$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7dfbaf3b-132f-3bfa-9bd7-2f6a7d9e79c5.roa File: 7dfbaf3b-132f-3bfa-9bd7-2f6a7d9e79c5.roa (raw, json) Hash identifier: 7UsqeDEWr8ujPFWU2A4EUyJWhFDZ+hGO9Xe8oW1Uz5k= Subject key identifier: D2:28:E9:A2:F4:39:03:44:2E:3B:77:E3:63:7E:3C:75:53:77:CB:86 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584F506D509029541EBCAC970000 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7dfbaf3b-132f-3bfa-9bd7-2f6a7d9e79c5.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 397630 IP address blocks: 208.89.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:50:90:29:54:1e:bc:ac:97:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=3aee16f2-059c-44bc-960d-98caf67c5b79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bf:0a:67:70:0a:47:e4:29:66:c8:69:d0:15: 82:f1:4c:8e:57:2e:e2:83:c2:8b:96:6a:e7:b7:22: e6:79:8f:3d:07:78:c7:00:42:81:4f:5a:71:03:6b: 7a:f2:6d:95:bf:6f:48:85:f3:e9:9b:de:3b:84:30: 55:2a:4e:fe:fe:05:09:64:a3:ee:a9:2e:89:0c:9b: e5:13:11:5b:ed:bf:6d:4e:6f:46:4b:7b:57:8c:ff: 52:f9:1f:a9:64:7e:12:4a:a5:98:a0:bd:ab:65:3e: 45:2d:70:c9:52:38:f4:23:34:e4:55:5c:c5:bd:78: bc:3f:05:2a:3b:a3:da:51:53:9d:9a:09:2d:55:e2: 2d:98:6d:d5:a4:26:bd:d7:22:6e:24:bf:a7:8c:52: 26:b2:dd:be:2c:a2:c7:23:c3:92:8a:64:e1:e6:d3: 71:a5:51:78:f7:6f:dd:b7:8e:87:d2:5f:9d:ee:1d: 15:6e:cf:cc:7e:fc:84:1d:0d:9c:92:88:b8:19:71: 6d:9e:01:a0:11:15:91:47:75:c6:a1:a1:55:a0:72: 07:3d:1d:25:a3:74:75:76:93:a3:62:0d:0d:2b:18: 1c:1f:25:9e:58:28:76:cb:5c:0e:65:60:b9:3e:a1: a1:a4:c6:ee:d3:48:ce:ba:21:1f:40:4b:06:06:af: 1d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:28:E9:A2:F4:39:03:44:2E:3B:77:E3:63:7E:3C:75:53:77:CB:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7dfbaf3b-132f-3bfa-9bd7-2f6a7d9e79c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 208.89.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:41:ff:0a:92:63:19:c0:2d:3a:e4:4c:74:72:26:a9:64:a0: a1:6d:38:1d:2e:cd:1e:d1:3b:c5:37:0c:2f:32:8d:96:48:d2: 74:f4:1b:17:a5:5f:29:17:af:f6:4a:5d:c7:81:c8:80:30:42: be:4e:d8:a2:a8:7b:ee:dd:12:41:70:38:d7:ec:8f:13:0c:33: 2c:b9:07:d1:b1:71:c9:31:27:3c:d3:7f:b3:cf:79:d9:a3:46: 78:0b:7f:67:d9:be:a2:5c:d4:0f:41:ae:51:45:ed:9c:f8:99: 2e:eb:19:b3:0e:68:1f:eb:d3:76:39:87:a0:50:66:3d:6a:12: de:38:ba:95:5d:bc:6e:f3:d3:17:10:9b:f1:40:b5:41:a1:a0: aa:56:08:25:e1:5b:1c:8a:67:d4:83:c7:d4:5a:93:af:0a:bb: 9d:7d:bd:32:16:ab:bb:9b:4e:d9:79:70:00:7d:f4:3d:8b:58: 10:25:d0:c1:bd:76:ef:f0:be:af:07:db:c7:e5:38:b2:ec:cc: 0c:77:ef:9b:1e:b9:3b:58:b8:2b:26:f4:17:b9:a7:90:8f:79: 6c:2a:e2:48:d0:7f:7a:bb:45:56:b4:6e:b1:7e:9b:4a:1a:7c: e3:f4:8c:4c:d0:e4:7d:40:e0:8a:36:c3:f5:43:aa:a9:6d:ef: ca:51:ae:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbVCQKVQevKyXAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk M2FlZTE2ZjItMDU5Yy00NGJjLTk2MGQtOThjYWY2N2M1Yjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb8KZ3AKR+QpZshp0BWC8UyOVy7ig8KLlmrn tyLmeY89B3jHAEKBT1pxA2t68m2Vv29IhfPpm947hDBVKk7+/gUJZKPuqS6JDJvl ExFb7b9tTm9GS3tXjP9S+R+pZH4SSqWYoL2rZT5FLXDJUjj0IzTkVVzFvXi8PwUq O6PaUVOdmgktVeItmG3VpCa91yJuJL+njFImst2+LKLHI8OSimTh5tNxpVF492/d t46H0l+d7h0Vbs/MfvyEHQ2ckoi4GXFtngGgERWRR3XGoaFVoHIHPR0lo3R1dpOj Yg0NKxgcHyWeWCh2y1wOZWC5PqGhpMbu00jOuiEfQEsGBq8dUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIo6aL0OQNELjt342N+PHVTd8uGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvN2RmYmFmM2ItMTMyZi0z YmZhLTliZDctMmY2YTdkOWU3OWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FnyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxB/wqSYxnALTrkTHRyJqlkoKFtOB0uzR7RO8U3DC8yjZZI0nT0Gxel XykXr/ZKXceByIAwQr5O2KKoe+7dEkFwONfsjxMMMyy5B9GxcckxJzzTf7PPedmj RngLf2fZvqJc1A9BrlFF7Zz4mS7rGbMOaB/r03Y5h6BQZj1qEt44upVdvG7z0xcQ m/FAtUGhoKpWCCXhWxyKZ9SDx9Rak68Ku519vTIWq7ubTtl5cAB99D2LWBAl0MG9 du/wvq8H28flOLLszAx375seuTtYuCsm9Be5p5CPeWwq4kjQf3q7RVa0brF+m0oa fOP0jEzQ5H1A4Io2w/VDqqlt78pRrqg= -----END CERTIFICATE-----Generated at Sat Oct 24 08:28:02 2026 by rpki-client