$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/297f5666-5364-3907-84f9-4b038cedcf3c.roa File: 297f5666-5364-3907-84f9-4b038cedcf3c.roa (raw, json) Hash identifier: qNXVFGZgDF9F8z94OgJELWGcz2g/aLbMS4WPSy1yrFE= Subject key identifier: 9E:7E:56:5E:06:93:31:E1:7D:1D:47:BF:E4:5C:73:A4:A1:E1:7C:B6 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584F2EED292AD001E4EA29E6A7D0 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/297f5666-5364-3907-84f9-4b038cedcf3c.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 64267 IP address blocks: 172.81.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:29:2a:d0:01:e4:ea:29:e6:a7:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=870eb17d-55ee-44e6-8541-ada6f82c86c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:67:d9:de:4c:72:eb:83:29:3e:aa:78:52:e4: 71:49:f0:d5:22:5b:35:8d:6e:99:41:05:02:cc:58: 48:40:b1:d6:f7:42:d3:03:6c:b8:e9:53:26:2c:f6: 51:82:bf:bb:61:8e:ae:c2:a6:79:78:b3:11:ca:df: 2b:95:c7:d3:cc:4b:48:f9:63:f1:5f:70:d9:c6:20: 23:e7:f1:62:09:d9:82:e7:12:bc:c5:5b:4e:6d:31: c2:a0:fd:73:ca:ff:ac:25:fb:d0:3a:02:60:81:67: fc:59:53:b9:cc:3a:b8:46:f2:a6:e0:75:2a:e8:ae: 27:21:45:7b:b7:20:5b:f0:7e:bb:96:74:97:9c:76: db:ba:7d:fa:8c:6a:8b:af:33:ee:e9:c3:0d:48:71: 9b:ae:a3:2d:4d:20:ca:af:aa:15:ec:7a:4f:17:a2: 21:64:76:42:89:9c:49:34:73:2d:ba:d3:53:15:86: 33:4b:97:fb:bb:d2:f6:63:a2:9a:03:47:d2:17:50: ec:53:fe:83:d9:fa:ec:0d:18:9c:e1:c8:dc:50:b3: 99:17:85:0b:09:e4:d6:7e:99:10:7b:63:4f:84:9b: e1:5c:e5:1e:38:a5:10:e6:ee:a8:77:54:e8:0d:32: 98:d6:8f:a2:3c:12:79:08:27:c3:e7:e3:34:1b:87: 60:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7E:56:5E:06:93:31:E1:7D:1D:47:BF:E4:5C:73:A4:A1:E1:7C:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/297f5666-5364-3907-84f9-4b038cedcf3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 172.81.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:f2:59:a0:bd:b3:f8:33:9e:55:7a:ee:3f:e0:12:e7:93:52: f0:92:ae:3e:e2:f4:a8:70:03:4a:0e:b6:7f:b2:18:95:d9:61: 37:bd:48:a3:d9:e1:5e:4a:88:ef:d4:7b:58:b0:9d:e3:62:fa: c3:cb:da:63:dc:ee:95:df:6a:6c:fc:e0:54:0a:b4:71:35:69: a0:26:70:1c:8c:c2:86:ba:72:aa:0c:58:85:6a:5a:4d:d0:cc: f7:f7:30:0e:e4:c6:8d:93:4f:b5:e5:9d:65:ec:02:24:e0:0b: 38:e0:d6:13:9e:5a:5d:bb:e9:44:75:ed:02:6b:f7:86:dd:c0: 48:c5:ba:c0:24:cf:87:d9:4b:96:39:9e:eb:4f:a7:9f:c3:ca: 7a:2a:2f:39:9d:f4:5c:7e:2e:2a:2b:d9:5d:7f:d2:49:a2:8c: 19:2a:fe:17:c6:ce:b4:0e:25:68:7f:63:26:a6:05:af:8b:5f: f9:60:ed:21:dd:11:a8:3b:50:01:16:9a:79:3e:20:73:94:db: b9:8e:d3:57:62:2f:43:53:82:5b:5e:e7:3a:6f:61:18:10:72: 6c:b3:07:4e:cd:e4:eb:4c:85:a4:2b:44:f8:ea:27:fe:94:30: 7c:19:fc:23:d9:59:c3:0a:13:f4:80:64:29:bc:ff:c9:8f:bc: 7e:19:d3:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7Skq0AHk6inmp9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk ODcwZWIxN2QtNTVlZS00NGU2LTg1NDEtYWRhNmY4MmM4NmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GfZ3kxy64MpPqp4UuRxSfDVIls1jW6ZQQUC zFhIQLHW90LTA2y46VMmLPZRgr+7YY6uwqZ5eLMRyt8rlcfTzEtI+WPxX3DZxiAj 5/FiCdmC5xK8xVtObTHCoP1zyv+sJfvQOgJggWf8WVO5zDq4RvKm4HUq6K4nIUV7 tyBb8H67lnSXnHbbun36jGqLrzPu6cMNSHGbrqMtTSDKr6oV7HpPF6IhZHZCiZxJ NHMtutNTFYYzS5f7u9L2Y6KaA0fSF1DsU/6D2frsDRic4cjcULOZF4ULCeTWfpkQ e2NPhJvhXOUeOKUQ5u6od1ToDTKY1o+iPBJ5CCfD5+M0G4dg7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5+Vl4GkzHhfR1Hv+Rcc6Sh4Xy2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMjk3ZjU2NjYtNTM2NC0z OTA3LTg0ZjktNGIwMzhjZWRjZjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFFyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALTyWaC9s/gznlV67j/gEueTUvCSrj7i9KhwA0oOtn+yGJXZYTe9SKPZ 4V5KiO/Ue1iwneNi+sPL2mPc7pXfamz84FQKtHE1aaAmcByMwoa6cqoMWIVqWk3Q zPf3MA7kxo2TT7XlnWXsAiTgCzjg1hOeWl276UR17QJr94bdwEjFusAkz4fZS5Y5 nutPp5/DynoqLzmd9Fx+Lior2V1/0kmijBkq/hfGzrQOJWh/YyamBa+LX/lg7SHd Eag7UAEWmnk+IHOU27mO01diL0NTglte5zpvYRgQcmyzB07N5OtMhaQrRPjqJ/6U MHwZ/CPZWcMKE/SAZCm8/8mPvH4Z06I= -----END CERTIFICATE-----Generated at Sun Sep 27 00:54:12 2026 by rpki-client