$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a521c8d1-2d02-3030-af9e-ffe6ad77efaf.roa File: a521c8d1-2d02-3030-af9e-ffe6ad77efaf.roa (raw, json) Hash identifier: jdCpNXX+543C9S3r+Cpf0IimK1im85yvTcs7M5H4j8k= Subject key identifier: CD:83:90:84:94:35:A3:F9:ED:B0:8A:E3:AE:3F:0F:72:12:5F:8F:59 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584F00DCC8D20AE9B1319ABCDBC0 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a521c8d1-2d02-3030-af9e-ffe6ad77efaf.roa Signing time: Sun 30 Aug 2026 01:00:12 +0000 ROA not before: Sun 30 Aug 2026 01:00:12 +0000 ROA not after: Sat 28 Nov 2026 02:00:12 +0000 asID: 20001 IP address blocks: 68.234.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:00:dc:c8:d2:0a:e9:b1:31:9a:bc:db:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Aug 30 01:00:12 2026 GMT Not After : Nov 28 02:00:12 2026 GMT Subject: CN=542c9ddb-6c5c-4295-9949-75f65894afb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:df:05:ec:69:b5:bc:da:33:58:a2:a8:60:bd: 1b:86:5d:08:de:47:19:0f:4b:5f:12:d2:49:37:ca: c8:a0:4f:e6:85:26:33:a6:98:85:7f:50:f4:e4:17: f4:9c:f8:9c:2b:ab:c3:21:e7:d6:c8:9b:f5:fd:c7: 19:8c:6b:f8:92:b5:35:48:3b:0b:87:b8:24:21:90: d4:8e:07:e8:84:13:46:83:72:d3:3d:7a:f1:06:38: 9f:62:54:1e:e4:37:67:d8:6b:d2:4f:50:db:34:e7: 05:70:91:b9:b7:89:83:1e:27:21:8b:a7:4f:f2:1a: b1:6c:af:72:95:e7:7e:5a:e2:72:9f:eb:75:bf:e7: 25:7b:ea:5a:ef:5c:f7:c9:e4:30:83:a6:d1:02:19: d6:da:24:7a:6c:60:1a:cf:24:10:e2:f5:0f:c1:2d: 8f:00:5b:1d:9f:c9:8f:60:80:97:83:d7:2d:79:a0: 9d:07:50:68:ec:56:5d:35:14:79:5f:98:c2:3f:88: 07:b3:ea:08:52:1b:56:46:13:d8:66:e5:c5:1b:db: 07:76:9c:a0:d8:c4:f5:b8:b3:9e:9d:ef:0a:9f:d1: 20:c4:70:f7:02:b6:e0:a9:56:d2:8d:f2:1a:2a:7a: 72:91:7a:4a:5b:90:98:2e:6d:f5:6e:4d:db:66:ab: 97:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:83:90:84:94:35:A3:F9:ED:B0:8A:E3:AE:3F:0F:72:12:5F:8F:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a521c8d1-2d02-3030-af9e-ffe6ad77efaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 68.234.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:85:04:7d:84:35:7a:4c:70:eb:79:8a:f3:95:ba:09:46:46: 3c:fc:a2:ff:0a:90:4f:64:06:73:ef:50:7e:9c:a4:bf:8d:55: 37:c8:b6:34:7d:31:4c:05:32:eb:60:1b:c4:5e:37:71:1f:ae: e9:af:b0:4d:6f:1b:b8:c8:0e:20:6f:5e:98:3d:97:c1:3b:d5: 07:78:0b:38:68:0f:c4:5a:50:a4:70:5c:e4:0d:6b:80:ae:33: 6d:1f:de:34:c5:62:8c:b4:8e:44:02:ee:13:bd:86:ed:d5:8b: c8:fd:24:5a:b7:2f:7b:3e:df:20:2c:df:aa:fe:b4:d3:8b:80: 33:d2:64:cc:17:6e:9b:36:00:e4:ae:eb:45:94:fe:5d:f3:a9: b2:a5:f0:46:dd:63:ed:43:4c:5b:4f:5f:cc:1a:18:2f:6f:fe: ad:f4:c6:86:97:2a:a5:32:20:db:fc:62:7c:2c:88:c5:24:fa: de:83:34:57:ae:c4:5a:a8:41:2f:ba:46:21:d9:7e:ff:ff:a0: b0:07:9c:70:be:75:85:f0:87:1b:be:e0:c4:5f:b7:40:33:52: f0:4f:1d:81:9c:a7:49:07:d8:3b:6a:31:98:72:04:66:c3:e5: f3:ab:18:7f:27:7a:40:8a:eb:3d:c6:a9:c1:a8:2d:9a:83:e4: 05:7b:e5:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8A3MjSCumxMZq828AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDgzMDAxMDAxMloXDTI2MTEyODAyMDAxMlowLzEtMCsGA1UEAxMk NTQyYzlkZGItNmM1Yy00Mjk1LTk5NDktNzVmNjU4OTRhZmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz98F7Gm1vNozWKKoYL0bhl0I3kcZD0tfEtJJ N8rIoE/mhSYzppiFf1D05Bf0nPicK6vDIefWyJv1/ccZjGv4krU1SDsLh7gkIZDU jgfohBNGg3LTPXrxBjifYlQe5Ddn2GvST1DbNOcFcJG5t4mDHichi6dP8hqxbK9y led+WuJyn+t1v+cle+pa71z3yeQwg6bRAhnW2iR6bGAazyQQ4vUPwS2PAFsdn8mP YICXg9cteaCdB1Bo7FZdNRR5X5jCP4gHs+oIUhtWRhPYZuXFG9sHdpyg2MT1uLOe ne8Kn9EgxHD3ArbgqVbSjfIaKnpykXpKW5CYLm31bk3bZquXFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2DkISUNaP57bCK464/D3ISX49ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYTUyMWM4ZDEtMmQwMi0z MDMwLWFmOWUtZmZlNmFkNzdlZmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROovMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKyFBH2ENXpMcOt5ivOVuglGRjz8ov8KkE9kBnPvUH6cpL+NVTfItjR9 MUwFMutgG8ReN3EfrumvsE1vG7jIDiBvXpg9l8E71Qd4CzhoD8RaUKRwXOQNa4Cu M20f3jTFYoy0jkQC7hO9hu3Vi8j9JFq3L3s+3yAs36r+tNOLgDPSZMwXbps2AOSu 60WU/l3zqbKl8EbdY+1DTFtPX8waGC9v/q30xoaXKqUyINv8YnwsiMUk+t6DNFeu xFqoQS+6RiHZfv//oLAHnHC+dYXwhxu+4MRft0AzUvBPHYGcp0kH2DtqMZhyBGbD 5fOrGH8nekCK6z3GqcGoLZqD5AV75RU= -----END CERTIFICATE-----Generated at Sat Sep 5 00:39:27 2026 by rpki-client