$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8397a8dc-2c92-3bf2-95fa-0d42934879f1.roa File: 8397a8dc-2c92-3bf2-95fa-0d42934879f1.roa (raw, json) Hash identifier: I8bn+ZhoCThjijZjAhFTNuNQYBpW2FyVyfBEO2hBiPI= Subject key identifier: D5:95:D6:E6:C0:09:21:5A:63:85:25:D1:B7:91:73:BA:D1:37:4B:7C Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584F3CE280D7CB64DB297975B140 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8397a8dc-2c92-3bf2-95fa-0d42934879f1.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 22516 IP address blocks: 172.96.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:80:d7:cb:64:db:29:79:75:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=a20c5d12-a10d-4645-b8f8-150a90077090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e3:b7:15:35:5c:b0:33:26:4b:1e:f1:77:81: 96:44:5e:ec:40:e6:de:32:5e:7e:ec:99:69:fe:ba: 88:c1:5d:47:9d:fd:d0:57:8b:a1:bf:9d:e0:69:2d: 09:e0:2b:a9:4f:92:8c:50:a9:62:b1:73:97:1f:53: 97:3c:f2:c0:e0:c4:74:a7:1f:c4:22:e9:d1:80:2d: 5a:d7:7d:c4:b5:ef:57:b1:8b:cb:2d:7b:22:00:19: 78:c3:7d:27:8c:85:f3:77:65:a5:03:1a:10:dd:d6: 0d:e5:02:18:6d:14:7c:84:be:6f:6f:88:cd:e4:6a: 68:a7:9a:ec:13:36:41:c3:20:2c:6f:df:f6:79:f7: 55:e6:ee:74:aa:7d:9a:45:dc:11:81:29:1e:72:37: b7:31:3b:9f:60:79:68:d4:92:32:87:d7:9e:4f:8b: 06:62:2f:cc:63:b8:29:02:a2:f4:2a:7d:16:1d:4b: a2:9c:97:6b:3d:9a:ef:3c:1b:30:ae:5d:5f:91:59: ba:90:36:49:3f:93:91:8e:c8:db:d6:c2:a0:45:76: d2:92:30:9b:61:21:72:e7:aa:12:aa:00:69:ef:95: 69:75:3d:13:a0:9f:5a:b3:82:fb:8c:00:df:b1:ff: 54:10:bf:89:a5:00:f5:ec:f1:af:77:7c:e9:22:41: 2f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:95:D6:E6:C0:09:21:5A:63:85:25:D1:B7:91:73:BA:D1:37:4B:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8397a8dc-2c92-3bf2-95fa-0d42934879f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 172.96.80.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:88:f7:d3:28:dd:1d:95:ed:48:ec:f6:4a:41:61:dd:c4:76: 80:9f:7a:6f:2a:50:c4:a6:e1:8e:a2:8d:cf:81:d3:02:2b:3d: a2:fd:8d:52:c4:24:01:57:d0:94:61:68:ce:03:1c:4c:28:5f: 50:e1:7e:31:3b:74:7d:62:00:3a:c0:1e:2f:60:b1:72:fc:88: ac:6c:07:d0:d9:9b:7a:79:6b:a8:27:6c:55:46:88:21:eb:5e: be:23:c7:95:53:73:2b:8a:bb:72:dd:6d:6f:cc:db:09:ae:23: 51:5a:06:6b:ea:49:72:17:4e:f9:e1:a0:0c:ed:7a:cf:3a:a1: 28:4f:f0:6c:3d:bd:aa:0c:1c:4a:87:35:0c:f1:83:14:41:1b: 61:54:35:78:d3:33:56:d8:aa:d3:aa:7d:fb:e4:fd:6a:10:37: fd:8c:b9:89:ba:5e:3f:c4:e6:c1:ab:ce:d1:6e:a6:50:b0:88: ae:79:b5:cf:aa:b7:a4:7b:8c:6e:b5:d9:3f:5d:09:9d:8d:91: 15:11:3e:95:c5:b8:f6:e0:7e:77:5f:aa:d9:5c:45:47:83:7d: 3a:a1:72:49:1b:6f:97:64:9d:17:2b:49:92:9d:c8:66:01:bd: 77:05:de:70:a0:57:98:67:07:9b:37:fe:10:17:43:ae:ae:ea: 65:6f:0a:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884oDXy2TbKXl1sUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk YTIwYzVkMTItYTEwZC00NjQ1LWI4ZjgtMTUwYTkwMDc3MDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOO3FTVcsDMmSx7xd4GWRF7sQObeMl5+7Jlp /rqIwV1Hnf3QV4uhv53gaS0J4CupT5KMUKlisXOXH1OXPPLA4MR0px/EIunRgC1a 133Ete9XsYvLLXsiABl4w30njIXzd2WlAxoQ3dYN5QIYbRR8hL5vb4jN5Gpop5rs EzZBwyAsb9/2efdV5u50qn2aRdwRgSkecje3MTufYHlo1JIyh9eeT4sGYi/MY7gp AqL0Kn0WHUuinJdrPZrvPBswrl1fkVm6kDZJP5ORjsjb1sKgRXbSkjCbYSFy56oS qgBp75VpdT0ToJ9as4L7jADfsf9UEL+JpQD17PGvd3zpIkEvNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWV1ubACSFaY4Ul0beRc7rRN0t8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvODM5N2E4ZGMtMmM5Mi0z YmYyLTk1ZmEtMGQ0MjkzNDg3OWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGBQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6I99Mo3R2V7Ujs9kpBYd3EdoCfem8qUMSm4Y6ijc+B0wIrPaL9jVLE JAFX0JRhaM4DHEwoX1DhfjE7dH1iADrAHi9gsXL8iKxsB9DZm3p5a6gnbFVGiCHr Xr4jx5VTcyuKu3LdbW/M2wmuI1FaBmvqSXIXTvnhoAztes86oShP8Gw9vaoMHEqH NQzxgxRBG2FUNXjTM1bYqtOqffvk/WoQN/2MuYm6Xj/E5sGrztFuplCwiK55tc+q t6R7jG612T9dCZ2NkRURPpXFuPbgfndfqtlcRUeDfTqhckkbb5dknRcrSZKdyGYB vXcF3nCgV5hnB5s3/hAXQ66u6mVvCso= -----END CERTIFICATE-----Generated at Sat Sep 26 14:31:59 2026 by rpki-client