$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/198c5cab-3c0c-3e77-a633-bfcce238771f.roa File: 198c5cab-3c0c-3e77-a633-bfcce238771f.roa (raw, json) Hash identifier: XZw2FGVxJGje0tG41qIJu4t0e/FhitdJNP/LTNk6mwg= Subject key identifier: 29:C0:43:75:08:14:45:46:B2:1B:3A:E0:F0:B1:44:13:20:59:7F:85 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584E885A35B3D21BE52682C8630E Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/198c5cab-3c0c-3e77-a633-bfcce238771f.roa Signing time: Fri 17 Jul 2026 21:00:12 +0000 ROA not before: Fri 17 Jul 2026 21:00:12 +0000 ROA not after: Thu 15 Oct 2026 21:00:12 +0000 asID: 20001 IP address blocks: 172.96.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:88:5a:35:b3:d2:1b:e5:26:82:c8:63:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Jul 17 21:00:12 2026 GMT Not After : Oct 15 21:00:12 2026 GMT Subject: CN=c4d71a04-ad1b-4872-aef8-17d185ce08f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:86:fa:82:4b:1b:1a:bc:91:dc:f3:1d:70:0a: 12:4f:98:5a:af:47:24:6b:56:fa:26:ce:4f:aa:5a: d8:c1:b1:0b:55:0f:34:b3:f9:8e:b4:57:7d:68:fe: 4b:d8:cb:b3:c4:cc:42:64:a2:15:9c:a2:6f:12:19: 4b:e7:21:3e:3e:bb:4e:c4:c1:fd:d5:96:bc:ef:7d: f0:d1:15:d0:08:6c:62:5a:c5:9b:18:d4:3d:3a:6d: 8b:d1:23:f7:54:94:f3:7a:ce:d4:ac:53:35:87:a6: 34:03:8b:d5:42:07:1b:8b:1b:7c:b5:43:74:32:4d: e2:21:2b:47:14:3d:1f:71:c5:0d:a0:8d:af:0b:3d: 00:b5:26:5c:fa:97:ca:4b:e6:01:f3:23:30:66:dd: 9f:d6:78:6d:b8:f4:47:80:27:9a:84:43:19:02:f9: 0b:52:28:cc:58:e5:f2:f6:a4:7d:6c:fc:3f:de:00: fd:ae:e3:fe:b1:d0:d5:24:94:d1:ae:0a:fe:75:ad: 28:d9:a0:60:c2:41:2f:4c:fb:01:fc:12:57:5e:1e: 79:1d:8e:8a:b7:29:2c:93:ff:ab:23:8d:34:db:2b: dd:ca:d3:25:76:e8:a3:65:29:6a:1e:8d:cd:75:75: cd:41:82:55:e1:8c:f2:42:98:0f:7a:f9:ab:31:17: 61:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C0:43:75:08:14:45:46:B2:1B:3A:E0:F0:B1:44:13:20:59:7F:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/198c5cab-3c0c-3e77-a633-bfcce238771f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 172.96.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:e9:57:22:b1:47:a3:47:fd:43:e3:c0:d2:a0:6b:3c:23:aa: a2:32:a7:06:a1:42:b8:50:76:6f:6c:50:d9:83:6c:15:79:92: 7c:ff:e1:92:66:d7:44:db:5e:a2:87:a5:07:7a:53:97:51:fd: a9:7a:51:89:22:27:43:22:f8:47:8d:3c:57:bb:1b:1b:bf:89: 9a:0b:2c:15:3e:ce:ea:42:17:d8:ac:f6:5f:78:22:d7:57:c9: 4b:9e:fb:ab:1c:ea:67:ea:f5:5e:cd:65:20:22:25:b1:f8:bb: 14:81:de:d8:65:be:bd:50:cb:c6:a5:27:38:d1:0f:e4:76:82: 08:5b:dd:f6:7f:0c:17:67:bf:a7:23:3a:25:15:7f:78:be:0a: 6d:83:2b:44:4f:8d:bb:dc:7f:ae:6f:07:b5:9f:c0:74:d0:a5: a6:e9:4c:ea:f8:7b:55:c1:98:06:ff:b4:89:cb:92:3b:81:eb: 16:41:2d:74:84:c5:af:d3:4f:24:04:80:b1:ed:c4:21:1d:36: e7:17:d9:64:fd:f0:3c:85:38:f2:c9:89:39:a5:d2:3f:86:48: 4e:b4:4b:e2:32:1c:c8:26:5b:ec:70:88:42:a0:b0:bc:ac:62: 41:f7:7e:a2:3b:9f:d2:c5:b0:e3:b2:0e:7b:57:db:9a:d4:0b: 19:60:5c:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6IWjWz0hvlJoLIYw4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk YzRkNzFhMDQtYWQxYi00ODcyLWFlZjgtMTdkMTg1Y2UwOGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkob6gksbGryR3PMdcAoST5har0cka1b6Js5P qlrYwbELVQ80s/mOtFd9aP5L2MuzxMxCZKIVnKJvEhlL5yE+PrtOxMH91Za8733w 0RXQCGxiWsWbGNQ9Om2L0SP3VJTzes7UrFM1h6Y0A4vVQgcbixt8tUN0Mk3iIStH FD0fccUNoI2vCz0AtSZc+pfKS+YB8yMwZt2f1nhtuPRHgCeahEMZAvkLUijMWOXy 9qR9bPw/3gD9ruP+sdDVJJTRrgr+da0o2aBgwkEvTPsB/BJXXh55HY6Ktyksk/+r I4002yvdytMlduijZSlqHo3NdXXNQYJV4YzyQpgPevmrMRdhdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnAQ3UIFEVGshs64PCxRBMgWX+FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMTk4YzVjYWItM2MwYy0z ZTc3LWE2MzMtYmZjY2UyMzg3NzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGBZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjpVyKxR6NH/UPjwNKgazwjqqIypwahQrhQdm9sUNmDbBV5knz/4ZJm 10TbXqKHpQd6U5dR/al6UYkiJ0Mi+EeNPFe7Gxu/iZoLLBU+zupCF9is9l94ItdX yUue+6sc6mfq9V7NZSAiJbH4uxSB3thlvr1Qy8alJzjRD+R2gghb3fZ/DBdnv6cj OiUVf3i+Cm2DK0RPjbvcf65vB7WfwHTQpabpTOr4e1XBmAb/tInLkjuB6xZBLXSE xa/TTyQEgLHtxCEdNucX2WT98DyFOPLJiTml0j+GSE60S+IyHMgmW+xwiEKgsLys YkH3fqI7n9LFsOOyDntX25rUCxlgXAk= -----END CERTIFICATE-----Generated at Tue Jul 21 13:23:06 2026 by rpki-client