$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/505caf77-22a6-383d-87ff-65fafc12e556.roa File: 505caf77-22a6-383d-87ff-65fafc12e556.roa (raw, json) Hash identifier: g7SpnVnRsoD/8rpUIKUCgNqwTQZ+0MqrHrp63s48+oE= Subject key identifier: 14:A5:04:58:31:7D:65:5A:C4:08:6B:6F:57:29:37:0E:11:56:84:59 Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584F3FAD30E3A31B36A4557A9140 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/505caf77-22a6-383d-87ff-65fafc12e556.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 138571 IP address blocks: 128.1.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:30:e3:a3:1b:36:a4:55:7a:91:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=a61e4612-7bae-4e5f-ba70-661271751bb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9b:ff:cb:a1:c8:d1:c7:ee:79:42:4d:61:e6: 85:d3:c6:5f:33:19:5b:99:f1:c9:73:79:f3:ef:d9: 8c:c6:a8:4f:cb:b2:61:e8:cb:d3:de:f3:f0:97:24: ca:db:f8:b4:96:a0:9c:cd:f9:bb:22:67:40:33:51: f9:4d:cb:46:ca:29:d1:fb:9b:0f:34:cb:9b:2f:53: 8a:31:24:48:d1:97:9e:67:d0:98:ba:be:32:fd:56: e7:48:1a:16:16:a7:d7:4c:e2:ab:d3:53:02:d6:5d: e0:1d:7c:e9:c8:8d:0f:ae:ba:b4:09:c6:85:b6:db: 2b:19:dd:1c:d0:39:ab:b3:8d:65:a8:9e:5a:46:de: a5:7b:14:b8:94:07:42:95:8e:aa:21:40:02:5a:71: f5:72:87:a8:eb:cb:56:56:a7:3f:c0:f5:ad:48:8f: be:9c:a1:0e:ee:10:1d:d3:3b:6e:30:fb:0f:88:20: c2:dc:9f:97:d0:0c:3b:66:65:14:85:36:ba:e0:73: 47:11:a6:4a:42:58:7a:9f:91:02:cf:5e:81:6b:c6: 20:35:c4:74:b6:65:5f:90:cf:43:40:36:e5:aa:e5: 3c:86:cb:06:ca:ce:fa:98:1a:4b:57:a0:4e:7e:f9: 01:47:09:c3:f1:39:cc:71:5c:17:df:11:14:b6:d5: 80:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A5:04:58:31:7D:65:5A:C4:08:6B:6F:57:29:37:0E:11:56:84:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/505caf77-22a6-383d-87ff-65fafc12e556.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.1.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:b6:79:73:3f:df:8b:69:b7:42:d8:de:25:e3:4e:f3:29:ef: 6a:e7:d9:5b:26:06:f4:19:fb:fe:96:6e:6c:d1:36:99:54:9f: 9d:05:bb:ff:00:0b:f5:e4:7d:4f:74:0d:23:80:b0:3d:74:c6: 03:36:41:f9:d2:4f:4d:55:d1:3b:5e:2b:e6:26:cc:77:d3:1e: b8:dd:da:24:54:f7:51:66:50:19:f3:19:bf:aa:dd:46:27:27: 84:ae:37:2a:a9:d4:14:61:1b:be:75:95:44:3d:78:0a:c5:f7: 30:ce:5a:42:a6:d3:38:40:28:d5:25:ba:f0:5d:28:a3:cc:9d: 74:99:ca:42:2c:8f:d1:42:00:e1:6f:c2:a4:50:ae:8b:09:a4: aa:17:47:15:82:77:38:ad:53:7b:87:66:91:ab:0d:74:7b:c4: 09:4e:e9:06:1a:7f:54:ed:67:99:c9:b4:69:54:11:18:1b:c5: 46:c6:fc:e6:c0:6f:b3:00:11:af:99:b6:31:7e:61:4b:6e:c1: 2d:d1:0f:b0:e5:99:21:7e:62:61:71:c0:67:a9:87:68:53:51: 3b:92:bc:80:e5:f6:a0:02:5a:f4:be:54:86:78:eb:53:b9:29: 82:88:2d:28:e8:bd:29:49:af:46:2d:85:b0:e5:44:5d:69:4d: c9:c7:c3:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rTDjoxs2pFV6kUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk YTYxZTQ2MTItN2JhZS00ZTVmLWJhNzAtNjYxMjcxNzUxYmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZv/y6HI0cfueUJNYeaF08ZfMxlbmfHJc3nz 79mMxqhPy7Jh6MvT3vPwlyTK2/i0lqCczfm7ImdAM1H5TctGyinR+5sPNMubL1OK MSRI0ZeeZ9CYur4y/VbnSBoWFqfXTOKr01MC1l3gHXzpyI0Prrq0CcaFttsrGd0c 0Dmrs41lqJ5aRt6lexS4lAdClY6qIUACWnH1coeo68tWVqc/wPWtSI++nKEO7hAd 0ztuMPsPiCDC3J+X0Aw7ZmUUhTa64HNHEaZKQlh6n5ECz16Ba8YgNcR0tmVfkM9D QDblquU8hssGys76mBpLV6BOfvkBRwnD8TnMcVwX3xEUttWAXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSlBFgxfWVaxAhrb1cpNw4RVoRZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvNTA1Y2FmNzctMjJhNi0z ODNkLTg3ZmYtNjVmYWZjMTJlNTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAW2eXM/34tpt0LY3iXjTvMp72rn2VsmBvQZ+/6WbmzRNplUn50Fu/8A C/XkfU90DSOAsD10xgM2QfnST01V0TteK+YmzHfTHrjd2iRU91FmUBnzGb+q3UYn J4SuNyqp1BRhG751lUQ9eArF9zDOWkKm0zhAKNUluvBdKKPMnXSZykIsj9FCAOFv wqRQrosJpKoXRxWCdzitU3uHZpGrDXR7xAlO6QYaf1TtZ5nJtGlUERgbxUbG/ObA b7MAEa+ZtjF+YUtuwS3RD7DlmSF+YmFxwGeph2hTUTuSvIDl9qACWvS+VIZ461O5 KYKILSjovSlJr0YthbDlRF1pTcnHw9Q= -----END CERTIFICATE-----Generated at Mon Sep 28 21:38:19 2026 by rpki-client