$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/44ba29f5-40b2-36d4-be02-3b638e048d12.roa File: 44ba29f5-40b2-36d4-be02-3b638e048d12.roa (raw, json) Hash identifier: QpXkhG880usxO/Y8IZP6bSMA3W6b/94o410/vgJkd9w= Subject key identifier: 54:FD:8F:1F:FB:E1:D1:92:98:9D:A9:6E:A2:AC:09:DD:60:1C:5B:89 Certificate issuer: /CN=71e68809-5436-4288-ad80-0df35fa0b945 Certificate serial: 010D0C9F4328584F49873EF35666A7302040E1C0 Authority key identifier: 10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/44ba29f5-40b2-36d4-be02-3b638e048d12.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 192.28.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:3e:f3:56:66:a7:30:20:40:e1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71e68809-5436-4288-ad80-0df35fa0b945 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a7d83ae0-8276-4615-a953-827f7c12ee53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:88:39:b1:fc:0b:47:78:d7:de:09:81:f5:e9: 3e:dc:81:7f:33:91:00:2f:49:ca:ad:98:ec:9f:a8: 20:b6:14:ea:cb:a6:86:95:c8:06:ac:8c:ba:1b:cc: 1d:70:b3:2e:d3:84:bf:54:88:e3:5e:d0:17:b9:3b: 3b:8a:79:3d:0e:57:5b:d7:b4:81:d6:71:a4:3e:c7: 1e:df:4d:b4:f9:c1:f5:e0:95:66:7e:a8:cf:a3:c5: 78:90:c1:b9:ab:8b:6f:19:f3:b6:68:9f:cc:8f:5b: 92:34:34:9a:e8:c9:36:05:3c:e8:71:00:03:b5:9c: 32:92:f2:b8:1b:71:01:22:80:7d:be:11:64:93:b2: 4d:d1:20:c3:fc:10:ea:fe:17:a4:f1:2d:68:b0:27: 20:07:43:37:e0:8a:58:80:2c:77:1c:3b:b5:0d:61: 0c:41:d9:ce:73:4c:87:1b:b5:97:d3:bd:22:53:46: 9f:4d:79:c9:a4:1c:76:1b:c9:f9:14:8b:44:01:89: 96:6f:45:f2:d2:22:59:29:96:35:4d:82:d1:9a:17: da:a4:76:31:cf:b8:ab:70:8c:2f:8a:ca:f1:2d:ff: 69:ae:86:76:e1:7e:65:e1:d2:6a:4b:6c:1c:38:ab: 2e:5b:34:1c:87:31:1f:1f:1f:12:37:e7:39:9a:50: 19:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:FD:8F:1F:FB:E1:D1:92:98:9D:A9:6E:A2:AC:09:DD:60:1C:5B:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/44ba29f5-40b2-36d4-be02-3b638e048d12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl X509v3 Authority Key Identifier: keyid:10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer sbgp-ipAddrBlock: critical IPv4: 192.28.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:72:a1:1c:1a:cd:f2:22:d8:5b:60:18:25:89:b5:fe:22:64: 3b:5e:ce:d8:f9:40:46:ad:c3:ae:ad:16:c0:bd:b3:2f:fc:36: 59:2d:15:cc:b7:7d:71:78:45:02:0d:1f:e6:cd:a1:45:2c:fc: 09:41:29:54:d3:e9:35:4d:17:70:de:a0:1e:c3:1b:46:a5:55: 91:ca:93:5b:9c:a0:44:94:e6:04:83:1b:d7:28:2c:d0:98:60: e5:86:6a:8e:d2:d3:f9:19:14:a2:5a:eb:4a:36:de:96:62:7b: bb:98:ff:8e:d7:90:2f:09:ab:d5:4d:4c:dd:7c:72:55:41:c3: 7d:f1:84:58:db:6e:63:b2:4e:76:19:5e:f9:9a:0f:7d:87:e9: 76:bc:98:32:57:59:9c:52:3a:9d:3a:d9:7f:24:bc:88:cc:c7: c6:76:ae:96:e8:a5:67:9d:66:d4:3c:34:bf:e6:a4:8f:ab:19: b9:7f:2f:3e:90:7d:07:37:0c:d7:db:0b:2c:f4:39:52:3f:46: 08:c9:df:2c:bc:b1:dc:35:2d:90:7a:a7:57:fc:5d:67:b3:5d: 20:06:10:f6:b7:01:bf:0f:e9:b7:cd:6a:5f:3f:f4:af:35:e7: cb:cb:f4:88:ce:c9:45:a7:64:eb:30:d6:0f:91:dc:93:b1:ac: 12:db:23:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jhz7zVmanMCBA4cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlNjg4MDktNTQzNi00Mjg4LWFkODAtMGRmMzVmYTBi OTQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTdkODNhZTAtODI3Ni00NjE1LWE5NTMtODI3ZjdjMTJlZTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIg5sfwLR3jX3gmB9ek+3IF/M5EAL0nKrZjs n6ggthTqy6aGlcgGrIy6G8wdcLMu04S/VIjjXtAXuTs7ink9Dldb17SB1nGkPsce 3020+cH14JVmfqjPo8V4kMG5q4tvGfO2aJ/Mj1uSNDSa6Mk2BTzocQADtZwykvK4 G3EBIoB9vhFkk7JN0SDD/BDq/hek8S1osCcgB0M34IpYgCx3HDu1DWEMQdnOc0yH G7WX070iU0afTXnJpBx2G8n5FItEAYmWb0Xy0iJZKZY1TYLRmhfapHYxz7ircIwv isrxLf9proZ24X5l4dJqS2wcOKsuWzQchzEfHx8SN+c5mlAZ1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFT9jx/74dGSmJ2pbqKsCd1gHFuJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2 ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYzNWZhMGI5NDUvNDRiYTI5ZjUtNDBiMi0z NmQ0LWJlMDItM2I2MzhlMDQ4ZDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzFlNjg4MDktNTQzNi00Mjg4LWFk ODAtMGRmMzVmYTBiOTQ1LzcxZTY4ODA5LTU0MzYtNDI4OC1hZDgwLTBkZjM1ZmEw Yjk0NS5jcmwwHwYDVR0jBBgwFoAUEFAAX4YwKrkehfZQ9nLTMqW7VE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYz NWZhMGI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwBwWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1yoRwazfIi2FtgGCWJtf4iZDteztj5QEatw66tFsC9sy/8NlktFcy3 fXF4RQINH+bNoUUs/AlBKVTT6TVNF3DeoB7DG0alVZHKk1ucoESU5gSDG9coLNCY YOWGao7S0/kZFKJa60o23pZie7uY/47XkC8Jq9VNTN18clVBw33xhFjbbmOyTnYZ XvmaD32H6Xa8mDJXWZxSOp062X8kvIjMx8Z2rpbopWedZtQ8NL/mpI+rGbl/Lz6Q fQc3DNfbCyz0OVI/RgjJ3yy8sdw1LZB6p1f8XWezXSAGEPa3Ab8P6bfNal8/9K81 58vL9IjOyUWnZOsw1g+R3JOxrBLbI7Q= -----END CERTIFICATE-----Generated at Sat Oct 10 10:44:24 2026 by rpki-client