$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cd10208d-4730-3373-99e4-97134af5cead.roa File: cd10208d-4730-3373-99e4-97134af5cead.roa (raw, json) Hash identifier: 3ML+NR1fSH/0qsI5Kg7euNJajVXGkA478VtcJwkzpAI= Subject key identifier: A4:2C:CE:A3:C1:41:6C:A0:3F:D8:54:C6:DD:37:98:92:08:07:55:D5 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584F00DCD4334A295E9F2A38A040 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cd10208d-4730-3373-99e4-97134af5cead.roa Signing time: Sun 30 Aug 2026 01:00:12 +0000 ROA not before: Sun 30 Aug 2026 01:00:12 +0000 ROA not after: Sat 28 Nov 2026 02:00:12 +0000 asID: 20001 IP address blocks: 68.65.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:00:dc:d4:33:4a:29:5e:9f:2a:38:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Aug 30 01:00:12 2026 GMT Not After : Nov 28 02:00:12 2026 GMT Subject: CN=be852a3f-67cf-43f6-8d74-7dec0ad1d4bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:04:3f:b0:68:df:99:b7:f1:d4:2d:53:ab:02: f9:7b:0b:a8:f8:f5:ba:3c:50:ef:5c:f1:4b:95:ad: b8:45:3e:8d:e7:d9:6f:bc:64:0e:48:11:32:19:e3: 49:84:03:18:a4:c7:48:9f:c0:6f:d5:bb:e5:e2:38: e4:83:40:61:74:5b:46:28:2a:3e:b2:26:5b:b4:49: fa:97:fa:b5:5c:60:8e:a4:69:e6:32:1f:ca:dd:f9: 34:22:d6:f3:2e:f8:ee:9a:91:50:0b:51:f9:93:e0: ec:ee:87:c6:25:16:e4:3d:5b:39:7e:0a:57:67:55: f0:35:7f:8b:a2:58:96:88:20:e3:18:4d:5c:23:44: 31:42:99:5f:64:c2:98:7f:6d:65:cb:fb:89:01:4c: af:2a:bb:70:eb:ef:98:04:82:88:b9:3c:50:17:68: 33:b5:41:db:e1:d3:c5:ad:e1:e9:f5:64:8d:90:3d: ec:4d:6e:ec:f4:6c:7b:4f:2c:41:9c:0d:c2:03:5d: bc:da:03:f2:5f:8a:38:c5:90:d6:82:2f:37:e9:2c: fa:be:14:91:60:c4:85:a7:fc:a0:44:19:20:ac:e8: 44:ab:72:1c:31:76:9a:1a:3a:98:9e:2a:69:77:09: d1:7d:9b:a8:ea:08:08:89:3e:3d:08:c4:10:82:e4: 90:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2C:CE:A3:C1:41:6C:A0:3F:D8:54:C6:DD:37:98:92:08:07:55:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cd10208d-4730-3373-99e4-97134af5cead.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 68.65.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:8e:a0:82:69:bd:d0:80:73:52:9c:17:a4:c9:c7:6c:cd:51: c1:36:e8:72:9b:b1:5c:79:40:c9:db:9d:7c:57:56:28:50:d3: c0:7e:7c:ea:06:d4:a5:9b:79:29:9a:b4:a3:2f:77:ba:ab:71: 39:ff:54:90:d1:0a:14:a6:bf:c2:44:79:b2:9a:23:e3:77:e4: 91:b6:1d:f1:66:d0:1a:63:9d:77:3b:7e:3c:7c:3c:1c:fb:b7: b1:30:81:96:b7:d3:4f:7f:62:7f:9c:b0:98:69:e8:cc:33:3f: c9:4c:70:97:ec:a5:15:da:91:1d:03:7d:d6:0d:e4:cc:c8:07: 91:11:09:8c:7f:5e:dd:74:c6:a1:17:92:c2:69:b8:8d:17:93: bf:d7:46:0b:fd:f3:96:2b:eb:20:44:c3:b1:dd:26:e9:fa:3b: d8:0b:11:f9:43:04:4a:e5:12:46:f6:6a:91:d4:8c:26:a4:1f: ff:3c:dc:39:bc:4a:82:c1:78:bf:6f:8a:52:8d:e8:ad:82:c9: bb:9c:cd:64:0b:8b:b3:72:35:a6:64:df:bc:f8:3b:bb:ac:6c: 0d:36:dd:8d:04:50:81:76:f2:8d:3c:d6:5a:d5:a1:19:d2:cd: d7:54:cf:69:05:88:5b:10:19:a7:2e:c6:57:bc:68:d7:2a:a7: 26:6d:8e:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8A3NQzSilenyo4oEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDgzMDAxMDAxMloXDTI2MTEyODAyMDAxMlowLzEtMCsGA1UEAxMk YmU4NTJhM2YtNjdjZi00M2Y2LThkNzQtN2RlYzBhZDFkNGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgQ/sGjfmbfx1C1TqwL5ewuo+PW6PFDvXPFL la24RT6N59lvvGQOSBEyGeNJhAMYpMdIn8Bv1bvl4jjkg0BhdFtGKCo+siZbtEn6 l/q1XGCOpGnmMh/K3fk0ItbzLvjumpFQC1H5k+Ds7ofGJRbkPVs5fgpXZ1XwNX+L oliWiCDjGE1cI0QxQplfZMKYf21ly/uJAUyvKrtw6++YBIKIuTxQF2gztUHb4dPF reHp9WSNkD3sTW7s9Gx7TyxBnA3CA1282gPyX4o4xZDWgi836Sz6vhSRYMSFp/yg RBkgrOhEq3IcMXaaGjqYnippdwnRfZuo6ggIiT49CMQQguSQYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQszqPBQWygP9hUxt03mJIIB1XVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvY2QxMDIwOGQtNDczMC0z MzczLTk5ZTQtOTcxMzRhZjVjZWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREHfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuOoIJpvdCAc1KcF6TJx2zNUcE26HKbsVx5QMnbnXxXVihQ08B+fOoG 1KWbeSmatKMvd7qrcTn/VJDRChSmv8JEebKaI+N35JG2HfFm0BpjnXc7fjx8PBz7 t7EwgZa3009/Yn+csJhp6MwzP8lMcJfspRXakR0DfdYN5MzIB5ERCYx/Xt10xqEX ksJpuI0Xk7/XRgv985Yr6yBEw7HdJun6O9gLEflDBErlEkb2apHUjCakH/883Dm8 SoLBeL9vilKN6K2CybuczWQLi7NyNaZk37z4O7usbA023Y0EUIF28o081lrVoRnS zddUz2kFiFsQGacuxle8aNcqpyZtjsQ= -----END CERTIFICATE-----Generated at Fri Sep 4 16:43:10 2026 by rpki-client