$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88cca465-78be-4daa-a3c3-ad2fe957745b/822ce805-7e21-3279-80a9-f3b442084477.roa File: 822ce805-7e21-3279-80a9-f3b442084477.roa (raw, json) Hash identifier: CoFWCFr2ImNlaJrRG9sac5tbTlKmYUUk8j7SmMbLdko= Subject key identifier: 67:2D:68:69:61:BD:66:BD:91:2D:B2:9F:35:62:2B:96:FA:E0:80:0E Certificate issuer: /CN=88cca465-78be-4daa-a3c3-ad2fe957745b Certificate serial: 010D0C9F4328584F698D979508742DE16C7E1D00 Authority key identifier: 7A:A4:BB:9E:94:E5:52:E3:E3:A3:F8:E8:AD:AC:8E:7B:38:49:E0:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88cca465-78be-4daa-a3c3-ad2fe957745b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88cca465-78be-4daa-a3c3-ad2fe957745b/822ce805-7e21-3279-80a9-f3b442084477.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 21958 IP address blocks: 208.64.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88cca465-78be-4daa-a3c3-ad2fe957745b/88cca465-78be-4daa-a3c3-ad2fe957745b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88cca465-78be-4daa-a3c3-ad2fe957745b/88cca465-78be-4daa-a3c3-ad2fe957745b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88cca465-78be-4daa-a3c3-ad2fe957745b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:97:95:08:74:2d:e1:6c:7e:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88cca465-78be-4daa-a3c3-ad2fe957745b Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=0fb82bfe-f220-415b-ae8e-99a5fd444740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:42:61:07:0a:f5:ab:17:9a:4e:a9:41:07:08: 17:2d:ed:43:d9:b5:3d:28:f2:1b:e2:71:75:44:83: 6e:13:94:70:72:2e:be:55:f1:42:83:6c:35:f7:e2: ed:cf:67:b0:14:10:71:cb:41:e9:61:a0:e5:6f:d4: e9:ed:86:e5:73:31:02:c1:52:69:dd:b2:fe:4e:d5: 0b:f8:f8:4d:80:bc:7a:a1:9d:c7:2c:e3:f2:de:55: 62:95:68:56:28:e8:18:ba:9f:26:12:ab:a8:fd:6e: da:b1:a4:a5:25:33:14:41:59:85:20:a1:99:13:b3: 90:b7:19:36:c5:7d:75:97:61:ff:10:75:22:6e:8e: 5f:e7:28:37:56:b5:1d:38:13:84:dc:94:c8:42:e5: b4:5c:ff:fb:98:5d:f0:32:4b:26:eb:69:2d:80:5c: 08:03:c1:25:7c:71:19:bf:86:df:13:16:fb:df:f5: 99:bf:3c:7a:03:9c:8b:9e:fa:c4:c0:21:97:b9:15: eb:1b:2f:92:b1:b2:f5:01:c3:98:9f:3b:ce:42:60: c9:0e:6e:b0:89:40:2a:e8:9b:b8:05:66:3e:0b:03: f5:a8:1d:15:db:2a:15:4c:30:3f:b0:af:03:ce:1b: 6a:8b:9d:1b:ee:55:df:a5:97:69:ad:54:56:8e:86: 41:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2D:68:69:61:BD:66:BD:91:2D:B2:9F:35:62:2B:96:FA:E0:80:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88cca465-78be-4daa-a3c3-ad2fe957745b/822ce805-7e21-3279-80a9-f3b442084477.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88cca465-78be-4daa-a3c3-ad2fe957745b/88cca465-78be-4daa-a3c3-ad2fe957745b.crl X509v3 Authority Key Identifier: keyid:7A:A4:BB:9E:94:E5:52:E3:E3:A3:F8:E8:AD:AC:8E:7B:38:49:E0:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88cca465-78be-4daa-a3c3-ad2fe957745b.cer sbgp-ipAddrBlock: critical IPv4: 208.64.