$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/b33f9824-1d22-3c11-b98f-82918021c09b.roa File: b33f9824-1d22-3c11-b98f-82918021c09b.roa (raw, json) Hash identifier: NS58jYF5mkbOGg9ROsiLsZTBEXgWDa1skYeq65D9qoo= Subject key identifier: 86:D2:0F:8C:B2:CB:E7:03:72:A9:E5:92:59:2A:F0:5E:76:EF:16:9F Certificate issuer: /CN=28635d6a-8623-4918-823a-dc1ad56ec1bd Certificate serial: 010D0C9F4328584F6292D693FFBFA30F28255100 Authority key identifier: ED:8F:C6:46:23:EE:FA:95:EA:3C:2C:29:2D:0C:C2:D0:6D:1E:66:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/b33f9824-1d22-3c11-b98f-82918021c09b.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 53429 IP address blocks: 199.68.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/28635d6a-8623-4918-823a-dc1ad56ec1bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/28635d6a-8623-4918-823a-dc1ad56ec1bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:d6:93:ff:bf:a3:0f:28:25:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28635d6a-8623-4918-823a-dc1ad56ec1bd Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=f6a13a34-0251-436b-9065-5df3dbbc8c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0d:54:e0:0c:4d:62:e5:5e:c9:cc:00:d0:97: 47:19:cb:5a:65:4c:a4:d3:7f:06:5d:f5:f7:7e:a9: b8:cd:21:97:fd:59:85:73:ea:d0:1f:bd:f8:ed:de: c8:2d:bf:18:0a:aa:5c:02:e6:fc:b4:7c:4f:b1:f0: f9:9c:d7:e3:0f:87:9d:dd:d8:53:3a:3b:61:1c:41: 37:92:a4:b2:1e:51:80:14:1c:1c:f9:11:69:fd:13: 6e:cf:cb:f7:df:67:21:30:f0:79:d0:bf:60:36:40: 12:bf:1b:1d:bd:85:03:5f:c3:fe:58:c9:0f:cb:6c: 72:a3:6a:6c:9d:b9:78:43:1e:34:60:ed:60:ce:96: d2:1a:e3:28:0b:b6:51:73:72:f6:76:c5:8d:21:6e: c5:a9:f1:3d:3c:af:fd:9c:65:de:ac:6f:f3:0b:94: d6:b1:38:0f:47:5c:91:9e:f1:4a:d7:b6:96:0e:58: e5:30:01:c5:b9:8e:eb:f1:19:9c:9e:f2:83:f5:a5: de:e9:89:46:9e:06:47:b0:66:53:78:a7:91:6d:36: 5c:69:4a:fe:29:24:36:29:e4:24:2d:fd:f5:34:b7: 45:6e:d4:4d:17:82:1a:a3:08:00:8d:1b:5d:ef:ce: 45:78:ab:3c:a4:82:36:73:d4:b6:91:6a:1b:fe:67: 64:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D2:0F:8C:B2:CB:E7:03:72:A9:E5:92:59:2A:F0:5E:76:EF:16:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/b33f9824-1d22-3c11-b98f-82918021c09b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/28635d6a-8623-4918-823a-dc1ad56ec1bd.crl X509v3 Authority Key Identifier: keyid:ED:8F:C6:46:23:EE:FA:95:EA:3C:2C:29:2D:0C:C2:D0:6D:1E:66:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd.cer sbgp-ipAddrBlock: critical IPv4: 199.68.