$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/198c5cab-3c0c-3e77-a633-bfcce238771f.roa File: 198c5cab-3c0c-3e77-a633-bfcce238771f.roa (raw, json) Hash identifier: F31522hRRsdpl4Fj1E/j54xN16IGUUsEA06ERlt5uT4= Subject key identifier: 2A:5B:D5:99:7D:03:34:A4:7E:59:AD:3A:B5:48:71:BF:09:B0:73:02 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584DA7EF34A94DB18A38EE176380 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/198c5cab-3c0c-3e77-a633-bfcce238771f.roa Signing time: Tue 28 Apr 2026 11:43:32 +0000 ROA not before: Tue 28 Apr 2026 11:43:32 +0000 ROA not after: Mon 27 Jul 2026 11:43:32 +0000 asID: 20001 IP address blocks: 172.96.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a7:ef:34:a9:4d:b1:8a:38:ee:17:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Apr 28 11:43:32 2026 GMT Not After : Jul 27 11:43:32 2026 GMT Subject: CN=40a1aba9-bef5-4a4d-89a4-b3be69d3df4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3c:92:00:cc:de:d6:87:29:e4:d8:52:72:b4: d9:cf:d7:73:91:81:c4:90:8f:e5:aa:18:e3:af:46: 78:12:ec:8e:65:cf:dd:a0:5a:65:1e:e0:f0:74:9a: 8c:55:30:79:67:90:dc:ea:23:0c:25:8e:51:cb:5c: e2:e7:2b:fb:3c:e0:eb:88:89:66:f0:46:55:77:ab: 7b:5a:13:a6:a8:f6:99:27:c5:38:d6:07:6f:bc:15: 87:70:bd:0c:02:e2:25:b3:a7:d6:66:e0:0a:5a:21: 66:15:3a:36:1c:0a:c9:14:32:9e:a0:fa:6a:32:54: 1b:cc:8f:f7:3c:2c:f5:d3:f8:7c:c7:6b:c5:f7:a3: 10:b8:19:1f:ee:5c:35:a2:b4:c3:4c:e8:3c:ec:62: 98:9e:bf:34:3b:a6:bc:bf:b9:f0:37:ac:f7:45:c9: 15:66:5f:f8:14:b9:00:b6:86:39:67:b2:13:43:d2: 9d:2b:23:4b:55:23:fd:2a:07:e5:5f:31:81:4a:36: 64:65:de:9d:35:a9:7d:1f:b1:45:fd:9b:bd:95:6c: f7:82:4d:7f:e1:50:3c:56:27:b5:8e:8a:c4:e6:27: 21:0a:d1:41:66:ea:9d:b5:53:9f:04:82:f0:a8:98: 59:0f:bd:5c:83:7e:3d:4f:dd:ed:e4:7e:1c:7d:14: 13:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:5B:D5:99:7D:03:34:A4:7E:59:AD:3A:B5:48:71:BF:09:B0:73:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/198c5cab-3c0c-3e77-a633-bfcce238771f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 172.96.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:8a:18:9d:82:1e:24:92:59:ef:96:24:3f:00:4b:3c:0e:a3: 08:54:64:cc:2a:50:e7:3d:e9:da:95:4b:e3:6c:01:6b:9c:e0: 80:1f:8a:8f:3f:a1:d7:cd:45:19:31:d8:96:ff:17:7b:9a:25: ff:93:cf:76:6e:73:f6:3f:70:f8:16:d3:f0:a9:02:4d:13:1f: b8:f4:9a:df:c2:ec:7a:3e:e0:3a:3e:83:97:cf:94:d1:45:aa: bf:b1:7f:d4:bc:ed:4a:67:16:a1:c6:fe:ce:0b:ae:b3:79:2b: b8:d4:67:8d:0e:46:91:a5:71:3f:01:62:cd:95:29:d4:35:65: 19:48:68:88:95:52:29:1b:b9:af:aa:e2:3e:f7:89:0e:67:2e: 01:6a:8e:6d:ed:61:de:33:4e:88:6c:58:30:7b:97:6f:45:53: 8f:53:b3:b8:02:9c:38:e7:bf:1c:04:78:f4:f8:51:62:9b:69: 31:7b:d0:72:83:2a:9f:18:74:fa:91:b6:55:94:b1:21:24:bb: 97:e5:a9:50:86:14:9c:5a:fb:6b:ab:d2:93:9f:47:48:5c:51: 01:0a:f2:05:48:4a:a5:cc:0c:22:0e:c0:b6:6b:bb:79:e9:71: 95:82:7f:3c:42:47:e5:ba:d9:a9:24:0a:d5:e8:71:cf:45:e1: e4:4c:33:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2n7zSpTbGKOO4XY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDQyODExNDMzMloXDTI2MDcyNzExNDMzMlowLzEtMCsGA1UEAxMk NDBhMWFiYTktYmVmNS00YTRkLTg5YTQtYjNiZTY5ZDNkZjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTySAMze1ocp5NhScrTZz9dzkYHEkI/lqhjj r0Z4EuyOZc/doFplHuDwdJqMVTB5Z5Dc6iMMJY5Ry1zi5yv7PODriIlm8EZVd6t7 WhOmqPaZJ8U41gdvvBWHcL0MAuIls6fWZuAKWiFmFTo2HArJFDKeoPpqMlQbzI/3 PCz10/h8x2vF96MQuBkf7lw1orTDTOg87GKYnr80O6a8v7nwN6z3RckVZl/4FLkA toY5Z7ITQ9KdKyNLVSP9KgflXzGBSjZkZd6dNal9H7FF/Zu9lWz3gk1/4VA8Vie1 jorE5ichCtFBZuqdtVOfBILwqJhZD71cg349T93t5H4cfRQTNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpb1Zl9AzSkflmtOrVIcb8JsHMCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMTk4YzVjYWItM2MwYy0z ZTc3LWE2MzMtYmZjY2UyMzg3NzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGBZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCKGJ2CHiSSWe+WJD8ASzwOowhUZMwqUOc96dqVS+NsAWuc4IAfio8/ odfNRRkx2Jb/F3uaJf+Tz3Zuc/Y/cPgW0/CpAk0TH7j0mt/C7Ho+4Do+g5fPlNFF qr+xf9S87UpnFqHG/s4LrrN5K7jUZ40ORpGlcT8BYs2VKdQ1ZRlIaIiVUikbua+q 4j73iQ5nLgFqjm3tYd4zTohsWDB7l29FU49Ts7gCnDjnvxwEePT4UWKbaTF70HKD Kp8YdPqRtlWUsSEku5flqVCGFJxa+2ur0pOfR0hcUQEK8gVISqXMDCIOwLZru3np cZWCfzxCR+W62akkCtXocc9F4eRMM3M= -----END CERTIFICATE-----Generated at Wed May 13 10:33:12 2026 by rpki-client