$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8ebe2c88-552d-398a-b3e0-2f701b9b6bff.roa File: 8ebe2c88-552d-398a-b3e0-2f701b9b6bff.roa (raw, json) Hash identifier: QeG0Fpii4+JSIdZs8HGzx2YSFjhIpzcpcSxwKhygYoc= Subject key identifier: 09:25:51:3E:C7:9D:56:47:95:F9:FF:26:04:58:C3:C4:2C:2D:83:88 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584F3CE282C495A52CE6BB6A3E00 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8ebe2c88-552d-398a-b3e0-2f701b9b6bff.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 22516 IP address blocks: 208.89.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:82:c4:95:a5:2c:e6:bb:6a:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=f50c1501-8e74-4646-9c50-d3c8ee84164b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6f:f0:5d:02:6a:17:f9:ce:89:47:75:9d:62: 2d:5c:66:0c:02:33:f7:9a:2c:be:bf:9b:0c:28:7d: 65:3a:93:bd:c8:28:0c:fd:c5:61:7f:9e:14:f7:78: 41:e2:83:84:e9:9d:23:15:19:24:73:c7:7b:1b:80: d4:97:45:81:ed:04:70:9a:e2:03:4c:30:d8:c7:c7: 5b:48:0e:28:67:eb:5d:18:6b:d0:b9:dd:78:6b:cd: 8e:c0:05:68:f5:a2:c4:b5:7f:59:b6:75:4e:bf:05: 91:ce:dd:6c:e8:29:7e:f1:30:97:bf:69:27:7c:a0: 9a:30:69:ae:3c:7e:7a:4f:d0:25:ad:36:6d:e6:ce: 13:b1:23:bf:0b:bb:f2:39:fe:a3:ab:73:6e:5f:09: e0:1f:25:69:0f:77:fb:19:cb:08:bc:a9:95:ac:19: cf:3e:dd:f9:a9:93:7b:1d:28:ab:e9:dc:0c:a5:de: 00:d5:bb:1d:c4:93:ec:f1:f6:27:0a:41:90:89:21: fc:0c:35:57:51:0a:ae:40:3a:77:19:d6:52:8b:45: fd:81:57:36:c0:a6:a7:3e:80:f7:36:70:ba:5b:e3: 15:cf:04:a9:52:79:5a:85:4b:7e:d3:88:c3:48:b7: d7:15:7a:9b:bd:de:ed:bb:f7:43:93:fc:29:75:9d: 86:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:25:51:3E:C7:9D:56:47:95:F9:FF:26:04:58:C3:C4:2C:2D:83:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8ebe2c88-552d-398a-b3e0-2f701b9b6bff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 208.89.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:80:fa:69:b6:5f:dd:ed:7d:be:25:0f:eb:63:71:d8:f7:39: bf:fd:1c:67:d0:d3:79:bf:a7:d9:b8:85:62:47:e7:a5:0a:17: aa:bd:e4:9d:26:90:4f:c0:51:d9:fd:56:34:ae:cd:39:c4:ae: 8e:a9:4d:f8:08:42:ed:f5:0f:e7:35:69:f2:71:d7:52:4c:f8: 74:66:e0:e9:35:2e:89:6d:45:84:57:38:86:41:36:5a:02:fc: 72:87:e1:c4:63:0b:3e:61:29:52:36:c6:f2:e9:9f:0f:42:5c: 4f:57:e2:ad:bb:6b:57:8e:5b:0d:ba:97:b7:4c:2a:58:fa:6b: 40:04:3c:23:ea:c3:6d:86:08:2a:e8:8b:48:f2:03:7e:20:c8: c7:04:75:7a:2f:c5:00:f9:00:56:12:23:c3:ce:e1:ba:59:5c: ed:a8:9c:e0:7d:be:35:c6:d2:06:d5:f7:5c:08:cc:e7:b1:67: db:74:17:a2:fa:5e:0d:4d:26:9d:4d:7d:cc:d4:9e:88:6c:8d: 07:b0:bd:97:5d:38:3b:4c:ac:ef:d2:5e:32:53:b4:65:e7:aa: 1e:40:cb:0b:7b:a3:3b:4c:29:18:65:ae:c8:23:f1:0b:31:0c: fb:5f:92:9c:3a:c7:42:bf:fb:58:ce:b2:4d:7d:5e:fb:61:81: f4:f9:7b:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884oLElaUs5rtqPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk ZjUwYzE1MDEtOGU3NC00NjQ2LTljNTAtZDNjOGVlODQxNjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW/wXQJqF/nOiUd1nWItXGYMAjP3miy+v5sM KH1lOpO9yCgM/cVhf54U93hB4oOE6Z0jFRkkc8d7G4DUl0WB7QRwmuIDTDDYx8db SA4oZ+tdGGvQud14a82OwAVo9aLEtX9ZtnVOvwWRzt1s6Cl+8TCXv2knfKCaMGmu PH56T9AlrTZt5s4TsSO/C7vyOf6jq3NuXwngHyVpD3f7GcsIvKmVrBnPPt35qZN7 HSir6dwMpd4A1bsdxJPs8fYnCkGQiSH8DDVXUQquQDp3GdZSi0X9gVc2wKanPoD3 NnC6W+MVzwSpUnlahUt+04jDSLfXFXqbvd7tu/dDk/wpdZ2GTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAklUT7HnVZHlfn/JgRYw8QsLYOIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvOGViZTJjODgtNTUyZC0z OThhLWIzZTAtMmY3MDFiOWI2YmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FnxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqA+mm2X93tfb4lD+tjcdj3Ob/9HGfQ03m/p9m4hWJH56UKF6q95J0m kE/AUdn9VjSuzTnEro6pTfgIQu31D+c1afJx11JM+HRm4Ok1LoltRYRXOIZBNloC /HKH4cRjCz5hKVI2xvLpnw9CXE9X4q27a1eOWw26l7dMKlj6a0AEPCPqw22GCCro i0jyA34gyMcEdXovxQD5AFYSI8PO4bpZXO2onOB9vjXG0gbV91wIzOexZ9t0F6L6 Xg1NJp1NfczUnohsjQewvZddODtMrO/SXjJTtGXnqh5Aywt7oztMKRhlrsgj8Qsx DPtfkpw6x0K/+1jOsk19XvthgfT5e10= -----END CERTIFICATE-----Generated at Fri Sep 25 20:34:59 2026 by rpki-client