$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ffcfc35f-b32c-303c-87a6-754586bddf01.roa File: ffcfc35f-b32c-303c-87a6-754586bddf01.roa (raw, json) Hash identifier: i6VGG7LPsfbDpHDD1nGg0HU0XiyjicnEGmJhWT4t5VA= Subject key identifier: 64:AE:47:99:9A:80:2D:92:36:B0:B4:9C:58:6D:B4:F0:67:30:76:EE Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584F3CE2983C63FD3DE0F5097B80 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ffcfc35f-b32c-303c-87a6-754586bddf01.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 172.96.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:98:3c:63:fd:3d:e0:f5:09:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=74d5051a-8a1f-4ef0-a80f-08a0802b74c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:63:bf:3f:02:f7:0c:46:12:86:1f:dd:2d:35: f1:b2:b2:2d:b9:90:a7:01:81:d2:1a:3c:2e:08:b8: f5:43:14:ec:15:ce:43:ed:91:1f:86:cb:05:22:70: fd:19:d4:3f:7f:d5:f9:e1:de:fb:80:da:43:4b:29: 74:6e:1f:46:da:14:ca:19:37:bf:fb:81:58:b9:bb: 3d:54:b8:66:44:54:ce:60:65:62:69:49:54:ee:0a: 2d:53:25:06:65:dd:74:40:b6:ee:ca:1c:53:0e:88: 04:27:1c:48:6b:0e:0a:94:a2:00:76:cd:ed:50:f8: d2:6c:73:50:38:b9:89:77:9a:77:96:55:c2:09:50: 78:cd:d9:8d:be:d8:fd:e9:9b:9a:ce:e7:df:1f:bd: ea:32:37:b8:ab:95:46:e8:49:a5:7b:7d:19:0d:a6: 77:4f:3f:ad:d3:b3:12:ac:77:28:dd:2f:9c:e6:af: e0:2e:76:33:2c:c1:69:4f:99:dd:7e:00:3f:a1:57: 38:41:3f:51:30:db:17:e5:d4:da:b1:ae:8d:d9:e1: f8:40:8c:6b:df:00:a3:65:1e:a0:14:f8:6d:63:af: bd:5b:57:90:ba:f2:fb:49:14:57:22:91:6c:28:5e: 46:a1:2d:82:c4:4f:85:e5:89:15:81:02:7f:ca:5c: 6b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:AE:47:99:9A:80:2D:92:36:B0:B4:9C:58:6D:B4:F0:67:30:76:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ffcfc35f-b32c-303c-87a6-754586bddf01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 172.96.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:0a:9c:91:46:71:26:24:dd:65:9d:48:a2:35:56:ca:3b:e6: ba:74:0a:58:c9:f8:48:30:9b:cd:f6:7f:cf:9c:a1:32:cd:90: 51:24:81:13:c8:6e:63:48:e9:d6:e0:53:80:b5:47:27:57:5f: 2a:1f:4f:3f:16:16:0e:ed:c7:86:af:9a:08:5a:0e:e8:98:26: 9a:64:f4:0e:d9:f5:ae:78:2a:75:ba:bc:c7:cc:87:de:f4:20: c8:ca:8a:0d:33:4b:82:83:8d:8a:5a:69:f1:0d:65:05:ee:4d: f1:ec:f2:ac:bb:97:52:21:33:cc:37:b3:17:f6:76:54:05:44: 86:5f:30:48:ca:80:6a:86:39:39:c2:86:fb:8e:55:60:92:89: 77:f7:46:a9:f8:b3:0f:f4:f2:06:ed:6c:fb:f1:dc:d6:43:70: df:03:18:94:6f:45:01:38:7b:05:73:a7:ea:51:a0:a1:b7:4f: 7f:c1:7e:ea:78:52:f6:f5:3c:a3:ce:cb:f6:dd:dc:3f:4d:55: 14:5c:12:0a:15:e4:a6:2f:d8:65:8a:00:e6:a1:c3:5d:39:40: 8c:26:87:da:22:5d:e1:f9:8f:65:28:1a:2e:4b:7c:8a:4d:30: db:06:88:bd:29:a9:2f:25:ef:ec:dd:9e:c9:84:31:4f:72:69: 04:09:91:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884pg8Y/094PUJe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk NzRkNTA1MWEtOGExZi00ZWYwLWE4MGYtMDhhMDgwMmI3NGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGO/PwL3DEYShh/dLTXxsrItuZCnAYHSGjwu CLj1QxTsFc5D7ZEfhssFInD9GdQ/f9X54d77gNpDSyl0bh9G2hTKGTe/+4FYubs9 VLhmRFTOYGViaUlU7gotUyUGZd10QLbuyhxTDogEJxxIaw4KlKIAds3tUPjSbHNQ OLmJd5p3llXCCVB4zdmNvtj96ZuazuffH73qMje4q5VG6Emle30ZDaZ3Tz+t07MS rHco3S+c5q/gLnYzLMFpT5ndfgA/oVc4QT9RMNsX5dTasa6N2eH4QIxr3wCjZR6g FPhtY6+9W1eQuvL7SRRXIpFsKF5GoS2CxE+F5YkVgQJ/ylxrEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSuR5magC2SNrC0nFhttPBnMHbuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZmZjZmMzNWYtYjMyYy0z MDNjLTg3YTYtNzU0NTg2YmRkZjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGBfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYKnJFGcSYk3WWdSKI1Vso75rp0CljJ+Egwm832f8+coTLNkFEkgRPI bmNI6dbgU4C1RydXXyofTz8WFg7tx4avmghaDuiYJppk9A7Z9a54KnW6vMfMh970 IMjKig0zS4KDjYpaafENZQXuTfHs8qy7l1IhM8w3sxf2dlQFRIZfMEjKgGqGOTnC hvuOVWCSiXf3Rqn4sw/08gbtbPvx3NZDcN8DGJRvRQE4ewVzp+pRoKG3T3/Bfup4 Uvb1PKPOy/bd3D9NVRRcEgoV5KYv2GWKAOahw105QIwmh9oiXeH5j2UoGi5LfIpN MNsGiL0pqS8l7+zdnsmEMU9yaQQJkXk= -----END CERTIFICATE-----Generated at Sat Sep 26 03:54:39 2026 by rpki-client