$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093/4ea6cab6-3bf5-37d7-8560-10b12a5b38fc.roa File: 4ea6cab6-3bf5-37d7-8560-10b12a5b38fc.roa (raw, json) Hash identifier: DBpZ9uDeTcVWLkputjHlPSXKrwgKGbVXK8Y4yNg5/V0= Subject key identifier: DA:3E:9A:CB:B7:1B:7F:02:58:DA:75:69:A8:A7:D7:0C:F8:D6:BF:7F Certificate issuer: /CN=f6666624-f7c3-4ff6-ac71-f4d940ccf093 Certificate serial: 010D0C9F4328584F5E62E0A734B67667AF275600 Authority key identifier: E4:C7:7F:E8:62:71:0E:FB:A5:9A:70:46:0F:3C:D4:BF:BD:96:EB:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093/4ea6cab6-3bf5-37d7-8560-10b12a5b38fc.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 36086 IP address blocks: 72.28.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093/f6666624-f7c3-4ff6-ac71-f4d940ccf093.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093/f6666624-f7c3-4ff6-ac71-f4d940ccf093.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:e0:a7:34:b6:76:67:af:27:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6666624-f7c3-4ff6-ac71-f4d940ccf093 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=f419a47e-5483-4675-a755-3e17c1780594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:68:dc:04:d3:92:0c:ce:a1:cd:11:a1:da:2e: 50:0a:55:ca:41:cc:c9:aa:c1:63:a2:9d:bf:8c:a9: 77:10:a4:37:83:ff:87:d1:70:59:a3:33:7b:19:97: 3c:e4:35:a0:dc:d5:f9:28:df:33:b5:58:a9:f3:ab: 0b:ff:64:de:c0:3b:3c:4e:2e:82:e4:be:0c:06:62: 15:61:a1:01:79:ac:f7:25:a8:83:33:d6:6f:47:55: d8:f7:23:c0:6d:00:2d:5c:59:c9:2b:bc:29:2c:de: fd:44:c3:5c:ca:50:93:8a:39:8b:2a:45:98:3b:14: c0:0b:16:cf:d5:92:b4:1b:90:c5:7e:55:ca:64:30: e5:1c:44:3d:aa:c6:4f:f8:80:dc:35:2c:9b:51:5b: 0a:93:fc:25:9c:10:2f:14:d5:a1:e5:44:ef:2f:6c: 2a:1f:5c:ac:06:e6:8e:56:2f:7b:7f:01:cd:b7:fb: 9e:b6:58:93:93:a2:9c:b3:5c:04:df:bc:18:87:be: 7e:6d:ac:63:83:51:ba:11:a9:dc:04:c6:c2:f2:99: ad:7b:39:4f:34:66:40:ff:31:11:b9:50:d7:a3:73: 5f:2b:9b:5c:31:1b:cf:46:5e:e5:59:39:5f:ce:a4: fc:7f:60:3b:cb:0c:a0:79:ff:3c:04:4e:ba:25:69: 04:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:3E:9A:CB:B7:1B:7F:02:58:DA:75:69:A8:A7:D7:0C:F8:D6:BF:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093/4ea6cab6-3bf5-37d7-8560-10b12a5b38fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093/f6666624-f7c3-4ff6-ac71-f4d940ccf093.crl X509v3 Authority Key Identifier: keyid:E4:C7:7F:E8:62:71:0E:FB:A5:9A:70:46:0F:3C:D4:BF:BD:96:EB:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093.cer sbgp-ipAddrBlock: critical IPv4: 72.28.