$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/03561657-9a62-3573-aee8-d1dfed5a37c6.roa File: 03561657-9a62-3573-aee8-d1dfed5a37c6.roa (raw, json) Hash identifier: KSz8d1nk9obZRed5WlQIhKl8Jxx7KtmiSQ0tRtukjGw= Subject key identifier: F8:34:B4:B4:C5:4A:68:25:4A:5B:45:94:A8:A2:27:A1:4E:B2:E8:C4 Certificate issuer: /CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Certificate serial: 010D0C9F4328584F1467AE703FA3BB872838D400 Authority key identifier: F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/03561657-9a62-3573-aee8-d1dfed5a37c6.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 22641 IP address blocks: 216.169.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:ae:70:3f:a3:bb:87:28:38:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=ee0cf590-b63f-4aaf-9f59-694e85b40197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:c1:74:a3:00:3e:52:e2:cd:60:c3:ae:93:21: 39:32:97:2c:94:75:63:f7:8a:1a:65:70:89:eb:62: 7e:34:bb:ff:6c:4f:86:0d:ef:44:18:c5:81:37:6a: fe:78:6b:1a:6c:d4:61:93:b8:2e:55:f8:d7:2f:98: 5d:bd:64:e2:2c:a5:18:d3:68:a2:f2:f1:e4:4a:05: 40:33:1d:84:52:5b:bd:4d:35:e9:8e:da:b1:e3:71: c7:98:3d:d3:3e:d9:0c:7d:66:7f:91:35:69:06:5f: c4:6a:cb:9e:69:78:a2:9b:fd:a6:22:56:59:57:97: b7:b2:4f:e1:d4:e7:fe:d0:fe:ec:5c:79:cd:57:dc: 5b:af:ea:59:23:53:5d:72:75:86:8d:dc:04:76:2d: 6b:3c:f7:50:b3:67:ea:f2:a7:93:df:7d:e2:8c:bb: f9:c6:98:13:38:a0:11:ba:e5:c1:29:1f:2e:7d:4d: 8e:f5:74:69:e2:2f:ee:b6:08:96:79:c6:77:82:ab: 66:f9:a1:91:68:8b:c2:0d:dd:d4:20:1f:e2:b2:37: d3:9a:1c:33:7b:5c:77:fa:59:8e:88:58:30:b2:93: f3:4c:37:ed:d4:c6:a1:63:09:9e:88:28:f9:f9:4f: 5e:09:73:5f:ec:01:7c:c5:fa:c3:ad:25:36:2f:46: 38:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:34:B4:B4:C5:4A:68:25:4A:5B:45:94:A8:A2:27:A1:4E:B2:E8:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/03561657-9a62-3573-aee8-d1dfed5a37c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl X509v3 Authority Key Identifier: keyid:F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer sbgp-ipAddrBlock: critical IPv4: 216.169.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:fc:79:91:35:06:d8:51:ee:20:9a:72:c9:03:30:64:bc:2f: d3:28:59:49:44:26:e6:01:ec:86:ab:80:a5:34:ba:d8:10:b8: 2d:90:bd:35:df:8f:ea:ec:13:74:fd:25:de:63:41:af:be:57: 2f:a9:fa:57:aa:57:90:3b:36:be:72:12:6e:a2:73:9f:c4:78: 90:ea:43:c2:c4:8e:6a:0b:2f:c1:01:4a:92:d3:38:29:3d:17: b1:cf:59:81:fa:33:c6:23:45:f3:06:90:2e:24:66:e0:8e:46: 92:0c:55:5e:2b:d2:8f:73:47:35:86:53:8e:05:89:c5:80:a9: 0b:f7:ee:bd:cf:e2:14:86:7e:86:2d:99:d5:a9:d8:2e:95:76: 65:62:27:37:51:9e:ed:c2:30:00:53:95:5e:b7:67:9e:12:34: 01:8d:ee:6d:c0:95:0f:24:ce:72:d4:89:df:4a:10:49:99:65: c4:8f:2f:7c:78:b6:26:d1:d6:67:a8:27:3e:49:93:0d:8f:76: 4c:5c:50:75:98:ef:5c:ed:77:fb:68:8d:ea:de:46:d0:b3:66: 43:c8:54:80:f3:dd:49:4e:96:ba:6f:af:7d:c5:d3:a0:6f:8c: e6:b0:a1:bc:a7:f2:f5:5c:d1:95:a3:62:e5:bf:31:4e:57:61: 82:af:9a:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ65wP6O7hyg41AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgwMzVlYTItYzFkNS00YjI5LWE4YzQtMWIzMTM3OWM4 YWZmMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk ZWUwY2Y1OTAtYjYzZi00YWFmLTlmNTktNjk0ZTg1YjQwMTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+MF0owA+UuLNYMOukyE5MpcslHVj94oaZXCJ 62J+NLv/bE+GDe9EGMWBN2r+eGsabNRhk7guVfjXL5hdvWTiLKUY02ii8vHkSgVA Mx2EUlu9TTXpjtqx43HHmD3TPtkMfWZ/kTVpBl/EasueaXiim/2mIlZZV5e3sk/h 1Of+0P7sXHnNV9xbr+pZI1NdcnWGjdwEdi1rPPdQs2fq8qeT333ijLv5xpgTOKAR uuXBKR8ufU2O9XRp4i/utgiWecZ3gqtm+aGRaIvCDd3UIB/isjfTmhwze1x3+lmO iFgwspPzTDft1MahYwmeiCj5+U9eCXNf7AF8xfrDrSU2L0Y4rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPg0tLTFSmglSltFlKiiJ6FOsujEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yODAz NWVhMi1jMWQ1LTRiMjktYThjNC0xYjMxMzc5YzhhZmYvMDM1NjE2NTctOWE2Mi0z NTczLWFlZTgtZDFkZmVkNWEzN2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjgwMzVlYTItYzFkNS00YjI5LWE4 YzQtMWIzMTM3OWM4YWZmLzI4MDM1ZWEyLWMxZDUtNGIyOS1hOGM0LTFiMzEzNzlj OGFmZi5jcmwwHwYDVR0jBBgwFoAU8a/gxj9B23Vcsh798dH499Cp++AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yODAzNWVhMi1jMWQ1LTRiMjktYThjNC0xYjMx Mzc5YzhhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KncMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALf8eZE1BthR7iCacskDMGS8L9MoWUlEJuYB7IargKU0utgQuC2QvTXf j+rsE3T9Jd5jQa++Vy+p+leqV5A7Nr5yEm6ic5/EeJDqQ8LEjmoLL8EBSpLTOCk9 F7HPWYH6M8YjRfMGkC4kZuCORpIMVV4r0o9zRzWGU44FicWAqQv37r3P4hSGfoYt mdWp2C6VdmViJzdRnu3CMABTlV63Z54SNAGN7m3AlQ8kznLUid9KEEmZZcSPL3x4 tibR1meoJz5Jkw2PdkxcUHWY71ztd/tojereRtCzZkPIVIDz3UlOlrpvr33F06Bv jOawobyn8vVc0ZWjYuW/MU5XYYKvmqY= -----END CERTIFICATE-----Generated at Sat Sep 26 15:59:44 2026 by rpki-client