$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cf757231-1b36-3cd8-9100-018cab8b51c4.roa File: cf757231-1b36-3cd8-9100-018cab8b51c4.roa (raw, json) Hash identifier: 2RNanmbZs+o+SmUY4SIejp+Y/f13NP+cWz0wBiUgkDw= Subject key identifier: FA:DF:6F:8F:A0:AC:64:D3:AA:68:6C:B9:45:6A:2B:98:EE:33:FA:EE Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584F5A3302BA1D6FB78D3689C000 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cf757231-1b36-3cd8-9100-018cab8b51c4.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 64267 IP address blocks: 199.34.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:02:ba:1d:6f:b7:8d:36:89:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=03a08ed0-ba8c-47cd-9468-a659f648dad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8e:21:06:0f:f1:a6:6a:6e:e1:79:14:27:bf: c2:b3:be:4d:77:82:a2:b3:6e:9d:48:d3:96:8a:44: ba:72:9a:fb:98:6f:74:97:b7:56:8d:79:52:2d:ea: f0:87:c2:6f:21:cb:ff:cb:42:d0:99:fa:ab:3e:60: 15:4c:68:12:9b:d0:3e:b1:dd:50:3e:89:c6:3a:60: 0f:a2:f9:68:70:8c:fd:be:01:b5:36:9b:31:c8:34: ae:75:49:a7:3e:1a:e2:4c:51:54:96:d1:e2:1d:9f: 0f:a7:fb:71:f5:78:99:fa:df:62:3a:6b:bd:f1:60: 67:e2:82:6d:a4:8f:53:a1:e0:9f:93:b7:76:13:ae: ae:86:aa:6d:da:5c:e1:6b:d6:4a:87:a4:1a:62:a1: 90:8c:98:2c:58:22:49:bd:df:21:8f:88:6a:cc:e1: 36:69:7d:e4:f8:93:a3:10:03:26:1a:a9:c4:2b:34: 6f:3b:cb:94:68:60:c0:86:17:97:31:be:b8:d8:fa: 20:41:86:2b:6c:54:86:c8:be:78:19:5d:3c:6a:f7: ac:3f:af:de:c3:61:3e:7a:c0:a1:4b:6d:d8:04:ad: cb:fe:62:ff:14:5b:bd:97:49:74:65:1e:29:1b:ac: 76:10:4c:d6:cb:f0:d2:3d:9d:98:6b:d0:27:0a:92: cd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:DF:6F:8F:A0:AC:64:D3:AA:68:6C:B9:45:6A:2B:98:EE:33:FA:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cf757231-1b36-3cd8-9100-018cab8b51c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 199.34.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:a8:57:4a:71:ea:28:2f:68:58:dd:5e:b8:04:3e:1d:69:20: 31:19:ed:3f:96:69:fa:31:1c:ed:6b:aa:33:29:f3:eb:59:30: 66:99:c6:94:9e:0b:57:f9:fb:23:6c:05:5c:60:5f:50:f9:03: 25:42:16:84:79:f4:62:65:34:e0:15:66:88:85:ea:ab:18:7c: 32:69:3a:09:af:38:28:2a:b8:a4:f7:aa:41:15:c8:9a:33:c2: ac:78:71:3c:b2:66:3f:84:e7:1a:14:ce:97:5d:d0:14:40:47: 28:5a:86:74:42:1b:66:da:2d:92:3d:7d:33:48:aa:a1:d4:3d: db:bd:8c:e2:d0:4e:87:31:1d:4b:ed:23:4a:06:39:7f:c7:0b: b1:6d:28:f4:99:c7:96:68:f1:3c:ad:c2:d9:4a:c3:40:59:aa: 04:21:7a:40:80:72:3c:01:50:98:67:7c:98:f6:23:e9:21:2c: 28:95:8b:a9:c3:92:18:06:0f:34:29:c9:4a:8f:70:00:52:e9: d2:23:d6:6c:f4:df:1b:b1:9b:21:b1:01:b2:bb:fd:7e:c3:3f: f7:19:b0:2f:18:52:fd:dd:0c:a1:aa:25:f2:16:54:54:4c:6f: 6f:25:ff:43:8c:02:2c:9b:75:a3:88:65:37:6f:66:86:a4:25: 99:fa:6b:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMwK6HW+3jTaJwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk MDNhMDhlZDAtYmE4Yy00N2NkLTk0NjgtYTY1OWY2NDhkYWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI4hBg/xpmpu4XkUJ7/Cs75Nd4Kis26dSNOW ikS6cpr7mG90l7dWjXlSLerwh8JvIcv/y0LQmfqrPmAVTGgSm9A+sd1QPonGOmAP ovlocIz9vgG1NpsxyDSudUmnPhriTFFUltHiHZ8Pp/tx9XiZ+t9iOmu98WBn4oJt pI9ToeCfk7d2E66uhqpt2lzha9ZKh6QaYqGQjJgsWCJJvd8hj4hqzOE2aX3k+JOj EAMmGqnEKzRvO8uUaGDAhheXMb642PogQYYrbFSGyL54GV08avesP6/ew2E+esCh S23YBK3L/mL/FFu9l0l0ZR4pG6x2EEzWy/DSPZ2Ya9AnCpLNiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrfb4+grGTTqmhsuUVqK5juM/ruMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvY2Y3NTcyMzEtMWIzNi0z Y2Q4LTkxMDAtMDE4Y2FiOGI1MWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxyJYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmoV0px6igvaFjdXrgEPh1pIDEZ7T+WafoxHO1rqjMp8+tZMGaZxpSe C1f5+yNsBVxgX1D5AyVCFoR59GJlNOAVZoiF6qsYfDJpOgmvOCgquKT3qkEVyJoz wqx4cTyyZj+E5xoUzpdd0BRARyhahnRCG2baLZI9fTNIqqHUPdu9jOLQTocxHUvt I0oGOX/HC7FtKPSZx5Zo8TytwtlKw0BZqgQhekCAcjwBUJhnfJj2I+khLCiVi6nD khgGDzQpyUqPcABS6dIj1mz03xuxmyGxAbK7/X7DP/cZsC8YUv3dDKGqJfIWVFRM b28l/0OMAiybdaOIZTdvZoakJZn6a7o= -----END CERTIFICATE-----Generated at Sun Oct 25 19:59:42 2026 by rpki-client