$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e6db562-79f7-40ba-9870-3eaf80e519fd/a88b6ded-b271-3d3c-bd9e-fc6f82b7dff3.roa File: a88b6ded-b271-3d3c-bd9e-fc6f82b7dff3.roa (raw, json) Hash identifier: beL7rkRu1HL9pv/XlN+UO42gIQKrMUjQFuA3lEDVw/8= Subject key identifier: 49:68:FF:DD:AA:8B:A7:3E:A2:F8:63:CB:B3:18:7F:D0:AF:81:51:80 Certificate issuer: /CN=6e6db562-79f7-40ba-9870-3eaf80e519fd Certificate serial: 010D0C9F4328584F497652563A345DE165134D00 Authority key identifier: 8D:38:A8:E4:7F:F7:84:11:E7:4D:A6:EA:F8:9B:EF:1B:C4:27:D9:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e6db562-79f7-40ba-9870-3eaf80e519fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e6db562-79f7-40ba-9870-3eaf80e519fd/a88b6ded-b271-3d3c-bd9e-fc6f82b7dff3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40403 IP address blocks: 199.89.230.0/24 maxlen: 24 2602:fab9::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e6db562-79f7-40ba-9870-3eaf80e519fd/6e6db562-79f7-40ba-9870-3eaf80e519fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e6db562-79f7-40ba-9870-3eaf80e519fd/6e6db562-79f7-40ba-9870-3eaf80e519fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e6db562-79f7-40ba-9870-3eaf80e519fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:52:56:3a:34:5d:e1:65:13:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e6db562-79f7-40ba-9870-3eaf80e519fd Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=75d2b349-5d3e-486a-8bc6-d8584a2a6a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:93:8b:8f:98:30:ed:bc:f4:ef:5f:8c:dc:2e: b0:d9:59:fc:61:c1:9e:09:46:8d:93:96:55:81:57: 07:23:3b:fa:1d:94:6f:56:da:c8:93:79:3c:f1:23: b6:69:5b:65:76:b0:38:21:0c:28:c2:96:96:b8:9a: bd:80:65:29:af:8a:9f:96:43:72:8d:68:ba:74:d7: 55:76:31:58:e3:63:e2:bc:d9:80:db:71:34:ea:a8: 8c:15:2f:63:83:f4:5e:d5:df:fe:2f:4a:ed:03:68: b7:a7:3b:a4:a2:41:2e:e2:2e:dc:74:f1:7b:6c:35: 95:f6:67:b0:e7:f9:f6:32:7d:d1:cb:3a:25:e3:a9: 3f:31:87:e8:20:ed:29:0e:91:92:5e:43:e2:72:72: f9:09:07:3b:d5:0c:06:30:04:d0:7c:93:94:1b:33: 8c:a8:35:b1:37:53:57:ff:08:55:87:d5:f7:77:8d: 90:da:0c:00:6f:9c:79:c7:8e:bc:b0:a2:dc:71:c4: 9a:d6:26:76:95:0a:bf:be:aa:d9:ad:2f:4f:b4:b9: a4:57:af:d6:34:79:fa:15:d0:4e:b1:41:2f:dd:81: 61:6c:21:22:56:f4:40:01:a3:72:da:9a:d0:a3:01: 85:40:f1:20:92:53:d2:10:b9:f6:01:77:4d:25:f3: db:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:68:FF:DD:AA:8B:A7:3E:A2:F8:63:CB:B3:18:7F:D0:AF:81:51:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e6db562-79f7-40ba-9870-3eaf80e519fd/a88b6ded-b271-3d3c-bd9e-fc6f82b7dff3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e6db562-79f7-40ba-9870-3eaf80e519fd/6e6db562-79f7-40ba-9870-3eaf80e519fd.crl X509v3 Authority Key Identifier: