$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/03561657-9a62-3573-aee8-d1dfed5a37c6.roa File: 03561657-9a62-3573-aee8-d1dfed5a37c6.roa (raw, json) Hash identifier: P04j4/Q5nDdH03EF+9/hmRdznwhYUhSZWBFdiS0Bo04= Subject key identifier: ED:A4:DC:36:43:E8:F8:9A:E4:9C:A2:77:87:12:A0:C1:47:C2:B6:83 Certificate issuer: /CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Certificate serial: 010D0C9F4328584E7204E349D772E63A1F1B6AE0 Authority key identifier: F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/03561657-9a62-3573-aee8-d1dfed5a37c6.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 22641 IP address blocks: 216.169.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:e3:49:d7:72:e6:3a:1f:1b:6a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=3a2226bc-03b5-4ece-aeab-0cc77c8cbf26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0a:04:14:52:98:a2:25:10:c8:00:a2:94:e4: 04:bc:fe:00:0f:c9:ff:3c:a0:4b:88:a0:b0:e7:a9: aa:a5:cb:b8:59:46:44:bc:68:67:7d:4a:98:40:b2: e7:da:a4:ca:22:8f:27:dc:81:8e:0b:e5:1e:24:8c: ef:9f:6c:4a:c8:a0:64:71:39:23:bc:af:28:be:11: da:0f:e4:97:68:37:be:55:82:05:cd:5a:74:4e:40: a5:57:85:8d:28:79:ef:1e:73:2a:f6:8d:7b:49:d3: cd:50:92:09:b0:7a:fc:4b:8c:eb:d0:66:af:65:ad: 5a:71:11:dd:83:84:8b:63:7c:95:87:43:37:f6:7d: aa:b6:b4:30:e6:60:46:b0:92:2a:10:fe:90:25:e1: 81:a6:36:e6:69:34:e1:95:41:4c:6e:1b:b1:a7:04: e5:49:31:90:3c:76:6c:a6:47:41:cf:27:d5:4e:0d: 29:b3:bf:fb:1e:77:49:ce:df:88:7a:80:f3:f6:9f: bf:5c:22:7b:db:ca:8b:96:52:6c:01:6e:78:46:e5: 67:06:dd:d3:bf:ce:41:2a:ae:8f:71:27:92:49:0c: 4f:08:16:dd:1f:c1:13:eb:25:27:ad:4e:a7:93:46: a7:14:ab:11:69:f0:b6:4b:a6:9f:3b:48:b2:79:2b: f1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A4:DC:36:43:E8:F8:9A:E4:9C:A2:77:87:12:A0:C1:47:C2:B6:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/03561657-9a62-3573-aee8-d1dfed5a37c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl X509v3 Authority Key Identifier: keyid:F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer sbgp-ipAddrBlock: critical IPv4: 216.169.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:9c:47:35:7f:d6:ac:0c:e8:b4:8f:c5:3c:ad:28:6e:96:6b: 89:ca:02:bb:35:c6:eb:7a:2b:89:6c:51:20:b4:07:e7:ad:55: 48:07:30:94:15:34:cb:b5:46:cc:b7:df:80:3f:99:55:f0:52: cd:f4:b7:07:b0:cc:2a:dd:22:29:c6:b7:2f:65:15:4c:ba:64: 73:97:23:ea:53:fb:52:89:9d:2c:98:58:a1:77:2f:3a:19:5c: c2:33:99:2a:39:42:a4:b3:40:1e:47:52:9d:db:92:72:a6:ef: d9:1f:f9:16:02:d1:3c:0c:04:26:fe:da:ff:01:53:81:ab:bd: 9e:38:12:c3:a2:e6:bf:0c:4c:4f:7f:46:02:2c:b1:4c:d1:89: f1:82:36:a6:1a:87:0a:8a:2a:d5:c0:8a:72:a4:8c:b6:14:80: a0:7f:53:1e:49:f9:67:ac:e0:74:cf:42:23:6c:30:e2:47:5d: d3:86:be:ea:e2:eb:a9:e3:51:22:62:8d:73:b7:58:91:74:07: d4:6f:37:fc:6f:56:cb:e2:39:4b:e5:a3:f4:fd:12:02:45:a0: 6c:2e:67:88:73:ec:d4:5e:69:79:e1:a9:3c:48:67:c3:fd:b1: ae:f2:08:cf:26:a2:0c:71:9d:66:1f:5e:38:2f:27:29:80:f3: b6:0a:fc:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5yBONJ13LmOh8bauAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgwMzVlYTItYzFkNS00YjI5LWE4YzQtMWIzMTM3OWM4 YWZmMB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk M2EyMjI2YmMtMDNiNS00ZWNlLWFlYWItMGNjNzdjOGNiZjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwoEFFKYoiUQyACilOQEvP4AD8n/PKBLiKCw 56mqpcu4WUZEvGhnfUqYQLLn2qTKIo8n3IGOC+UeJIzvn2xKyKBkcTkjvK8ovhHa D+SXaDe+VYIFzVp0TkClV4WNKHnvHnMq9o17SdPNUJIJsHr8S4zr0GavZa1acRHd g4SLY3yVh0M39n2qtrQw5mBGsJIqEP6QJeGBpjbmaTThlUFMbhuxpwTlSTGQPHZs pkdBzyfVTg0ps7/7HndJzt+IeoDz9p+/XCJ728qLllJsAW54RuVnBt3Tv85BKq6P cSeSSQxPCBbdH8ET6yUnrU6nk0anFKsRafC2S6afO0iyeSvxJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2k3DZD6Pia5Jyid4cSoMFHwraDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yODAz NWVhMi1jMWQ1LTRiMjktYThjNC0xYjMxMzc5YzhhZmYvMDM1NjE2NTctOWE2Mi0z NTczLWFlZTgtZDFkZmVkNWEzN2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjgwMzVlYTItYzFkNS00YjI5LWE4 YzQtMWIzMTM3OWM4YWZmLzI4MDM1ZWEyLWMxZDUtNGIyOS1hOGM0LTFiMzEzNzlj OGFmZi5jcmwwHwYDVR0jBBgwFoAU8a/gxj9B23Vcsh798dH499Cp++AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yODAzNWVhMi1jMWQ1LTRiMjktYThjNC0xYjMx Mzc5YzhhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KncMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6cRzV/1qwM6LSPxTytKG6Wa4nKArs1xut6K4lsUSC0B+etVUgHMJQV NMu1Rsy334A/mVXwUs30twewzCrdIinGty9lFUy6ZHOXI+pT+1KJnSyYWKF3LzoZ XMIzmSo5QqSzQB5HUp3bknKm79kf+RYC0TwMBCb+2v8BU4GrvZ44EsOi5r8MTE9/ RgIssUzRifGCNqYahwqKKtXAinKkjLYUgKB/Ux5J+Wes4HTPQiNsMOJHXdOGvuri 66njUSJijXO3WJF0B9RvN/xvVsviOUvlo/T9EgJFoGwuZ4hz7NReaXnhqTxIZ8P9 sa7yCM8mogxxnWYfXjgvJymA87YK/Ms= -----END CERTIFICATE-----Generated at Fri Jul 24 09:02:39 2026 by rpki-client