$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/28305b0b-be8f-303f-b4b1-257bf2b68dc3.roa File: 28305b0b-be8f-303f-b4b1-257bf2b68dc3.roa (raw, json) Hash identifier: 1yDTOgce6EUQzeSHgCCpjBlCKuDkCEcfcduBlCnBgYY= Subject key identifier: 72:17:40:B9:EE:FD:60:A6:CF:55:DD:57:F7:8F:EC:55:DF:D7:11:78 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973FA245427B4D54D60D0A0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/28305b0b-be8f-303f-b4b1-257bf2b68dc3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14663 IP address blocks: 216.198.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:fa:24:54:27:b4:d5:4d:60:d0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c0c16ead-fba8-4498-875e-cb63ca9abf2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:96:61:30:89:b9:df:65:32:da:4c:4d:95:49: d6:a8:76:97:b6:5f:8b:e3:57:17:be:e1:94:72:cb: 88:af:99:b7:94:d2:3a:e3:23:59:2a:28:8a:76:82: 2f:ba:e2:51:69:91:1b:8c:0e:e2:0c:b1:0d:f3:57: d2:33:89:6c:7a:f8:98:05:b7:e0:1b:ed:c0:49:ad: 1f:f9:23:38:ca:b1:84:63:66:a2:49:87:8a:4f:ad: 49:86:34:88:31:26:94:78:62:e9:ac:e6:62:ea:21: 97:03:67:a8:58:d3:67:f1:25:70:54:c7:49:c0:51: 36:bd:5d:05:9b:aa:18:bf:ef:07:24:d1:27:e0:58: 7f:99:67:47:1f:4f:51:8a:1c:f2:06:26:2d:de:e3: f5:01:ec:01:54:e6:7d:e2:7a:ab:a6:77:7d:37:b9: 84:50:fd:54:2c:89:bd:85:36:99:d4:a7:a5:0d:fa: 0f:cd:89:37:25:73:4a:51:87:be:27:54:5a:71:5f: 22:71:2c:d6:4b:ef:94:66:8a:3f:60:d8:6e:12:27: ac:14:bc:85:2d:3c:85:17:52:32:ca:fd:df:cd:db: 43:25:c1:b8:38:b7:81:57:fe:4d:be:05:e5:16:44: 8a:6f:52:05:9e:a5:c8:b4:d2:b3:8d:1b:eb:bb:3b: 62:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:17:40:B9:EE:FD:60:A6:CF:55:DD:57:F7:8F:EC:55:DF:D7:11:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/28305b0b-be8f-303f-b4b1-257bf2b68dc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 216.198.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:10:07:8e:c6:36:bd:d7:f3:0d:80:86:26:e4:f9:cd:7b:f2: c2:d8:81:fa:e0:87:1d:28:85:14:6e:32:25:54:c1:e4:ae:4d: 0a:d7:c0:9f:ff:aa:74:ab:da:d1:22:ac:58:e0:a0:59:0f:de: 1b:cd:19:86:0f:f9:2a:70:cc:3b:2c:b4:94:63:7f:39:2b:de: d4:31:ed:5a:ee:e3:0b:0f:a9:73:09:d7:22:df:7b:65:10:69: 12:9e:3c:02:c4:38:b6:3e:1c:3d:09:b4:ec:69:88:e6:87:15: da:ba:fb:11:79:bd:c0:6d:1e:40:e6:55:03:75:de:f3:22:df: 4f:bc:c0:4f:1c:bb:2a:ab:ae:17:91:8d:0d:d8:74:9d:a8:d5: 2c:bf:3e:d8:78:7b:81:c1:75:be:74:b8:24:23:a2:9a:08:c1: 16:70:01:57:d0:67:7c:96:b2:6d:4f:bd:f2:67:3f:63:9b:80: c5:0f:79:ee:d3:9c:1e:40:81:6a:92:39:f3:1f:4d:e8:40:24: 81:99:40:e5:54:ee:70:9a:c7:ba:49:ac:8b:9c:64:08:f0:3d: 7d:30:00:53:9b:ee:c9:cb:22:8f:5b:1a:59:cc:6b:b4:34:18: 8a:7a:df:5d:8e:97:88:db:ca:f7:19:10:50:59:18:32:0b:4a: 03:f6:e5:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc/okVCe01U1g0KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzBjMTZlYWQtZmJhOC00NDk4LTg3NWUtY2I2M2NhOWFiZjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpZhMIm532Uy2kxNlUnWqHaXtl+L41cXvuGU csuIr5m3lNI64yNZKiiKdoIvuuJRaZEbjA7iDLEN81fSM4lseviYBbfgG+3ASa0f +SM4yrGEY2aiSYeKT61JhjSIMSaUeGLprOZi6iGXA2eoWNNn8SVwVMdJwFE2vV0F m6oYv+8HJNEn4Fh/mWdHH09RihzyBiYt3uP1AewBVOZ94nqrpnd9N7mEUP1ULIm9 hTaZ1KelDfoPzYk3JXNKUYe+J1RacV8icSzWS++UZoo/YNhuEiesFLyFLTyFF1Iy yv3fzdtDJcG4OLeBV/5NvgXlFkSKb1IFnqXItNKzjRvruztiTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIXQLnu/WCmz1XdV/eP7FXf1xF4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjgzMDViMGItYmU4Zi0z MDNmLWI0YjEtMjU3YmYyYjY4ZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2MaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgQB47GNr3X8w2Ahibk+c178sLYgfrghx0ohRRuMiVUweSuTQrXwJ// qnSr2tEirFjgoFkP3hvNGYYP+SpwzDsstJRjfzkr3tQx7Vru4wsPqXMJ1yLfe2UQ aRKePALEOLY+HD0JtOxpiOaHFdq6+xF5vcBtHkDmVQN13vMi30+8wE8cuyqrrheR jQ3YdJ2o1Sy/Pth4e4HBdb50uCQjopoIwRZwAVfQZ3yWsm1PvfJnP2ObgMUPee7T nB5AgWqSOfMfTehAJIGZQOVU7nCax7pJrIucZAjwPX0wAFOb7snLIo9bGlnMa7Q0 GIp6312Ol4jbyvcZEFBZGDILSgP25f8= -----END CERTIFICATE-----Generated at Fri Oct 2 17:53:27 2026 by rpki-client