$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7/1240df73-c51c-3ee8-876b-f6ef5d6e3e60.roa File: 1240df73-c51c-3ee8-876b-f6ef5d6e3e60.roa (raw, json) Hash identifier: 2m378nzgXBlZbVulxYYCU4ozTBNuTE1IY+FU39G58nU= Subject key identifier: 42:AA:A9:94:59:53:34:9D:22:EC:69:C4:27:01:B3:2E:FE:5C:71:7E Certificate issuer: /CN=be0c0ba3-5f5d-4f25-9828-23e3dd604ee7 Certificate serial: 010D0C9F4328584F49768578E79486EA9678FC80 Authority key identifier: A0:F0:66:F4:C5:4F:A7:E9:1B:46:F2:18:3D:DC:96:F7:F7:D3:2B:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7/1240df73-c51c-3ee8-876b-f6ef5d6e3e60.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 399194 IP address blocks: 172.81.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:85:78:e7:94:86:ea:96:78:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0c0ba3-5f5d-4f25-9828-23e3dd604ee7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=78460ad0-eb7c-41c6-b5ba-db99ebdbdb97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:77:f8:b6:1f:31:93:06:58:b0:b7:66:14:74: f0:47:c0:61:a2:f6:8c:9d:5b:bb:7b:dd:bf:13:54: 1c:f2:d7:d2:02:bc:b1:86:75:57:c3:d6:0b:c5:26: 8b:fe:db:d3:62:78:9d:f8:96:8c:b6:9f:5d:dc:b6: b8:2a:fb:7f:c5:cb:56:ee:6f:d1:6c:fd:dc:e1:e9: 37:23:45:c5:12:6b:16:10:98:88:a2:d4:15:05:7f: 14:e2:6e:29:2a:a5:96:3d:22:72:9a:4f:0e:77:d9: 0c:8a:ee:c3:c9:77:d5:50:d1:e4:05:34:44:9f:ae: ae:7a:13:63:f5:0f:eb:21:ac:da:7f:df:ee:fd:fd: c4:b7:29:a3:0c:7b:7e:b0:c4:a1:77:2d:fb:e0:68: 6d:6d:11:87:38:e9:8d:ba:7a:25:1e:8b:c8:eb:fa: 7d:0b:fc:4f:fe:50:1c:17:ab:e5:fe:9b:89:15:0c: 5d:d7:70:63:7d:46:77:5c:90:e6:a2:d8:3c:83:55: 11:5f:d9:d6:20:3d:d0:10:20:84:80:23:06:d4:59: d2:b5:ea:b1:1b:5f:28:92:65:12:e7:cb:d7:96:b9: 57:d6:ec:2f:52:f4:c2:ab:0d:ba:6c:4d:d6:c9:b2: 7a:d3:d4:ca:48:fe:08:93:6a:cf:35:80:60:0c:38: 55:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AA:A9:94:59:53:34:9D:22:EC:69:C4:27:01:B3:2E:FE:5C:71:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7/1240df73-c51c-3ee8-876b-f6ef5d6e3e60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7.crl X509v3 Authority Key Identifier: keyid:A0:F0:66:F4:C5:4F:A7:E9:1B:46:F2:18:3D:DC:96:F7:F7:D3:2B:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7.cer sbgp-ipAddrBlock: critical IPv4: 172.81.