$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/2c89afb9-daeb-3b52-b5f1-9d4530172434.roa File: 2c89afb9-daeb-3b52-b5f1-9d4530172434.roa (raw, json) Hash identifier: MTP5ufyL9pVRxW9eI5PA7m5W6iqA6FuMCL8VJ+b/YZY= Subject key identifier: 23:03:75:86:23:F0:2C:A5:C0:30:71:71:51:E1:C6:B1:7F:CE:CA:7E Certificate issuer: /CN=28df346d-3f66-4555-b2ab-67f450efdcb3 Certificate serial: 010D0C9F4328584F10379A0F02EA6BD53B722E00 Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/2c89afb9-daeb-3b52-b5f1-9d4530172434.roa Signing time: Fri 04 Sep 2026 13:00:12 +0000 ROA not before: Fri 04 Sep 2026 13:00:12 +0000 ROA not after: Thu 03 Dec 2026 14:00:12 +0000 asID: 393238 IP address blocks: 72.50.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:37:9a:0f:02:ea:6b:d5:3b:72:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3 Validity Not Before: Sep 4 13:00:12 2026 GMT Not After : Dec 3 14:00:12 2026 GMT Subject: CN=78b3e852-531b-45ca-b894-69889b749484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:54:fd:de:1d:88:0c:6c:57:97:a5:b9:4d:13: d1:6e:da:4c:80:69:54:c5:9e:87:85:7c:c1:aa:98: 5f:36:04:3e:40:5f:a8:9b:cb:87:3f:32:ac:4f:41: a9:2c:a1:d7:69:3b:b1:23:b5:07:f9:12:5e:d9:58: 67:ad:7d:af:32:56:49:21:f9:da:91:79:ca:ee:1a: 77:74:ea:e6:69:56:98:03:5c:d1:64:d9:5d:d3:fa: 43:7e:e9:ec:07:28:51:32:3a:84:05:43:2d:32:56: a3:3e:e9:ed:37:48:a1:2d:bf:7e:5d:9c:03:3d:da: 22:69:fa:99:aa:60:76:57:3a:b5:15:3e:a9:8d:ed: 4c:56:c5:6d:89:85:ce:f9:74:1e:4a:e2:2f:5a:06: dc:8c:f0:97:ae:ff:d8:0c:8b:9d:16:dc:cc:6b:9c: 1e:94:0a:6a:1d:7e:2a:d2:9a:1c:dd:ff:6d:af:ae: 4d:f8:c3:e8:a4:fa:0e:90:0f:72:4e:2d:6d:d7:4e: 9b:ca:0b:d5:94:4e:41:e1:02:18:20:45:ec:c1:eb: 24:a6:dc:56:d5:3d:fb:f0:d3:a1:81:a5:93:25:9a: 41:81:12:13:4d:c3:58:99:2c:a4:ed:bc:f6:b7:27: d7:ab:9a:18:fc:a5:89:d7:6b:2d:e0:2e:2e:21:a2: 43:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:03:75:86:23:F0:2C:A5:C0:30:71:71:51:E1:C6:B1:7F:CE:CA:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/2c89afb9-daeb-3b52-b5f1-9d4530172434.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl X509v3 Authority Key Identifier: keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer sbgp-ipAddrBlock: critical IPv4: 72.50.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:3d:6f:f8:c2:c6:45:af:a3:01:6a:eb:8f:d4:9e:2b:1d:99: 53:5e:34:59:38:7d:a7:12:bc:d4:b4:63:b5:62:b7:29:52:00: 72:e2:ba:b8:4b:25:73:ac:4f:b7:71:cc:10:3d:ef:59:b3:6b: b3:51:0b:5c:1d:6b:ad:9f:a3:ec:4b:ab:48:66:2a:dd:de:8e: 0a:5f:35:6a:32:eb:ec:c3:17:d2:5e:d2:57:41:40:6d:c8:6a: 66:24:c7:ca:ed:ee:26:8b:d1:08:65:e8:f3:aa:61:d4:fd:0f: fd:02:49:1c:7f:39:d4:a3:48:7b:21:de:0f:d8:1a:40:33:37: f0:11:41:cb:07:29:19:f3:5e:a8:99:df:19:37:3d:c8:26:87: 34:6c:5a:8d:3b:c6:28:10:51:34:c8:18:fd:97:85:fb:1b:18: 3a:1b:84:da:3a:a3:7e:86:28:72:e5:fd:26:08:49:67:8e:93: 0f:13:7b:55:ba:cf:41:16:0a:4e:e8:e6:09:ce:9c:ed:c3:e3: 4f:45:62:fc:a9:14:bb:ac:3f:96:91:ea:5c:65:ab:83:66:ca: b1:28:0b:f7:96:68:82:07:5c:db:1f:19:4f:d5:7f:5a:11:d2: 78:46:95:36:26:23:7d:3c:ff:e1:2c:d2:47:a5:84:36:d1:a7: 59:68:ae:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN5oPAupr1TtyLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhkZjM0NmQtM2Y2Ni00NTU1LWIyYWItNjdmNDUwZWZk Y2IzMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk NzhiM2U4NTItNTMxYi00NWNhLWI4OTQtNjk4ODliNzQ5NDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFT93h2IDGxXl6W5TRPRbtpMgGlUxZ6HhXzB qphfNgQ+QF+om8uHPzKsT0GpLKHXaTuxI7UH+RJe2VhnrX2vMlZJIfnakXnK7hp3 dOrmaVaYA1zRZNld0/pDfunsByhRMjqEBUMtMlajPuntN0ihLb9+XZwDPdoiafqZ qmB2Vzq1FT6pje1MVsVtiYXO+XQeSuIvWgbcjPCXrv/YDIudFtzMa5welApqHX4q 0poc3f9tr65N+MPopPoOkA9yTi1t106bygvVlE5B4QIYIEXsweskptxW1T378NOh gaWTJZpBgRITTcNYmSyk7bz2tyfXq5oY/KWJ12st4C4uIaJD5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMDdYYj8CylwDBxcVHhxrF/zsp+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yOGRm MzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0NTBlZmRjYjMvMmM4OWFmYjktZGFlYi0z YjUyLWI1ZjEtOWQ0NTMwMTcyNDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjhkZjM0NmQtM2Y2Ni00NTU1LWIy YWItNjdmNDUwZWZkY2IzLzI4ZGYzNDZkLTNmNjYtNDU1NS1iMmFiLTY3ZjQ1MGVm ZGNiMy5jcmwwHwYDVR0jBBgwFoAU0TE0tLR3LAyK//WCA1AodurlHZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yOGRmMzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0 NTBlZmRjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIk9b/jCxkWvowFq64/UnisdmVNeNFk4facSvNS0Y7VitylSAHLiurhL JXOsT7dxzBA971mza7NRC1wda62fo+xLq0hmKt3ejgpfNWoy6+zDF9Je0ldBQG3I amYkx8rt7iaL0Qhl6POqYdT9D/0CSRx/OdSjSHsh3g/YGkAzN/ARQcsHKRnzXqiZ 3xk3PcgmhzRsWo07xigQUTTIGP2XhfsbGDobhNo6o36GKHLl/SYISWeOkw8Te1W6 z0EWCk7o5gnOnO3D409FYvypFLusP5aR6lxlq4NmyrEoC/eWaIIHXNsfGU/Vf1oR 0nhGlTYmI308/+Es0kelhDbRp1loriw= -----END CERTIFICATE-----Generated at Fri Sep 25 03:26:35 2026 by rpki-client