$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5aa21e72-a241-4e13-a3ca-6e78d83d3df4/28222415-a0d5-30a4-b8bc-c35e0fc2d085.roa File: 28222415-a0d5-30a4-b8bc-c35e0fc2d085.roa (raw, json) Hash identifier: xwcpjFTfSUp0FR6CKdQk+WQsMM0WjVltRcR7CJEi8S0= Subject key identifier: AA:6B:B6:53:D1:A1:96:3A:0B:2E:0C:73:C5:96:B3:9A:2F:09:47:5B Certificate issuer: /CN=5aa21e72-a241-4e13-a3ca-6e78d83d3df4 Certificate serial: 010D0C9F4328584F74B8231C74BE9297C48C2C80 Authority key identifier: EB:1D:3D:6F:D2:E8:E6:B7:A7:5B:50:49:BB:43:D9:17:71:AA:2C:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5aa21e72-a241-4e13-a3ca-6e78d83d3df4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5aa21e72-a241-4e13-a3ca-6e78d83d3df4/28222415-a0d5-30a4-b8bc-c35e0fc2d085.roa Signing time: Sat 10 Oct 2026 13:00:13 +0000 ROA not before: Sat 10 Oct 2026 13:00:13 +0000 ROA not after: Fri 08 Jan 2027 14:00:13 +0000 asID: 402072 IP address blocks: 199.204.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5aa21e72-a241-4e13-a3ca-6e78d83d3df4/5aa21e72-a241-4e13-a3ca-6e78d83d3df4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5aa21e72-a241-4e13-a3ca-6e78d83d3df4/5aa21e72-a241-4e13-a3ca-6e78d83d3df4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5aa21e72-a241-4e13-a3ca-6e78d83d3df4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:74:b8:23:1c:74:be:92:97:c4:8c:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aa21e72-a241-4e13-a3ca-6e78d83d3df4 Validity Not Before: Oct 10 13:00:13 2026 GMT Not After : Jan 8 14:00:13 2027 GMT Subject: CN=97fcc0b0-3f5a-445e-9b18-bf8a6b6d6616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:df:57:8e:fe:7b:cc:93:a4:ed:ea:c1:48:ce: 35:98:77:1c:71:8c:6e:7f:1f:d5:bb:f4:f8:af:79: ce:75:02:0d:50:b4:94:f4:75:c4:53:9d:32:1a:d8: 71:68:87:bc:39:26:69:bb:95:18:57:be:59:f7:ea: df:d6:35:81:f6:be:af:b6:e4:4c:65:6e:7a:e4:cc: 2d:ed:0c:0c:ea:6f:56:32:d9:75:df:8e:ff:e0:e5: b2:2b:f3:47:10:6e:e0:55:d2:08:b5:88:9f:cd:9a: 77:df:d4:40:25:d7:a7:c0:4a:91:f0:38:f9:a4:ef: 98:fe:84:27:63:cc:15:e4:b6:ff:61:a6:bb:f7:c0: 5a:2c:ff:ee:95:e4:c7:08:4e:55:e8:b1:49:33:33: a4:8a:87:00:2b:a6:3a:7d:12:29:f3:4b:e4:25:eb: 45:e0:d2:b3:03:f2:71:e2:d3:71:41:82:a4:e8:aa: c0:f0:84:1a:9b:b5:62:ff:20:27:d1:fc:c9:2b:cd: 7d:bd:d3:6f:44:e0:31:2e:62:b1:a8:20:d8:23:fc: f1:19:6a:74:cf:d8:7a:a2:0d:f4:b5:63:83:e5:1c: ed:06:7b:5c:35:15:82:4e:3e:8c:ff:e8:fe:ff:01: bf:5b:54:dd:00:05:70:59:9c:e1:e6:b9:c1:bb:9e: 3f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:6B:B6:53:D1:A1:96:3A:0B:2E:0C:73:C5:96:B3:9A:2F:09:47:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5aa21e72-a241-4e13-a3ca-6e78d83d3df4/28222415-a0d5-30a4-b8bc-c35e0fc2d085.