$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/003e009f-5560-3789-9ef8-b66f7b5313ea.roa File: 003e009f-5560-3789-9ef8-b66f7b5313ea.roa (raw, json) Hash identifier: nS4R44v60H0PvrQxxxqxVHX/38wW4ySUMPAo0PXY9n4= Subject key identifier: 74:73:4A:9D:29:6C:8A:A7:2D:D4:F1:B4:A4:7D:A6:8F:77:28:6C:90 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F067260831CCF66B4E1F50980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/003e009f-5560-3789-9ef8-b66f7b5313ea.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 20940 IP address blocks: 184.28.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:60:83:1c:cf:66:b4:e1:f5:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=75bd9b3b-f92c-4c7e-b400-31b1ce406409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c4:8b:84:2a:f0:e3:77:f0:f1:1d:8b:e6:54: ad:59:15:b7:0b:a7:a1:a8:52:aa:17:c6:b0:70:4b: 35:e9:2c:3d:07:40:7f:ff:a0:ba:22:f5:67:57:c4: 9f:2f:24:63:4d:d2:88:2e:32:81:47:35:04:ec:9b: 70:f5:68:c2:e7:54:6b:5a:ab:79:97:6c:bb:74:05: a8:01:4f:c3:89:60:60:b8:76:c1:b0:69:fd:86:aa: ec:c9:32:8e:c8:6f:53:a6:a3:b6:49:04:78:c2:fa: ff:d1:45:f0:d9:52:5e:87:04:6f:31:4e:9d:21:82: 80:cc:b6:50:92:ed:64:1a:bf:c8:08:f0:00:0e:0e: bb:c1:0a:b3:cb:d4:1f:43:24:cf:46:4d:40:0e:8d: b5:0e:60:61:71:ec:16:8a:73:78:b8:85:ee:c9:63: e6:09:d8:80:63:8e:f5:5f:2e:2d:37:0c:e4:be:7e: 29:87:2b:15:97:5a:30:65:67:82:87:75:6d:68:b8: 99:6a:dc:be:5d:59:23:90:ba:4d:95:a6:b8:03:42: 21:40:49:66:ce:02:3f:15:d2:97:23:f5:d5:ed:a4: 57:a7:37:35:f5:ed:e8:54:ed:ca:d6:ed:8d:d5:13: 7a:ad:f8:fa:22:b8:30:f9:2e:c7:b4:af:3b:b1:29: 42:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:73:4A:9D:29:6C:8A:A7:2D:D4:F1:B4:A4:7D:A6:8F:77:28:6C:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/003e009f-5560-3789-9ef8-b66f7b5313ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.28.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:10:b9:57:a7:c4:27:47:a6:31:e1:51:77:e7:92:0d:c4:39: d7:03:9a:e3:60:74:2a:2e:de:50:45:60:5c:1d:4f:1a:1f:95: 29:61:6c:d0:11:3e:d1:82:96:9e:a6:c0:55:f1:bf:5d:46:47: b3:e9:ea:d4:e7:07:0b:8f:97:5c:72:53:e0:32:83:ec:20:9b: 12:59:a1:49:dd:a5:db:bc:59:d9:fa:59:67:4d:ee:92:19:51: 7c:0e:53:3d:f2:d3:17:20:f9:6a:7d:98:e4:1a:15:07:4c:de: 48:f2:59:f4:e6:46:92:f4:85:d0:04:0c:75:b6:22:7c:14:ee: 61:95:dd:43:2e:fe:c8:b9:f5:b6:20:3d:42:9f:c2:58:c8:35: 8c:7c:03:4d:f7:19:bd:0e:e9:71:fa:aa:6c:0c:c8:c1:30:3c: bc:40:fb:50:d1:17:da:e4:81:a4:f7:68:17:f1:15:37:b4:6a: f9:e8:79:a8:9a:d2:c1:be:1b:25:6f:43:c6:c3:20:fa:31:32: 0f:cd:d8:63:43:1b:01:06:87:41:76:1f:37:e9:66:d3:ee:0e: 8f:6e:b4:5c:ff:0c:3c:e2:ba:57:05:9d:c6:14:35:d4:c6:21: 46:70:91:44:66:8c:2a:80:af:58:ef:0d:ba:cf:db:e7:5b:cc: 01:1d:1d:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GcmCDHM9mtOH1CYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk NzViZDliM2ItZjkyYy00YzdlLWI0MDAtMzFiMWNlNDA2NDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MSLhCrw43fw8R2L5lStWRW3C6ehqFKqF8aw cEs16Sw9B0B//6C6IvVnV8SfLyRjTdKILjKBRzUE7Jtw9WjC51RrWqt5l2y7dAWo AU/DiWBguHbBsGn9hqrsyTKOyG9TpqO2SQR4wvr/0UXw2VJehwRvMU6dIYKAzLZQ ku1kGr/ICPAADg67wQqzy9QfQyTPRk1ADo21DmBhcewWinN4uIXuyWPmCdiAY471 Xy4tNwzkvn4physVl1owZWeCh3VtaLiZaty+XVkjkLpNlaa4A0IhQElmzgI/FdKX I/XV7aRXpzc19e3oVO3K1u2N1RN6rfj6Irgw+S7HtK87sSlCewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRzSp0pbIqnLdTxtKR9po93KGyQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDAzZTAwOWYtNTU2MC0z Nzg5LTllZjgtYjY2ZjdiNTMxM2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBxOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEQuVenxCdHpjHhUXfnkg3EOdcDmuNgdCou3lBFYFwdTxoflSlhbNAR PtGClp6mwFXxv11GR7Pp6tTnBwuPl1xyU+Ayg+wgmxJZoUndpdu8Wdn6WWdN7pIZ UXwOUz3y0xcg+Wp9mOQaFQdM3kjyWfTmRpL0hdAEDHW2InwU7mGV3UMu/si59bYg PUKfwljINYx8A033Gb0O6XH6qmwMyMEwPLxA+1DRF9rkgaT3aBfxFTe0avnoeaia 0sG+GyVvQ8bDIPoxMg/N2GNDGwEGh0F2HzfpZtPuDo9utFz/DDziulcFncYUNdTG IUZwkURmjCqAr1jvDbrP2+dbzAEdHSc= -----END CERTIFICATE-----Generated at Sat Sep 5 04:36:49 2026 by rpki-client