc:6a:dc:b5:13:c8:6d:87:54:96:01:79:2e:87: 63:42:fa:16 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8sIl4aVMbDZtFuHMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhlMDU4ZTYtZmY2OC00ZDVkLWI3YjgtMDRkMTY2MWVj MjM1MB4XDTI2MDkxNDEzMDAxMloXDTI2MTIxMzE0MDAxMlowLzEtMCsGA1UEAxMk YTk2OGQ4NGYtN2I4YS00NWE1LWIwZWYtMzQwNDMzYWJjODNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzrl/vayDeRrz49V862z85+8LKFBglMUPsqV JiBoXMv9iOblzczZHCi03qz64MPXXvz7wbQtImokawIieEnoqwI1N6Y6i2KNAW4c k1hpqxE5+7j20AQdLvjZtGsM46oppfsX/wH5v0V9TncrHp24MR0BG6kOXOVgG0FF ddeCtEPtl6+c07QlJ6bG6visdBJ/57XD3J3fkqqgs9X7KL3jb+pWB2SeVZsAJgL5 iJBWC9+5NGv5VKIDmkBVUGYAcwJhvX8VlXSMsoc5SL9bVW3slXMHdGGbRXpPsDp+ OvLa5vX3NeI/D0ViXdRZHPqwkEDyA0PH2IVpeYgPJ2pjHbGcOQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCt6A7RKtJYrdQq1Xqf6qxsto9k9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84OGUw NThlNi1mZjY4LTRkNWQtYjdiOC0wNGQxNjYxZWMyMzUvYjliYjM0YTgtM2ZiNC0z MjI5LWFmNzYtYjA4NGRhMzIzMDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODhlMDU4ZTYtZmY2OC00ZDVkLWI3 YjgtMDRkMTY2MWVjMjM1Lzg4ZTA1OGU2LWZmNjgtNGQ1ZC1iN2I4LTA0ZDE2NjFl YzIzNS5jcmwwHwYDVR0jBBgwFoAUfx9y9I0d12+HLS3q8hWeytNqLUIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84OGUwNThlNi1mZjY4LTRkNWQtYjdiOC0wNGQx NjYxZWMyMzUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgJcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAO82jCNURt5v2xunAZd99HI/nHvOOYAmk9POYaTnax+FOn025tGQsd6Cz LbUdXFlUD7U7hGFiBa1nklCIVSTgIr+pa+MfG40pjukJHE00dz8pYKzP22jQ93Uc 2NTrI2tQ70waga3Mkan113jNHt/yRBdWSC7vcVzMGAn6C90qQvovN/2sI0C6srkX pbZbfRxwA5DY6OoXapwl6OtXwufujUTh4IjPKlmcP9d4QWZUeAOXFEWSPQbb1d8I LrWxU2oOMNVDnVIvxlO6gRJa24u7Ue/5TiKlXawboiEyr7YdvhbgYRoTIN6raOkr HsfwZPxq3LUTyG2HVJYBeS6HY0L6Fg== -----END CERTIFICATE-----Generated at Sat Sep 26 02:54:44 2026 by rpki-client