$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/28f9db9c-0fd8-3f1b-a30e-7451a9f19ec0.roa File: 28f9db9c-0fd8-3f1b-a30e-7451a9f19ec0.roa (raw, json) Hash identifier: G1/ZcAMLAMCLAp/cYqvjjGnTR7iBOMdfYKNOpqs6Bmc= Subject key identifier: B6:45:99:35:FC:00:15:88:D3:8C:02:5D:F2:4A:DF:6E:CF:4C:E6:77 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F0D6CD944340BDE09ACAAD4C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/28f9db9c-0fd8-3f1b-a30e-7451a9f19ec0.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 834 IP address blocks: 74.0.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:d9:44:34:0b:de:09:ac:aa:d4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=5319e757-f619-4ab7-9621-e3dc8fece5e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:6b:48:9c:86:88:43:38:2c:b1:05:67:0c:37: 04:63:60:2d:27:56:82:55:d2:5a:66:0c:b0:37:53: 92:3d:18:a6:23:df:26:7c:bd:94:23:d9:da:11:3d: 50:58:28:6a:33:c4:59:e4:df:0a:3d:ae:77:f1:dc: 6a:e2:35:11:23:93:21:b2:a1:cc:ff:5e:13:c0:13: 9c:c4:71:ac:20:89:d9:00:e9:32:80:a1:ef:3b:04: 32:8f:90:e0:39:17:d9:f6:2b:e0:64:88:b8:bf:a6: 14:27:a9:3d:04:e4:26:54:c0:68:61:4f:71:90:ef: 06:69:b1:70:d7:26:0a:fe:bd:56:a4:9a:26:c6:96: 2c:bb:a6:cc:37:95:08:b3:ed:7a:77:8c:e6:87:e5: 99:10:7a:bb:96:c3:f6:77:40:84:02:c9:3e:90:9b: e7:2c:9f:08:89:51:69:db:af:1f:25:62:b2:61:b5: 21:84:32:27:e3:9e:31:52:fa:5f:f7:14:d8:17:1e: 79:37:c7:3e:82:64:86:85:a7:1f:c2:73:12:43:89: 32:c2:95:3e:fb:be:fa:82:d0:2d:97:3a:be:6e:96: 14:3a:c6:ff:0c:9e:36:80:47:73:13:99:df:59:9e: e9:8a:02:a3:fc:ea:e3:87:f8:08:4a:cd:f2:29:ff: 1e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:45:99:35:FC:00:15:88:D3:8C:02:5D:F2:4A:DF:6E:CF:4C:E6:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/28f9db9c-0fd8-3f1b-a30e-7451a9f19ec0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.0.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:07:c5:09:66:01:5c:00:b8:2c:af:21:49:4f:19:1b:87:ff: d4:cc:4e:b3:5b:22:58:10:cb:fd:1d:eb:4f:8a:a9:92:4b:a6: 7d:63:94:cb:a6:f7:18:b9:c5:bf:d2:96:00:05:72:7e:93:0a: 8c:c0:14:ed:4b:ef:d9:5b:f0:4c:88:15:67:60:6d:87:5b:7a: d8:12:73:a3:fe:c1:36:49:12:6a:ef:e8:99:fe:8c:75:78:c4: 79:32:5b:3b:ca:b5:7e:84:92:41:2c:21:27:df:dd:96:30:33: 70:e7:42:26:c8:6b:2b:1b:5b:9e:77:a4:ce:f8:90:8e:ea:f6: 97:57:6f:d7:2e:0a:c7:fb:5d:eb:1f:fa:06:c0:b8:f8:06:87: 17:18:d8:ea:12:a8:2d:66:9a:00:65:1f:29:2c:99:2c:7d:4c: ed:30:38:18:9b:0f:28:4c:e4:cb:70:62:f8:3e:fb:3d:15:fc: 70:07:8b:95:47:6b:69:af:8b:b7:bc:c9:15:b4:1b:af:f0:46: 2f:dc:83:07:98:50:57:1d:74:3e:87:5a:e9:46:8b:27:5e:55: 56:1a:e1:06:d0:37:54:d5:e6:72:74:39:a3:b4:1d:f2:a9:19: 3a:d0:e1:ef:2c:c1:5a:02:82:79:fc:e4:c4:f1:ee:2a:aa:05: f9:1e:44:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbNlENAveCayq1MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk NTMxOWU3NTctZjYxOS00YWI3LTk2MjEtZTNkYzhmZWNlNWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2tInIaIQzgssQVnDDcEY2AtJ1aCVdJaZgyw N1OSPRimI98mfL2UI9naET1QWChqM8RZ5N8KPa538dxq4jURI5MhsqHM/14TwBOc xHGsIInZAOkygKHvOwQyj5DgORfZ9ivgZIi4v6YUJ6k9BOQmVMBoYU9xkO8GabFw 1yYK/r1WpJomxpYsu6bMN5UIs+16d4zmh+WZEHq7lsP2d0CEAsk+kJvnLJ8IiVFp 268fJWKyYbUhhDIn454xUvpf9xTYFx55N8c+gmSGhacfwnMSQ4kywpU++776gtAt lzq+bpYUOsb/DJ42gEdzE5nfWZ7pigKj/Orjh/gISs3yKf8eWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZFmTX8ABWI04wCXfJK327PTOZ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjhmOWRiOWMtMGZkOC0z ZjFiLWEzMGUtNzQ1MWE5ZjE5ZWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSgAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALMHxQlmAVwAuCyvIUlPGRuH/9TMTrNbIlgQy/0d60+KqZJLpn1jlMum 9xi5xb/SlgAFcn6TCozAFO1L79lb8EyIFWdgbYdbetgSc6P+wTZJEmrv6Jn+jHV4 xHkyWzvKtX6EkkEsISff3ZYwM3DnQibIaysbW553pM74kI7q9pdXb9cuCsf7Xesf +gbAuPgGhxcY2OoSqC1mmgBlHyksmSx9TO0wOBibDyhM5MtwYvg++z0V/HAHi5VH a2mvi7e8yRW0G6/wRi/cgweYUFcddD6HWulGiydeVVYa4QbQN1TV5nJ0OaO0HfKp GTrQ4e8swVoCgnn85MTx7iqqBfkeRHs= -----END CERTIFICATE-----Generated at Sun Sep 27 04:16:12 2026 by rpki-client