$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/ef421df9-34b8-3b5e-a7d2-ac13423717e9.roa File: ef421df9-34b8-3b5e-a7d2-ac13423717e9.roa (raw, json) Hash identifier: k+FFe56Yp5Guyx9Xi5GRNigErbdqJNwbqtlK113V02M= Subject key identifier: 8F:FE:01:A5:68:BC:38:30:64:F8:23:74:51:A2:88:03:85:A1:1E:21 Certificate issuer: /CN=47c2a6e6-9681-4930-9d85-167ea7f611c2 Certificate serial: 010D0C9F4328584F49754C656A0686A5FC6A1780 Authority key identifier: 09:B2:1E:6E:92:30:BC:66:84:26:F0:0C:C7:DB:C5:91:5A:AA:E9:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/ef421df9-34b8-3b5e-a7d2-ac13423717e9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 394413 IP address blocks: 159.28.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/47c2a6e6-9681-4930-9d85-167ea7f611c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/47c2a6e6-9681-4930-9d85-167ea7f611c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:4c:65:6a:06:86:a5:fc:6a:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47c2a6e6-9681-4930-9d85-167ea7f611c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bbb71cf6-1f07-409f-9343-dc1d6b6beac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:21:ec:ac:3a:7a:9d:a3:48:cd:99:de:e1:e2: 1b:13:1a:fd:d0:bb:18:e5:68:7b:99:d2:df:72:8e: 4c:42:81:dd:d9:09:2f:8c:d6:9f:53:31:d7:f3:dd: c0:0c:40:e5:94:5b:56:03:4c:8f:a2:8f:9d:5e:1d: aa:b5:d5:b3:62:cd:53:33:fa:58:8d:bb:cd:c7:96: b6:c3:2d:04:15:ee:b9:83:d0:5a:2d:9a:40:49:bd: 25:b1:5c:0e:59:83:8b:31:66:1f:a0:4f:c2:60:44: 59:7e:f4:6a:db:8d:f9:33:67:08:77:f4:5c:67:3c: 80:6f:ce:e7:94:ec:7c:d5:e0:53:e7:77:59:85:4e: 18:9f:b0:45:36:63:9a:66:e3:bc:59:19:77:4e:76: 64:b7:b6:a8:7d:77:61:3e:ad:9d:04:01:b0:7a:1a: 84:ac:60:0a:f1:9c:7e:95:22:76:73:52:db:f4:a8: c5:89:4d:3c:37:6b:15:90:03:fe:ab:2a:63:c5:ab: d4:86:ff:1c:a8:e5:42:f1:35:a8:ab:8e:d3:ad:aa: fc:c6:22:5f:32:21:ae:f8:de:b3:01:f6:7e:1d:29: 16:dc:d2:d0:d3:ca:7b:35:d6:6d:b3:7a:28:14:e0: 6f:10:74:6c:29:ae:d5:1e:f7:fb:79:48:bd:ac:8c: 7c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:FE:01:A5:68:BC:38:30:64:F8:23:74:51:A2:88:03:85:A1:1E:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/ef421df9-34b8-3b5e-a7d2-ac13423717e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/47c2a6e6-9681-4930-9d85-167ea7f611c2.crl X509v3 Authority Key Identifier: keyid:09:B2:1E:6E:92:30:BC:66:84:26:F0:0C:C7:DB:C5:91:5A:AA:E9:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2.cer sbgp-ipAddrBlock: critical IPv4: 159.28.