$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0768b82a-49f9-3aa8-ac77-97de94bb54b8.roa File: 0768b82a-49f9-3aa8-ac77-97de94bb54b8.roa (raw, json) Hash identifier: klb/vYg1QnwKg9MzZ+m9CwRk3WSQEDT9biH6RfnQjQw= Subject key identifier: 05:FF:76:07:C6:59:09:7F:9A:73:04:1D:97:C5:F3:23:9D:46:CE:34 Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584D8AC53BD9A60DCF3975B58250 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0768b82a-49f9-3aa8-ac77-97de94bb54b8.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 62610 IP address blocks: 128.1.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:3b:d9:a6:0d:cf:39:75:b5:82:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=8943f84a-6c6a-4fa2-9ee1-631365134c3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:68:5f:f8:82:bc:52:66:0f:e6:63:9a:1a:ab: 31:f1:28:d6:0e:7c:9e:6a:8f:d5:d6:fe:cb:31:53: 3f:ae:bf:a3:28:dd:34:30:53:36:c1:84:05:cf:68: af:73:72:93:50:92:28:d0:8c:8c:a9:91:f7:b8:e5: 95:05:8b:14:c5:95:c1:48:d6:d8:25:9a:f1:e7:b5: 3f:14:47:e8:7f:21:c9:1d:5b:67:fc:b5:0f:d9:49: ce:50:f2:ba:7d:73:8e:09:aa:61:4e:c2:72:cb:e7: 72:be:ee:2e:e2:0d:be:2a:43:f1:95:78:b2:82:7b: 62:5b:3b:67:17:da:a4:b7:de:dc:a4:06:e1:77:2d: 24:e4:c3:47:e2:a9:a0:1f:ea:36:0d:36:14:d6:fb: 05:0f:df:cf:fa:51:f3:79:eb:28:6e:9d:f0:17:fe: d6:00:39:a4:c2:3d:ac:17:9f:bd:67:aa:c1:d7:07: e6:e3:99:1d:04:2d:2f:88:37:2d:67:21:45:9d:82: dd:c5:4f:58:e0:74:c7:da:f5:85:fa:b1:9f:29:e2: fc:dc:06:34:35:52:b9:da:b9:d5:a7:07:94:fc:02: ce:84:53:9d:f1:11:13:5a:ae:73:35:e6:91:56:7f: a1:d9:44:40:3a:89:6e:f4:6f:52:80:48:78:21:38: 81:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:FF:76:07:C6:59:09:7F:9A:73:04:1D:97:C5:F3:23:9D:46:CE:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0768b82a-49f9-3aa8-ac77-97de94bb54b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.1.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:31:32:da:b7:fd:6c:c2:f5:43:29:1a:0b:44:b3:9f:9b:9b: b1:ba:27:28:c5:e3:f3:ea:05:b3:c5:8c:96:1a:04:6b:49:43: 55:82:5f:f0:4c:eb:03:cf:fa:d9:47:d2:21:8b:48:7e:39:ee: ca:ae:f0:17:fa:93:ea:3d:e0:ea:8b:4f:7d:76:4a:6a:d0:04: b8:c0:5f:f0:9e:57:b0:3f:4b:5e:54:e6:c7:aa:54:72:bb:7b: e3:64:36:05:8d:1d:dd:ec:9c:66:22:63:8c:89:84:be:2b:54: 90:55:e7:44:78:27:a3:9f:b6:37:f8:07:48:82:69:e9:2f:9a: 79:4c:86:ac:bc:8b:80:54:9c:f0:28:f0:ac:aa:5f:a5:53:71: e7:06:0a:b9:75:19:e5:96:f1:54:95:01:36:7e:a5:a9:3e:4e: 9e:3e:e4:76:03:d0:7f:b8:b5:79:1b:1c:52:15:65:1c:6e:02: a5:d0:c0:0b:d5:1f:0f:6b:87:7e:65:57:5d:00:31:95:c4:e8: 6a:d8:91:e8:e6:51:33:fe:c0:4c:b5:86:53:5e:59:4b:a6:d6: a1:c4:3f:9e:3f:be:9a:00:38:37:bd:ea:a3:5e:09:f8:5a:b0: 17:a0:9b:38:37:6d:d5:54:06:62:24:99:b8:0c:64:bb:6c:6f: df:8f:57:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxTvZpg3POXW1glAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk ODk0M2Y4NGEtNmM2YS00ZmEyLTllZTEtNjMxMzY1MTM0YzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmhf+IK8UmYP5mOaGqsx8SjWDnyeao/V1v7L MVM/rr+jKN00MFM2wYQFz2ivc3KTUJIo0IyMqZH3uOWVBYsUxZXBSNbYJZrx57U/ FEfofyHJHVtn/LUP2UnOUPK6fXOOCaphTsJyy+dyvu4u4g2+KkPxlXiygntiWztn F9qkt97cpAbhdy0k5MNH4qmgH+o2DTYU1vsFD9/P+lHzeesobp3wF/7WADmkwj2s F5+9Z6rB1wfm45kdBC0viDctZyFFnYLdxU9Y4HTH2vWF+rGfKeL83AY0NVK52rnV pweU/ALOhFOd8RETWq5zNeaRVn+h2URAOolu9G9SgEh4ITiBPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAX/dgfGWQl/mnMEHZfF8yOdRs40MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvMDc2OGI4MmEtNDlmOS0z YWE4LWFjNzctOTdkZTk0YmI1NGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAEcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoxMtq3/WzC9UMpGgtEs5+bm7G6JyjF4/PqBbPFjJYaBGtJQ1WCX/BM 6wPP+tlH0iGLSH457squ8Bf6k+o94OqLT312SmrQBLjAX/CeV7A/S15U5seqVHK7 e+NkNgWNHd3snGYiY4yJhL4rVJBV50R4J6Oftjf4B0iCaekvmnlMhqy8i4BUnPAo 8KyqX6VTcecGCrl1GeWW8VSVATZ+pak+Tp4+5HYD0H+4tXkbHFIVZRxuAqXQwAvV Hw9rh35lV10AMZXE6GrYkejmUTP+wEy1hlNeWUum1qHEP54/vpoAODe96qNeCfha sBegmzg3bdVUBmIkmbgMZLtsb9+PV8g= -----END CERTIFICATE-----Generated at Tue Apr 21 15:23:25 2026 by rpki-client