$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/42ea5e30-2a4b-3b08-b897-777e4100a774.roa File: 42ea5e30-2a4b-3b08-b897-777e4100a774.roa (raw, json) Hash identifier: Ym37GJHYCm3O89vjMNKCFYJm1+rNNbgCGMtRs1yqGKo= Subject key identifier: 9C:7D:6A:6C:1C:16:ED:35:57:26:37:4E:8E:89:56:1C:AC:06:60:3C Certificate issuer: /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Certificate serial: 010D0C9F4328584F024221C863686A077B04BA80 Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/42ea5e30-2a4b-3b08-b897-777e4100a774.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 55126 IP address blocks: 198.124.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:21:c8:63:68:6a:07:7b:04:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=d5339ba8-a25d-4c91-bf31-9a8cc0c6d978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:66:b7:97:d6:1c:09:51:56:36:d7:0d:a1:37: a6:f5:42:67:ad:5c:48:28:69:59:81:91:d7:cf:a8: 18:56:bd:2c:bd:1a:71:00:f9:25:69:16:db:8b:2a: da:9a:ec:2d:84:1a:b2:04:3d:ac:2c:9a:82:8c:2f: f6:2f:c5:d3:ee:43:04:6c:c0:31:14:de:41:5e:38: 34:e0:c0:ee:97:c8:b2:8b:e9:71:d1:f9:cd:ec:65: c3:fb:18:92:b7:fa:34:29:73:4b:03:09:20:7e:49: ac:f2:31:31:bd:5d:88:a8:a7:a1:d0:f8:5f:dd:b5: 2d:2b:dd:25:bd:c7:27:56:66:29:ac:ba:0a:50:35: 48:6c:45:d0:ac:8b:b7:bf:ae:2a:d7:ca:1f:1c:ef: 31:9e:7f:ba:cb:ee:d1:11:9c:4f:77:72:f1:72:ed: e4:f7:a4:36:99:e4:db:63:e6:f6:60:a5:db:e1:e8: 33:51:55:ac:ab:4c:2f:70:6d:39:73:67:32:63:d7: 47:7d:64:23:70:08:5b:c4:ec:7a:36:18:ab:2d:84: 8b:bc:ae:80:cc:26:77:24:c0:49:67:a2:d4:d9:f2: 9a:37:ea:e8:4c:3c:7d:d7:82:12:90:03:a9:9b:29: 66:84:1f:f7:f1:ba:ca:76:7c:82:b2:31:b9:f9:c7: eb:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:7D:6A:6C:1C:16:ED:35:57:26:37:4E:8E:89:56:1C:AC:06:60:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/42ea5e30-2a4b-3b08-b897-777e4100a774.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl X509v3 Authority Key Identifier: keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer sbgp-ipAddrBlock: critical IPv4: 198.124.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:2c:73:37:ed:06:4d:ba:ea:04:23:84:20:12:df:a3:81:c8: 1b:88:de:ff:d8:8b:26:11:77:7a:cb:a4:13:6f:8c:e3:69:47: 0a:45:d1:0d:b6:36:e6:27:67:da:28:6a:4c:27:b2:a0:14:a0: fc:26:e5:db:71:d2:f5:4a:02:56:17:b4:8c:3a:e7:91:db:5b: 43:1f:96:4f:f7:94:e9:cf:99:ce:e0:cc:20:6b:1e:25:d5:2b: 55:48:ab:0a:b8:7c:56:c7:2f:da:c7:4f:26:c1:0f:f5:80:01: b6:24:a5:de:ea:27:b6:6c:75:e3:4e:c5:0e:39:d3:61:9d:b9: 18:0b:d3:5a:25:9b:ce:5d:95:bd:5c:4c:4a:7d:31:29:66:63: d2:49:5f:c8:01:82:a2:10:68:4a:5d:bc:99:08:75:9c:55:9a: b5:7d:2d:07:79:7e:7e:66:17:48:76:53:ef:9b:38:4c:5e:e7: f2:8d:cc:f6:f6:7a:f3:d3:bd:f0:ba:3f:d6:9e:e0:b6:a3:d4: 23:52:93:08:04:0f:af:60:62:9e:b5:39:34:d3:c8:28:df:38: 53:eb:31:46:ba:71:f1:16:2b:94:97:4e:c8:72:4b:97:0d:df: 55:2f:1d:10:2a:6d:84:4a:1c:72:24:62:5f:e4:b6:3b:86:48: bf:c8:73:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQiHIY2hqB3sEuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIxNmVmOGEtZjhhYS00YTE0LThlMzAtYjAyNjMzMTAz ZmM1MB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk ZDUzMzliYTgtYTI1ZC00YzkxLWJmMzEtOWE4Y2MwYzZkOTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2a3l9YcCVFWNtcNoTem9UJnrVxIKGlZgZHX z6gYVr0svRpxAPklaRbbiyramuwthBqyBD2sLJqCjC/2L8XT7kMEbMAxFN5BXjg0 4MDul8iyi+lx0fnN7GXD+xiSt/o0KXNLAwkgfkms8jExvV2IqKeh0Phf3bUtK90l vccnVmYprLoKUDVIbEXQrIu3v64q18ofHO8xnn+6y+7REZxPd3Lxcu3k96Q2meTb Y+b2YKXb4egzUVWsq0wvcG05c2cyY9dHfWQjcAhbxOx6NhirLYSLvK6AzCZ3JMBJ Z6LU2fKaN+roTDx914ISkAOpmylmhB/38brKdnyCsjG5+cfrxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJx9amwcFu01VyY3To6JVhysBmA8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2 ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2MzMxMDNmYzUvNDJlYTVlMzAtMmE0Yi0z YjA4LWI4OTctNzc3ZTQxMDBhNzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIxNmVmOGEtZjhhYS00YTE0LThl MzAtYjAyNjMzMTAzZmM1L2ViMTZlZjhhLWY4YWEtNGExNC04ZTMwLWIwMjYzMzEw M2ZjNS5jcmwwHwYDVR0jBBgwFoAUQM4usHTYc1PWS8fzfTpsSmRGxSQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2 MzMxMDNmYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxnxYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUsczftBk266gQjhCAS36OByBuI3v/YiyYRd3rLpBNvjONpRwpF0Q22 NuYnZ9ooakwnsqAUoPwm5dtx0vVKAlYXtIw655HbW0Mflk/3lOnPmc7gzCBrHiXV K1VIqwq4fFbHL9rHTybBD/WAAbYkpd7qJ7ZsdeNOxQ4502GduRgL01olm85dlb1c TEp9MSlmY9JJX8gBgqIQaEpdvJkIdZxVmrV9LQd5fn5mF0h2U++bOExe5/KNzPb2 evPTvfC6P9ae4Laj1CNSkwgED69gYp61OTTTyCjfOFPrMUa6cfEWK5SXTshyS5cN 31UvHRAqbYRKHHIkYl/ktjuGSL/Ic1I= -----END CERTIFICATE-----Generated at Sun Sep 20 10:23:39 2026 by rpki-client