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:b9:7a:4b:fd:d5:fa:ef:8e:c1:ab:2b:4e:4b:e9:e1:50:af: 88:5a:07:98:6a:b8:06:d5:2e:22:39:04:d2:1c:14:e8:0c:03: e9:ca:1e:05:93:45:a5:de:03:d4:20:74:bc:c4:d4:fe:f3:21: 32:89:64:30:23:5e:15:fa:9f:58:79:75:f0:93:df:95:41:30: 51:3a:97:73:ff:ed:21:0b:c6:55:c4:f1:4c:50:ad:9d:8e:81: f4:36:1f:47:07:01:a5:ba:78:ba:bd:20:e8:bb:1f:47:10:13: 85:74:d6:99:77:91:bf:0f:97:39:21:af:d0:68:e6:8a:e9:b9: 3b:c4:1a:3c:7b:9c:25:06:e0:fc:8c:a3:a4:72:e9:f9:2c:97: a8:35:14:15:03:f4:bf:0d:6a:1c:47:d9:64:b3:05:07:4e:28: b3:e1:2e:a7:d1:d9:72:b6:e1:5d:db:34:64:8f:5b:73:67:f2: 6f:7f:b3:99:eb:98:6a:8f:90:9b:53:7c:18:09:aa:ea:a7:2d: 86:60:6f:15:9e:d6:fb:fe:b9:79:68:fe:63:dd:79:b8:b3:47: 2a:2d:5a:ef:87:5c:fb:c1:d3:cd:de:6d:b3:3c:8b:b7:0f:5e: 96:db:14:d5:f7:37:5f:21:0d:84:2c:50:be:e7:a3:5d:38:c9: 59:64:f3:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iktaT/7+jDyglUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2MzVkNmEtODYyMy00OTE4LTgyM2EtZGMxYWQ1NmVj MWJkMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZjZhMTNhMzQtMDI1MS00MzZiLTkwNjUtNWRmM2RiYmM4YzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiA1U4AxNYuVeycwA0JdHGctaZUyk038GXfX3 fqm4zSGX/VmFc+rQH7347d7ILb8YCqpcAub8tHxPsfD5nNfjD4ed3dhTOjthHEE3 kqSyHlGAFBwc+RFp/RNuz8v332chMPB50L9gNkASvxsdvYUDX8P+WMkPy2xyo2ps nbl4Qx40YO1gzpbSGuMoC7ZRc3L2dsWNIW7FqfE9PK/9nGXerG/zC5TWsTgPR1yR nvFK17aWDljlMAHFuY7r8RmcnvKD9aXe6YlGngZHsGZTeKeRbTZcaUr+KSQ2KeQk Lf31NLdFbtRNF4IaowgAjRtd785FeKs8pII2c9S2kWob/mdkgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbSD4yyy+cDcqnlklkq8F527xafMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yODYz NWQ2YS04NjIzLTQ5MTgtODIzYS1kYzFhZDU2ZWMxYmQvYjMzZjk4MjQtMWQyMi0z YzExLWI5OGYtODI5MTgwMjFjMDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjg2MzVkNmEtODYyMy00OTE4LTgy M2EtZGMxYWQ1NmVjMWJkLzI4NjM1ZDZhLTg2MjMtNDkxOC04MjNhLWRjMWFkNTZl YzFiZC5jcmwwHwYDVR0jBBgwFoAU7Y/GRiPu+pXqPCwpLQzC0G0eZtIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yODYzNWQ2YS04NjIzLTQ5MTgtODIzYS1kYzFh ZDU2ZWMxYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx0SoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG25ekv91frvjsGrK05L6eFQr4haB5hquAbVLiI5BNIcFOgMA+nKHgWT RaXeA9QgdLzE1P7zITKJZDAjXhX6n1h5dfCT35VBMFE6l3P/7SELxlXE8UxQrZ2O gfQ2H0cHAaW6eLq9IOi7H0cQE4V01pl3kb8Plzkhr9Bo5orpuTvEGjx7nCUG4PyM o6Ry6fksl6g1FBUD9L8NahxH2WSzBQdOKLPhLqfR2XK24V3bNGSPW3Nn8m9/s5nr mGqPkJtTfBgJquqnLYZgbxWe1vv+uXlo/mPdebizRyotWu+HXPvB083ebbM8i7cP XpbbFNX3N18hDYQsUL7no104yVlk86g= -----END CERTIFICATE-----Generated at Sun Oct 11 08:58:37 2026 by rpki-client