$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/593c0705-a4cc-3228-a0d8-5031c947cda1.roa File: 593c0705-a4cc-3228-a0d8-5031c947cda1.roa (raw, json) Hash identifier: DKKcTDqQ8u51P4FinYkFsPNZXZ/E9Be/zid5RbKBvn0= Subject key identifier: C2:1A:40:D5:65:42:22:BE:60:95:7A:48:A0:33:E1:B4:D9:3E:9C:E5 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584FA2C87AFF98F4312416BEE680 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/593c0705-a4cc-3228-a0d8-5031c947cda1.roa Signing time: Tue 27 Oct 2026 01:00:14 +0000 ROA not before: Tue 27 Oct 2026 01:00:14 +0000 ROA not after: Mon 25 Jan 2027 02:00:14 +0000 asID: 20001 IP address blocks: 68.65.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a2:c8:7a:ff:98:f4:31:24:16:be:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Oct 27 01:00:14 2026 GMT Not After : Jan 25 02:00:14 2027 GMT Subject: CN=0d08f2a5-be1a-405c-81c0-1d0251336f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:59:b3:f3:97:48:37:00:10:a9:54:a7:4b:bd: 33:b1:5b:62:48:8f:80:28:67:c5:62:07:f1:c3:c1: b8:b3:50:19:b6:c1:f2:b6:ad:31:7b:33:27:32:81: 1d:3e:e1:58:83:8e:cd:75:c6:e7:2a:ce:e2:42:42: 94:92:9a:6c:6a:a0:6f:06:69:30:4e:de:ca:34:84: 91:b0:80:8b:e2:62:74:7a:83:74:5b:59:cf:d1:8c: 36:b5:24:49:80:dc:61:ca:96:7c:49:7a:0a:8d:f3: c2:46:21:32:94:d7:8f:8e:f9:31:ba:c8:bb:61:9c: 26:81:c3:62:f9:e4:f4:4b:03:08:da:64:ab:47:cd: ac:0d:a2:a8:74:48:98:59:ab:35:b7:8b:7a:5f:bb: 71:40:08:85:fa:22:dd:43:d4:a2:42:ed:9e:5d:fd: e7:b4:35:b6:4f:77:54:73:cd:f0:0c:2b:fb:fd:a7: b6:c4:f4:fa:c8:18:fc:f7:73:89:34:f6:c2:f5:2a: fb:33:85:08:fb:f9:cc:73:23:57:ec:2e:45:7d:ab: 66:56:45:c0:09:6a:fa:99:2f:e5:52:e1:14:fd:fd: 40:4d:64:aa:80:05:d0:2a:b5:67:8a:f8:c6:df:48: c9:1c:33:19:84:5b:d5:72:24:d6:f9:20:af:3b:92: b7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:1A:40:D5:65:42:22:BE:60:95:7A:48:A0:33:E1:B4:D9:3E:9C:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/593c0705-a4cc-3228-a0d8-5031c947cda1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 68.65.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:f7:1f:ef:1d:02:1d:ae:18:8b:b2:9c:23:49:37:f3:7c:88: 66:02:ae:ee:a4:b5:c9:f2:b0:da:e9:5f:a6:46:33:5f:34:8e: 68:a0:8d:a4:e0:85:5d:ce:3d:b4:a3:0b:b7:ed:23:3e:21:d2: c5:7a:07:8d:95:25:99:75:61:2c:26:75:10:d4:57:fe:d1:b3: 5a:65:7f:bc:30:26:bf:63:0f:1e:cd:3b:f3:d8:01:98:f8:df: 10:75:e2:89:62:2e:0f:e5:c3:51:04:c7:74:f7:41:f5:5e:d7: 44:bc:d0:b7:31:b1:22:36:fb:02:ac:55:98:15:ba:ca:68:5c: 6e:89:7d:49:59:5a:4d:48:8b:ac:64:9c:59:1e:f9:07:d0:ea: 01:9f:18:7d:35:97:7a:d9:ed:30:c5:25:33:41:d2:d9:bc:ed: 84:5e:a1:24:4a:69:c1:1f:ac:45:e0:b1:a5:32:05:8c:e7:82: ce:0c:10:76:68:1d:a9:d8:b1:c7:25:7e:06:71:93:1b:5d:6b: 21:8f:39:c3:e6:31:02:8b:45:ba:42:ab:0a:6c:b9:1b:70:44: b2:fa:c4:89:06:f9:0e:04:dd:32:e7:7f:da:65:3a:88:f3:d5: c4:74:94:43:7a:e0:87:bf:24:d8:a5:55:58:18:a8:67:83:cd: 6f:cf:85:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+iyHr/mPQxJBa+5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MTAyNzAxMDAxNFoXDTI3MDEyNTAyMDAxNFowLzEtMCsGA1UEAxMk MGQwOGYyYTUtYmUxYS00MDVjLTgxYzAtMWQwMjUxMzM2ZjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFmz85dINwAQqVSnS70zsVtiSI+AKGfFYgfx w8G4s1AZtsHytq0xezMnMoEdPuFYg47NdcbnKs7iQkKUkppsaqBvBmkwTt7KNISR sICL4mJ0eoN0W1nP0Yw2tSRJgNxhypZ8SXoKjfPCRiEylNePjvkxusi7YZwmgcNi +eT0SwMI2mSrR82sDaKodEiYWas1t4t6X7txQAiF+iLdQ9SiQu2eXf3ntDW2T3dU c83wDCv7/ae2xPT6yBj893OJNPbC9Sr7M4UI+/nMcyNX7C5FfatmVkXACWr6mS/l UuEU/f1ATWSqgAXQKrVnivjG30jJHDMZhFvVciTW+SCvO5K3LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIaQNVlQiK+YJV6SKAz4bTZPpzlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNTkzYzA3MDUtYTRjYy0z MjI4LWEwZDgtNTAzMWM5NDdjZGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREHdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEX3H+8dAh2uGIuynCNJN/N8iGYCru6ktcnysNrpX6ZGM180jmigjaTg hV3OPbSjC7ftIz4h0sV6B42VJZl1YSwmdRDUV/7Rs1plf7wwJr9jDx7NO/PYAZj4 3xB14oliLg/lw1EEx3T3QfVe10S80LcxsSI2+wKsVZgVuspoXG6JfUlZWk1Ii6xk nFke+QfQ6gGfGH01l3rZ7TDFJTNB0tm87YReoSRKacEfrEXgsaUyBYzngs4MEHZo HanYscclfgZxkxtdayGPOcPmMQKLRbpCqwpsuRtwRLL6xIkG+Q4E3TLnf9plOojz 1cR0lEN64Ie/JNilVVgYqGeDzW/PhXM= -----END CERTIFICATE-----Generated at Tue Oct 27 11:14:13 2026 by rpki-client