$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/620c8d56-28c5-3811-9ba7-0727e8c6eb95.roa File: 620c8d56-28c5-3811-9ba7-0727e8c6eb95.roa (raw, json) Hash identifier: Ek7QP62DBS8Byvp4gcTXpgENjsaL3lEIkPHhcb/uEYA= Subject key identifier: A9:D1:53:56:9C:5A:99:65:E6:DC:BD:57:43:24:13:9A:ED:A1:49:20 Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584EA7913832C3C7E015A3942300 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/620c8d56-28c5-3811-9ba7-0727e8c6eb95.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 10794 IP address blocks: 171.158.28.0/23 maxlen: 23 171.158.28.0/24 maxlen: 24 171.158.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:38:32:c3:c7:e0:15:a3:94:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=0f47bbaa-47bc-4463-840f-6ce2aadbf78e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:70:bd:06:52:46:f5:57:d1:22:83:55:a1:ed: b7:a0:af:c5:97:e3:69:61:93:5c:8f:11:b4:d9:9f: 31:e6:e0:d3:de:e7:92:2d:a3:b5:c6:08:b8:e0:7a: 71:18:09:e1:71:72:2b:4c:23:b3:eb:bb:b2:85:8c: e0:26:9e:6b:30:3d:d5:38:fa:18:27:13:3d:a3:0b: 79:25:60:ef:23:aa:47:e7:12:21:62:9c:a5:5d:fc: b1:09:04:e2:f6:63:88:d1:50:7b:f7:95:40:12:51: a0:ec:7f:51:2f:95:90:a1:04:74:39:20:9e:ca:10: 74:71:cd:bd:b2:40:d8:90:29:02:b8:d4:53:11:da: 6e:5f:14:57:73:62:21:a6:b4:22:92:c0:e8:00:4f: d7:db:7e:55:84:a6:27:be:c0:13:a9:12:d4:c7:78: 9d:6e:70:33:90:41:b1:9a:8e:85:e4:54:79:ff:a9: 7c:03:80:69:42:80:05:f7:7c:bd:ca:46:d0:7d:4f: 04:d8:4b:7d:98:da:00:5e:6d:f3:2c:b1:d3:f5:a5: a5:d8:0b:88:87:4a:53:15:5e:87:f5:8d:0a:0a:26: b9:d2:bf:0b:39:65:84:29:65:c6:54:c4:20:fd:fc: 02:e7:78:fd:70:20:17:64:aa:55:be:f9:93:f2:0e: 97:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D1:53:56:9C:5A:99:65:E6:DC:BD:57:43:24:13:9A:ED:A1:49:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/620c8d56-28c5-3811-9ba7-0727e8c6eb95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.158.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:78:a5:72:b3:8f:40:ca:fb:34:67:33:c7:64:f1:5f:72:e2: f4:81:2b:e1:92:57:f4:79:ac:7c:cf:f9:64:1d:2a:8a:50:66: 06:63:4e:5f:6a:ce:69:05:56:9d:d3:9c:66:26:1e:8d:21:dd: 04:ee:8a:fd:ee:06:b2:6d:2b:71:aa:8e:3e:cc:17:7a:34:b4: 90:fe:ea:b7:f4:f6:22:43:ae:fa:79:96:bc:c1:82:68:76:b6: 11:5c:04:65:59:06:60:7d:4f:94:0f:c8:62:91:fc:73:12:13: 73:3e:bb:b6:ec:e7:11:a9:68:ae:4f:b5:5f:38:e9:27:85:85: cc:bc:ce:4b:40:87:cd:ac:3b:ab:50:d7:70:c6:67:61:ce:1c: bc:54:76:a1:3d:2b:fa:bd:42:92:85:e3:cf:21:a4:63:c6:0d: 59:de:a1:4c:23:42:83:37:17:08:fe:f6:ff:97:ba:80:0b:22: bb:a3:e1:99:1c:86:bc:cb:9f:95:90:bd:ef:56:15:51:ea:94: 7f:18:63:ac:6d:cf:fd:4e:c3:99:23:00:85:e8:5c:6d:4c:bb: b5:08:57:c6:ad:8c:39:dd:b8:f4:89:ef:d3:03:78:92:3e:c3: 67:54:d8:5e:77:2c:0e:99:7c:f0:69:7c:b9:ba:da:a1:36:70: 0f:bf:02:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkTgyw8fgFaOUIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MGY0N2JiYWEtNDdiYy00NDYzLTg0MGYtNmNlMmFhZGJmNzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHC9BlJG9VfRIoNVoe23oK/Fl+NpYZNcjxG0 2Z8x5uDT3ueSLaO1xgi44HpxGAnhcXIrTCOz67uyhYzgJp5rMD3VOPoYJxM9owt5 JWDvI6pH5xIhYpylXfyxCQTi9mOI0VB795VAElGg7H9RL5WQoQR0OSCeyhB0cc29 skDYkCkCuNRTEdpuXxRXc2IhprQiksDoAE/X235VhKYnvsATqRLUx3idbnAzkEGx mo6F5FR5/6l8A4BpQoAF93y9ykbQfU8E2Et9mNoAXm3zLLHT9aWl2AuIh0pTFV6H 9Y0KCia50r8LOWWEKWXGVMQg/fwC53j9cCAXZKpVvvmT8g6XDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnRU1acWpll5ty9V0MkE5rtoUkgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvNjIwYzhkNTYtMjhjNS0z ODExLTliYTctMDcyN2U4YzZlYjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBq54cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADt4pXKzj0DK+zRnM8dk8V9y4vSBK+GSV/R5rHzP+WQdKopQZgZjTl9q zmkFVp3TnGYmHo0h3QTuiv3uBrJtK3Gqjj7MF3o0tJD+6rf09iJDrvp5lrzBgmh2 thFcBGVZBmB9T5QPyGKR/HMSE3M+u7bs5xGpaK5PtV846SeFhcy8zktAh82sO6tQ 13DGZ2HOHLxUdqE9K/q9QpKF488hpGPGDVneoUwjQoM3Fwj+9v+XuoALIruj4Zkc hrzLn5WQve9WFVHqlH8YY6xtz/1Ow5kjAIXoXG1Mu7UIV8atjDnduPSJ79MDeJI+ w2dU2F53LA6ZfPBpfLm62qE2cA+/AkU= -----END CERTIFICATE-----Generated at Fri Sep 11 03:53:02 2026 by rpki-client