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:9a:40:f0:69:7c:d5:c7:59:9f:11:9a:4a:2c:45:b3:36:b0: 4b:14:ea:d9:f8:e4:bd:b5:d0:10:69:83:40:c3:2d:79:20:67: 09:ea:d4:70:fb:2f:08:89:3b:eb:42:08:83:8d:bb:5d:ae:8d: 32:28:fe:ad:f4:5e:fc:39:1b:c2:2c:91:96:4a:ed:6a:9a:fd: 04:7b:6f:bb:ca:e5:02:08:a0:e1:04:fe:b7:20:88:ad:02:3f: 64:0f:28:83:2d:59:b8:1e:13:c5:74:bd:8f:96:4c:97:a6:6b: 4e:eb:b4:a3:a3:ff:0b:60:cb:df:55:cd:09:e3:77:3a:4c:c3: 2f:a8:3c:1f:95:ad:0f:6a:e6:7a:9e:ec:1e:f3:9f:f9:3b:09: 6b:05:97:ef:ca:b0:86:cc:46:31:69:ee:4b:b0:3b:33:45:1c: 3f:43:a8:30:0c:a8:18:e7:02:a6:c0:d6:91:2c:4b:58:19:6d: 57:9f:10:58:5c:d3:c6:df:18:82:15:fb:47:ff:69:01:7d:91: 9b:21:8d:64:e7:1b:9b:20:39:aa:ac:22:28:28:df:c3:23:a1: 3d:c5:95:76:58:25:ac:15:ef:a6:3f:42:f2:3b:d0:cc:72:6c: 82:78:89:17:b7:88:3d:5e:19:eb:11:26:8c:b1:41:b9:0c:b7: 67:4d:59:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdUxlagaGpfxqF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdjMmE2ZTYtOTY4MS00OTMwLTlkODUtMTY3ZWE3ZjYx MWMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmJiNzFjZjYtMWYwNy00MDlmLTkzNDMtZGMxZDZiNmJlYWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyHsrDp6naNIzZne4eIbExr90LsY5Wh7mdLf co5MQoHd2QkvjNafUzHX893ADEDllFtWA0yPoo+dXh2qtdWzYs1TM/pYjbvNx5a2 wy0EFe65g9BaLZpASb0lsVwOWYOLMWYfoE/CYERZfvRq2435M2cId/RcZzyAb87n lOx81eBT53dZhU4Yn7BFNmOaZuO8WRl3TnZkt7aofXdhPq2dBAGwehqErGAK8Zx+ lSJ2c1Lb9KjFiU08N2sVkAP+qypjxavUhv8cqOVC8TWoq47Trar8xiJfMiGu+N6z AfZ+HSkW3NLQ08p7NdZts3ooFOBvEHRsKa7VHvf7eUi9rIx8fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/+AaVovDgwZPgjdFGiiAOFoR4hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80N2My YTZlNi05NjgxLTQ5MzAtOWQ4NS0xNjdlYTdmNjExYzIvZWY0MjFkZjktMzRiOC0z YjVlLWE3ZDItYWMxMzQyMzcxN2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDdjMmE2ZTYtOTY4MS00OTMwLTlk ODUtMTY3ZWE3ZjYxMWMyLzQ3YzJhNmU2LTk2ODEtNDkzMC05ZDg1LTE2N2VhN2Y2 MTFjMi5jcmwwHwYDVR0jBBgwFoAUCbIebpIwvGaEJvAMx9vFkVqq6SgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80N2MyYTZlNi05NjgxLTQ5MzAtOWQ4NS0xNjdl YTdmNjExYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGnxwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeaQPBpfNXHWZ8RmkosRbM2sEsU6tn45L210BBpg0DDLXkgZwnq1HD7 LwiJO+tCCIONu12ujTIo/q30Xvw5G8IskZZK7Wqa/QR7b7vK5QIIoOEE/rcgiK0C P2QPKIMtWbgeE8V0vY+WTJema07rtKOj/wtgy99VzQnjdzpMwy+oPB+VrQ9q5nqe 7B7zn/k7CWsFl+/KsIbMRjFp7kuwOzNFHD9DqDAMqBjnAqbA1pEsS1gZbVefEFhc 08bfGIIV+0f/aQF9kZshjWTnG5sgOaqsIigo38MjoT3FlXZYJawV76Y/QvI70Mxy bIJ4iRe3iD1eGesRJoyxQbkMt2dNWZU= -----END CERTIFICATE-----Generated at Sun Oct 11 07:05:17 2026 by rpki-client