$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/15d5fcae-12a1-3ba9-bea7-7aadf1f55864.roa File: 15d5fcae-12a1-3ba9-bea7-7aadf1f55864.roa (raw, json) Hash identifier: PzeDg+WFOip2l1GWGZVXXxDxknx61FNipDzry6EK3V8= Subject key identifier: DA:4A:7B:67:19:86:AC:49:49:16:2E:99:02:27:AE:B6:28:12:D0:F2 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584F5A33023E7F895A49D37E3C80 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/15d5fcae-12a1-3ba9-bea7-7aadf1f55864.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 64267 IP address blocks: 158.62.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:02:3e:7f:89:5a:49:d3:7e:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=951b88b8-e474-4e80-b9ae-32920b21a117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c6:71:6d:ee:0b:05:71:31:d3:a4:bd:ed:e7: fc:b8:9e:6a:c7:2a:fb:32:29:c0:24:35:fc:70:ce: af:71:28:77:d0:cc:0d:ae:1f:b0:7d:2d:70:0d:5a: 6b:4d:97:13:0e:6c:91:cd:7a:34:ed:df:ba:1f:61: ce:ea:24:ca:38:6f:dc:a0:60:10:d7:ef:f4:74:60: 6d:f3:76:98:33:da:f8:10:50:02:fd:86:70:ff:76: a2:22:29:3f:ed:b9:4f:38:d1:df:f5:9d:11:8c:02: 52:ef:ce:28:27:56:10:8b:4d:43:b7:e7:e9:79:78: 08:33:0f:af:f6:a5:80:97:89:44:eb:d5:85:0a:45: 39:4e:6f:b0:a6:9c:61:e3:68:f0:49:8f:29:64:c8: 84:42:de:dc:e5:ba:a7:73:4c:88:5b:fb:69:2f:f8: 2f:94:75:93:aa:a7:af:a1:b1:11:a8:00:c7:94:68: 21:e8:f4:e9:10:f4:42:fb:80:ca:8e:65:e3:d2:1d: ec:78:a1:eb:d5:33:6c:34:54:f1:39:f5:6b:79:43: f0:c1:ed:55:36:9f:f9:44:31:8a:97:11:f2:e4:48: 47:ea:57:77:64:8e:93:d6:56:e9:5e:39:3e:61:8f: 72:3b:5b:f1:a7:c7:f1:ed:d5:65:15:86:3d:c3:dd: 18:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:4A:7B:67:19:86:AC:49:49:16:2E:99:02:27:AE:B6:28:12:D0:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/15d5fcae-12a1-3ba9-bea7-7aadf1f55864.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 158.62.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:03:70:cf:04:0a:67:be:0f:7c:a8:d7:37:6f:a9:db:89:de: df:93:19:da:32:5c:3e:b6:6d:e3:ec:42:31:86:b2:27:90:10: c3:93:49:93:02:fa:cd:3d:75:d3:75:12:d1:3e:77:4b:0c:99: e5:1d:b6:80:b3:52:ae:0b:70:f7:a9:7a:ed:eb:7c:3c:80:64: 56:fc:f1:82:1e:e7:ad:5c:28:1f:d2:17:ed:f2:1a:5c:14:77: ee:df:76:13:e2:da:0b:d6:ab:ce:41:bc:4f:25:b3:6c:ab:1a: 34:59:c8:d4:7d:89:79:e0:e5:7a:8f:c5:c4:cd:7c:e8:67:a7: 3c:01:9a:a7:ef:e5:b0:be:a2:54:2a:d5:00:1c:22:e3:ab:c9: 0f:eb:40:f3:55:f3:d8:1a:99:0b:30:04:e7:a2:fd:45:39:01: be:f3:f3:c9:ed:07:0e:34:bb:b5:83:c4:f2:65:c1:ea:8f:0f: d5:94:f2:72:87:96:19:12:06:aa:be:12:f8:c3:b7:e2:30:d9: b9:ff:c7:8d:67:79:36:40:e2:19:f3:70:f3:c4:a7:25:c8:a3: 2a:c9:af:6e:5d:43:b7:ae:f8:e4:9f:44:4b:a8:be:c4:d1:74: 7f:a0:2f:bc:b2:5d:36:1c:30:9a:81:61:89:d9:d4:36:f3:12: 74:0b:73:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMwI+f4laSdN+PIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk OTUxYjg4YjgtZTQ3NC00ZTgwLWI5YWUtMzI5MjBiMjFhMTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocZxbe4LBXEx06S97ef8uJ5qxyr7MinAJDX8 cM6vcSh30MwNrh+wfS1wDVprTZcTDmyRzXo07d+6H2HO6iTKOG/coGAQ1+/0dGBt 83aYM9r4EFAC/YZw/3aiIik/7blPONHf9Z0RjAJS784oJ1YQi01Dt+fpeXgIMw+v 9qWAl4lE69WFCkU5Tm+wppxh42jwSY8pZMiEQt7c5bqnc0yIW/tpL/gvlHWTqqev obERqADHlGgh6PTpEPRC+4DKjmXj0h3seKHr1TNsNFTxOfVreUPwwe1VNp/5RDGK lxHy5EhH6ld3ZI6T1lbpXjk+YY9yO1vxp8fx7dVlFYY9w90YGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpKe2cZhqxJSRYumQInrrYoEtDyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMTVkNWZjYWUtMTJhMS0z YmE5LWJlYTctN2FhZGYxZjU1ODY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnj7VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYDcM8ECme+D3yo1zdvqduJ3t+TGdoyXD62bePsQjGGsieQEMOTSZMC +s09ddN1EtE+d0sMmeUdtoCzUq4LcPepeu3rfDyAZFb88YIe561cKB/SF+3yGlwU d+7fdhPi2gvWq85BvE8ls2yrGjRZyNR9iXng5XqPxcTNfOhnpzwBmqfv5bC+olQq 1QAcIuOryQ/rQPNV89gamQswBOei/UU5Ab7z88ntBw40u7WDxPJlweqPD9WU8nKH lhkSBqq+EvjDt+Iw2bn/x41neTZA4hnzcPPEpyXIoyrJr25dQ7eu+OSfREuovsTR dH+gL7yyXTYcMJqBYYnZ1DbzEnQLc5g= -----END CERTIFICATE-----Generated at Tue Oct 6 14:17:47 2026 by rpki-client