$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/1eb4659a-0436-3334-8a7a-ac449a426032.roa File: 1eb4659a-0436-3334-8a7a-ac449a426032.roa (raw, json) Hash identifier: cdLFeypCOypXivj4aynZvMJMcB2Sr6SrWNMgZ1Hksdw= Subject key identifier: 36:73:A9:9A:59:C1:41:17:E6:C8:DE:09:83:76:A3:06:2C:64:E2:B8 Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169 Certificate serial: 010D0C9F4328584F4974BF3C69B128F378572300 Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/1eb4659a-0436-3334-8a7a-ac449a426032.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 1403 IP address blocks: 72.10.150.0/24 maxlen: 24 72.10.151.0/24 maxlen: 24 72.10.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:bf:3c:69:b1:28:f3:78:57:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=71cbd738-f2a2-44b7-8a2b-0ab8ddd75deb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:50:30:05:d6:b3:be:09:e6:a7:9a:35:a2:22: 5c:f3:92:20:02:7d:9a:95:0a:84:68:af:e0:2f:f0: e1:af:4d:64:82:90:66:7c:47:60:e8:ca:04:c9:56: 8b:33:ea:fd:d3:99:74:a3:10:12:ce:1b:26:c0:b5: 17:71:ad:a3:22:e6:fd:1c:bc:4f:e5:6f:1f:77:a8: 69:bd:fb:a2:ff:cb:54:3d:54:c1:99:32:74:1b:5c: 39:53:93:b2:83:bd:63:74:aa:48:c0:9c:c6:8d:b5: 37:f5:fa:d8:c2:c6:d4:e8:88:6a:4a:9d:13:d8:5b: f9:1e:55:eb:e8:8b:80:2f:30:de:72:f5:7e:6a:00: a8:2b:1f:a3:13:e5:fa:f7:50:35:61:b9:dd:7f:cb: 28:9b:ca:58:f7:74:0f:76:36:52:f8:3c:a1:23:bc: 60:c3:a9:64:bc:bc:df:ca:af:b1:5c:92:93:10:66: e3:f0:cd:d5:92:30:a4:86:80:8e:ac:1d:59:31:09: 31:d9:f4:67:3c:36:f6:12:99:e3:0f:7e:a2:72:7e: a5:14:4b:2d:7c:6f:cb:a7:e5:f0:3d:cc:4c:83:fe: c7:38:ae:5a:bc:9d:d7:59:16:48:90:c5:1f:25:56: 93:23:21:3a:41:eb:65:35:69:86:2d:e4:ef:44:4a: 13:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:73:A9:9A:59:C1:41:17:E6:C8:DE:09:83:76:A3:06:2C:64:E2:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/1eb4659a-0436-3334-8a7a-ac449a426032.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl X509v3 Authority Key Identifier: keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer sbgp-ipAddrBlock: critical IPv4: 72.10.150.0-72.10.159.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:73:6a:ab:fe:c5:61:4e:ef:b1:f1:69:d7:2a:41:a5:2e:f9: 6b:7c:3f:8a:30:26:1f:d2:61:8a:93:8f:9b:b9:15:f6:37:3c: 32:d3:f0:e5:a8:20:94:61:a4:03:e7:99:10:de:3a:33:b8:5a: 96:f4:d8:3f:3a:31:51:17:25:7f:98:45:bc:01:10:aa:03:88: c0:42:c6:23:ec:40:4c:dd:79:3a:f3:8f:93:ec:24:14:25:99: cb:b7:c7:3e:dc:2e:5a:7e:81:dd:05:67:96:20:87:9c:68:40: ba:f1:56:dc:50:c4:5d:d0:48:b0:4b:b1:18:2f:ee:01:c1:ff: a8:9d:50:89:82:ff:58:ad:84:d0:3f:0a:c4:24:d8:c9:27:2f: 3b:1b:f5:53:0f:de:d2:c8:94:0a:b2:de:c7:e5:ff:17:09:7c: 5e:9b:85:c2:d9:93:8e:6f:41:05:7b:5c:dd:da:ed:af:bd:0f: 54:4f:70:75:7a:67:18:9e:23:52:79:f9:ce:a1:9e:05:43:1f: 1b:20:67:e4:3c:2c:55:41:ca:42:d5:70:ba:c1:ae:f5:f9:87: fb:94:2a:99:40:b2:2e:43:27:80:c7:be:ae:84:9c:19:ca:3f: c9:3d:c6:93:23:08:29:6c:bc:20:d4:64:03:67:ca:e7:65:d5: 0d:e6:7d:38 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE9JdL88abEo83hXIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjZmMjhkMTAtNTczOS00ZTQwLWE0NDYtOTM1YzYwZDc5 MTY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzFjYmQ3MzgtZjJhMi00NGI3LThhMmItMGFiOGRkZDc1ZGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilAwBdazvgnmp5o1oiJc85IgAn2alQqEaK/g L/Dhr01kgpBmfEdg6MoEyVaLM+r905l0oxASzhsmwLUXca2jIub9HLxP5W8fd6hp vfui/8tUPVTBmTJ0G1w5U5Oyg71jdKpIwJzGjbU39frYwsbU6IhqSp0T2Fv5HlXr 6IuALzDecvV+agCoKx+jE+X691A1Ybndf8som8pY93QPdjZS+DyhI7xgw6lkvLzf yq+xXJKTEGbj8M3VkjCkhoCOrB1ZMQkx2fRnPDb2EpnjD36icn6lFEstfG/Lp+Xw PcxMg/7HOK5avJ3XWRZIkMUfJVaTIyE6QetlNWmGLeTvREoTjwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFDZzqZpZwUEX5sjeCYN2owYsZOK4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYy OGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVjNjBkNzkxNjkvMWViNDY1OWEtMDQzNi0z MzM0LThhN2EtYWM0NDlhNDI2MDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjZmMjhkMTAtNTczOS00ZTQwLWE0 NDYtOTM1YzYwZDc5MTY5L2I2ZjI4ZDEwLTU3MzktNGU0MC1hNDQ2LTkzNWM2MGQ3 OTE2OS5jcmwwHwYDVR0jBBgwFoAU6OrPFNH9dKsxwrGm8H6vpkSECBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYyOGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVj NjBkNzkxNjkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFICpYD BAVICoAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAAHNqq/7FYU7vsfFp1ypBpS75a3w/ijAmH9JhipOPm7kV 9jc8MtPw5agglGGkA+eZEN46M7halvTYPzoxURclf5hFvAEQqgOIwELGI+xATN15 OvOPk+wkFCWZy7fHPtwuWn6B3QVnliCHnGhAuvFW3FDEXdBIsEuxGC/uAcH/qJ1Q iYL/WK2E0D8KxCTYyScvOxv1Uw/e0siUCrLex+X/Fwl8XpuFwtmTjm9BBXtc3drt r70PVE9wdXpnGJ4jUnn5zqGeBUMfGyBn5DwsVUHKQtVwusGu9fmH+5QqmUCyLkMn gMe+roScGco/yT3GkyMIKWy8INRkA2fK52XVDeZ9OA== -----END CERTIFICATE-----Generated at Sat Sep 26 04:57:40 2026 by rpki-client