$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/2489eab1-fab2-357f-aeb8-08dc32897f54.roa File: 2489eab1-fab2-357f-aeb8-08dc32897f54.roa (raw, json) Hash identifier: FxaSlyd70i3UI2UJJQfdSGHz8JwfdExzfOLuc0UjL3o= Subject key identifier: 5F:02:71:91:F3:8A:14:BE:83:45:FF:D8:3A:3E:B7:AD:2C:41:B5:86 Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584F4F080A31FD0E6EA1A8F4D2C0 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/2489eab1-fab2-357f-aeb8-08dc32897f54.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 20419 IP address blocks: 69.28.108.0/24 maxlen: 24 69.28.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:0a:31:fd:0e:6e:a1:a8:f4:d2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=41d7e6ee-84fb-44fc-97f4-ff5fe05fd4e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:82:ce:d4:ff:f3:bb:69:96:7c:5f:ac:db:64: c4:7b:45:b0:45:e9:09:ff:78:5b:8b:c3:49:de:6a: 65:d2:0b:f4:96:f3:e5:84:61:0a:39:9d:3e:dd:ca: a4:97:9c:ee:76:1b:8b:b0:be:76:7f:08:9f:76:7d: a0:33:33:9f:4e:9e:6d:4a:37:3c:17:1a:b6:b9:42: db:a8:15:75:e4:a8:e4:33:15:4b:f9:78:d4:45:9c: 9b:64:57:3a:79:7d:6b:c2:50:88:36:51:9f:c2:57: 13:ab:50:ef:5e:36:73:99:b5:37:5b:ee:8f:22:ee: e2:e4:49:87:d6:e9:86:f4:b6:15:4a:43:93:90:9d: 3b:48:ea:a5:96:76:de:a4:2c:44:c2:21:da:e5:43: c5:f0:66:09:b5:d0:6a:51:7c:d7:3c:53:cf:2c:a9: fe:53:52:fe:fa:77:fc:27:69:c7:5d:93:08:6b:76: 1b:d6:40:35:1a:0c:4d:b3:4c:dc:c5:a1:5e:62:7d: df:3c:fe:45:01:ba:7d:dc:7d:c3:c5:7e:6f:8c:db: 44:ef:a1:aa:12:81:f6:2f:ef:48:48:a6:ba:20:77: b1:b2:be:e5:93:9c:04:ee:78:31:bb:bc:7a:d7:27: 06:17:ef:5d:97:11:1a:b7:82:1e:3c:a1:11:97:c0: 04:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:02:71:91:F3:8A:14:BE:83:45:FF:D8:3A:3E:B7:AD:2C:41:B5:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/2489eab1-fab2-357f-aeb8-08dc32897f54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 69.28.108.0/24 69.28.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:aa:9a:f6:07:76:10:a0:57:02:d6:51:d1:e4:ea:1d:70:f9: 49:b4:52:56:4f:e1:0c:a2:38:1e:cd:bc:57:9e:78:23:29:2c: dc:f4:f0:bc:38:a8:c7:a0:82:43:c8:d5:62:fe:15:0a:0b:0c: 13:c1:9f:21:78:0b:b7:57:45:c1:85:ba:4a:c2:fc:b1:63:6a: 3a:f5:64:42:dc:67:51:c4:a4:b5:47:79:ce:ab:42:19:c9:78: d4:b1:6f:06:00:93:47:23:08:7f:5b:6b:d8:f7:79:f1:98:0a: b1:1a:9b:b7:94:11:6a:02:15:b9:b9:d1:3d:91:37:5a:aa:95: f6:46:34:07:6c:23:29:d6:2f:7f:b7:dd:83:aa:f1:1c:db:d8: 85:f8:c3:b8:2e:a4:17:bf:99:8e:24:0b:46:c2:16:df:7e:85: a3:74:0d:ab:fa:a8:24:a6:a1:80:84:c2:13:75:b2:ad:1b:99: 88:6f:c1:fa:bd:ae:0b:1d:69:9c:e2:db:28:19:a4:79:55:f4: 8e:07:33:eb:85:b1:d9:0a:4d:58:5d:bb:1b:71:aa:26:bb:44: 70:b8:70:2c:c2:0e:63:c9:df:d0:8e:bc:7c:53:a3:ed:7a:57: 20:64:0b:40:26:a5:d7:88:fb:42:25:e1:89:65:ee:c6:20:2e: fd:0b:64:90 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9PCAox/Q5uoaj00sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk NDFkN2U2ZWUtODRmYi00NGZjLTk3ZjQtZmY1ZmUwNWZkNGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmILO1P/zu2mWfF+s22TEe0WwRekJ/3hbi8NJ 3mpl0gv0lvPlhGEKOZ0+3cqkl5zudhuLsL52fwifdn2gMzOfTp5tSjc8Fxq2uULb qBV15KjkMxVL+XjURZybZFc6eX1rwlCINlGfwlcTq1DvXjZzmbU3W+6PIu7i5EmH 1umG9LYVSkOTkJ07SOqllnbepCxEwiHa5UPF8GYJtdBqUXzXPFPPLKn+U1L++nf8 J2nHXZMIa3Yb1kA1GgxNs0zcxaFeYn3fPP5FAbp93H3DxX5vjNtE76GqEoH2L+9I SKa6IHexsr7lk5wE7ngxu7x61ycGF+9dlxEat4IePKERl8AE9wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFF8CcZHzihS+g0X/2Do+t60sQbWGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvMjQ4OWVhYjEtZmFiMi0z NTdmLWFlYjgtMDhkYzMyODk3ZjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQARRxsAwQA RRx0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHGqmvYHdhCgVwLWUdHk6h1w+Um0UlZP4QyiOB7NvFeeeCMp LNz08Lw4qMeggkPI1WL+FQoLDBPBnyF4C7dXRcGFukrC/LFjajr1ZELcZ1HEpLVH ec6rQhnJeNSxbwYAk0cjCH9ba9j3efGYCrEam7eUEWoCFbm50T2RN1qqlfZGNAds IynWL3+33YOq8Rzb2IX4w7gupBe/mY4kC0bCFt9+haN0Dav6qCSmoYCEwhN1sq0b mYhvwfq9rgsdaZzi2ygZpHlV9I4HM+uFsdkKTVhduxtxqia7RHC4cCzCDmPJ39CO vHxTo+16VyBkC0AmpdeI+0Il4Yll7sYgLv0LZJA= -----END CERTIFICATE-----Generated at Sun Oct 4 21:18:27 2026 by rpki-client