$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3e988ce-12f5-31e6-a56a-ba2267c58304.roa File: b3e988ce-12f5-31e6-a56a-ba2267c58304.roa (raw, json) Hash identifier: qvWEQvonKIPVjwODysHogCx2UtiA1gcyiMCnBx3hx/s= Subject key identifier: 93:98:C7:0B:10:1C:35:10:95:BF:80:F8:62:77:59:1F:DD:07:8D:CE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F067260D9D393C0DDC0A23F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3e988ce-12f5-31e6-a56a-ba2267c58304.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 20940 IP address blocks: 184.28.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:60:d9:d3:93:c0:dd:c0:a2:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=93b52e2a-4050-4e5f-8b39-3a16c63edaa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:eb:3d:49:76:42:89:6b:b6:7a:36:b0:6b:8f: bf:4c:8e:80:31:ad:5a:dd:fb:3e:a3:6e:8f:91:a2: 9a:1e:d7:d2:c2:72:a8:48:47:66:de:ec:7c:e5:65: 30:7e:63:98:48:30:5d:28:cb:78:4d:74:52:de:b7: 58:a1:33:7f:7c:c9:1d:8f:2d:a1:e6:ea:07:de:19: 9a:0b:63:1c:e2:d8:3f:d4:97:4d:59:8c:3b:98:5c: 4a:05:96:89:75:99:0a:3d:7e:56:55:22:c6:d4:f7: ab:3d:ae:c9:f6:18:41:91:33:bc:d9:43:86:c3:a1: 41:02:1a:c1:45:b1:57:32:fa:c6:7e:49:c1:ee:b5: 31:fb:5f:21:2b:a2:fa:06:2b:2e:bf:03:d3:fd:ec: 7a:a5:52:65:aa:b1:06:51:1f:67:e6:7b:05:64:4d: 13:e1:84:87:59:b9:13:0d:aa:02:b6:13:c7:90:6d: bb:a5:9e:be:50:a4:a8:fc:4f:28:50:36:f7:a8:ae: a7:2c:70:46:b4:ca:16:1b:fd:d2:83:ef:b7:6d:37: 43:0e:da:8f:03:45:f7:0c:3d:be:83:ff:89:4b:32: bc:bf:11:66:79:50:5a:e9:fc:b5:84:20:01:a8:9f: b9:5b:83:19:85:71:95:ec:c4:82:db:90:27:74:0c: 8a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:98:C7:0B:10:1C:35:10:95:BF:80:F8:62:77:59:1F:DD:07:8D:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3e988ce-12f5-31e6-a56a-ba2267c58304.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.28.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:ba:3d:ab:f8:ac:2f:3b:fc:7c:f3:b9:b0:c7:f6:e2:9e:5a: 0f:2f:d0:44:b4:7d:88:0c:c1:be:98:ac:07:85:c3:6b:f7:91: 76:0a:10:cc:73:34:bb:16:a4:f6:cd:9b:58:d8:05:0c:63:95: 47:b1:11:e3:96:4b:c5:b9:ad:04:b5:b9:61:9d:74:d1:2d:aa: dc:43:b5:8e:a1:53:e9:3f:82:6e:86:1f:39:b0:91:63:2d:cf: 9a:44:c7:08:a1:b5:d7:88:bd:cf:68:b3:55:1d:99:f5:f5:7b: 1f:2b:15:30:c1:12:bf:a7:b6:ac:ad:69:dd:3e:87:9f:f8:40: c0:45:d1:1e:5a:94:8e:24:d7:52:12:2f:ce:eb:ef:b9:ba:07: bd:05:fe:db:fc:20:97:de:19:a4:8a:dc:57:81:18:32:00:7f: ca:2e:d4:53:2c:86:46:a2:49:ad:77:e8:68:1f:46:c8:1d:aa: de:96:f9:02:fa:a9:c3:38:01:ea:e7:5b:6c:92:3f:24:d8:43: eb:15:b9:e1:8e:50:3e:0d:27:8a:b0:61:0c:bd:69:2d:4b:8f: ea:aa:c2:77:73:a8:32:4e:0f:fc:e3:1b:05:72:a6:94:e5:f6: 8b:80:52:05:57:bb:c7:a9:49:ed:64:1d:cd:64:d1:af:6e:2a: b1:b9:e2:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GcmDZ05PA3cCiP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk OTNiNTJlMmEtNDA1MC00ZTVmLThiMzktM2ExNmM2M2VkYWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+s9SXZCiWu2ejawa4+/TI6AMa1a3fs+o26P kaKaHtfSwnKoSEdm3ux85WUwfmOYSDBdKMt4TXRS3rdYoTN/fMkdjy2h5uoH3hma C2Mc4tg/1JdNWYw7mFxKBZaJdZkKPX5WVSLG1PerPa7J9hhBkTO82UOGw6FBAhrB RbFXMvrGfknB7rUx+18hK6L6BisuvwPT/ex6pVJlqrEGUR9n5nsFZE0T4YSHWbkT DaoCthPHkG27pZ6+UKSo/E8oUDb3qK6nLHBGtMoWG/3Sg++3bTdDDtqPA0X3DD2+ g/+JSzK8vxFmeVBa6fy1hCABqJ+5W4MZhXGV7MSC25AndAyKnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOYxwsQHDUQlb+A+GJ3WR/dB43OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjNlOTg4Y2UtMTJmNS0z MWU2LWE1NmEtYmEyMjY3YzU4MzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBx2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABq6Pav4rC87/HzzubDH9uKeWg8v0ES0fYgMwb6YrAeFw2v3kXYKEMxz NLsWpPbNm1jYBQxjlUexEeOWS8W5rQS1uWGddNEtqtxDtY6hU+k/gm6GHzmwkWMt z5pExwihtdeIvc9os1UdmfX1ex8rFTDBEr+ntqytad0+h5/4QMBF0R5alI4k11IS L87r77m6B70F/tv8IJfeGaSK3FeBGDIAf8ou1FMshkaiSa136GgfRsgdqt6W+QL6 qcM4AernW2ySPyTYQ+sVueGOUD4NJ4qwYQy9aS1Lj+qqwndzqDJOD/zjGwVyppTl 9ouAUgVXu8epSe1kHc1k0a9uKrG54lE= -----END CERTIFICATE-----Generated at Sat Sep 5 03:29:25 2026 by rpki-client