$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/799268b2-351a-3bb1-94e7-ce296b6437f3.roa File: 799268b2-351a-3bb1-94e7-ce296b6437f3.roa (raw, json) Hash identifier: bp59AUsBR5UVGoJmd5u5AVfSwQgH/6ZvVuRfGJkHecQ= Subject key identifier: 87:9B:72:48:99:89:EE:77:5D:EA:D3:AB:37:36:6C:53:05:75:6C:0E Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584F07D775B0CD3038A98F0509C0 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/799268b2-351a-3bb1-94e7-ce296b6437f3.roa Signing time: Tue 01 Sep 2026 13:00:12 +0000 ROA not before: Tue 01 Sep 2026 13:00:12 +0000 ROA not after: Mon 30 Nov 2026 14:00:12 +0000 asID: 0 IP address blocks: 24.28.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:07:d7:75:b0:cd:30:38:a9:8f:05:09:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Sep 1 13:00:12 2026 GMT Not After : Nov 30 14:00:12 2026 GMT Subject: CN=b12cc70b-ded6-4652-81db-3e9591a880c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2a:97:a2:ba:fe:c7:0e:d5:31:e6:26:99:9a: 08:53:50:ac:cb:b2:f9:d8:3c:9e:94:f2:0f:c1:b4: ab:bd:ba:f3:24:06:ee:7d:9d:3f:38:49:51:79:d0: 7d:eb:e2:b8:9a:14:7a:9e:ce:de:a3:65:99:65:1f: 9b:69:55:35:c4:97:5f:ed:68:1a:72:aa:77:a0:8f: 5a:77:97:a3:89:70:c8:41:1c:04:84:89:40:67:a6: 81:82:75:0d:b2:8c:62:f5:ec:b2:17:3f:f3:99:3b: 79:0b:fc:60:06:c4:f6:08:d5:a9:d5:b7:fd:46:d2: 6a:46:91:cb:89:7c:3e:e4:21:e4:4e:cf:c7:a1:92: da:c0:5e:64:e7:8d:49:09:e6:a6:be:16:be:a3:51: bd:b4:96:3b:f8:0b:b6:01:d8:ec:d0:57:ad:69:45: a5:27:84:fd:57:19:be:43:11:98:4e:c4:a3:39:ca: 88:54:df:4e:7a:3b:24:bd:4f:85:dd:a3:85:27:f9: ba:60:a7:7d:2b:c5:76:db:a1:f8:f2:e2:a0:97:5a: be:37:91:1d:98:be:6f:db:49:9c:d8:d3:29:ae:2c: 8a:b4:b1:85:37:1a:3a:a3:15:c5:71:92:c8:64:16: 69:24:a4:be:4f:51:48:8c:6f:a4:50:c4:17:bd:d5: 88:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9B:72:48:99:89:EE:77:5D:EA:D3:AB:37:36:6C:53:05:75:6C:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/799268b2-351a-3bb1-94e7-ce296b6437f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 24.28.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:15:46:a7:7e:2c:c0:4c:8c:0a:fc:d1:eb:c3:01:79:2d:2c: b5:0d:79:4e:c5:68:9d:b7:11:17:70:7d:70:e6:9d:fc:ad:58: e4:41:0b:f5:03:76:94:da:23:67:7e:b0:5a:44:10:96:fb:78: 95:c0:45:ce:91:10:9b:cf:62:a8:86:4c:9d:d7:45:d3:16:d6: 1f:7a:4e:b1:b6:6c:fc:60:b4:2d:e3:93:de:7e:cc:3f:28:99: 09:04:7e:c1:40:a4:9c:29:49:c9:75:a8:a1:dc:5a:4d:72:1d: 45:61:0b:43:31:6b:6f:af:a5:81:18:ca:d1:1a:64:06:83:6b: 2d:e5:4d:bf:9d:a6:e0:38:6a:56:85:49:39:4b:5c:4c:82:60: 8f:3e:65:e8:96:c2:a7:18:93:1e:a5:4b:46:25:01:b4:24:e8: e2:d5:5c:01:a1:15:0f:ae:e7:3d:4d:8e:4a:79:41:af:75:31: 8b:4c:93:dc:77:c5:26:a6:b0:ea:c8:1c:e6:fe:ec:bf:08:54: 5f:be:cb:1b:ea:55:14:e2:51:f8:6f:19:22:28:70:a9:c5:c4: 21:b5:dd:38:1f:d9:93:f2:38:1c:e7:75:ac:1f:45:36:c9:67: 98:cf:81:8f:58:3b:fc:39:6f:80:90:27:6d:1e:b5:31:57:f8: 08:75:ea:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8H13WwzTA4qY8FCcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI2MDkwMTEzMDAxMloXDTI2MTEzMDE0MDAxMlowLzEtMCsGA1UEAxMk YjEyY2M3MGItZGVkNi00NjUyLTgxZGItM2U5NTkxYTg4MGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCqXorr+xw7VMeYmmZoIU1Csy7L52DyelPIP wbSrvbrzJAbufZ0/OElRedB96+K4mhR6ns7eo2WZZR+baVU1xJdf7Wgacqp3oI9a d5ejiXDIQRwEhIlAZ6aBgnUNsoxi9eyyFz/zmTt5C/xgBsT2CNWp1bf9RtJqRpHL iXw+5CHkTs/HoZLawF5k541JCeamvha+o1G9tJY7+Au2Adjs0FetaUWlJ4T9Vxm+ QxGYTsSjOcqIVN9OejskvU+F3aOFJ/m6YKd9K8V226H48uKgl1q+N5EdmL5v20mc 2NMpriyKtLGFNxo6oxXFcZLIZBZpJKS+T1FIjG+kUMQXvdWIlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIebckiZie53XerTqzc2bFMFdWwOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNzk5MjY4YjItMzUxYS0z YmIxLTk0ZTctY2UyOTZiNjQzN2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGBzIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcVRqd+LMBMjAr80evDAXktLLUNeU7FaJ23ERdwfXDmnfytWORBC/UD dpTaI2d+sFpEEJb7eJXARc6REJvPYqiGTJ3XRdMW1h96TrG2bPxgtC3jk95+zD8o mQkEfsFApJwpScl1qKHcWk1yHUVhC0Mxa2+vpYEYytEaZAaDay3lTb+dpuA4alaF STlLXEyCYI8+ZeiWwqcYkx6lS0YlAbQk6OLVXAGhFQ+u5z1Njkp5Qa91MYtMk9x3 xSamsOrIHOb+7L8IVF++yxvqVRTiUfhvGSIocKnFxCG13Tgf2ZPyOBzndawfRTbJ Z5jPgY9YO/w5b4CQJ20etTFX+Ah16tk= -----END CERTIFICATE-----Generated at Sat Sep 5 14:28:27 2026 by rpki-client