$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/88e0aea8-6634-3431-8e89-e44e08e24572.roa File: 88e0aea8-6634-3431-8e89-e44e08e24572.roa (raw, json) Hash identifier: OeIIFiKSxAjYhUFplQi/TK0o0GRQz7htQdqPXQ9yja8= Subject key identifier: 3C:9F:AF:24:59:DD:F4:99:5A:02:5E:47:69:8B:C4:67:9F:67:8A:85 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584F655E6C5F9EF7D77909507B80 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/88e0aea8-6634-3431-8e89-e44e08e24572.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 64267 IP address blocks: 172.96.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5e:6c:5f:9e:f7:d7:79:09:50:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=10bcec02-23a4-47d5-a226-4da440ee20f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f4:4a:70:86:a8:86:53:8e:1e:5a:af:13:2c: a3:e0:00:49:d6:e5:5c:ce:1a:2a:2c:c0:2c:b0:8f: 1b:56:07:25:b7:b3:92:63:e0:3e:4e:93:f1:00:22: 51:4d:2d:61:ef:a1:48:93:7c:a3:7f:3e:62:9a:fe: 30:a0:82:06:34:bd:46:35:ef:33:b9:1b:5e:c1:bd: 89:f5:c3:d6:91:c9:ae:8f:89:14:97:27:7b:d9:b4: 67:c8:8c:cd:6f:ac:9f:b0:7e:51:a1:b0:6a:61:dc: fc:ff:ce:4e:47:51:56:d5:61:03:6e:d4:d8:a5:41: df:40:f6:c8:5a:3e:07:28:ec:81:54:ff:ad:60:f1: 09:29:0f:8e:ab:2a:aa:a6:8f:6a:ea:5d:8b:b2:ee: 06:c9:9a:a0:a7:88:11:c5:fd:57:f7:b7:64:c7:c5: 68:58:74:f0:0a:ea:e9:f3:9a:ec:4b:27:21:35:f7: 1b:e0:53:a9:91:5a:66:54:7c:74:4f:bf:89:4d:e6: 20:06:8a:b4:15:cc:f8:02:b6:6c:d9:c0:00:ef:1d: 47:5e:9a:c1:c4:bf:ae:8f:5b:6e:b6:9b:c8:2c:71: 81:ca:3f:cd:44:e5:71:36:b8:13:57:77:f5:9c:51: 78:7c:b2:9e:aa:3d:6b:2b:54:13:f0:7f:72:a9:4a: b4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:9F:AF:24:59:DD:F4:99:5A:02:5E:47:69:8B:C4:67:9F:67:8A:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/88e0aea8-6634-3431-8e89-e44e08e24572.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 172.96.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:1b:d6:52:e8:36:cc:be:17:65:d7:eb:ae:bd:1d:e2:46:72: c1:b2:c7:7f:6c:e7:95:80:b9:95:48:0f:38:46:69:80:4c:8d: 7a:db:de:e3:24:4b:86:62:da:34:8a:d9:5a:a9:b1:10:ac:3a: a5:36:83:6c:bc:e4:3a:40:2c:30:09:2c:51:35:65:10:2d:72: 85:03:79:4f:8b:cb:51:d4:a7:84:8e:23:91:93:71:4d:73:61: 97:22:10:e4:b3:ce:05:d8:cb:9a:4a:c3:55:e0:1d:f2:40:fa: 31:f1:66:92:cd:46:5b:12:8f:37:da:f8:2c:d0:f5:f8:0b:c6: 22:4d:d7:c3:42:fc:ee:99:06:6d:ed:a6:b1:cb:8f:e1:9a:33: 59:bb:55:1e:66:82:e7:3c:ab:bc:84:5e:ee:28:67:7e:8b:f7: df:58:29:47:db:c0:2c:9a:8e:97:c7:09:94:30:11:8b:97:ba: a3:4b:fb:21:f0:dd:d8:5c:eb:7c:fd:83:fe:f4:5a:8d:05:9d: c1:b4:07:7f:07:1a:79:f1:b9:cd:3e:59:32:6e:bb:1c:41:9e: d0:49:18:b5:dd:2a:3c:0c:f9:69:48:25:2b:49:00:88:24:5c: 05:33:0b:12:61:c5:fc:9e:43:e2:7a:0b:0e:10:10:94:20:b3: 66:ad:47:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXmxfnvfXeQlQe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk MTBiY2VjMDItMjNhNC00N2Q1LWEyMjYtNGRhNDQwZWUyMGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivRKcIaohlOOHlqvEyyj4ABJ1uVczhoqLMAs sI8bVgclt7OSY+A+TpPxACJRTS1h76FIk3yjfz5imv4woIIGNL1GNe8zuRtewb2J 9cPWkcmuj4kUlyd72bRnyIzNb6yfsH5RobBqYdz8/85OR1FW1WEDbtTYpUHfQPbI Wj4HKOyBVP+tYPEJKQ+Oqyqqpo9q6l2Lsu4GyZqgp4gRxf1X97dkx8VoWHTwCurp 85rsSychNfcb4FOpkVpmVHx0T7+JTeYgBoq0Fcz4ArZs2cAA7x1HXprBxL+uj1tu tpvILHGByj/NROVxNrgTV3f1nFF4fLKeqj1rK1QT8H9yqUq07QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyfryRZ3fSZWgJeR2mLxGefZ4qFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvODhlMGFlYTgtNjYzNC0z NDMxLThlODktZTQ0ZTA4ZTI0NTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGBbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANAb1lLoNsy+F2XX6669HeJGcsGyx39s55WAuZVIDzhGaYBMjXrb3uMk S4Zi2jSK2VqpsRCsOqU2g2y85DpALDAJLFE1ZRAtcoUDeU+Ly1HUp4SOI5GTcU1z YZciEOSzzgXYy5pKw1XgHfJA+jHxZpLNRlsSjzfa+CzQ9fgLxiJN18NC/O6ZBm3t prHLj+GaM1m7VR5mguc8q7yEXu4oZ36L999YKUfbwCyajpfHCZQwEYuXuqNL+yHw 3dhc63z9g/70Wo0FncG0B38HGnnxuc0+WTJuuxxBntBJGLXdKjwM+WlIJStJAIgk XAUzCxJhxfyeQ+J6Cw4QEJQgs2atR1c= -----END CERTIFICATE-----Generated at Thu Oct 8 16:11:16 2026 by rpki-client