$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/4311dda3-f166-334e-9176-878240d2d1dc.roa File: 4311dda3-f166-334e-9176-878240d2d1dc.roa (raw, json) Hash identifier: PyqBUgsrfpqB5bNeG1+/qVc+cMprfg7w+fX73/fi3UI= Subject key identifier: D0:BC:7C:3D:72:E9:CE:00:6C:07:A2:93:F8:F1:C9:E1:C6:CA:8E:20 Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584EC371B921B5BF6C672A8FDB40 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/4311dda3-f166-334e-9176-878240d2d1dc.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 62610 IP address blocks: 128.1.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:71:b9:21:b5:bf:6c:67:2a:8f:db:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=aa7652df-00c6-4242-9f33-da7262515e5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ca:17:b3:41:27:83:01:55:20:aa:24:2c:b8: b0:2a:d7:99:d0:19:a1:02:ca:19:1c:1e:5a:78:e8: 2b:9e:37:76:47:3c:91:8e:d5:3e:4b:58:00:92:44: 0d:a0:3f:ca:62:f6:76:49:cf:45:72:b9:b9:3e:2a: d1:f8:84:57:4b:14:c3:3b:2a:42:25:c7:a3:f2:19: 96:b3:e6:52:12:33:29:c4:d8:ba:e9:ee:7b:19:b4: 9a:96:c3:ea:64:60:31:06:ce:f6:9e:d4:ba:a5:a8: 19:46:79:f7:f1:e2:8d:32:61:aa:f4:fe:13:cc:b8: fa:b3:4c:e7:41:e2:da:45:12:5d:3f:51:5b:dd:d9: 58:e7:bf:3e:e8:c2:89:7a:d2:5a:57:a5:54:5e:a0: de:08:48:9d:95:ca:c3:88:b1:f6:a0:e0:94:68:05: f1:49:6b:30:6b:de:ed:c3:b0:78:8a:aa:ff:d0:e2: d9:4a:5d:16:f0:d5:67:7f:25:5d:50:47:6c:32:fa: 97:af:30:db:a6:30:69:e9:86:80:93:06:5b:20:f3: b2:19:29:ac:b5:36:cb:da:74:31:ec:f0:0f:6f:fe: 21:0e:9e:96:57:1f:a7:bd:b5:e1:61:98:b9:18:39: ba:98:27:70:3e:4b:be:be:44:ce:a6:83:ac:ef:c2: 06:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:BC:7C:3D:72:E9:CE:00:6C:07:A2:93:F8:F1:C9:E1:C6:CA:8E:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/4311dda3-f166-334e-9176-878240d2d1dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.1.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:cc:2c:68:dd:fa:22:80:58:03:ef:ca:b1:38:df:31:25:c3: 0d:9f:7a:35:1d:d1:8a:71:f7:4e:93:79:cf:df:d3:a8:0a:d0: 57:3b:2c:7f:0f:c3:fd:66:ab:cf:69:f1:e2:0c:cc:9c:10:4d: 47:02:9b:18:b8:42:76:f2:80:b6:a0:21:c5:4d:ab:94:e5:0b: 9c:2b:49:e9:50:c5:b2:28:5d:7f:28:17:1c:b7:3a:a4:69:94: 89:7e:e9:0b:de:0b:29:ee:3f:f7:fe:b9:5f:50:99:96:90:6f: dd:7e:90:30:f9:c2:30:ea:94:49:6b:c7:b5:50:11:eb:ce:2b: 73:2b:26:dd:25:75:8c:06:7b:84:fd:c0:ab:c5:0d:1a:e6:e6: f2:fa:cf:09:93:2a:b8:cc:20:a5:9d:bd:f6:d6:e7:bc:df:21: c2:a4:3f:e4:59:11:e4:d5:33:51:e3:50:0b:5e:11:aa:d1:2d: 04:15:4e:4b:d1:0c:2d:07:b9:d0:48:83:b9:48:a0:d5:ee:14: f8:ba:d8:9c:59:9a:59:4a:05:47:cd:f0:5e:82:4b:9c:ea:e3: 1b:e3:5d:0a:5c:04:a7:ab:00:ff:67:48:14:15:b2:52:67:72: 2b:cf:98:e1:4f:07:1b:02:81:64:ca:d3:e9:66:cf:e7:67:b5: d8:bc:d4:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Dcbkhtb9sZyqP20AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk YWE3NjUyZGYtMDBjNi00MjQyLTlmMzMtZGE3MjYyNTE1ZTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMoXs0EngwFVIKokLLiwKteZ0BmhAsoZHB5a eOgrnjd2RzyRjtU+S1gAkkQNoD/KYvZ2Sc9Fcrm5PirR+IRXSxTDOypCJcej8hmW s+ZSEjMpxNi66e57GbSalsPqZGAxBs72ntS6pagZRnn38eKNMmGq9P4TzLj6s0zn QeLaRRJdP1Fb3dlY578+6MKJetJaV6VUXqDeCEidlcrDiLH2oOCUaAXxSWswa97t w7B4iqr/0OLZSl0W8NVnfyVdUEdsMvqXrzDbpjBp6YaAkwZbIPOyGSmstTbL2nQx 7PAPb/4hDp6WVx+nvbXhYZi5GDm6mCdwPku+vkTOpoOs78IGfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNC8fD1y6c4AbAeik/jxyeHGyo4gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvNDMxMWRkYTMtZjE2Ni0z MzRlLTkxNzYtODc4MjQwZDJkMWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAHKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALMLGjd+iKAWAPvyrE43zElww2fejUd0Ypx906Tec/f06gK0Fc7LH8P w/1mq89p8eIMzJwQTUcCmxi4QnbygLagIcVNq5TlC5wrSelQxbIoXX8oFxy3OqRp lIl+6QveCynuP/f+uV9QmZaQb91+kDD5wjDqlElrx7VQEevOK3MrJt0ldYwGe4T9 wKvFDRrm5vL6zwmTKrjMIKWdvfbW57zfIcKkP+RZEeTVM1HjUAteEarRLQQVTkvR DC0HudBIg7lIoNXuFPi62JxZmllKBUfN8F6CS5zq4xvjXQpcBKerAP9nSBQVslJn civPmOFPBxsCgWTK0+lmz+dntdi81Bs= -----END CERTIFICATE-----Generated at Fri Sep 4 23:42:36 2026 by rpki-client