$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/b33f9824-1d22-3c11-b98f-82918021c09b.roa File: b33f9824-1d22-3c11-b98f-82918021c09b.roa (raw, json) Hash identifier: e1Flw19xEZJRxGsqjH7T4X7cKQALGYUZNOe6I4XOW1o= Subject key identifier: 59:DB:F6:00:E5:60:B6:08:50:3C:5B:8B:6E:36:50:7F:39:7B:53:D0 Certificate issuer: /CN=28635d6a-8623-4918-823a-dc1ad56ec1bd Certificate serial: 010D0C9F4328584EC0A7238232ADF52F3FEF1610 Authority key identifier: ED:8F:C6:46:23:EE:FA:95:EA:3C:2C:29:2D:0C:C2:D0:6D:1E:66:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/b33f9824-1d22-3c11-b98f-82918021c09b.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 53429 IP address blocks: 199.68.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/28635d6a-8623-4918-823a-dc1ad56ec1bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/28635d6a-8623-4918-823a-dc1ad56ec1bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:23:82:32:ad:f5:2f:3f:ef:16:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28635d6a-8623-4918-823a-dc1ad56ec1bd Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=5f9c263e-38c1-4912-8820-f609fee7d728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:05:8d:f6:c8:22:ed:aa:b3:fe:d5:4a:a3:cb: 24:9b:bc:47:11:1c:98:05:4a:15:c9:68:f5:20:5f: cc:81:93:0a:23:f2:bf:5b:8c:69:44:a5:f2:1c:b3: 78:38:4b:e4:58:ab:53:e8:58:fc:88:f9:1d:40:82: c2:2d:1f:b6:e9:36:10:37:66:54:2e:91:5f:c8:80: 10:1c:4a:a5:ee:f1:22:43:f4:a8:64:13:e2:42:e4: 47:aa:d4:76:41:b1:22:57:02:43:9e:25:94:cc:85: a1:ad:36:92:46:a3:da:89:d9:2f:d1:bc:03:09:b4: 50:c6:32:0b:68:be:b5:d0:5d:a1:c7:fc:1f:db:0c: a8:fe:75:85:26:44:f3:05:b2:bd:c6:eb:68:39:ac: 09:07:14:8e:1e:0c:0d:c0:4e:68:91:6a:dd:d3:15: b7:f3:09:b3:87:7a:86:6b:a5:72:e0:08:ff:15:e3: aa:38:67:4e:d0:b8:53:d7:65:2f:39:eb:ca:52:5a: 48:65:0c:32:85:24:e9:8b:f7:d8:d5:13:9e:2d:a9: eb:08:ad:a2:8d:65:9d:eb:c2:04:86:87:d5:4a:d8: ae:89:ea:97:c4:37:85:ce:ed:3e:76:b1:75:a6:6c: ac:bf:8d:ba:64:a2:80:4c:b0:0c:d0:92:c4:16:21: d0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:DB:F6:00:E5:60:B6:08:50:3C:5B:8B:6E:36:50:7F:39:7B:53:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/b33f9824-1d22-3c11-b98f-82918021c09b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/28635d6a-8623-4918-823a-dc1ad56ec1bd.crl X509v3 Authority Key Identifier: keyid:ED:8F:C6:46:23:EE:FA:95:EA:3C:2C:29:2D:0C:C2:D0:6D:1E:66:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd.cer sbgp-ipAddrBlock: critical IPv4: 199.68.