$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bfb854dd-fcc7-39cc-b6d9-70ab20f99130.roa File: bfb854dd-fcc7-39cc-b6d9-70ab20f99130.roa (raw, json) Hash identifier: ariOqOyJoaZBnLdFXWIaZyJmFm91MIQ7D9fzeaIcOb8= Subject key identifier: DA:C0:88:60:9A:71:68:7B:EB:6E:19:89:D2:DF:19:87:7C:43:4F:0B Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584F0672482C37F3CE04735BA380 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bfb854dd-fcc7-39cc-b6d9-70ab20f99130.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 64267 IP address blocks: 152.44.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:48:2c:37:f3:ce:04:73:5b:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=4571ad9d-ea31-41f8-9e87-55ddbf578c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3b:9a:c5:00:a4:2f:7f:06:f8:f8:15:9a:d4: 3d:3f:3d:08:e6:e8:b1:82:84:f6:c4:54:be:4e:93: 79:d7:65:df:93:1d:92:fa:8b:21:23:c9:c4:c7:fa: ef:a9:ba:10:b4:fd:38:27:54:f3:f0:ae:03:96:af: 88:73:33:52:70:3c:0b:01:a5:7a:9b:89:6d:78:64: 4b:53:5d:5a:92:a8:2f:ca:94:99:ce:21:33:42:2f: cd:2d:f1:84:98:c2:bf:c8:7d:41:d0:19:22:80:bc: e4:80:6f:a6:46:d5:e1:09:8e:92:52:80:5a:51:90: 15:cc:40:12:99:e6:85:4e:71:8f:4b:63:15:8e:65: fe:af:84:2f:37:ee:e0:c6:d0:a8:c0:e1:52:68:53: 81:f3:5c:8a:f6:db:b4:7c:7e:de:a2:18:8e:c3:af: 30:86:44:f0:61:e9:51:5e:c2:2d:63:ac:15:26:7e: 88:e4:fc:14:23:84:fb:dc:3d:eb:d4:a3:8f:d1:20: f4:6e:47:ee:b4:8d:09:dc:80:a0:0f:d1:b0:99:19: 9e:b2:ce:cf:78:3c:a2:01:27:80:b6:32:84:83:03: b8:ff:49:a1:b4:24:f5:b5:bd:22:5e:ec:7b:a3:33: b4:09:5d:18:26:49:bd:2b:4a:d4:d3:8d:60:81:6f: b9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C0:88:60:9A:71:68:7B:EB:6E:19:89:D2:DF:19:87:7C:43:4F:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bfb854dd-fcc7-39cc-b6d9-70ab20f99130.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 152.44.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:15:51:14:9a:b2:3b:51:52:01:dd:9f:ea:b6:1b:99:5b:dd: c1:cb:49:b3:97:2f:92:01:50:9f:f8:32:bc:f5:b7:44:9e:e8: 4f:2e:5c:4d:c1:a3:7f:ae:c5:32:7d:07:fc:dd:84:06:d0:b8: 8c:30:1f:87:22:89:60:ab:69:c4:48:c5:21:8e:6d:5d:a0:ce: b2:29:3a:2a:c7:06:39:35:d1:48:02:e9:c2:4b:58:7d:f2:a0: 3f:06:50:5f:ba:07:1a:b0:7f:bf:f1:95:c4:f1:09:b4:62:b5: ee:e9:99:22:69:78:c4:d6:d6:7d:2f:1b:98:39:cd:8a:6c:f3: fa:7e:18:b6:d3:c2:e3:6b:f8:8b:bb:c6:0a:8d:2c:86:0f:5f: e8:f8:c2:08:1d:a9:f7:d7:93:73:89:63:08:1e:94:2b:f9:7e: 95:2f:3e:2d:b1:ca:7d:1f:c2:0b:a0:54:b7:3e:b2:25:63:81: 1e:af:82:95:99:d7:c4:90:d6:92:7a:49:0b:86:4a:cc:95:64: 60:db:6a:f1:2e:4f:8d:62:e8:6e:33:3d:6b:f5:4b:8b:78:82: 4f:6d:65:e2:1d:bf:fd:25:78:89:c1:68:7d:85:33:60:ed:f5: b0:11:bf:8f:05:14:12:37:cd:fc:3e:78:e7:2f:d4:c1:bc:dd: 7c:1a:31:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GckgsN/POBHNbo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk NDU3MWFkOWQtZWEzMS00MWY4LTllODctNTVkZGJmNTc4YzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTuaxQCkL38G+PgVmtQ9Pz0I5uixgoT2xFS+ TpN512Xfkx2S+oshI8nEx/rvqboQtP04J1Tz8K4Dlq+IczNScDwLAaV6m4lteGRL U11akqgvypSZziEzQi/NLfGEmMK/yH1B0BkigLzkgG+mRtXhCY6SUoBaUZAVzEAS meaFTnGPS2MVjmX+r4QvN+7gxtCowOFSaFOB81yK9tu0fH7eohiOw68whkTwYelR XsItY6wVJn6I5PwUI4T73D3r1KOP0SD0bkfutI0J3ICgD9GwmRmess7PeDyiASeA tjKEgwO4/0mhtCT1tb0iXux7ozO0CV0YJkm9K0rU041ggW+57QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrAiGCacWh7624ZidLfGYd8Q08LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYmZiODU0ZGQtZmNjNy0z OWNjLWI2ZDktNzBhYjIwZjk5MTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCxiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwVURSasjtRUgHdn+q2G5lb3cHLSbOXL5IBUJ/4Mrz1t0Se6E8uXE3B o3+uxTJ9B/zdhAbQuIwwH4ciiWCracRIxSGObV2gzrIpOirHBjk10UgC6cJLWH3y oD8GUF+6Bxqwf7/xlcTxCbRite7pmSJpeMTW1n0vG5g5zYps8/p+GLbTwuNr+Iu7 xgqNLIYPX+j4wggdqffXk3OJYwgelCv5fpUvPi2xyn0fwgugVLc+siVjgR6vgpWZ 18SQ1pJ6SQuGSsyVZGDbavEuT41i6G4zPWv1S4t4gk9tZeIdv/0leInBaH2FM2Dt 9bARv48FFBI3zfw+eOcv1MG83XwaMSI= -----END CERTIFICATE-----Generated at Fri Sep 4 20:38:52 2026 by rpki-client