$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/d01de867-d842-3f15-838a-d66341794f48.roa File: d01de867-d842-3f15-838a-d66341794f48.roa (raw, json) Hash identifier: 3uW4ThOcKszzyaoQSh71XtuDPKNrKait/VoILr7OSvE= Subject key identifier: 4A:F3:38:0E:48:DE:F5:DE:1A:B1:84:BE:15:BA:FD:18:5A:96:F8:45 Certificate issuer: /CN=71e68809-5436-4288-ad80-0df35fa0b945 Certificate serial: 010D0C9F4328584F498B80FAF726CA013849EE80 Authority key identifier: 10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/d01de867-d842-3f15-838a-d66341794f48.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 192.28.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:80:fa:f7:26:ca:01:38:49:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71e68809-5436-4288-ad80-0df35fa0b945 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ec6169da-5023-45fc-b0a9-19dcbaece25d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c2:91:66:83:4b:da:d3:7f:1d:81:3c:12:39: 0c:5b:85:0f:c5:2c:ff:fe:f9:fc:be:57:ee:07:b8: bb:11:0f:b6:0f:c5:b8:e0:0a:82:d1:0e:b6:da:da: 87:e9:fc:39:a8:95:ce:1e:44:fc:a5:f5:16:05:24: 66:77:c4:44:55:7c:44:22:58:af:36:7c:8b:eb:2b: 26:e4:62:2b:17:ae:23:e9:ab:ae:4b:3d:79:44:1a: a9:bf:24:f4:48:1a:3c:a8:17:98:b2:2e:f1:da:c3: be:ae:8c:d8:b1:0b:f9:8b:f6:fc:d3:2e:25:9a:4a: b4:b9:03:61:a0:d0:2f:b0:5f:9f:1a:aa:36:24:a5: 49:9b:f0:38:e2:f1:ac:34:ca:9c:8f:11:92:bd:e4: db:56:43:30:c2:06:37:fe:f5:e9:6c:54:45:75:65: 17:0b:7b:49:d3:f5:4d:88:67:3f:1d:68:81:01:ee: 0b:de:85:36:74:09:63:01:18:a3:c3:86:fa:4e:de: c1:e4:92:69:e6:c3:54:4e:3c:50:76:5f:fb:9c:a0: 8a:13:df:a5:e5:6d:f5:42:c9:41:23:cb:50:af:19: f0:f3:88:8b:6f:82:6b:37:f9:7c:7e:8c:10:c5:ea: 83:4c:a3:0f:10:3b:2a:aa:4d:93:e4:c9:d0:e9:88: eb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F3:38:0E:48:DE:F5:DE:1A:B1:84:BE:15:BA:FD:18:5A:96:F8:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/d01de867-d842-3f15-838a-d66341794f48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl X509v3 Authority Key Identifier: keyid:10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer sbgp-ipAddrBlock: critical IPv4: 192.28.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:37:86:ac:9a:b9:34:8a:5f:5a:13:51:f0:9c:78:ca:77:b4: 3a:4e:2f:af:b5:ca:4e:c6:3f:8f:79:f9:5c:52:28:e3:e3:93: 9d:6b:dd:51:38:d1:9e:f8:40:46:c4:fc:bb:bc:13:4a:cc:72: ee:62:08:3c:3f:b5:c3:70:db:31:12:05:03:00:f2:80:1d:9a: f6:92:d8:6c:5c:bc:18:74:f3:1d:46:c3:89:b7:17:b8:aa:7b: 55:dd:d5:0e:a0:5a:21:d0:58:b8:2f:4b:1b:3a:6b:bb:0f:e0: b4:5f:de:de:64:c1:cb:20:4a:39:c0:2e:6e:93:0a:4d:40:93: 2b:12:51:c7:1e:e6:75:ef:28:a8:3d:30:1e:fc:1b:55:eb:1b: f6:f4:44:93:80:26:b7:35:da:12:d8:5c:b3:01:ae:d8:d7:e6: aa:79:29:ac:9c:97:d9:61:f2:be:d8:7e:58:7d:d9:7e:c8:82: 41:cd:80:10:c6:52:cb:9a:ff:84:9e:f6:f4:8a:b1:ed:46:22: 37:af:b4:62:13:c0:91:ac:73:ee:21:38:c9:f6:11:71:28:04: d9:96:a5:07:7a:5a:e7:d7:86:00:9a:85:c7:7a:d9:c2:ce:44: 4b:8c:46:78:84:c7:e7:79:e7:b8:01:cb:28:10:e4:65:0b:a2: d9:b7:2e:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji4D69ybKAThJ7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlNjg4MDktNTQzNi00Mjg4LWFkODAtMGRmMzVmYTBi OTQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWM2MTY5ZGEtNTAyMy00NWZjLWIwYTktMTlkY2JhZWNlMjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicKRZoNL2tN/HYE8EjkMW4UPxSz//vn8vlfu B7i7EQ+2D8W44AqC0Q622tqH6fw5qJXOHkT8pfUWBSRmd8REVXxEIlivNnyL6ysm 5GIrF64j6auuSz15RBqpvyT0SBo8qBeYsi7x2sO+rozYsQv5i/b80y4lmkq0uQNh oNAvsF+fGqo2JKVJm/A44vGsNMqcjxGSveTbVkMwwgY3/vXpbFRFdWUXC3tJ0/VN iGc/HWiBAe4L3oU2dAljARijw4b6Tt7B5JJp5sNUTjxQdl/7nKCKE9+l5W31QslB I8tQrxnw84iLb4JrN/l8fowQxeqDTKMPEDsqqk2T5MnQ6YjrkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErzOA5I3vXeGrGEvhW6/RhalvhFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2 ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYzNWZhMGI5NDUvZDAxZGU4NjctZDg0Mi0z ZjE1LTgzOGEtZDY2MzQxNzk0ZjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzFlNjg4MDktNTQzNi00Mjg4LWFk ODAtMGRmMzVmYTBiOTQ1LzcxZTY4ODA5LTU0MzYtNDI4OC1hZDgwLTBkZjM1ZmEw Yjk0NS5jcmwwHwYDVR0jBBgwFoAUEFAAX4YwKrkehfZQ9nLTMqW7VE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYz NWZhMGI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADo3hqyauTSKX1oTUfCceMp3tDpOL6+1yk7GP495+VxSKOPjk51r3VE4 0Z74QEbE/Lu8E0rMcu5iCDw/tcNw2zESBQMA8oAdmvaS2GxcvBh08x1Gw4m3F7iq e1Xd1Q6gWiHQWLgvSxs6a7sP4LRf3t5kwcsgSjnALm6TCk1AkysSUcce5nXvKKg9 MB78G1XrG/b0RJOAJrc12hLYXLMBrtjX5qp5Kaycl9lh8r7Yflh92X7IgkHNgBDG Usua/4Se9vSKse1GIjevtGITwJGsc+4hOMn2EXEoBNmWpQd6WufXhgCahcd62cLO REuMRniEx+d557gByygQ5GULotm3Lug= -----END CERTIFICATE-----Generated at Wed Oct 14 15:23:06 2026 by rpki-client