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:8c:a0:45:53:52:3f:ac:70:e4:4a:05:d4:b7:46:9b:30:4c: a5:a0:59:fc:b7:cb:6a:6f:78:a5:b7:0b:4a:1c:2a:8b:65:ee: 8f:22:54:09:62:ea:d7:40:0c:04:5e:28:97:d5:97:f4:de:be: 92:75:6d:24:13:19:ac:50:a8:3b:10:f0:82:35:2c:6d:6f:cd: e8:91:a3:c6:e9:d1:cd:ce:54:c5:ef:ab:cc:f0:40:b7:8b:4b: a7:ca:24:e1:3d:8f:07:b3:66:2d:81:1b:5b:c7:94:b1:39:3d: 94:b8:9f:70:c4:1f:08:15:c1:e0:85:51:88:53:27:f8:0f:10: 9a:3a:28:d5:99:24:ee:50:f8:30:96:c3:24:1d:50:b4:b3:8d: 4d:33:ef:ad:1e:b7:61:18:6c:05:00:98:ec:46:1a:2b:77:24: cf:84:33:fb:a1:f3:93:2f:bf:53:05:be:36:23:96:f1:ba:b1: cf:e3:11:d1:ef:b9:01:d0:e7:2d:2c:33:da:9f:7e:5f:5d:46: e4:59:8d:e7:40:24:bb:01:ac:bb:4d:3c:e6:35:38:5b:9c:3b: 70:1f:92:d1:b9:fc:85:34:3f:be:86:a6:8c:41:24:b9:f3:d7: e1:3b:40:4f:d7:d7:e5:7b:7a:3c:59:c7:2b:94:e2:e2:b3:b5: 7e:cd:72:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYuCnNLZ2Z68nVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY2NjY2MjQtZjdjMy00ZmY2LWFjNzEtZjRkOTQwY2Nm MDkzMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk ZjQxOWE0N2UtNTQ4My00Njc1LWE3NTUtM2UxN2MxNzgwNTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2jcBNOSDM6hzRGh2i5QClXKQczJqsFjop2/ jKl3EKQ3g/+H0XBZozN7GZc85DWg3NX5KN8ztVip86sL/2TewDs8Ti6C5L4MBmIV YaEBeaz3JaiDM9ZvR1XY9yPAbQAtXFnJK7wpLN79RMNcylCTijmLKkWYOxTACxbP 1ZK0G5DFflXKZDDlHEQ9qsZP+IDcNSybUVsKk/wlnBAvFNWh5UTvL2wqH1ysBuaO Vi97fwHNt/uetliTk6Kcs1wE37wYh75+baxjg1G6EancBMbC8pmtezlPNGZA/zER uVDXo3NfK5tcMRvPRl7lWTlfzqT8f2A7ywygef88BE66JWkEZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNo+msu3G38CWNp1aain1wz41r9/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mNjY2 NjYyNC1mN2MzLTRmZjYtYWM3MS1mNGQ5NDBjY2YwOTMvNGVhNmNhYjYtM2JmNS0z N2Q3LTg1NjAtMTBiMTJhNWIzOGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZjY2NjY2MjQtZjdjMy00ZmY2LWFj NzEtZjRkOTQwY2NmMDkzL2Y2NjY2NjI0LWY3YzMtNGZmNi1hYzcxLWY0ZDk0MGNj ZjA5My5jcmwwHwYDVR0jBBgwFoAU5Md/6GJxDvulmnBGDzzUv72W668wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mNjY2NjYyNC1mN2MzLTRmZjYtYWM3MS1mNGQ5 NDBjY2YwOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBx7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOMoEVTUj+scORKBdS3RpswTKWgWfy3y2pveKW3C0ocKotl7o8iVAli 6tdADAReKJfVl/TevpJ1bSQTGaxQqDsQ8II1LG1vzeiRo8bp0c3OVMXvq8zwQLeL S6fKJOE9jwezZi2BG1vHlLE5PZS4n3DEHwgVweCFUYhTJ/gPEJo6KNWZJO5Q+DCW wyQdULSzjU0z760et2EYbAUAmOxGGit3JM+EM/uh85Mvv1MFvjYjlvG6sc/jEdHv uQHQ5y0sM9qffl9dRuRZjedAJLsBrLtNPOY1OFucO3AfktG5/IU0P76GpoxBJLnz 1+E7QE/X1+V7ejxZxyuU4uKztX7NcsE= -----END CERTIFICATE-----Generated at Thu Oct 8 10:49:07 2026 by rpki-client