$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3c9bec37-d3a4-3f0b-8c85-4fcec4c2e71c.roa File: 3c9bec37-d3a4-3f0b-8c85-4fcec4c2e71c.roa (raw, json) Hash identifier: f22ZX8IYQRFNMulSsqiiDxVmncAzOq3uMUq0X+8VK18= Subject key identifier: 29:99:C5:41:C1:AF:15:78:89:4F:9F:63:67:44:45:A3:BF:0C:48:20 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584F612D654D3AB4AF7C14BDF480 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3c9bec37-d3a4-3f0b-8c85-4fcec4c2e71c.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 33659 IP address blocks: 158.62.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:65:4d:3a:b4:af:7c:14:bd:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=3651dc28-e180-4727-ae75-ffdc9644f483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:74:aa:e7:2f:bd:6c:96:5f:7b:ad:a5:c5:3f: ae:ad:56:dd:d9:cc:ca:85:ed:fa:be:55:2c:55:36: 83:30:9a:b2:53:93:ca:c2:9f:c9:3a:65:a6:56:6f: 6b:b4:fa:c8:48:3e:2b:ce:ac:eb:b5:65:02:94:52: 97:8e:14:7e:bc:bc:78:36:d1:f7:1a:8d:4b:d7:be: ca:af:8a:ff:8a:81:1d:fe:ec:8c:58:5f:c5:32:33: 2f:cf:30:bc:82:62:c3:72:a6:1f:b0:5c:87:9f:86: da:19:f2:e1:01:f5:b4:74:25:0d:49:25:04:55:9e: 5e:2b:c3:1e:ca:4d:69:90:b2:f8:c6:43:b3:ec:61: f8:a1:45:45:8d:d6:12:76:24:a3:e9:ef:ca:da:a2: 0a:92:d8:3f:a4:a7:86:23:2e:b7:cb:25:d0:df:29: db:d4:8a:4b:79:55:b1:7e:b7:c8:28:01:46:f0:dd: ab:21:15:15:37:d4:65:d1:4d:e2:1e:f3:b8:67:cc: 23:0a:22:0e:96:bc:5f:c6:23:c8:2b:f2:22:00:32: 53:ee:46:ef:34:68:39:1d:76:3c:2a:84:13:8b:33: dd:e0:6d:b5:13:f6:cf:41:0e:fd:a0:5f:f6:c4:d4: fd:33:40:bf:82:cc:08:c7:a7:2b:b3:17:9c:52:41: 97:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:99:C5:41:C1:AF:15:78:89:4F:9F:63:67:44:45:A3:BF:0C:48:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3c9bec37-d3a4-3f0b-8c85-4fcec4c2e71c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 158.62.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:a9:06:10:fd:e7:df:8e:85:1b:af:ad:53:1e:a1:b7:4a:f8: 0a:48:0e:f6:93:48:14:ba:28:e4:83:92:99:eb:fb:3a:da:8f: 2c:35:48:6c:d9:a1:fc:11:ba:89:07:05:85:ad:d2:fb:d3:ee: da:d9:7a:f6:e7:b1:0a:e0:c5:60:0a:18:6a:96:31:a6:9c:68: 40:1d:fa:d0:89:99:98:c2:ec:fb:6a:93:21:cf:48:5a:3b:a1: 96:f2:ad:c4:69:a7:dd:97:4c:ff:b5:c0:c8:98:a0:3d:ed:bf: 29:36:88:14:e7:c2:d4:99:e0:65:7e:b5:fb:76:86:ca:b9:33: d8:8e:fc:3e:04:b2:7c:21:b7:96:a6:0a:06:d7:0b:24:dc:93: 96:23:8a:35:86:f6:5d:bf:ff:c6:c1:63:c5:69:5e:b4:6e:46: 60:b9:3b:53:ab:b1:5b:7c:64:9a:66:17:3d:91:27:12:66:6c: 91:9a:27:5f:81:bf:23:14:0c:8c:f8:91:fd:6e:fd:a9:8f:ff: 32:03:9f:2b:8b:e2:f9:f6:bf:53:88:57:ee:0c:3b:a6:86:5b: 94:3e:a0:76:29:83:1b:58:9e:6e:ed:37:bf:82:1d:c9:93:44: 86:48:93:5a:aa:16:fa:74:12:df:a5:22:41:ad:c1:e3:c5:bd: 50:63:4f:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hLWVNOrSvfBS99IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk MzY1MWRjMjgtZTE4MC00NzI3LWFlNzUtZmZkYzk2NDRmNDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHSq5y+9bJZfe62lxT+urVbd2czKhe36vlUs VTaDMJqyU5PKwp/JOmWmVm9rtPrISD4rzqzrtWUClFKXjhR+vLx4NtH3Go1L177K r4r/ioEd/uyMWF/FMjMvzzC8gmLDcqYfsFyHn4baGfLhAfW0dCUNSSUEVZ5eK8Me yk1pkLL4xkOz7GH4oUVFjdYSdiSj6e/K2qIKktg/pKeGIy63yyXQ3ynb1IpLeVWx frfIKAFG8N2rIRUVN9Rl0U3iHvO4Z8wjCiIOlrxfxiPIK/IiADJT7kbvNGg5HXY8 KoQTizPd4G21E/bPQQ79oF/2xNT9M0C/gswIx6crsxecUkGX3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmZxUHBrxV4iU+fY2dERaO/DEggMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvM2M5YmVjMzctZDNhNC0z ZjBiLThjODUtNGZjZWM0YzJlNzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnj7WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSpBhD959+OhRuvrVMeobdK+ApIDvaTSBS6KOSDkpnr+zrajyw1SGzZ ofwRuokHBYWt0vvT7trZevbnsQrgxWAKGGqWMaacaEAd+tCJmZjC7PtqkyHPSFo7 oZbyrcRpp92XTP+1wMiYoD3tvyk2iBTnwtSZ4GV+tft2hsq5M9iO/D4Esnwht5am CgbXCyTck5YjijWG9l2//8bBY8VpXrRuRmC5O1OrsVt8ZJpmFz2RJxJmbJGaJ1+B vyMUDIz4kf1u/amP/zIDnyuL4vn2v1OIV+4MO6aGW5Q+oHYpgxtYnm7tN7+CHcmT RIZIk1qqFvp0Et+lIkGtwePFvVBjT3A= -----END CERTIFICATE-----Generated at Wed Oct 21 17:05:44 2026 by rpki-client