$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/88dfce1e-b0ab-33cc-8a60-95ad0beb825d.roa File: 88dfce1e-b0ab-33cc-8a60-95ad0beb825d.roa (raw, json) Hash identifier: Q2Cljdexul9Fv2NBc8lHuNt3BjpGXO5Hu247+5VMt5I= Subject key identifier: 5F:67:33:82:B3:0E:81:74:66:D1:95:4C:80:4D:FB:ED:81:8C:5A:FC Certificate issuer: /CN=260cabab-b89d-4556-b9b1-e5a87b9523b9 Certificate serial: 010D0C9F4328584F4974A41D2B17B4E7B44E4200 Authority key identifier: 80:87:C3:C4:10:0E:F3:6D:64:9B:3F:AC:82:67:48:43:74:E5:EE:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/88dfce1e-b0ab-33cc-8a60-95ad0beb825d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12119 IP address blocks: 216.169.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/260cabab-b89d-4556-b9b1-e5a87b9523b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/260cabab-b89d-4556-b9b1-e5a87b9523b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:a4:1d:2b:17:b4:e7:b4:4e:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=260cabab-b89d-4556-b9b1-e5a87b9523b9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=36d28c4f-9dca-42e4-bfd2-c1e965f2e7b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:db:97:76:da:f8:eb:94:db:ce:e0:1b:df:3a: 59:46:2f:c7:8d:78:cf:c2:5a:90:1e:32:db:7c:73: dc:15:5b:ea:26:2b:48:6a:1d:90:91:b8:27:bf:a3: f8:00:4c:50:50:bf:8a:8a:ba:9e:f8:f4:70:2c:f9: 52:94:f0:68:de:df:36:94:04:b8:ac:02:a1:e3:30: 91:ac:5e:78:13:5e:9b:98:52:0b:fc:10:58:b2:c6: 50:7d:ce:1b:a7:d8:22:fb:d7:af:5f:d5:a4:e3:45: c2:ad:6b:d1:29:f3:fd:6d:37:bd:9a:0c:d3:28:ad: 92:96:04:84:a5:ef:e9:a7:fc:84:71:c2:ce:39:84: 8e:65:50:b6:87:a1:4b:53:7d:49:ea:b2:d2:46:f0: 14:c9:ee:da:da:20:b0:f6:4a:48:71:6d:4a:99:ed: 4b:03:8f:dd:10:2c:fb:3b:ff:b1:e6:0d:2d:2e:17: d5:32:7e:b9:60:96:f8:b8:20:37:e4:a2:a8:a3:98: ab:41:6d:73:0d:ca:30:08:07:25:b9:83:0b:89:ad: d3:84:cd:0c:60:71:e9:06:a2:e4:f8:d3:43:9e:b3: a6:d5:aa:dd:ef:07:97:b6:65:f9:ae:28:85:0d:7c: 25:f2:eb:0f:df:44:05:f6:41:09:75:c9:2e:9f:7b: c2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:67:33:82:B3:0E:81:74:66:D1:95:4C:80:4D:FB:ED:81:8C:5A:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/88dfce1e-b0ab-33cc-8a60-95ad0beb825d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/260cabab-b89d-4556-b9b1-e5a87b9523b9.crl X509v3 Authority Key Identifier: keyid:80:87:C3:C4:10:0E:F3:6D:64:9B:3F:AC:82:67:48:43:74:E5:EE:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9.cer sbgp-ipAddrBlock: critical IPv4: 216.169.