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:d0:43:7f:ae:8b:2c:e9:8a:6e:9a:4b:2a:98:ab:a4:17:6e: 86:1c:57:f7:f0:f0:71:5a:64:ec:f4:92:8f:77:fb:bf:d2:5f: 4f:5f:96:ba:01:b6:44:16:70:8b:a9:4b:e2:60:05:3e:56:e8: 3e:10:16:59:4b:32:74:17:3a:f9:80:1f:ae:b7:b5:bf:6d:4b: dd:c9:24:ff:fe:77:fb:4f:52:6d:40:7c:af:2f:72:ec:6d:c9: d7:28:22:23:47:e5:e6:e5:0c:5b:02:99:57:57:89:53:c6:9d: a6:e4:5f:85:dd:1f:dd:5c:75:d1:05:1c:fa:51:7b:f3:db:1f: a7:e0:25:bd:e8:28:07:34:05:57:12:9e:a6:1e:17:52:7e:72: 6c:05:85:97:35:e8:89:30:b9:a4:5a:e4:96:31:d8:92:56:d3: 27:fe:fd:ff:15:12:04:30:c9:9d:3b:77:7f:06:a9:4c:e5:e8: a0:0e:3f:f5:9d:ff:b6:d7:b0:71:c7:d2:33:0a:09:32:de:71: c1:61:44:f0:d3:eb:e6:26:c2:02:97:49:ec:00:62:df:47:3a: 48:a0:0b:12:ec:93:9f:3e:33:07:08:39:ef:fd:bf:8f:f6:e3: 2c:55:a6:ce:59:8d:81:3f:80:21:58:e7:14:f2:62:52:b7:7e: cd:49:cd:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjZeVCHQt4Wx+HQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhjY2E0NjUtNzhiZS00ZGFhLWEzYzMtYWQyZmU5NTc3 NDViMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk MGZiODJiZmUtZjIyMC00MTViLWFlOGUtOTlhNWZkNDQ0NzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0JhBwr1qxeaTqlBBwgXLe1D2bU9KPIb4nF1 RINuE5Rwci6+VfFCg2w19+Ltz2ewFBBxy0HpYaDlb9Tp7YblczECwVJp3bL+TtUL +PhNgLx6oZ3HLOPy3lVilWhWKOgYup8mEquo/W7asaSlJTMUQVmFIKGZE7OQtxk2 xX11l2H/EHUibo5f5yg3VrUdOBOE3JTIQuW0XP/7mF3wMksm62ktgFwIA8ElfHEZ v4bfExb73/WZvzx6A5yLnvrEwCGXuRXrGy+SsbL1AcOYnzvOQmDJDm6wiUAq6Ju4 BWY+CwP1qB0V2yoVTDA/sK8Dzhtqi50b7lXfpZdprVRWjoZBTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGctaGlhvWa9kS2ynzViK5b64IAOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84OGNj YTQ2NS03OGJlLTRkYWEtYTNjMy1hZDJmZTk1Nzc0NWIvODIyY2U4MDUtN2UyMS0z Mjc5LTgwYTktZjNiNDQyMDg0NDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvODhjY2E0NjUtNzhiZS00ZGFhLWEz YzMtYWQyZmU5NTc3NDViLzg4Y2NhNDY1LTc4YmUtNGRhYS1hM2MzLWFkMmZlOTU3 NzQ1Yi5jcmwwHwYDVR0jBBgwFoAUeqS7npTlUuPjo/jorayOezhJ4HswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS84OGNjYTQ2NS03OGJlLTRkYWEtYTNjMy1hZDJm ZTk1Nzc0NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0EAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjQQ3+uiyzpim6aSyqYq6QXboYcV/fw8HFaZOz0ko93+7/SX09flroB tkQWcIupS+JgBT5W6D4QFllLMnQXOvmAH663tb9tS93JJP/+d/tPUm1AfK8vcuxt ydcoIiNH5eblDFsCmVdXiVPGnabkX4XdH91cddEFHPpRe/PbH6fgJb3oKAc0BVcS nqYeF1J+cmwFhZc16IkwuaRa5JYx2JJW0yf+/f8VEgQwyZ07d38GqUzl6KAOP/Wd /7bXsHHH0jMKCTLeccFhRPDT6+YmwgKXSewAYt9HOkigCxLsk58+MwcIOe/9v4/2 4yxVps5ZjYE/gCFY5xTyYlK3fs1JzQc= -----END CERTIFICATE-----Generated at Tue Oct 13 16:22:53 2026 by rpki-client