$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a554d068-68d4-3f20-8300-02965153c64d.roa File: a554d068-68d4-3f20-8300-02965153c64d.roa (raw, json) Hash identifier: xqUkPXmDX/VNSV2Saw7TabV/4fd3BmXKSZsLRNQVLuQ= Subject key identifier: 0C:B0:F3:61:1F:25:33:46:00:47:EE:94:66:0B:B6:43:89:22:50:C3 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584FA2C87C678E8490284FB76600 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a554d068-68d4-3f20-8300-02965153c64d.roa Signing time: Tue 27 Oct 2026 01:00:14 +0000 ROA not before: Tue 27 Oct 2026 01:00:14 +0000 ROA not after: Mon 25 Jan 2027 02:00:14 +0000 asID: 20001 IP address blocks: 168.91.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a2:c8:7c:67:8e:84:90:28:4f:b7:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Oct 27 01:00:14 2026 GMT Not After : Jan 25 02:00:14 2027 GMT Subject: CN=3da780ea-6b05-4636-af83-9dba5647e9af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:71:7b:26:d4:41:9f:0f:0a:c9:da:09:4a:3c: fc:6e:8f:a0:d7:a8:fa:09:de:4a:fd:ac:b8:df:6e: 8d:b3:85:69:c8:f5:a8:c9:de:7d:c1:80:4e:25:77: 31:e1:d1:c7:83:03:4e:d4:5a:97:04:c2:9d:88:a7: 2d:81:5b:c1:ba:f8:8f:31:d1:32:e8:d3:1e:3e:31: 70:af:a6:f4:c5:a7:da:ec:dc:fb:bc:94:56:54:fd: bd:d1:36:49:a3:d6:7e:49:3a:9a:ff:f8:c5:0f:09: b2:8a:7c:0f:37:97:9a:7c:2a:e1:c0:68:0c:54:7c: 53:ce:8d:66:f1:e5:96:cc:74:ed:4c:72:ce:cc:03: 59:4a:01:61:60:f7:83:d4:ef:e5:2c:16:1f:0c:be: 8f:a2:de:d3:16:c9:65:a7:50:69:41:e9:ac:58:fc: b1:59:98:83:d9:c8:1b:b5:01:7c:56:0a:e4:e5:01: f2:ed:f2:fe:b6:6b:9d:7a:a8:68:e7:34:fa:bd:c8: 29:d1:81:52:4c:c2:d2:74:8d:40:05:d1:43:33:60: e0:08:0a:22:33:40:b6:3f:a1:b8:57:df:86:7b:e7: 3c:b6:b4:72:45:5c:be:6e:47:6b:81:2f:3e:b6:b0: 5a:9e:56:66:2d:a4:73:d2:0c:b4:15:63:35:68:f0: 3a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B0:F3:61:1F:25:33:46:00:47:EE:94:66:0B:B6:43:89:22:50:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a554d068-68d4-3f20-8300-02965153c64d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 168.91.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:2e:76:02:40:21:8e:f2:a3:a0:a1:01:3c:a2:f2:f4:23:8b: 42:34:9c:10:83:60:10:87:49:1c:58:4d:4d:9f:f7:1f:61:11: 50:9f:07:b6:fa:b0:2d:bc:e0:43:6c:5d:74:fe:16:64:ce:69: a8:03:5f:b0:c7:ab:90:23:8a:05:51:39:89:44:de:29:7f:8c: 64:b0:76:66:93:d1:ac:55:70:15:6a:ce:60:d3:cc:35:b0:c8: 7f:74:f4:5b:c0:5c:c6:2f:56:bd:37:bf:ca:64:9c:1c:ad:dc: d6:00:f0:ee:09:3e:86:aa:15:a8:9e:ec:2d:dd:c4:04:12:c2: 63:58:9c:4b:52:42:0e:95:5f:7e:be:49:b6:c0:77:c4:25:e6: 01:6c:16:03:e9:02:5b:1c:64:99:99:63:b0:89:49:67:66:22: f5:ba:64:bf:f3:a3:b7:d7:e1:d4:ba:ec:54:e3:97:0f:91:ed: 9e:6b:63:f2:2e:db:3c:0f:4c:22:f2:a3:1b:dc:9b:e6:2c:50: e0:9c:a1:02:0d:5a:f1:b2:7f:f8:25:e6:14:2f:cf:57:ee:e7: ee:e1:de:58:f8:46:3d:b4:ad:40:a4:d7:58:94:4b:d1:2d:31: 5b:32:3d:f5:6b:d0:24:b3:7e:94:86:5a:92:09:7c:22:3d:ba: 97:12:d6:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+iyHxnjoSQKE+3ZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MTAyNzAxMDAxNFoXDTI3MDEyNTAyMDAxNFowLzEtMCsGA1UEAxMk M2RhNzgwZWEtNmIwNS00NjM2LWFmODMtOWRiYTU2NDdlOWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXF7JtRBnw8KydoJSjz8bo+g16j6Cd5K/ay4 326Ns4VpyPWoyd59wYBOJXcx4dHHgwNO1FqXBMKdiKctgVvBuviPMdEy6NMePjFw r6b0xafa7Nz7vJRWVP290TZJo9Z+STqa//jFDwmyinwPN5eafCrhwGgMVHxTzo1m 8eWWzHTtTHLOzANZSgFhYPeD1O/lLBYfDL6Pot7TFsllp1BpQemsWPyxWZiD2cgb tQF8Vgrk5QHy7fL+tmudeqho5zT6vcgp0YFSTMLSdI1ABdFDM2DgCAoiM0C2P6G4 V9+Ge+c8trRyRVy+bkdrgS8+trBanlZmLaRz0gy0FWM1aPA6JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyw82EfJTNGAEfulGYLtkOJIlDDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYTU1NGQwNjgtNjhkNC0z ZjIwLTgzMDAtMDI5NjUxNTNjNjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFsMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANYudgJAIY7yo6ChATyi8vQji0I0nBCDYBCHSRxYTU2f9x9hEVCfB7b6 sC284ENsXXT+FmTOaagDX7DHq5AjigVROYlE3il/jGSwdmaT0axVcBVqzmDTzDWw yH909FvAXMYvVr03v8pknByt3NYA8O4JPoaqFaie7C3dxAQSwmNYnEtSQg6VX36+ SbbAd8Ql5gFsFgPpAlscZJmZY7CJSWdmIvW6ZL/zo7fX4dS67FTjlw+R7Z5rY/Iu 2zwPTCLyoxvcm+YsUOCcoQINWvGyf/gl5hQvz1fu5+7h3lj4Rj20rUCk11iUS9Et MVsyPfVr0CSzfpSGWpIJfCI9upcS1s0= -----END CERTIFICATE-----Generated at Tue Oct 27 17:01:18 2026 by rpki-client