$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/82c3e1eb-db63-3d1b-9775-eb1965eb714a.roa File: 82c3e1eb-db63-3d1b-9775-eb1965eb714a.roa (raw, json) Hash identifier: d0hImQRkQGaTGfXCrkPXlq1w1jQ/itWpEK8ETIih7s4= Subject key identifier: B8:FF:8E:C0:46:EF:2C:B4:B9:F8:1B:6A:35:6E:3E:32:1C:27:20:63 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584F498A920FD6D6F2F0B5EAB320 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/82c3e1eb-db63-3d1b-9775-eb1965eb714a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20001 IP address blocks: 172.96.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:92:0f:d6:d6:f2:f0:b5:ea:b3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ea7a28b2-438f-48f8-b5ca-88d7d3de9df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a1:1b:c4:38:c3:c8:ea:8a:c8:0c:21:91:e5: f4:97:74:99:45:c3:fa:57:ca:55:21:db:2b:99:22: a6:64:c6:53:03:8d:90:67:01:5f:57:d8:7f:f2:fa: 94:3a:17:30:54:d9:f4:03:c0:80:93:8e:7e:f1:e9: 34:60:a3:2a:9b:aa:84:58:80:80:63:6b:50:d3:71: ac:7c:d3:25:2f:ff:64:a7:b5:e5:79:02:d6:f1:19: 4b:e5:de:da:3e:56:d7:79:06:bd:cd:37:7d:47:d2: c3:e4:0f:6c:68:df:c4:0b:62:77:9c:25:a0:18:e3: 53:e0:a8:87:4d:e4:61:3e:b0:f5:51:19:66:24:db: 91:40:2b:82:80:d2:a1:ff:b2:23:f3:73:ca:4c:5c: ce:ea:28:a7:38:13:35:5e:e9:59:e1:0a:8f:e8:7d: d6:b0:70:24:b8:1b:d5:4a:df:3b:19:67:4f:ea:fe: 07:77:9c:6e:ff:ec:f9:87:03:30:63:cb:05:c7:26: fc:3b:59:d5:15:c4:47:b0:63:9e:34:ea:6f:39:a8: 62:64:33:50:9d:95:9b:7d:36:70:c7:dc:b7:17:40: 48:c3:5f:97:cd:50:d1:2e:d1:e1:59:35:df:49:97: f1:0c:39:0d:d4:f3:87:f6:b8:e7:53:6d:54:2b:a9: 8e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:FF:8E:C0:46:EF:2C:B4:B9:F8:1B:6A:35:6E:3E:32:1C:27:20:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/82c3e1eb-db63-3d1b-9775-eb1965eb714a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 172.96.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:06:09:a9:74:41:9e:dd:39:72:3d:e6:ec:3d:25:ba:7b:d4: 6a:81:f1:16:75:27:72:fc:16:8e:d7:51:3a:d2:08:37:55:07: bf:18:ed:44:09:b3:58:66:df:0e:1c:cc:0a:1f:55:8b:b2:b7: ff:b0:71:73:8a:7e:d4:14:fc:eb:d1:59:64:93:51:d5:78:98: be:e5:38:d1:d0:43:bd:f5:98:f0:42:c1:fd:fc:e1:d0:ce:de: 3f:6d:85:7f:d4:59:84:a1:66:91:8d:2a:8c:f6:90:00:93:56: b9:be:77:89:43:7a:c2:a9:7a:86:19:4a:0d:2c:16:f1:f5:e1: 0f:ec:c2:4b:22:e0:19:b7:a4:a9:a6:d7:0d:9b:9c:15:e5:4f: 5d:11:9f:e0:a3:38:08:91:18:6d:2d:e2:03:04:7b:7b:27:53: 13:c0:7b:3a:ee:61:b1:4e:61:e9:cc:4c:25:0a:15:5b:97:2d: 57:f5:d2:9b:e0:92:d6:29:99:c3:d5:62:af:27:3d:d9:ff:d9: 4a:3b:f6:a1:73:bc:51:a9:1a:51:00:d3:49:2d:36:5f:2f:d4: 69:d4:f2:90:68:56:13:69:ee:4e:db:3f:c5:a4:9e:ea:09:d2: d9:ff:7a:39:8b:ca:86:37:42:c3:7f:4a:c2:b3:cb:57:58:25: 09:4f:0d:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JipIP1tby8LXqsyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWE3YTI4YjItNDM4Zi00OGY4LWI1Y2EtODhkN2QzZGU5ZGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKEbxDjDyOqKyAwhkeX0l3SZRcP6V8pVIdsr mSKmZMZTA42QZwFfV9h/8vqUOhcwVNn0A8CAk45+8ek0YKMqm6qEWICAY2tQ03Gs fNMlL/9kp7XleQLW8RlL5d7aPlbXeQa9zTd9R9LD5A9saN/EC2J3nCWgGONT4KiH TeRhPrD1URlmJNuRQCuCgNKh/7Ij83PKTFzO6iinOBM1XulZ4QqP6H3WsHAkuBvV St87GWdP6v4Hd5xu/+z5hwMwY8sFxyb8O1nVFcRHsGOeNOpvOahiZDNQnZWbfTZw x9y3F0BIw1+XzVDRLtHhWTXfSZfxDDkN1POH9rjnU21UK6mOVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLj/jsBG7yy0ufgbajVuPjIcJyBjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvODJjM2UxZWItZGI2My0z ZDFiLTk3NzUtZWIxOTY1ZWI3MTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGBaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANUGCal0QZ7dOXI95uw9Jbp71GqB8RZ1J3L8Fo7XUTrSCDdVB78Y7UQJ s1hm3w4czAofVYuyt/+wcXOKftQU/OvRWWSTUdV4mL7lONHQQ731mPBCwf384dDO 3j9thX/UWYShZpGNKoz2kACTVrm+d4lDesKpeoYZSg0sFvH14Q/swksi4Bm3pKmm 1w2bnBXlT10Rn+CjOAiRGG0t4gMEe3snUxPAezruYbFOYenMTCUKFVuXLVf10pvg ktYpmcPVYq8nPdn/2Uo79qFzvFGpGlEA00ktNl8v1GnU8pBoVhNp7k7bP8WknuoJ 0tn/ejmLyoY3QsN/SsKzy1dYJQlPDTw= -----END CERTIFICATE-----Generated at Fri Sep 25 14:05:41 2026 by rpki-client