keyid:8D:38:A8:E4:7F:F7:84:11:E7:4D:A6:EA:F8:9B:EF:1B:C4:27:D9:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e6db562-79f7-40ba-9870-3eaf80e519fd.cer sbgp-ipAddrBlock: critical IPv4: 199.89.230.0/24 IPv6: 2602:fab9::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:6c:52:a4:67:e7:df:dd:0f:e5:b0:c8:af:57:d1:ec:ce:0f: a0:5f:bf:98:23:c4:bd:49:20:ff:e8:0c:f8:cd:ab:66:f1:59: 09:2c:3e:8b:5b:ff:7b:0f:6c:60:8f:29:11:f1:03:3d:01:70: d6:fb:d8:13:ee:f2:c2:12:25:32:86:4b:ce:3a:3c:53:24:45: d4:1f:e8:93:8d:17:44:64:a1:fe:72:1a:28:ad:b0:97:9e:4f: 7c:35:a4:87:c9:18:07:59:14:b3:0c:3b:ec:c8:27:2c:37:43: 24:26:75:7a:21:00:30:e5:e8:42:c0:ce:b8:cc:52:1c:84:f5: bc:ef:1b:f5:53:e9:60:d7:f2:fb:ca:c5:7c:4f:b8:99:2d:1d: 55:a9:55:5b:2f:a7:e0:77:c5:6d:f6:b7:48:f7:06:54:f8:9d: d0:f2:42:53:2b:49:0a:b9:43:51:02:54:0d:cc:9b:fa:1f:b2: a1:e1:8c:8f:ca:51:8d:b8:8c:83:fa:05:1b:76:8f:b1:b6:2c: 5e:40:21:6b:e7:75:6f:9c:22:87:3e:36:c2:9c:81:e1:73:cc: 7c:06:24:8a:ca:2c:86:4b:5a:68:61:6f:f5:6f:ad:0b:62:f2: 1f:88:23:b0:84:87:82:a5:30:11:5a:23:34:68:69:49:d0:9a: 29:95:c8:7d -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9JdlJWOjRd4WUTTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmU2ZGI1NjItNzlmNy00MGJhLTk4NzAtM2VhZjgwZTUx OWZkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzVkMmIzNDktNWQzZS00ODZhLThiYzYtZDg1ODRhMmE2YTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpOLj5gw7bz071+M3C6w2Vn8YcGeCUaNk5ZV gVcHIzv6HZRvVtrIk3k88SO2aVtldrA4IQwowpaWuJq9gGUpr4qflkNyjWi6dNdV djFY42PivNmA23E06qiMFS9jg/Re1d/+L0rtA2i3pzukokEu4i7cdPF7bDWV9mew 5/n2Mn3Ryzol46k/MYfoIO0pDpGSXkPicnL5CQc71QwGMATQfJOUGzOMqDWxN1NX /whVh9X3d42Q2gwAb5x5x468sKLcccSa1iZ2lQq/vqrZrS9PtLmkV6/WNHn6FdBO sUEv3YFhbCEiVvRAAaNy2prQowGFQPEgklPSELn2AXdNJfPbAwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFElo/92qi6c+ovhjy7MYf9CvgVGAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82ZTZk YjU2Mi03OWY3LTQwYmEtOTg3MC0zZWFmODBlNTE5ZmQvYTg4YjZkZWQtYjI3MS0z ZDNjLWJkOWUtZmM2ZjgyYjdkZmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNmU2ZGI1NjItNzlmNy00MGJhLTk4 NzAtM2VhZjgwZTUxOWZkLzZlNmRiNTYyLTc5ZjctNDBiYS05ODcwLTNlYWY4MGU1 MTlmZC5jcmwwHwYDVR0jBBgwFoAUjTio5H/3hBHnTabq+JvvG8Qn2aUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82ZTZkYjU2Mi03OWY3LTQwYmEtOTg3MC0zZWFm ODBlNTE5ZmQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAx1nmMA4E AgACMAgDBgAmAvq5ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAcbFKkZ+ff3Q/lsMivV9Hszg+gX7+YI8S9 SSD/6Az4zatm8VkJLD6LW/97D2xgjykR8QM9AXDW+9gT7vLCEiUyhkvOOjxTJEXU H+iTjRdEZKH+choorbCXnk98NaSHyRgHWRSzDDvsyCcsN0MkJnV6IQAw5ehCwM64 zFIchPW87xv1U+lg1/L7ysV8T7iZLR1VqVVbL6fgd8Vt9rdI9wZU+J3Q8kJTK0kK uUNRAlQNzJv6H7Kh4YyPylGNuIyD+gUbdo+xtixeQCFr53VvnCKHPjbCnIHhc8x8 BiSKyiyGS1poYW/1b60LYvIfiCOwhIeCpTARWiM0aGlJ0Joplch9 -----END CERTIFICATE-----Generated at Sat Oct 10 16:36:19 2026 by rpki-client