$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/3d9be492-283e-32a9-9ca3-e5235522fa2b.roa File: 3d9be492-283e-32a9-9ca3-e5235522fa2b.roa (raw, json) Hash identifier: 727aQzXZ794yzOx9YcYDouWLDBkr6Ctcs3vZzMJVtd0= Subject key identifier: 45:D5:81:07:02:57:23:F8:3D:49:12:62:58:0F:D7:75:49:CB:0E:30 Certificate issuer: /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Certificate serial: 010D0C9F4328584F506D55BA57A4467F04F24C80 Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/3d9be492-283e-32a9-9ca3-e5235522fa2b.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 399294 IP address blocks: 200.5.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:55:ba:57:a4:46:7f:04:f2:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=73f0e383-1985-489c-9728-11aa2b3fbc5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:78:10:62:f0:26:5b:ec:c2:81:2e:13:e4:76: 78:83:15:d2:38:1e:b1:ca:5f:9b:c5:64:cd:17:e5: ba:c5:15:c1:9f:94:d8:21:c3:31:12:14:eb:ab:66: e9:5e:cb:76:8f:cf:78:7e:4f:db:f2:08:3c:39:8c: 66:8f:9a:71:d0:ba:0f:34:ba:f5:34:53:c7:6a:9c: 10:31:52:1e:41:13:66:fa:75:71:da:54:a7:77:4e: 7e:f7:cf:be:ca:e7:c5:88:72:3c:6c:94:90:e0:d9: ed:e1:18:1d:2f:ee:b5:e1:2b:e7:98:31:56:40:fe: 7b:a4:8b:13:4e:fb:aa:92:2b:44:06:eb:06:d2:04: ea:3d:59:91:6b:55:91:dd:3a:4d:07:f3:72:57:d0: 0b:49:22:27:3e:46:47:e7:c8:95:46:31:ed:22:4f: 78:76:21:4e:9d:9d:6d:e2:04:62:8f:16:65:0b:60: 7a:31:75:28:d4:13:65:81:e2:78:a2:44:b8:bd:96: 33:a1:60:61:d0:fe:76:2a:cd:1e:8d:7e:e7:15:43: 66:60:4d:8a:63:0a:d6:60:b4:40:44:37:30:05:21: f6:67:7a:a8:2e:bd:ff:2c:fa:d1:56:5d:46:7b:11: 8c:4d:d2:c7:45:e7:b6:65:0e:0d:d8:28:28:c2:bf: b3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D5:81:07:02:57:23:F8:3D:49:12:62:58:0F:D7:75:49:CB:0E:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/3d9be492-283e-32a9-9ca3-e5235522fa2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl X509v3 Authority Key Identifier: keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer sbgp-ipAddrBlock: critical IPv4: 200.5.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:78:e2:2e:e8:ad:4c:e1:54:99:d5:1a:66:18:84:82:5f:7d: fa:3f:3e:48:2c:3e:6a:71:db:3d:b6:6b:ce:7c:10:35:27:4c: a0:e9:c0:21:e0:d7:37:17:c5:35:e1:df:17:e0:60:6a:25:6f: 70:9a:49:85:cb:47:07:72:f0:8f:e5:aa:a1:e0:c6:4a:56:ba: 31:d2:83:c3:77:96:f6:cd:6d:77:fc:b6:32:9f:d0:8f:64:83: 01:d2:c6:47:01:aa:80:ee:8f:d9:65:b5:6a:42:2a:c3:4b:fd: 8a:da:1e:6b:92:c2:45:e6:08:56:e0:66:42:b9:e1:cc:5c:6a: 5d:3f:24:66:79:1b:1c:17:dc:6b:e1:61:6a:27:b8:c9:39:90: e9:90:1b:f4:5c:98:93:2a:d9:bd:4e:5a:9a:fc:eb:2e:69:b9: 15:23:27:20:ee:c4:0f:b6:ec:84:31:61:53:3e:21:5e:58:17: 46:89:f7:dd:4b:3e:b8:5b:ed:72:89:2e:ae:50:e1:84:d7:e6: ce:ca:4b:48:23:03:a9:ab:70:c0:b0:e4:9f:8f:85:1e:0b:b2: 2f:d1:9e:a2:b9:99:39:99:8e:c8:ac:8d:91:ee:aa:04:ad:14: f5:19:27:34:ce:8c:fa:cd:07:51:66:fc:de:0e:68:42:4c:91: 4e:71:c9:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbVW6V6RGfwTyTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg4Y2JiMGItOWUxOS00ZWYwLTljMWMtMDYyZGYwNzI5 ZDVhMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk NzNmMGUzODMtMTk4NS00ODljLTk3MjgtMTFhYTJiM2ZiYzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXgQYvAmW+zCgS4T5HZ4gxXSOB6xyl+bxWTN F+W6xRXBn5TYIcMxEhTrq2bpXst2j894fk/b8gg8OYxmj5px0LoPNLr1NFPHapwQ MVIeQRNm+nVx2lSnd05+98++yufFiHI8bJSQ4Nnt4RgdL+614SvnmDFWQP57pIsT TvuqkitEBusG0gTqPVmRa1WR3TpNB/NyV9ALSSInPkZH58iVRjHtIk94diFOnZ1t 4gRijxZlC2B6MXUo1BNlgeJ4okS4vZYzoWBh0P52Ks0ejX7nFUNmYE2KYwrWYLRA RDcwBSH2Z3qoLr3/LPrRVl1GexGMTdLHRee2ZQ4N2Cgowr+zUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXVgQcCVyP4PUkSYlgP13VJyw4wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mODhj YmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJkZjA3MjlkNWEvM2Q5YmU0OTItMjgzZS0z MmE5LTljYTMtZTUyMzU1MjJmYTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjg4Y2JiMGItOWUxOS00ZWYwLTlj MWMtMDYyZGYwNzI5ZDVhL2Y4OGNiYjBiLTllMTktNGVmMC05YzFjLTA2MmRmMDcy OWQ1YS5jcmwwHwYDVR0jBBgwFoAUumtvErjf7FdMpuDrBh2cPZWqzL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mODhjYmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJk ZjA3MjlkNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyAUcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACF44i7orUzhVJnVGmYYhIJfffo/PkgsPmpx2z22a858EDUnTKDpwCHg 1zcXxTXh3xfgYGolb3CaSYXLRwdy8I/lqqHgxkpWujHSg8N3lvbNbXf8tjKf0I9k gwHSxkcBqoDuj9lltWpCKsNL/YraHmuSwkXmCFbgZkK54cxcal0/JGZ5GxwX3Gvh YWonuMk5kOmQG/RcmJMq2b1OWpr86y5puRUjJyDuxA+27IQxYVM+IV5YF0aJ991L Prhb7XKJLq5Q4YTX5s7KS0gjA6mrcMCw5J+PhR4Lsi/RnqK5mTmZjsisjZHuqgSt FPUZJzTOjPrNB1Fm/N4OaEJMkU5xyfY= -----END CERTIFICATE-----Generated at Sun Oct 4 04:14:51 2026 by rpki-client