$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/2a28dd70-b06b-3843-af4d-73a9482b3961.roa File: 2a28dd70-b06b-3843-af4d-73a9482b3961.roa (raw, json) Hash identifier: fZdcytv+ddp7GDVVpRx+gkZYiL7o2xYv7kNxm2QCACo= Subject key identifier: 99:AB:55:0F:77:31:89:1D:4E:20:B1:6C:94:AE:DF:D1:18:5A:03:98 Certificate issuer: /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd Certificate serial: 010D0C9F4328584F51D2ACB4B38D5004D4A3A340 Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/2a28dd70-b06b-3843-af4d-73a9482b3961.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 7862 IP address blocks: 146.23.58.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:ac:b4:b3:8d:50:04:d4:a3:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=1e637998-826a-40db-8ba6-d7b0c4646fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cd:72:01:e4:55:4f:b2:d3:4e:4d:57:0e:88: 46:4c:43:8d:8b:1e:7e:72:35:4c:0e:d5:d0:c6:95: 80:6b:dd:64:11:e2:9e:48:ca:ba:c7:11:82:ea:94: 64:f3:7f:e7:15:c7:0a:19:6f:18:17:7c:dd:81:f7: c7:9e:b0:18:0e:3a:de:13:5d:89:17:be:1c:06:d9: eb:c4:32:bd:9d:5c:8b:c8:63:0c:e3:31:03:11:55: 21:02:0e:1d:9c:0d:b5:50:f7:33:94:d4:ee:db:1f: f6:91:40:48:14:84:b1:04:24:05:6c:49:5e:50:df: 88:6a:7a:a7:3a:6e:b2:46:b1:d8:63:6a:27:de:8c: f6:8c:e2:c4:08:0e:7b:d0:0e:bd:04:a7:a9:c1:9c: 1d:9a:08:a7:90:41:63:d9:00:61:90:e4:00:ff:c9: 5c:13:2d:65:11:fb:c3:8c:af:f6:d6:9f:d0:e7:72: 33:e8:c4:9a:8b:3b:cc:46:71:8c:40:d5:b8:2f:a5: f8:62:fe:1e:f8:12:93:c2:da:66:e1:c5:38:9b:a3: cc:f1:5e:00:a6:86:25:90:b7:92:65:d8:00:99:ee: 76:a2:9a:7f:87:36:a5:60:ab:d4:e9:17:d4:a5:e0: 50:3d:4c:d5:02:33:4d:5f:b8:93:cf:ad:47:54:9d: db:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AB:55:0F:77:31:89:1D:4E:20:B1:6C:94:AE:DF:D1:18:5A:03:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/2a28dd70-b06b-3843-af4d-73a9482b3961.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl X509v3 Authority Key Identifier: keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer sbgp-ipAddrBlock: critical IPv4: 146.23.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:6a:0f:0e:b4:ef:bd:00:cc:a8:31:73:9e:f8:b9:f3:db:43: 45:85:58:3e:56:65:00:03:0d:3e:30:cf:3b:d3:98:7e:c1:5e: 65:bb:68:45:30:ac:c8:28:e6:ba:dd:d7:2c:65:b4:89:7f:9a: 04:37:5c:6c:67:6d:84:27:da:53:9e:eb:04:a4:46:2f:8c:57: 43:93:9f:e5:74:3c:d8:16:4f:7f:d6:8c:f8:9b:eb:8a:e8:bd: c9:18:bf:15:97:f5:51:10:04:8d:8a:e0:a9:54:d7:69:bc:5c: 7c:c8:a4:80:be:0b:c3:55:48:63:13:69:d8:0c:45:e3:22:30: 53:87:b2:af:bb:b3:a2:d7:7d:c4:03:2e:fd:1b:cd:7c:66:e2: db:4f:d3:02:36:21:65:be:04:da:be:cc:29:d8:7d:9d:4c:b2: 5e:cb:1f:d8:c0:52:be:02:f4:ca:77:8a:df:98:1a:6e:43:17: 67:96:03:d8:0f:fc:19:4e:ab:32:ae:f9:d2:ab:c6:de:eb:d1: e2:0d:bb:da:96:6c:7a:bd:7d:2a:71:fb:55:ae:d4:c3:19:8e: a4:da:cc:2d:cf:b7:d2:90:89:42:d9:fe:d7:f6:f3:c9:0e:0e: c7:9c:69:d9:c1:eb:0c:fe:49:d9:40:01:27:45:df:63:40:37: 0a:59:a9:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0qy0s41QBNSjo0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlYTg5YjQtZWQ4NS00NjNmLTgzZDktODQ1MzMwMGJm MmJkMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk MWU2Mzc5OTgtODI2YS00MGRiLThiYTYtZDdiMGM0NjQ2ZmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt81yAeRVT7LTTk1XDohGTEONix5+cjVMDtXQ xpWAa91kEeKeSMq6xxGC6pRk83/nFccKGW8YF3zdgffHnrAYDjreE12JF74cBtnr xDK9nVyLyGMM4zEDEVUhAg4dnA21UPczlNTu2x/2kUBIFISxBCQFbEleUN+Ianqn Om6yRrHYY2on3oz2jOLECA570A69BKepwZwdmginkEFj2QBhkOQA/8lcEy1lEfvD jK/21p/Q53Iz6MSaizvMRnGMQNW4L6X4Yv4e+BKTwtpm4cU4m6PM8V4ApoYlkLeS ZdgAme52opp/hzalYKvU6RfUpeBQPUzVAjNNX7iTz61HVJ3bKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmrVQ93MYkdTiCxbJSu39EYWgOYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MWVh ODliNC1lZDg1LTQ2M2YtODNkOS04NDUzMzAwYmYyYmQvMmEyOGRkNzAtYjA2Yi0z ODQzLWFmNGQtNzNhOTQ4MmIzOTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzFlYTg5YjQtZWQ4NS00NjNmLTgz ZDktODQ1MzMwMGJmMmJkLzcxZWE4OWI0LWVkODUtNDYzZi04M2Q5LTg0NTMzMDBi ZjJiZC5jcmwwHwYDVR0jBBgwFoAUAPoosGNeNAxamY5KWp40aTpaVmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83MWVhODliNC1lZDg1LTQ2M2YtODNkOS04NDUz MzAwYmYyYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkhc6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdqDw60770AzKgxc574ufPbQ0WFWD5WZQADDT4wzzvTmH7BXmW7aEUw rMgo5rrd1yxltIl/mgQ3XGxnbYQn2lOe6wSkRi+MV0OTn+V0PNgWT3/WjPib64ro vckYvxWX9VEQBI2K4KlU12m8XHzIpIC+C8NVSGMTadgMReMiMFOHsq+7s6LXfcQD Lv0bzXxm4ttP0wI2IWW+BNq+zCnYfZ1Msl7LH9jAUr4C9Mp3it+YGm5DF2eWA9gP /BlOqzKu+dKrxt7r0eINu9qWbHq9fSpx+1Wu1MMZjqTazC3Pt9KQiULZ/tf288kO DsecadnB6wz+SdlAASdF32NANwpZqVU= -----END CERTIFICATE-----Generated at Tue Oct 6 13:58:09 2026 by rpki-client