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:12:85:33:d2:1f:c2:62:75:23:71:3f:e3:07:2e:b3:20:7b: 98:50:b9:3e:6f:8e:7d:b2:f9:87:49:f7:61:aa:22:c8:eb:2c: 97:44:c0:28:51:60:26:04:f1:3f:27:75:25:c4:22:54:bc:c0: f3:a5:d7:35:53:d6:25:4c:ab:cf:2b:77:f6:54:17:8e:3c:71: 1d:ca:72:0d:21:fb:27:18:1e:4f:d0:cb:49:88:39:c1:55:ee: 4e:64:39:02:c8:fd:61:af:f3:ee:82:28:18:a1:44:87:e8:b0: 14:08:42:f7:fe:38:30:06:5c:bb:74:56:76:a9:52:bd:d1:56: 9c:57:43:b3:72:1d:80:94:4a:a8:36:d1:52:ba:d4:c0:2b:f7: ed:3f:94:4a:ef:38:b8:61:12:7d:74:a4:a0:e5:c6:aa:1f:32: 8e:4d:fd:6b:ce:59:76:eb:f7:c9:1c:be:5d:bd:f9:36:b9:2d: 6b:a8:65:10:46:75:15:e8:0f:5e:4c:87:02:01:f4:f3:2a:2b: 96:36:a4:e5:c1:b8:ca:bc:a1:69:a4:97:d7:37:bb:95:94:52: 4a:e5:7b:8a:19:aa:d1:e9:8f:ec:1c:e1:fa:c0:a2:e9:ba:37: c2:b4:95:60:86:00:d5:ea:0a:df:83:75:a4:d5:0a:b2:be:0e: 90:c6:07:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdKQdKxe057ROQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjYwY2FiYWItYjg5ZC00NTU2LWI5YjEtZTVhODdiOTUy M2I5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzZkMjhjNGYtOWRjYS00MmU0LWJmZDItYzFlOTY1ZjJlN2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtuXdtr465TbzuAb3zpZRi/HjXjPwlqQHjLb fHPcFVvqJitIah2Qkbgnv6P4AExQUL+Kirqe+PRwLPlSlPBo3t82lAS4rAKh4zCR rF54E16bmFIL/BBYssZQfc4bp9gi+9evX9Wk40XCrWvRKfP9bTe9mgzTKK2SlgSE pe/pp/yEccLOOYSOZVC2h6FLU31J6rLSRvAUye7a2iCw9kpIcW1Kme1LA4/dECz7 O/+x5g0tLhfVMn65YJb4uCA35KKoo5irQW1zDcowCAcluYMLia3ThM0MYHHpBqLk +NNDnrOm1ard7weXtmX5riiFDXwl8usP30QF9kEJdckun3vC0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9nM4KzDoF0ZtGVTIBN++2BjFr8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yNjBj YWJhYi1iODlkLTQ1NTYtYjliMS1lNWE4N2I5NTIzYjkvODhkZmNlMWUtYjBhYi0z M2NjLThhNjAtOTVhZDBiZWI4MjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjYwY2FiYWItYjg5ZC00NTU2LWI5 YjEtZTVhODdiOTUyM2I5LzI2MGNhYmFiLWI4OWQtNDU1Ni1iOWIxLWU1YTg3Yjk1 MjNiOS5jcmwwHwYDVR0jBBgwFoAUgIfDxBAO821kmz+sgmdIQ3Tl7u4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yNjBjYWJhYi1iODlkLTQ1NTYtYjliMS1lNWE4 N2I5NTIzYjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2KkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMShTPSH8JidSNxP+MHLrMge5hQuT5vjn2y+YdJ92GqIsjrLJdEwChR YCYE8T8ndSXEIlS8wPOl1zVT1iVMq88rd/ZUF448cR3Kcg0h+ycYHk/Qy0mIOcFV 7k5kOQLI/WGv8+6CKBihRIfosBQIQvf+ODAGXLt0VnapUr3RVpxXQ7NyHYCUSqg2 0VK61MAr9+0/lErvOLhhEn10pKDlxqofMo5N/WvOWXbr98kcvl29+Ta5LWuoZRBG dRXoD15MhwIB9PMqK5Y2pOXBuMq8oWmkl9c3u5WUUkrle4oZqtHpj+wc4frAoum6 N8K0lWCGANXqCt+DdaTVCrK+DpDGB8Q= -----END CERTIFICATE-----Generated at Fri Sep 25 15:36:21 2026 by rpki-client