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:5f:79:85:84:08:81:74:9a:e9:67:19:8f:89:e0:7a:1c:6c: 2a:99:93:97:fa:84:d9:79:ef:90:1a:d4:e6:79:fe:c5:ea:82: e3:ea:b0:90:06:2c:76:28:ea:55:b2:4f:b8:4b:4a:b7:c3:3b: ca:b5:c7:d5:d5:ca:ee:3f:5c:34:23:21:2d:89:d1:9d:be:d7: e3:41:e0:7c:d7:d8:59:97:36:e9:00:22:0e:0c:02:56:46:fe: f9:1e:bb:21:e4:2b:3c:d1:eb:31:da:01:a6:e1:fd:a4:d8:75: 66:b3:fb:1b:c2:31:2b:47:85:64:0e:60:14:90:9a:be:52:56: 0e:82:1b:24:9e:ff:ac:28:c8:f8:34:65:33:f0:3f:c1:f5:07: b4:57:b7:1d:62:95:1a:16:c8:a2:5c:cc:ae:b0:f6:a5:4f:1e: b5:20:6f:79:3b:11:84:47:22:75:16:75:62:72:e9:b4:34:ea: 85:37:8e:4c:39:97:e7:b1:d9:82:0d:6c:a3:b3:ac:f1:f0:64: a5:92:9b:3a:42:66:7d:51:96:9b:93:4d:7c:fd:a3:61:40:5a: 0e:1f:c4:37:a0:0e:5e:26:31:f4:80:d2:75:ae:4e:56:a2:24: 83:90:7f:fe:ca:de:df:a5:df:81:95:35:ed:81:54:62:9e:da: dd:6e:e2:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdoV455SG6pZ4/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmUwYzBiYTMtNWY1ZC00ZjI1LTk4MjgtMjNlM2RkNjA0 ZWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Nzg0NjBhZDAtZWI3Yy00MWM2LWI1YmEtZGI5OWViZGJkYjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3f4th8xkwZYsLdmFHTwR8BhovaMnVu7e92/ E1Qc8tfSAryxhnVXw9YLxSaL/tvTYnid+JaMtp9d3La4Kvt/xctW7m/RbP3c4ek3 I0XFEmsWEJiIotQVBX8U4m4pKqWWPSJymk8Od9kMiu7DyXfVUNHkBTREn66uehNj 9Q/rIazaf9/u/f3EtymjDHt+sMShdy374GhtbRGHOOmNunolHovI6/p9C/xP/lAc F6vl/puJFQxd13BjfUZ3XJDmotg8g1URX9nWID3QECCEgCMG1FnSteqxG18okmUS 58vXlrlX1uwvUvTCqw26bE3WybJ609TKSP4Ik2rPNYBgDDhVFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKqqZRZUzSdIuxpxCcBsy7+XHF+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZTBj MGJhMy01ZjVkLTRmMjUtOTgyOC0yM2UzZGQ2MDRlZTcvMTI0MGRmNzMtYzUxYy0z ZWU4LTg3NmItZjZlZjVkNmUzZTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmUwYzBiYTMtNWY1ZC00ZjI1LTk4 MjgtMjNlM2RkNjA0ZWU3L2JlMGMwYmEzLTVmNWQtNGYyNS05ODI4LTIzZTNkZDYw NGVlNy5jcmwwHwYDVR0jBBgwFoAUoPBm9MVPp+kbRvIYPdyW9/fTK4swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZTBjMGJhMy01ZjVkLTRmMjUtOTgyOC0yM2Uz ZGQ2MDRlZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFEcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNfeYWECIF0mulnGY+J4HocbCqZk5f6hNl575Aa1OZ5/sXqguPqsJAG LHYo6lWyT7hLSrfDO8q1x9XVyu4/XDQjIS2J0Z2+1+NB4HzX2FmXNukAIg4MAlZG /vkeuyHkKzzR6zHaAabh/aTYdWaz+xvCMStHhWQOYBSQmr5SVg6CGySe/6woyPg0 ZTPwP8H1B7RXtx1ilRoWyKJczK6w9qVPHrUgb3k7EYRHInUWdWJy6bQ06oU3jkw5 l+ex2YINbKOzrPHwZKWSmzpCZn1RlpuTTXz9o2FAWg4fxDegDl4mMfSA0nWuTlai JIOQf/7K3t+l34GVNe2BVGKe2t1u4kc= -----END CERTIFICATE-----Generated at Sun Sep 27 11:01:48 2026 by rpki-client