$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/4ceb54a7-225f-32e0-81d7-109b70ac65de.roa File: 4ceb54a7-225f-32e0-81d7-109b70ac65de.roa (raw, json) Hash identifier: aloUvsSRoILb0jOTJut+ZnTiTADd0rnrka4AzpGEWHA= Subject key identifier: D1:EE:1A:D3:00:09:8A:BB:06:98:33:C8:37:40:76:C9:F4:FD:70:98 Certificate issuer: /CN=28bc3af1-87e7-4ad5-ba9c-7eebdbd820db Certificate serial: 010D0C9F4328584FA5932942F6313F596C3EF080 Authority key identifier: 78:BD:2E:9E:0F:6D:71:DF:A1:7A:6B:F4:02:24:03:50:B3:19:7C:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/4ceb54a7-225f-32e0-81d7-109b70ac65de.roa Signing time: Wed 28 Oct 2026 01:00:13 +0000 ROA not before: Wed 28 Oct 2026 01:00:13 +0000 ROA not after: Tue 26 Jan 2027 02:00:13 +0000 asID: 402074 IP address blocks: 208.92.236.0/22 maxlen: 24 2602:f85e::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a5:93:29:42:f6:31:3f:59:6c:3e:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28bc3af1-87e7-4ad5-ba9c-7eebdbd820db Validity Not Before: Oct 28 01:00:13 2026 GMT Not After : Jan 26 02:00:13 2027 GMT Subject: CN=0e2e350c-91f2-4bf9-bc6c-ccafbdee1144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d1:58:fa:ea:b0:23:e5:99:63:24:71:f9:75: 91:47:2d:b7:61:43:67:22:91:4b:ef:ba:20:a8:e6: 59:ef:1d:17:85:86:65:d8:71:15:92:ef:5d:14:59: 0c:f2:47:33:6e:1b:58:d5:4b:6f:27:06:92:46:99: 87:97:f6:28:e7:d8:24:99:a9:5b:1b:44:6e:fe:e1: 9c:e7:8a:67:1d:99:42:1b:65:77:89:94:c1:7b:86: 2e:b1:37:7d:69:69:ce:dc:61:7e:f5:e8:c9:e1:c0: 55:99:3f:28:53:54:2c:22:e3:5d:eb:66:2e:28:02: cd:23:b5:89:2f:61:91:ae:be:ba:8e:70:0e:13:f0: ef:ed:98:27:d9:24:09:27:a1:c6:a7:bc:08:d4:9a: 32:0c:ca:b8:59:23:8d:19:28:b5:f5:83:d6:91:d5: e0:fc:66:b8:a8:ff:8d:10:e6:c7:f6:71:4f:41:5e: 92:81:47:ef:ce:8a:6c:91:ba:9a:0e:69:8a:e2:0b: fb:f9:77:a1:df:95:bf:18:fb:e3:df:39:85:7a:40: 66:b6:4b:6d:50:85:9b:37:8c:98:58:20:37:8b:bf: 78:0a:7f:96:15:6e:3d:21:5f:84:78:f9:02:52:d9: 6c:0f:33:47:35:c3:49:fe:4d:cd:62:15:aa:c9:12: 47:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:EE:1A:D3:00:09:8A:BB:06:98:33:C8:37:40:76:C9:F4:FD:70:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/4ceb54a7-225f-32e0-81d7-109b70ac65de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.crl X509v3 Authority Key Identifier: keyid:78:BD:2E:9E:0F:6D:71:DF:A1:7A:6B:F4:02:24:03:50:B3:19:7C:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.cer sbgp-ipAddrBlock: critical IPv4: 208.92.236.0/22 IPv6: 2602:f85e::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:68:3b:e3:95:08:c7:1b:76:7a:da:91:d8:49:83:fd:37:98: