$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/bc11c8f0-f39f-37b3-ab40-fb0b563f0e14.roa File: bc11c8f0-f39f-37b3-ab40-fb0b563f0e14.roa (raw, json) Hash identifier: rwSGBNVC0clR2GRSJyD4kgqoXVCmxhQjpysHvqF8IOg= Subject key identifier: F3:A3:EF:73:2D:66:6E:48:E3:E7:B3:2D:BC:48:3D:A0:5E:E2:1E:D8 Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584F3CE28A090B1250B528FF3180 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/bc11c8f0-f39f-37b3-ab40-fb0b563f0e14.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 21859 IP address blocks: 128.14.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:8a:09:0b:12:50:b5:28:ff:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=f2b71078-c9f3-468a-b25a-ae40b146ef65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0f:35:86:a9:e3:93:80:02:d4:32:68:e2:c8: a4:e2:30:ef:af:ee:55:55:95:5b:a8:14:8b:a0:f2: ff:cc:73:c5:6f:1f:8d:bc:21:1b:82:38:27:22:11: 58:a6:b6:52:b5:6b:7f:44:d2:36:16:55:8e:cf:0c: 9a:1d:89:26:51:84:0f:aa:f7:47:5e:a8:5d:00:2f: ab:c5:4a:6a:c4:33:61:90:00:df:d9:27:e6:a7:b8: 59:a5:e1:22:b2:42:24:85:6b:e2:df:a1:88:bd:24: 7f:79:1e:a5:0c:5a:50:0a:0c:6a:ab:c5:00:53:c8: 71:bc:ea:10:7b:94:fc:33:9a:c5:be:82:90:3a:97: de:d2:50:07:2f:74:d6:f6:62:33:6c:6b:ca:4e:76: d6:41:3b:66:97:01:06:49:48:7f:01:59:e9:95:cf: 7f:9a:e6:0e:2d:c0:38:01:19:96:8b:8c:64:2f:59: b2:7f:af:66:f1:f4:7f:09:3d:03:ea:bb:68:3f:23: 0f:18:a4:36:6d:db:48:81:8a:12:22:d9:92:d3:40: 99:a7:63:b5:fe:9f:9c:b8:e0:57:a7:ad:e9:02:ad: ed:ee:28:b3:23:a5:70:26:a5:bc:3b:47:87:49:7c: 7e:2b:e9:fa:ec:8c:b9:d4:93:47:d7:eb:74:80:56: 49:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A3:EF:73:2D:66:6E:48:E3:E7:B3:2D:BC:48:3D:A0:5E:E2:1E:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/bc11c8f0-f39f-37b3-ab40-fb0b563f0e14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.14.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:5e:11:c7:6c:a1:e6:46:7a:25:61:81:df:a6:e1:85:fc:50: a2:73:9d:0f:10:e4:99:01:18:27:03:4d:d4:4a:b0:1f:91:dd: a0:97:f7:a8:9b:26:a9:e4:9d:c0:3a:93:26:19:b4:d9:ed:e1: 6f:3a:62:51:2d:5a:c3:05:74:59:4d:14:52:7d:d2:9e:5c:78: 12:38:fa:91:44:82:3d:1c:31:60:35:3f:6b:1a:c8:56:ee:40: 61:e9:7a:c3:ac:1a:fb:1a:5e:be:e9:ad:ff:74:69:54:62:0f: 91:7c:2b:06:44:95:ea:36:0a:a7:6c:d5:cc:14:b7:f5:f0:bf: 13:df:eb:4c:6b:d3:1b:ac:eb:f1:f8:a5:41:28:bf:85:8b:e2: df:6f:0f:b2:e2:f1:6f:88:47:fa:18:bd:4b:05:01:dd:7b:9d: 71:ba:02:26:db:be:73:86:3e:f6:ba:59:10:08:18:62:c0:b5: cf:d6:7c:d6:16:7b:9e:0d:3c:12:a9:e1:53:fc:41:65:52:24: 98:fd:81:2f:01:91:e8:4e:d1:1b:15:17:02:a0:d4:6b:02:84: a1:a8:f5:be:a8:ce:7c:5e:51:9b:aa:d9:70:26:4c:24:c6:3a: 32:86:f7:76:df:4e:bf:dc:23:e1:cd:91:9b:67:84:3c:92:a1: 11:cc:7d:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884ooJCxJQtSj/MYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk ZjJiNzEwNzgtYzlmMy00NjhhLWIyNWEtYWU0MGIxNDZlZjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsw81hqnjk4AC1DJo4sik4jDvr+5VVZVbqBSL oPL/zHPFbx+NvCEbgjgnIhFYprZStWt/RNI2FlWOzwyaHYkmUYQPqvdHXqhdAC+r xUpqxDNhkADf2Sfmp7hZpeEiskIkhWvi36GIvSR/eR6lDFpQCgxqq8UAU8hxvOoQ e5T8M5rFvoKQOpfe0lAHL3TW9mIzbGvKTnbWQTtmlwEGSUh/AVnplc9/muYOLcA4 ARmWi4xkL1myf69m8fR/CT0D6rtoPyMPGKQ2bdtIgYoSItmS00CZp2O1/p+cuOBX p63pAq3t7iizI6VwJqW8O0eHSXx+K+n67Iy51JNH1+t0gFZJMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOj73MtZm5I4+ezLbxIPaBe4h7YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvYmMxMWM4ZjAtZjM5Zi0z N2IzLWFiNDAtZmIwYjU2M2YwZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgA4jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxeEcdsoeZGeiVhgd+m4YX8UKJznQ8Q5JkBGCcDTdRKsB+R3aCX96ib JqnkncA6kyYZtNnt4W86YlEtWsMFdFlNFFJ90p5ceBI4+pFEgj0cMWA1P2sayFbu QGHpesOsGvsaXr7prf90aVRiD5F8KwZEleo2Cqds1cwUt/XwvxPf60xr0xus6/H4 pUEov4WL4t9vD7Li8W+IR/oYvUsFAd17nXG6AibbvnOGPva6WRAIGGLAtc/WfNYW e54NPBKp4VP8QWVSJJj9gS8BkehO0RsVFwKg1GsChKGo9b6oznxeUZuq2XAmTCTG OjKG93bfTr/cI+HNkZtnhDySoRHMffk= -----END CERTIFICATE-----Generated at Sun Sep 27 11:19:17 2026 by rpki-client