$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e311f85d-e800-323e-ba44-a9f89922d86f.roa File: e311f85d-e800-323e-ba44-a9f89922d86f.roa (raw, json) Hash identifier: f/BQ5KQZl4lG73KW2NxKR7At68wjwVZ+sUDGEIQjZk4= Subject key identifier: 21:3A:AB:47:B3:43:A8:D3:C9:EC:D5:B6:F9:DD:34:AB:B9:89:C7:B6 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584EBDDC5F949AD9BDCD806ECF80 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e311f85d-e800-323e-ba44-a9f89922d86f.roa Signing time: Thu 06 Aug 2026 01:00:12 +0000 ROA not before: Thu 06 Aug 2026 01:00:12 +0000 ROA not after: Wed 04 Nov 2026 02:00:12 +0000 asID: 33659 IP address blocks: 158.62.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bd:dc:5f:94:9a:d9:bd:cd:80:6e:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Aug 6 01:00:12 2026 GMT Not After : Nov 4 02:00:12 2026 GMT Subject: CN=08290a31-5dcc-44aa-bc23-8f4a6c4c8894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:61:06:a5:2d:3f:24:30:b9:5a:4b:35:15:00: e8:fa:b1:97:0f:33:27:e2:b2:dc:ce:0c:18:dc:1e: 7a:a5:0e:9b:ee:00:41:ff:ef:fc:e1:05:bf:c8:37: cd:a4:e7:05:b4:5d:02:bb:dc:71:4e:45:7c:64:b0: c8:32:5c:bd:cf:64:bd:03:b0:e7:fe:98:25:06:20: 27:dd:c6:de:88:fc:a2:c4:8f:22:91:75:ff:8e:6d: c4:f2:6d:7c:09:a5:45:f7:9d:a5:18:d6:c6:52:3d: f4:f0:03:8f:b6:31:f0:ab:06:97:a7:32:0a:0e:f4: d0:03:56:01:c3:0b:d3:0e:62:b0:f4:6e:01:cb:50: 16:2d:4d:e8:38:98:5b:e4:82:d5:18:0e:4c:3e:ed: b2:b0:fe:f5:2b:92:8d:24:ae:12:f3:54:4b:78:7c: a8:fc:38:38:c7:55:c3:60:96:d8:82:ca:42:da:b5: 9c:d7:13:6e:80:0c:ad:24:f3:88:e2:97:d9:8c:1e: d5:f8:ef:7f:7d:72:ac:53:34:7b:af:91:73:ec:91: 93:20:71:6b:76:7d:f2:0b:ec:4c:81:7e:56:95:ec: 65:3d:a1:08:29:1d:2f:bd:15:4c:f0:f5:6d:92:13: dc:5e:de:78:b8:37:41:82:f8:94:25:66:44:5a:9e: 5f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:3A:AB:47:B3:43:A8:D3:C9:EC:D5:B6:F9:DD:34:AB:B9:89:C7:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e311f85d-e800-323e-ba44-a9f89922d86f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 158.62.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:39:fb:1a:32:fc:25:dd:77:b9:cd:5f:56:3f:88:59:20:13: 92:7a:44:92:a2:da:63:f0:29:4d:39:c5:f5:f2:70:87:25:0a: be:b6:87:9e:5e:3d:76:17:eb:6c:1a:29:7e:ee:a9:86:b3:de: 9b:0e:83:50:dd:9d:39:b3:56:12:8f:fa:1c:50:8c:61:05:7e: fd:2e:d3:73:6a:bb:f5:d2:ac:4d:b7:7d:cf:bb:89:1d:9d:12: 5a:2b:8d:45:c1:5f:82:1d:8e:3c:3c:3b:ec:3e:f5:f9:90:cb: e6:a1:6b:a6:81:ce:40:f2:f5:20:ca:f2:86:13:d7:f9:f8:9f: 1a:7f:da:0a:d3:84:f5:90:90:68:1a:81:2c:3c:07:16:6b:14: 81:fa:29:99:d5:b7:22:a8:c9:b4:97:d5:41:61:23:b8:45:0f: 28:55:42:31:f5:1f:e9:ca:44:5d:dc:23:61:10:b0:8d:9c:f9: d2:28:a1:6d:1d:0d:f5:00:35:90:c4:99:a2:d5:85:04:27:2e: 0f:50:21:4e:cd:6c:6b:3a:6f:ca:a9:f7:b4:97:65:f2:3f:c3: da:1a:9e:1d:c1:32:55:66:30:ac:5d:71:16:fd:87:5d:c2:a7: d5:b4:32:80:3b:f4:88:35:1a:1f:d3:c6:bc:96:67:07:92:f6: a7:88:88:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE693F+Umtm9zYBuz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDgwNjAxMDAxMloXDTI2MTEwNDAyMDAxMlowLzEtMCsGA1UEAxMk MDgyOTBhMzEtNWRjYy00NGFhLWJjMjMtOGY0YTZjNGM4ODk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2EGpS0/JDC5Wks1FQDo+rGXDzMn4rLczgwY 3B56pQ6b7gBB/+/84QW/yDfNpOcFtF0Cu9xxTkV8ZLDIMly9z2S9A7Dn/pglBiAn 3cbeiPyixI8ikXX/jm3E8m18CaVF952lGNbGUj308AOPtjHwqwaXpzIKDvTQA1YB wwvTDmKw9G4By1AWLU3oOJhb5ILVGA5MPu2ysP71K5KNJK4S81RLeHyo/Dg4x1XD YJbYgspC2rWc1xNugAytJPOI4pfZjB7V+O9/fXKsUzR7r5Fz7JGTIHFrdn3yC+xM gX5WlexlPaEIKR0vvRVM8PVtkhPcXt54uDdBgviUJWZEWp5fVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCE6q0ezQ6jTyezVtvndNKu5ice2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZTMxMWY4NWQtZTgwMC0z MjNlLWJhNDQtYTlmODk5MjJkODZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnj7UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJA5+xoy/CXdd7nNX1Y/iFkgE5J6RJKi2mPwKU05xfXycIclCr62h55e PXYX62waKX7uqYaz3psOg1DdnTmzVhKP+hxQjGEFfv0u03Nqu/XSrE23fc+7iR2d ElorjUXBX4Idjjw8O+w+9fmQy+aha6aBzkDy9SDK8oYT1/n4nxp/2grThPWQkGga gSw8BxZrFIH6KZnVtyKoybSX1UFhI7hFDyhVQjH1H+nKRF3cI2EQsI2c+dIooW0d DfUANZDEmaLVhQQnLg9QIU7NbGs6b8qp97SXZfI/w9oanh3BMlVmMKxdcRb9h13C p9W0MoA79Ig1Gh/TxryWZweS9qeIiFM= -----END CERTIFICATE-----Generated at Fri Sep 4 21:18:56 2026 by rpki-client