da:2b:3f:8b:3e:bd:b6:8a:a0:f1:a3:b1:6a:c4:ff:6e:57:fa: 9d:2c:9f:53:55:7a:94:6f:f9:76:46:7b:8d:c3:c4:21:ac:51: a6:af:8e:0c:41:b7:06:a1:79:80:23:c3:d9:4e:4a:72:2b:ff: 5a:8f:19:49:d0:59:29:3d:2f:a2:eb:fe:3d:ca:b5:73:e4:d4: ee:e4:b7:0a:c5:47:56:0c:5d:01:79:19:1e:72:fe:21:c2:91: 8a:97:10:84:9f:39:55:1a:ec:d1:a3:d6:f6:9c:b0:7d:15:72: a1:62:ca:9d:43:ce:d5:2e:13:a3:4c:5e:de:61:2f:17:90:1d: 54:e3:2e:4d:7a:37:85:38:54:ed:59:ce:2e:21:cf:60:a3:50: 48:3e:2c:2d:41:63:bb:b3:bc:e7:67:e1:da:53:ce:b0:dd:23: 7f:7d:16:e6:2f:5b:a7:5f:e2:b0:5d:58:3a:7c:93:c4:66:37: c4:89:77:82:db:ee:d8:b4:e6:6c:17:50:ed:84:b7:b2:04:73: 12:c8:a4:d6:df:59:40:52:d7:f4:b2:fa:fd:8b:4d:af:a2:40: cb:bc:f9:91:75:ef:a0:0f:48:c6:0a:6c:94:1c:31:b0:3d:14: 02:4c:18:84 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE+lkylC9jE/WWw+8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhiYzNhZjEtODdlNy00YWQ1LWJhOWMtN2VlYmRiZDgy MGRiMB4XDTI2MTAyODAxMDAxM1oXDTI3MDEyNjAyMDAxM1owLzEtMCsGA1UEAxMk MGUyZTM1MGMtOTFmMi00YmY5LWJjNmMtY2NhZmJkZWUxMTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtFY+uqwI+WZYyRx+XWRRy23YUNnIpFL77og qOZZ7x0XhYZl2HEVku9dFFkM8kczbhtY1UtvJwaSRpmHl/Yo59gkmalbG0Ru/uGc 54pnHZlCG2V3iZTBe4YusTd9aWnO3GF+9ejJ4cBVmT8oU1QsIuNd62YuKALNI7WJ L2GRrr66jnAOE/Dv7Zgn2SQJJ6HGp7wI1JoyDMq4WSONGSi19YPWkdXg/Ga4qP+N EObH9nFPQV6SgUfvzopskbqaDmmK4gv7+Xeh35W/GPvj3zmFekBmtkttUIWbN4yY WCA3i794Cn+WFW49IV+EePkCUtlsDzNHNcNJ/k3NYhWqyRJHyQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFNHuGtMACYq7BpgzyDdAdsn0/XCYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8yOGJj M2FmMS04N2U3LTRhZDUtYmE5Yy03ZWViZGJkODIwZGIvNGNlYjU0YTctMjI1Zi0z MmUwLTgxZDctMTA5YjcwYWM2NWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMjhiYzNhZjEtODdlNy00YWQ1LWJh OWMtN2VlYmRiZDgyMGRiLzI4YmMzYWYxLTg3ZTctNGFkNS1iYTljLTdlZWJkYmQ4 MjBkYi5jcmwwHwYDVR0jBBgwFoAUeL0ung9tcd+hemv0AiQDULMZfHgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8yOGJjM2FmMS04N2U3LTRhZDUtYmE5Yy03ZWVi ZGJkODIwZGIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQC0FzsMA4E AgACMAgDBgQmAvheADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBNaDvjlQjHG3Z62pHYSYP9N5jaKz+LPr22 iqDxo7FqxP9uV/qdLJ9TVXqUb/l2RnuNw8QhrFGmr44MQbcGoXmAI8PZTkpyK/9a jxlJ0FkpPS+i6/49yrVz5NTu5LcKxUdWDF0BeRkecv4hwpGKlxCEnzlVGuzRo9b2 nLB9FXKhYsqdQ87VLhOjTF7eYS8XkB1U4y5NejeFOFTtWc4uIc9go1BIPiwtQWO7 s7znZ+HaU86w3SN/fRbmL1unX+KwXVg6fJPEZjfEiXeC2+7YtOZsF1DthLeyBHMS yKTW31lAUtf0svr9i02vokDLvPmRde+gD0jGCmyUHDGwPRQCTBiE -----END CERTIFICATE-----Generated at Mon Nov 2 19:10:12 2026 by rpki-client