$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/84e8903d-ec5b-3551-96bd-d419dbc97d32.roa File: 84e8903d-ec5b-3551-96bd-d419dbc97d32.roa (raw, json) Hash identifier: 7t3fLSe3uBMjByUzZV40CHDhk8nbhss5YXb8K5rdflQ= Subject key identifier: 09:28:08:3D:A8:68:B1:0C:32:E5:3B:44:A6:08:73:97:0D:B6:90:DD Certificate issuer: /CN=71e68809-5436-4288-ad80-0df35fa0b945 Certificate serial: 010D0C9F4328584E50849FB5B91E0DBF39D42380 Authority key identifier: 10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/84e8903d-ec5b-3551-96bd-d419dbc97d32.roa Signing time: Sat 27 Jun 2026 21:00:12 +0000 ROA not before: Sat 27 Jun 2026 21:00:12 +0000 ROA not after: Fri 25 Sep 2026 21:00:12 +0000 asID: 14618 IP address blocks: 192.28.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:50:84:9f:b5:b9:1e:0d:bf:39:d4:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71e68809-5436-4288-ad80-0df35fa0b945 Validity Not Before: Jun 27 21:00:12 2026 GMT Not After : Sep 25 21:00:12 2026 GMT Subject: CN=098504dc-83c7-409c-9bcd-25f2568478a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f2:26:bd:79:89:1a:0f:c8:7c:4b:f5:00:26: 15:9d:a1:ba:ce:a4:48:a2:da:54:44:67:d2:2b:61: 20:c5:71:fd:1f:a7:e7:2b:57:3c:56:49:a4:9d:24: ce:fd:70:82:96:32:98:4e:61:34:56:53:b5:3d:36: ad:93:6f:88:83:17:36:8e:0b:40:d9:96:87:ea:38: 80:3b:9d:fc:b7:ca:01:9f:5e:f3:85:75:1d:0d:56: fe:16:77:18:19:b7:14:36:94:3b:0f:4f:1f:9d:ae: 35:74:80:88:7d:90:f6:0e:d4:9d:32:ca:2e:42:27: 65:75:00:89:57:86:2a:29:23:96:3b:5e:af:8a:b1: 49:20:3f:c8:00:b8:8e:7a:56:c5:6b:e4:31:2b:8d: 25:73:b4:07:ff:d2:3a:b2:c9:5c:f4:f5:7b:39:22: 09:f1:8c:2a:07:41:48:9b:5b:e0:1b:2c:d6:6c:7f: d7:cb:84:5d:68:d0:83:ae:4f:36:3f:d6:d1:05:61: d4:f9:be:fe:93:b1:ed:8d:d6:df:f3:c4:33:10:9b: 65:2a:6d:50:98:53:50:fc:0a:f4:cf:22:bf:bb:f9: b2:ea:b8:de:74:db:cb:72:fd:37:18:88:63:99:d4: 49:88:22:98:fc:e4:10:1b:c9:53:e6:8b:ed:a7:2e: c4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:28:08:3D:A8:68:B1:0C:32:E5:3B:44:A6:08:73:97:0D:B6:90:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/84e8903d-ec5b-3551-96bd-d419dbc97d32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl X509v3 Authority Key Identifier: keyid:10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer sbgp-ipAddrBlock: critical IPv4: 192.28.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:63:d4:d0:20:9f:ca:41:33:12:49:f2:63:12:bf:69:c9:9e: 03:0c:ca:ee:5a:54:23:4f:c3:1e:3a:f6:1e:71:fc:a9:b4:d5: c0:26:bd:9c:bf:b0:1d:c3:24:19:74:5a:ba:6a:8d:3d:7d:b1: dd:58:9a:73:78:35:54:dc:57:7b:c1:1a:e6:0b:39:27:b4:b3: 3f:e4:1d:14:73:a5:0e:b8:6a:bb:fe:e3:f7:97:04:d0:5e:b1: c3:4f:1a:24:05:37:fc:86:63:5b:b3:ff:c7:9f:dd:e8:87:71: 3d:34:0c:99:73:a9:d8:72:f7:2e:2d:4b:0b:9d:5a:60:aa:d9: fe:7f:36:82:a4:90:12:5c:0c:a4:f9:79:97:54:39:0a:a9:28: 23:9f:2c:94:4b:c5:b5:dd:31:b0:36:f6:de:6a:39:bb:6e:c0: 6a:f7:c9:f7:7b:b2:1e:f0:49:56:28:6a:6c:57:12:a7:07:4c: d4:0d:9f:e7:09:28:ba:24:72:d1:5e:23:2b:c6:ee:f2:ca:80: 9e:99:5f:e2:fa:c1:f8:85:54:ce:cc:e4:fc:2d:ba:f3:42:c1: 99:15:31:78:06:d1:f1:de:82:9b:37:01:32:37:9d:4a:ca:f0: 00:d5:bf:04:01:29:b8:6c:7a:2c:4d:df:b5:be:b5:c6:77:a1: c2:10:0b:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5QhJ+1uR4NvznUI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlNjg4MDktNTQzNi00Mjg4LWFkODAtMGRmMzVmYTBi OTQ1MB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk MDk4NTA0ZGMtODNjNy00MDljLTliY2QtMjVmMjU2ODQ3OGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/ImvXmJGg/IfEv1ACYVnaG6zqRIotpURGfS K2EgxXH9H6fnK1c8VkmknSTO/XCCljKYTmE0VlO1PTatk2+Igxc2jgtA2ZaH6jiA O538t8oBn17zhXUdDVb+FncYGbcUNpQ7D08fna41dICIfZD2DtSdMsouQidldQCJ V4YqKSOWO16virFJID/IALiOelbFa+QxK40lc7QH/9I6sslc9PV7OSIJ8YwqB0FI m1vgGyzWbH/Xy4RdaNCDrk82P9bRBWHU+b7+k7Htjdbf88QzEJtlKm1QmFNQ/Ar0 zyK/u/my6rjedNvLcv03GIhjmdRJiCKY/OQQG8lT5ovtpy7ERQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkoCD2oaLEMMuU7RKYIc5cNtpDdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2 ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYzNWZhMGI5NDUvODRlODkwM2QtZWM1Yi0z NTUxLTk2YmQtZDQxOWRiYzk3ZDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzFlNjg4MDktNTQzNi00Mjg4LWFk ODAtMGRmMzVmYTBiOTQ1LzcxZTY4ODA5LTU0MzYtNDI4OC1hZDgwLTBkZjM1ZmEw Yjk0NS5jcmwwHwYDVR0jBBgwFoAUEFAAX4YwKrkehfZQ9nLTMqW7VE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYz NWZhMGI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwBwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdj1NAgn8pBMxJJ8mMSv2nJngMMyu5aVCNPwx469h5x/Km01cAmvZy/ sB3DJBl0WrpqjT19sd1YmnN4NVTcV3vBGuYLOSe0sz/kHRRzpQ64arv+4/eXBNBe scNPGiQFN/yGY1uz/8ef3eiHcT00DJlzqdhy9y4tSwudWmCq2f5/NoKkkBJcDKT5 eZdUOQqpKCOfLJRLxbXdMbA29t5qObtuwGr3yfd7sh7wSVYoamxXEqcHTNQNn+cJ KLokctFeIyvG7vLKgJ6ZX+L6wfiFVM7M5PwtuvNCwZkVMXgG0fHegps3ATI3nUrK 8ADVvwQBKbhseixN37W+tcZ3ocIQC2Q= -----END CERTIFICATE-----Generated at Tue Jul 21 15:40:26 2026 by rpki-client