$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/157ba081-05d4-354b-847f-6a7f1507e1c0.roa File: 157ba081-05d4-354b-847f-6a7f1507e1c0.roa (raw, json) Hash identifier: UD7GP3O8YONsf61YmWIy3cHOdEw3ie7vkNDCuublF58= Subject key identifier: F5:3E:E4:E0:A0:1E:06:08:7B:94:95:70:9F:DE:67:74:29:6F:0C:B7 Certificate issuer: /CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Certificate serial: 010D0C9F4328584E7204E361B733851D4E262A00 Authority key identifier: F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/157ba081-05d4-354b-847f-6a7f1507e1c0.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 22641 IP address blocks: 216.169.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:e3:61:b7:33:85:1d:4e:26:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=324cf389-b126-432c-81a0-93eb74beda8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:91:e2:2c:a9:7a:d2:00:c5:3f:b9:ce:3f:2a: 9a:6f:01:45:73:2b:c9:31:3b:93:f3:93:bc:3f:5a: 07:de:1a:96:74:2d:2a:4d:e0:67:de:7d:30:6d:b6: 00:d4:56:52:af:0e:84:08:80:30:3d:46:93:c0:39: 12:6b:b3:38:a9:46:c5:d1:3d:af:66:b3:bb:4b:0f: fb:ba:d4:b6:09:14:1d:21:74:68:f5:f0:9d:1b:0a: 46:4f:f7:0d:9b:93:1a:90:ce:cb:32:0f:83:79:9f: c4:a6:e4:f8:17:d4:88:c6:12:e4:ff:45:a8:c4:56: a6:92:de:88:bc:e3:8f:81:52:3f:c7:0e:23:d6:12: e4:c9:86:45:70:b2:12:74:26:b0:ea:c1:3a:48:90: 9d:f5:0c:44:6d:f2:01:41:e9:e0:2e:b8:f2:07:d9: 20:70:bf:01:1a:04:02:f9:41:ed:8d:08:52:85:3b: a5:bc:3e:df:7e:ac:e3:ee:81:83:b6:06:40:b2:66: 97:a3:30:a5:cd:ff:14:a5:8c:40:8d:23:99:cb:72: 96:b4:d0:f8:6b:de:84:99:99:6f:b9:71:fb:0b:39: 5c:52:6f:ad:6c:f0:bb:5c:a6:99:6a:87:d4:d4:32: 30:f5:a2:f1:4d:b8:97:31:e8:ab:75:dd:9b:3a:db: e6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:3E:E4:E0:A0:1E:06:08:7B:94:95:70:9F:DE:67:74:29:6F:0C:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/157ba081-05d4-354b-847f-6a7f1507e1c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl X509v3 Authority Key Identifier: keyid:F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer sbgp-ipAddrBlock: critical IPv4: 216.169.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:70:f3:6a:79:44:3e:c4:c2:e4:37:c6:e8:06:57:f2:ab:ef: ba:33:b7:0a:ff:1a:6d:7b:2e:0d:1e:e9:a2:80:d8:45:04:e6: 5d:50:55:2a:65:f0:d6:48:02:fd:33:4e:93:6b:91:5e:50:9e: ca:fd:58:d2:1e:76:9f:72:d4:4c:3a:9a:7e:15:f4:db:89:3e: 73:0e:3e:96:c1:7a:25:ea:ba:76:d7:a7:a5:6b:ee:95:47:02: 4d:28:81:2f:f7:fa:94:b8:6c:49:60:12:27:59:fd:df:d3:1f: 3c:b5:78:fb:a5:93:c7:60:bb:5b:7b:04:c0:9c:01:8c:a0:11: d4:7a:3d:63:b2:fc:bc:4c:f1:07:69:68:0d:3e:0c:9a:c0:66: 31:14:4b:62:25:b2:7f:14:00:38:34:75:3a:65:be:1a:b0:d5: af:23:5e:7a:10:a8:ad:a1:76:fa:b0:5c:46:91:1c:25:d6:25: 3f:d3:2e:82:ba:bf:73:5f:f5:08:73:97:73:6b:5b:bd:ee:d2: a1:17:62:d3:f0:7a:52:e8:93:7e:9b:e3:a4:83:6d:39:32:6c: cb:5e:49:bb:ee:98:e9:8f:16:2b:05:73:b1:ac:19:ec:dc:a6: 81:b5:36:cb:32:86:3a:a6:36:22:f1:72:9d:a6:77:69:da:f2: f9:86:f1:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5yBONhtzOFHU4mKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgwMzVlYTItYzFkNS00YjI5LWE4YzQtMWIzMTM3OWM4 YWZmMB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk MzI0Y2YzODktYjEyNi00MzJjLTgxYTAtOTNlYjc0YmVkYThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5HiLKl60gDFP7nOPyqabwFFcyvJMTuT85O8 P1oH3hqWdC0qTeBn3n0wbbYA1FZSrw6ECIAwPUaTwDkSa7M4qUbF0T2vZrO7Sw/7 utS2CRQdIXRo9fCdGwpGT/cNm5MakM7LMg+DeZ/EpuT4F9SIxhLk/0WoxFamkt6I vOOPgVI/xw4j1hLkyYZFcLISdCaw6sE6SJCd9QxEbfIBQengLrjyB9kgcL8BGgQC +UHtjQhShTulvD7ffqzj7oGDtgZAsmaXozClzf8UpYxAjSOZy3KWtND4a96EmZlv uXH7CzlcUm+tbPC7XKaZaofU1DIw9aLxTbiXMeirdd2bOtvmGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPU+5OCgHgYIe5SVcJ/eZ3Qpbwy3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yODAz NWVhMi1jMWQ1LTRiMjktYThjNC0xYjMxMzc5YzhhZmYvMTU3YmEwODEtMDVkNC0z NTRiLTg0N2YtNmE3ZjE1MDdlMWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjgwMzVlYTItYzFkNS00YjI5LWE4 YzQtMWIzMTM3OWM4YWZmLzI4MDM1ZWEyLWMxZDUtNGIyOS1hOGM0LTFiMzEzNzlj OGFmZi5jcmwwHwYDVR0jBBgwFoAU8a/gxj9B23Vcsh798dH499Cp++AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yODAzNWVhMi1jMWQ1LTRiMjktYThjNC0xYjMx Mzc5YzhhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KneMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1w82p5RD7EwuQ3xugGV/Kr77oztwr/Gm17Lg0e6aKA2EUE5l1QVSpl 8NZIAv0zTpNrkV5Qnsr9WNIedp9y1Ew6mn4V9NuJPnMOPpbBeiXqunbXp6Vr7pVH Ak0ogS/3+pS4bElgEidZ/d/THzy1ePulk8dgu1t7BMCcAYygEdR6PWOy/LxM8Qdp aA0+DJrAZjEUS2Ilsn8UADg0dTplvhqw1a8jXnoQqK2hdvqwXEaRHCXWJT/TLoK6 v3Nf9Qhzl3NrW73u0qEXYtPwelLok36b46SDbTkybMteSbvumOmPFisFc7GsGezc poG1NssyhjqmNiLxcp2md2na8vmG8ZE= -----END CERTIFICATE-----Generated at Fri Jul 24 15:09:56 2026 by rpki-client