$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/d94c666c-ab56-3b94-8d3a-1c41efa3490f.roa File: d94c666c-ab56-3b94-8d3a-1c41efa3490f.roa (raw, json) Hash identifier: 1OLGrtqVpGIAC3I52RyUXBHTleHfzm9LqpzuouPnEJw= Subject key identifier: 1C:9C:C4:54:E2:3F:51:97:D7:A8:A2:CD:7F:03:63:86:9F:C0:71:C5 Certificate issuer: /CN=71e68809-5436-4288-ad80-0df35fa0b945 Certificate serial: 010D0C9F4328584F498A04EEFD46F8CC8F9B2B40 Authority key identifier: 10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/d94c666c-ab56-3b94-8d3a-1c41efa3490f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 192.28.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:04:ee:fd:46:f8:cc:8f:9b:2b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71e68809-5436-4288-ad80-0df35fa0b945 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7f28938d-b004-4308-b9de-71fad731e2ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:82:f2:7b:43:fe:38:a2:f2:1d:33:e4:df:f8: d0:78:33:62:7f:b7:33:f3:f7:b8:d7:11:e4:ad:e8: c4:0d:f2:6c:f9:79:ac:6d:2f:23:96:67:0a:7b:c3: 76:28:ad:0d:76:ca:9f:6c:7b:5f:08:98:5b:89:89: 2c:6e:5d:60:db:c0:c1:7d:f8:e6:26:9d:c6:73:9a: 54:6a:57:6e:2e:59:a4:c5:96:cd:74:18:cc:d0:8a: 4a:27:74:fc:ed:09:c6:32:b3:32:23:30:7e:72:ba: 30:87:2c:e9:58:cd:e9:0f:06:80:f9:93:dc:6e:2b: f3:d5:2d:0f:ca:c5:0a:c9:70:f4:fe:05:0d:46:f1: c8:cb:fb:79:80:ee:34:56:d8:eb:3d:f3:2a:83:92: b2:2c:5a:9f:c4:c3:97:08:7a:41:33:ae:cd:13:73: e1:43:1d:ed:50:23:aa:ea:02:c9:35:43:ca:83:99: cd:b7:e2:23:c6:28:1f:c7:51:9d:bc:04:18:bd:d2: b3:a9:dc:24:be:65:e3:6c:ab:93:ca:dd:b2:1c:96: c5:6d:dc:9a:29:61:8d:06:30:d6:f9:f6:e6:cb:13: 0b:fe:c5:06:b7:2e:64:ed:bd:39:6f:2a:b8:bc:7d: a5:9d:a2:6d:7c:bf:42:d7:94:1f:76:5e:9e:df:6f: b3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:9C:C4:54:E2:3F:51:97:D7:A8:A2:CD:7F:03:63:86:9F:C0:71:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/d94c666c-ab56-3b94-8d3a-1c41efa3490f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl X509v3 Authority Key Identifier: keyid:10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer sbgp-ipAddrBlock: critical IPv4: 192.28.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:fb:31:5f:17:83:be:6c:03:e3:4f:49:7c:d6:d0:80:f6:5c: b8:fc:98:db:ae:3a:b9:fc:d5:8e:26:42:7f:18:8f:2d:c6:4c: 5f:13:24:9d:57:66:c5:35:72:0d:d0:11:93:2f:73:25:65:33: 12:a5:0d:4e:16:10:78:45:5e:40:87:80:cb:bf:fd:be:7a:f7: 44:fa:e7:d9:70:fe:42:52:0d:d8:ba:54:9a:92:bf:b1:79:ec: df:cc:e1:c3:b7:81:e6:f3:d8:27:56:5c:90:a8:72:44:61:4c: 96:80:d6:f4:74:cc:85:3c:41:d3:23:db:b1:47:ce:90:4e:d8: ad:ea:f5:ee:3c:2d:dc:99:4b:a1:74:8a:29:ea:34:89:17:89: 45:c0:cf:7b:da:bc:3a:36:4d:1e:bd:02:0c:f9:d1:f9:5d:cf: 80:bf:0b:53:b7:df:b2:0f:11:38:8a:ef:53:18:38:85:22:f1: 6d:5a:e5:fb:76:bc:87:05:fb:8d:1b:80:89:e2:6e:24:60:9f: 3c:dd:b0:4e:f1:52:5b:bb:38:bb:6f:e3:2a:d9:2f:4c:f2:29: 1b:a3:c8:b0:4d:f6:21:a8:d0:c2:ce:53:e2:04:67:da:bc:f5: 0d:69:06:9b:30:56:05:62:00:48:3b:e9:f0:1a:04:62:2e:30: ed:cd:39:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JigTu/Ub4zI+bK0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlNjg4MDktNTQzNi00Mjg4LWFkODAtMGRmMzVmYTBi OTQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2YyODkzOGQtYjAwNC00MzA4LWI5ZGUtNzFmYWQ3MzFlMmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYLye0P+OKLyHTPk3/jQeDNif7cz8/e41xHk rejEDfJs+XmsbS8jlmcKe8N2KK0NdsqfbHtfCJhbiYksbl1g28DBffjmJp3Gc5pU alduLlmkxZbNdBjM0IpKJ3T87QnGMrMyIzB+crowhyzpWM3pDwaA+ZPcbivz1S0P ysUKyXD0/gUNRvHIy/t5gO40VtjrPfMqg5KyLFqfxMOXCHpBM67NE3PhQx3tUCOq 6gLJNUPKg5nNt+Ijxigfx1GdvAQYvdKzqdwkvmXjbKuTyt2yHJbFbdyaKWGNBjDW +fbmyxML/sUGty5k7b05byq4vH2lnaJtfL9C15Qfdl6e32+zTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBycxFTiP1GX16iizX8DY4afwHHFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2 ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYzNWZhMGI5NDUvZDk0YzY2NmMtYWI1Ni0z Yjk0LThkM2EtMWM0MWVmYTM0OTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzFlNjg4MDktNTQzNi00Mjg4LWFk ODAtMGRmMzVmYTBiOTQ1LzcxZTY4ODA5LTU0MzYtNDI4OC1hZDgwLTBkZjM1ZmEw Yjk0NS5jcmwwHwYDVR0jBBgwFoAUEFAAX4YwKrkehfZQ9nLTMqW7VE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYz NWZhMGI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIf7MV8Xg75sA+NPSXzW0ID2XLj8mNuuOrn81Y4mQn8Yjy3GTF8TJJ1X ZsU1cg3QEZMvcyVlMxKlDU4WEHhFXkCHgMu//b5690T659lw/kJSDdi6VJqSv7F5 7N/M4cO3gebz2CdWXJCockRhTJaA1vR0zIU8QdMj27FHzpBO2K3q9e48LdyZS6F0 iinqNIkXiUXAz3vavDo2TR69Agz50fldz4C/C1O337IPETiK71MYOIUi8W1a5ft2 vIcF+40bgInibiRgnzzdsE7xUlu7OLtv4yrZL0zyKRujyLBN9iGo0MLOU+IEZ9q8 9Q1pBpswVgViAEg76fAaBGIuMO3NOdE= -----END CERTIFICATE-----Generated at Mon Sep 28 21:04:47 2026 by rpki-client