$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/a4715222-51fd-3cc6-b174-0aa94bf55e04.roa File: a4715222-51fd-3cc6-b174-0aa94bf55e04.roa (raw, json) Hash identifier: GpAkT/gowFhxF70ry8t3Oks9VrQRuCr2dpvnK2BFl2E= Subject key identifier: 6A:0F:A6:0E:01:1F:3C:78:77:62:63:E3:BC:DE:68:76:4D:3E:16:6E Certificate issuer: /CN=71e68809-5436-4288-ad80-0df35fa0b945 Certificate serial: 010D0C9F4328584F119D1524C216772DF520B800 Authority key identifier: 10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/a4715222-51fd-3cc6-b174-0aa94bf55e04.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 8075 IP address blocks: 192.28.24.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:15:24:c2:16:77:2d:f5:20:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71e68809-5436-4288-ad80-0df35fa0b945 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=8bb2e40a-4ba5-4eba-bb34-4c2e604f8c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e1:92:89:bb:d4:fe:ab:7c:7d:cb:e4:6b:d5: c4:41:2f:8f:12:45:70:9a:b1:b0:bb:24:af:24:24: 44:2f:39:fb:e4:d7:ad:12:a7:9b:4b:60:ab:7f:21: e7:45:af:4e:9d:74:02:99:ac:bd:cf:92:03:05:a7: c5:2d:c9:31:c4:a6:5c:01:ab:17:46:50:86:f4:83: 25:32:3f:8c:a8:d8:f5:a7:21:0c:03:98:56:07:66: fa:a9:4c:0b:e2:a7:93:1e:64:29:1f:1c:1a:3b:e9: 3f:6c:2a:88:19:7c:59:a1:6b:5b:da:44:b9:c5:16: 8f:7a:36:16:60:65:11:e5:03:f4:76:ab:36:30:89: 08:cf:37:b0:6a:3c:e7:57:bc:c6:cb:06:f8:4d:8a: 5e:0b:6a:60:0d:13:2c:a7:6e:dc:65:48:41:7c:59: ba:c1:7c:6c:96:16:a1:10:21:d0:ad:80:e2:1a:ca: 2e:cf:85:db:e8:39:f0:77:1f:ce:60:6d:09:51:39: cc:f2:46:84:23:ad:e9:19:ad:98:9e:6b:b4:2a:56: f1:ec:a1:09:9e:38:44:25:0f:d6:f5:a3:88:c0:66: 44:8d:b9:5e:df:37:a2:51:07:59:1d:ef:90:40:86: d8:3d:56:e2:3d:1d:90:42:18:cb:b7:a8:d9:cc:be: 77:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:0F:A6:0E:01:1F:3C:78:77:62:63:E3:BC:DE:68:76:4D:3E:16:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/a4715222-51fd-3cc6-b174-0aa94bf55e04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl X509v3 Authority Key Identifier: keyid:10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer sbgp-ipAddrBlock: critical IPv4: 192.28.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:37:80:df:0e:c3:5c:e1:58:cd:a7:3d:f3:0f:3e:00:fd:55: 3b:9b:95:6e:bc:89:e4:64:a2:23:ad:91:fe:e9:cf:52:5b:8e: 70:fd:57:61:56:71:2c:b7:02:21:0b:e0:d8:3f:c3:fe:6d:db: af:65:f7:fd:c4:c3:e6:a5:dd:69:3e:40:27:bf:31:06:8d:0d: 51:bb:79:68:6f:18:d4:5c:4f:b2:03:62:db:0c:bf:0c:d6:2a: 23:1b:be:0a:3d:7b:b9:c0:f6:b6:da:90:c1:e2:e0:0f:3a:9b: e1:d0:e0:78:2f:a1:25:b9:99:d6:96:c7:af:b5:0e:85:a1:f1: ef:57:09:1b:0b:a7:1b:4c:e2:6f:3e:ac:1b:c9:be:18:e1:41: f6:fe:a9:25:7c:09:23:50:a2:4b:ca:75:0b:74:99:7c:61:27: 03:f8:52:00:b9:bb:6a:1d:98:2c:fb:fc:83:ed:ef:52:5e:1d: 3c:45:fd:0d:52:65:75:83:8a:27:16:62:cd:b7:f5:a4:d1:ce: 9c:f3:2d:91:fa:7b:d2:1d:76:18:02:92:b4:aa:33:d6:f2:95: 23:73:b2:6f:06:c2:f1:6d:d8:e7:60:f2:80:a2:cb:00:ba:ef: 02:10:40:36:30:71:90:1a:96:24:c0:0b:b9:53:fe:37:03:a1: 9d:3b:15:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnRUkwhZ3LfUguAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlNjg4MDktNTQzNi00Mjg4LWFkODAtMGRmMzVmYTBi OTQ1MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk OGJiMmU0MGEtNGJhNS00ZWJhLWJiMzQtNGMyZTYwNGY4YzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOGSibvU/qt8fcvka9XEQS+PEkVwmrGwuySv JCRELzn75NetEqebS2CrfyHnRa9OnXQCmay9z5IDBafFLckxxKZcAasXRlCG9IMl Mj+MqNj1pyEMA5hWB2b6qUwL4qeTHmQpHxwaO+k/bCqIGXxZoWtb2kS5xRaPejYW YGUR5QP0dqs2MIkIzzewajznV7zGywb4TYpeC2pgDRMsp27cZUhBfFm6wXxslhah ECHQrYDiGsouz4Xb6Dnwdx/OYG0JUTnM8kaEI63pGa2Ynmu0Klbx7KEJnjhEJQ/W 9aOIwGZEjble3zeiUQdZHe+QQIbYPVbiPR2QQhjLt6jZzL537wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGoPpg4BHzx4d2Jj47zeaHZNPhZuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2 ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYzNWZhMGI5NDUvYTQ3MTUyMjItNTFmZC0z Y2M2LWIxNzQtMGFhOTRiZjU1ZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzFlNjg4MDktNTQzNi00Mjg4LWFk ODAtMGRmMzVmYTBiOTQ1LzcxZTY4ODA5LTU0MzYtNDI4OC1hZDgwLTBkZjM1ZmEw Yjk0NS5jcmwwHwYDVR0jBBgwFoAUEFAAX4YwKrkehfZQ9nLTMqW7VE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYz NWZhMGI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBwYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHo3gN8Ow1zhWM2nPfMPPgD9VTublW68ieRkoiOtkf7pz1JbjnD9V2FW cSy3AiEL4Ng/w/5t269l9/3Ew+al3Wk+QCe/MQaNDVG7eWhvGNRcT7IDYtsMvwzW KiMbvgo9e7nA9rbakMHi4A86m+HQ4HgvoSW5mdaWx6+1DoWh8e9XCRsLpxtM4m8+ rBvJvhjhQfb+qSV8CSNQokvKdQt0mXxhJwP4UgC5u2odmCz7/IPt71JeHTxF/Q1S ZXWDiicWYs239aTRzpzzLZH6e9IddhgCkrSqM9bylSNzsm8GwvFt2Odg8oCiywC6 7wIQQDYwcZAaliTAC7lT/jcDoZ07FT8= -----END CERTIFICATE-----Generated at Sat Oct 3 11:16:01 2026 by rpki-client