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5aa21e72-a241-4e13-a3ca-6e78d83d3df4/5aa21e72-a241-4e13-a3ca-6e78d83d3df4.crl X509v3 Authority Key Identifier: keyid:EB:1D:3D:6F:D2:E8:E6:B7:A7:5B:50:49:BB:43:D9:17:71:AA:2C:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5aa21e72-a241-4e13-a3ca-6e78d83d3df4.cer sbgp-ipAddrBlock: critical IPv4: 199.204.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:eb:f2:4b:2c:b5:52:80:cb:7b:66:01:40:5a:57:6b:1f:7a: bd:cc:08:5c:ea:ca:58:4c:b1:19:32:21:5e:cc:a0:42:c9:fd: 7f:3a:0b:e8:b3:c2:74:08:62:a9:fe:b2:61:d1:46:bc:c2:00: 26:a7:00:1f:6b:37:00:98:8a:8d:aa:e7:1f:c7:4e:d1:67:f7: a9:d8:d8:22:6b:cf:d0:b1:a6:73:0b:f3:71:8d:b1:5b:55:91: 9c:b2:93:84:0f:a0:16:2a:c5:5a:63:49:93:24:81:75:a4:dd: 1a:d2:e2:2c:2e:8a:5a:44:42:64:9b:8f:01:17:3b:d5:21:e7: f0:05:53:39:b5:02:96:24:1d:9f:f2:74:ff:71:a8:be:83:88: c0:f5:f0:c4:88:0c:31:fc:d6:20:e1:af:64:7f:7a:1b:4b:db: 62:9b:52:f8:45:7b:ce:11:d4:bb:c8:82:fa:0c:2e:ef:76:ce: 9f:21:c2:47:74:a3:44:03:69:33:a6:c1:1d:9c:6f:35:a4:d4: cf:4e:fa:c4:07:a8:d4:ab:1b:1f:ad:ac:da:c2:ea:68:ba:a3: 16:76:e9:89:61:01:f8:3e:9a:fb:d9:36:54:0d:93:78:3e:cd: 32:fd:c1:5f:16:da:43:29:77:99:06:4d:63:93:43:61:8c:21: ce:10:c5:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE90uCMcdL6Sl8SMLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFhMjFlNzItYTI0MS00ZTEzLWEzY2EtNmU3OGQ4M2Qz ZGY0MB4XDTI2MTAxMDEzMDAxM1oXDTI3MDEwODE0MDAxM1owLzEtMCsGA1UEAxMk OTdmY2MwYjAtM2Y1YS00NDVlLTliMTgtYmY4YTZiNmQ2NjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk99Xjv57zJOk7erBSM41mHcccYxufx/Vu/T4 r3nOdQINULSU9HXEU50yGthxaIe8OSZpu5UYV75Z9+rf1jWB9r6vtuRMZW565Mwt 7QwM6m9WMtl1347/4OWyK/NHEG7gVdIItYifzZp339RAJdenwEqR8Dj5pO+Y/oQn Y8wV5Lb/Yaa798BaLP/uleTHCE5V6LFJMzOkiocAK6Y6fRIp80vkJetF4NKzA/Jx 4tNxQYKk6KrA8IQam7Vi/yAn0fzJK819vdNvROAxLmKxqCDYI/zxGWp0z9h6og30 tWOD5RztBntcNRWCTj6M/+j+/wG/W1TdAAVwWZzh5rnBu54/xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKprtlPRoZY6Cy4Mc8WWs5ovCUdbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81YWEy MWU3Mi1hMjQxLTRlMTMtYTNjYS02ZTc4ZDgzZDNkZjQvMjgyMjI0MTUtYTBkNS0z MGE0LWI4YmMtYzM1ZTBmYzJkMDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWFhMjFlNzItYTI0MS00ZTEzLWEz Y2EtNmU3OGQ4M2QzZGY0LzVhYTIxZTcyLWEyNDEtNGUxMy1hM2NhLTZlNzhkODNk M2RmNC5jcmwwHwYDVR0jBBgwFoAU6x09b9Lo5renW1BJu0PZF3GqLDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81YWEyMWU3Mi1hMjQxLTRlMTMtYTNjYS02ZTc4 ZDgzZDNkZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8yPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDr8ksstVKAy3tmAUBaV2sfer3MCFzqylhMsRkyIV7MoELJ/X86C+iz wnQIYqn+smHRRrzCACanAB9rNwCYio2q5x/HTtFn96nY2CJrz9CxpnML83GNsVtV kZyyk4QPoBYqxVpjSZMkgXWk3RrS4iwuilpEQmSbjwEXO9Uh5/AFUzm1ApYkHZ/y dP9xqL6DiMD18MSIDDH81iDhr2R/ehtL22KbUvhFe84R1LvIgvoMLu92zp8hwkd0 o0QDaTOmwR2cbzWk1M9O+sQHqNSrGx+trNrC6mi6oxZ26YlhAfg+mvvZNlQNk3g+ zTL9wV8W2kMpd5kGTWOTQ2GMIc4QxWY= -----END CERTIFICATE-----Generated at Tue Oct 27 17:43:56 2026 by rpki-client