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:a6:6e:21:7d:fd:45:b9:01:12:eb:f3:6a:98:46:a0:25:bc: c6:9d:53:15:06:5d:c8:30:78:82:18:2d:5b:d1:a3:52:4c:32: 46:6e:df:c0:70:59:80:37:ef:26:11:1c:02:77:de:33:01:58: 6f:97:fe:8f:ef:1c:d5:97:49:5b:5b:ff:a8:11:8a:54:8f:33: d8:fb:ea:06:30:b9:e1:77:e9:a0:99:c2:cd:cd:18:86:18:62: 45:7f:2c:3c:e2:34:e5:f3:52:19:12:c5:cd:0e:58:1b:7e:b5: e6:e3:58:40:63:1f:7f:ee:f2:a6:69:9d:0b:03:91:e9:83:22: 00:5c:21:f1:eb:21:04:0c:8f:ce:00:b1:d3:25:fd:06:f0:f8: f8:3a:69:12:5d:68:d1:af:bb:36:05:0f:86:25:ec:38:a4:65: 37:82:5c:7e:5e:e6:c3:93:92:b3:b1:95:83:7f:c9:d7:8a:c3: 2c:2d:20:af:e3:a1:84:eb:93:52:a6:4d:6d:13:4f:4c:bd:f4: f4:38:ff:cd:e3:6f:1e:d3:17:1f:4c:f3:8c:1a:a8:30:82:26: 22:62:f1:5a:06:89:66:94:45:01:a4:e1:8f:84:5b:08:9c:60: 5d:b5:d5:f5:e4:cf:e3:8d:60:02:e7:1a:1f:04:e4:c7:3b:f0: 5f:ad:8a:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ApyOCMq31Lz/vFhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2MzVkNmEtODYyMy00OTE4LTgyM2EtZGMxYWQ1NmVj MWJkMB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk NWY5YzI2M2UtMzhjMS00OTEyLTg4MjAtZjYwOWZlZTdkNzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAWN9sgi7aqz/tVKo8skm7xHERyYBUoVyWj1 IF/MgZMKI/K/W4xpRKXyHLN4OEvkWKtT6Fj8iPkdQILCLR+26TYQN2ZULpFfyIAQ HEql7vEiQ/SoZBPiQuRHqtR2QbEiVwJDniWUzIWhrTaSRqPaidkv0bwDCbRQxjIL aL610F2hx/wf2wyo/nWFJkTzBbK9xutoOawJBxSOHgwNwE5okWrd0xW38wmzh3qG a6Vy4Aj/FeOqOGdO0LhT12UvOevKUlpIZQwyhSTpi/fY1ROeLanrCK2ijWWd68IE hofVStiuieqXxDeFzu0+drF1pmysv426ZKKATLAM0JLEFiHQVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnb9gDlYLYIUDxbi242UH85e1PQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yODYz NWQ2YS04NjIzLTQ5MTgtODIzYS1kYzFhZDU2ZWMxYmQvYjMzZjk4MjQtMWQyMi0z YzExLWI5OGYtODI5MTgwMjFjMDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjg2MzVkNmEtODYyMy00OTE4LTgy M2EtZGMxYWQ1NmVjMWJkLzI4NjM1ZDZhLTg2MjMtNDkxOC04MjNhLWRjMWFkNTZl YzFiZC5jcmwwHwYDVR0jBBgwFoAU7Y/GRiPu+pXqPCwpLQzC0G0eZtIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yODYzNWQ2YS04NjIzLTQ5MTgtODIzYS1kYzFh ZDU2ZWMxYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx0SoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACmbiF9/UW5ARLr82qYRqAlvMadUxUGXcgweIIYLVvRo1JMMkZu38Bw WYA37yYRHAJ33jMBWG+X/o/vHNWXSVtb/6gRilSPM9j76gYwueF36aCZws3NGIYY YkV/LDziNOXzUhkSxc0OWBt+tebjWEBjH3/u8qZpnQsDkemDIgBcIfHrIQQMj84A sdMl/Qbw+Pg6aRJdaNGvuzYFD4Yl7DikZTeCXH5e5sOTkrOxlYN/ydeKwywtIK/j oYTrk1KmTW0TT0y99PQ4/83jbx7TFx9M84waqDCCJiJi8VoGiWaURQGk4Y+EWwic YF211fXkz+ONYALnGh8E5Mc78F+tisA= -----END CERTIFICATE-----Generated at Fri Aug 21 21:23:59 2026 by rpki-client