$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/afb66b1c-4c26-3945-b917-6f62e119b9c6.roa File: afb66b1c-4c26-3945-b917-6f62e119b9c6.roa (raw, json) Hash identifier: oPprviBqD/UuA93mB4CkkRdDPJW+/XZYxxrocvjktWY= Subject key identifier: 60:07:00:FC:6D:BA:30:55:73:D6:19:8F:A9:3B:3A:85:04:B7:8B:DD Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584EA797F4C2F4E2F9972A9C1B00 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/afb66b1c-4c26-3945-b917-6f62e119b9c6.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 62610 IP address blocks: 128.1.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:f4:c2:f4:e2:f9:97:2a:9c:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c5544a84-91bb-4c24-bbb7-45af5c93eea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:42:e0:31:b9:36:09:aa:56:72:30:9e:d1:01: 38:40:3a:e9:b7:9f:db:91:06:f6:00:e9:7d:98:d7: 11:53:27:db:c7:6f:98:7a:e3:6f:ee:d2:b7:2f:78: 63:32:34:76:97:03:78:e3:27:44:0c:1d:c3:fc:66: 4c:94:3f:b4:7f:ae:68:f4:fc:2c:62:c5:05:f9:13: 5e:9a:30:b1:8a:48:d6:5a:f9:4b:63:8b:59:59:c4: da:be:f5:b9:ed:bb:bb:0f:2e:e8:1c:27:51:8f:7c: 66:c0:8c:af:9c:49:29:0f:29:bb:8a:a0:ee:05:ae: ba:24:71:8f:6a:73:68:f5:d3:76:81:d4:65:cf:2b: 4c:8d:0c:98:5c:ed:88:3c:59:68:a4:9b:41:29:7b: 8a:85:b6:6e:a6:35:74:26:3b:6d:90:16:48:3f:41: a6:b0:c0:76:80:bd:64:81:df:61:20:9b:4c:a1:6e: 65:94:c2:2a:cf:db:ae:3e:fc:e9:d7:f4:98:31:24: 60:29:e2:c2:9e:76:3a:da:bf:22:ed:de:66:a2:11: f8:13:c7:27:5a:0e:d7:f5:02:51:60:29:9b:c3:e2: f5:ea:62:57:90:44:34:45:86:8b:e8:e5:7e:e7:3c: 85:c5:24:dc:f8:74:77:b9:cc:79:4c:cd:51:5d:16: 5c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:07:00:FC:6D:BA:30:55:73:D6:19:8F:A9:3B:3A:85:04:B7:8B:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/afb66b1c-4c26-3945-b917-6f62e119b9c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.1.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:1e:14:d8:64:a4:a1:1c:6b:c6:7d:cc:54:4a:b3:4b:4c:8f: 52:71:a6:0a:af:fb:8f:62:28:97:c4:3a:a9:eb:ef:d6:ff:ea: 45:95:68:f0:62:57:ff:aa:5c:fb:7b:76:9d:4c:7a:3c:36:42: da:85:27:41:ba:f0:92:d0:3e:66:35:76:39:0d:48:e8:04:de: 95:0b:5a:64:47:01:e9:ec:e1:14:d8:5c:14:50:e9:89:92:8d: a3:c5:c7:02:0b:58:75:d4:2f:5b:92:37:78:0f:38:5f:2f:e6: 4b:8f:98:67:8f:36:28:6a:9c:99:7b:47:ec:54:82:9f:7f:ec: af:d1:cd:ef:67:c2:bf:bd:e3:7c:6f:27:50:21:c2:69:b8:82: b1:a8:63:e2:6f:cb:94:98:11:97:0f:cf:47:49:f8:f3:6e:46: d3:0c:2e:95:4a:dd:54:be:d0:22:17:35:c3:87:d6:ed:cd:d7: a3:a5:89:aa:fa:54:92:51:1d:7e:d0:d2:33:5c:ed:fc:f8:ff: 09:c6:17:5d:dc:d6:59:85:c8:c6:f0:f4:66:84:2b:ee:b5:9e: 18:a9:fa:72:37:58:1e:80:39:5b:b4:cb:0f:f8:fe:f5:dd:88: 55:ac:71:de:2a:15:5c:b4:b4:b4:83:de:95:d5:18:2a:02:5b: 29:8e:40:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl/TC9OL5lyqcGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzU1NDRhODQtOTFiYi00YzI0LWJiYjctNDVhZjVjOTNlZWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0LgMbk2CapWcjCe0QE4QDrpt5/bkQb2AOl9 mNcRUyfbx2+YeuNv7tK3L3hjMjR2lwN44ydEDB3D/GZMlD+0f65o9PwsYsUF+RNe mjCxikjWWvlLY4tZWcTavvW57bu7Dy7oHCdRj3xmwIyvnEkpDym7iqDuBa66JHGP anNo9dN2gdRlzytMjQyYXO2IPFlopJtBKXuKhbZupjV0JjttkBZIP0GmsMB2gL1k gd9hIJtMoW5llMIqz9uuPvzp1/SYMSRgKeLCnnY62r8i7d5mohH4E8cnWg7X9QJR YCmbw+L16mJXkEQ0RYaL6OV+5zyFxSTc+HR3ucx5TM1RXRZcUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAHAPxtujBVc9YZj6k7OoUEt4vdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvYWZiNjZiMWMtNGMyNi0z OTQ1LWI5MTctNmY2MmUxMTliOWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoeFNhkpKEca8Z9zFRKs0tMj1Jxpgqv+49iKJfEOqnr79b/6kWVaPBi V/+qXPt7dp1Mejw2QtqFJ0G68JLQPmY1djkNSOgE3pULWmRHAens4RTYXBRQ6YmS jaPFxwILWHXUL1uSN3gPOF8v5kuPmGePNihqnJl7R+xUgp9/7K/Rze9nwr+943xv J1Ahwmm4grGoY+Jvy5SYEZcPz0dJ+PNuRtMMLpVK3VS+0CIXNcOH1u3N16Oliar6 VJJRHX7Q0jNc7fz4/wnGF13c1lmFyMbw9GaEK+61nhip+nI3WB6AOVu0yw/4/vXd iFWscd4qFVy0tLSD3pXVGCoCWymOQLQ= -----END CERTIFICATE-----Generated at Sat Sep 5 02:48:18 2026 by rpki-client