$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/28d0696b-8dfd-3cab-8fab-1a07f8dbee06.roa File: 28d0696b-8dfd-3cab-8fab-1a07f8dbee06.roa (raw, json) Hash identifier: zdsOoUNzTZZqHiGEDhUye+3+yXWPd/qFkp3q743kLHk= Subject key identifier: 90:1E:2C:27:5B:B3:C1:D0:58:54:F3:49:19:6B:9F:E9:E5:37:AF:02 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973FE24EA093E77315FD0C0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/28d0696b-8dfd-3cab-8fab-1a07f8dbee06.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 852 IP address blocks: 209.121.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:fe:24:ea:09:3e:77:31:5f:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=96b55afb-94eb-49d8-9e74-5c47a4df7f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:01:4d:ad:b7:27:36:18:e1:71:35:7c:76:df: 52:ff:72:2a:9e:2d:3e:45:20:e6:10:b0:ed:68:ce: 1e:a4:47:88:2a:c2:31:44:70:c8:8d:d9:4b:18:fe: f0:33:ab:86:ef:fe:07:4f:d8:43:bf:d5:63:10:7a: 19:9c:fa:45:bc:54:6f:87:8e:d6:de:42:7f:fd:9d: e2:73:c4:8f:6d:f3:33:8f:63:34:43:7f:3a:f3:a3: 77:55:1d:0a:5c:ba:c0:d7:a6:b0:33:ad:28:08:c3: 86:95:7b:6b:8b:02:75:31:d4:a7:65:e7:67:a1:ce: 17:a3:75:d2:a2:97:5c:b3:9f:81:23:b5:ef:9a:8b: b2:71:0f:b0:48:30:f7:ba:e0:bd:b0:96:05:24:6e: f6:61:e1:99:b2:77:b6:39:24:b3:9d:c5:21:29:9b: c5:f5:8f:2a:5f:03:bd:85:91:fd:73:6e:4c:6b:7c: a1:2e:80:70:37:de:bf:d3:3b:29:a4:4d:fa:17:69: 7b:03:33:7d:08:01:9b:61:7d:f2:eb:60:04:dc:12: a1:7c:55:fa:26:66:68:44:0f:81:15:1e:6d:6e:5c: 3f:3b:ae:3a:48:ee:de:87:21:de:6c:7b:02:af:93: 77:14:a8:e6:7f:47:da:88:9a:c5:8f:15:1b:b7:9a: d8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:1E:2C:27:5B:B3:C1:D0:58:54:F3:49:19:6B:9F:E9:E5:37:AF:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/28d0696b-8dfd-3cab-8fab-1a07f8dbee06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.121.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption f2:16:83:e4:a0:3c:b7:30:d7:17:a1:bb:72:bd:79:0f:37:45: bc:c2:c7:4d:4a:59:d1:b4:83:4f:b7:53:5f:cf:76:92:a5:3a: dd:6d:95:94:4f:ef:cd:4b:11:a3:7a:da:d3:bf:ca:08:f2:c4: 19:bc:f7:9e:f8:cb:49:b7:f0:d3:a6:ad:60:c1:d8:cb:6b:f4: c4:13:2e:01:12:b1:0a:f8:25:8d:46:5f:43:bc:0d:c4:a4:52: 38:29:4e:4a:ed:72:40:54:55:69:83:f1:74:22:91:13:5a:2f: 9b:ee:53:e8:38:9d:9c:f5:be:7d:ca:6d:59:3d:fd:45:29:1d: e9:06:8a:e3:51:75:72:5f:12:c8:0d:6e:e6:ca:e4:32:6c:e3: 70:85:db:43:88:19:08:67:ac:ca:97:c0:fd:3f:e0:87:b9:76: b5:a0:9f:30:65:72:c1:21:35:eb:fd:20:62:18:00:02:2c:72: af:42:34:7c:e8:cd:bd:0b:fd:68:47:ec:95:4f:fc:1e:76:d3: 54:d5:ea:03:38:76:9e:3c:38:7b:82:de:12:27:99:b6:6d:43: ea:ef:be:da:6a:36:5b:2f:93:ff:16:39:67:1e:5c:36:0b:0d: 48:1a:40:1f:12:85:a9:6d:aa:26:e4:dd:93:34:a1:cf:ca:a3: 73:02:1d:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc/4k6gk+dzFf0MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTZiNTVhZmItOTRlYi00OWQ4LTllNzQtNWM0N2E0ZGY3ZjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigFNrbcnNhjhcTV8dt9S/3Iqni0+RSDmELDt aM4epEeIKsIxRHDIjdlLGP7wM6uG7/4HT9hDv9VjEHoZnPpFvFRvh47W3kJ//Z3i c8SPbfMzj2M0Q38686N3VR0KXLrA16awM60oCMOGlXtriwJ1MdSnZednoc4Xo3XS opdcs5+BI7XvmouycQ+wSDD3uuC9sJYFJG72YeGZsne2OSSzncUhKZvF9Y8qXwO9 hZH9c25Ma3yhLoBwN96/0zsppE36F2l7AzN9CAGbYX3y62AE3BKhfFX6JmZoRA+B FR5tblw/O646SO7ehyHebHsCr5N3FKjmf0faiJrFjxUbt5rY3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAeLCdbs8HQWFTzSRlrn+nlN68CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjhkMDY5NmItOGRmZC0z Y2FiLThmYWItMWEwN2Y4ZGJlZTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XlHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAPIWg+SgPLcw1xehu3K9eQ83RbzCx01KWdG0g0+3U1/PdpKlOt1tlZRP 781LEaN62tO/ygjyxBm89574y0m38NOmrWDB2Mtr9MQTLgESsQr4JY1GX0O8DcSk UjgpTkrtckBUVWmD8XQikRNaL5vuU+g4nZz1vn3KbVk9/UUpHekGiuNRdXJfEsgN bubK5DJs43CF20OIGQhnrMqXwP0/4Ie5drWgnzBlcsEhNev9IGIYAAIscq9CNHzo zb0L/WhH7JVP/B5201TV6gM4dp48OHuC3hInmbZtQ+rvvtpqNlsvk/8WOWceXDYL DUgaQB8Shaltqibk3ZM0oc/Ko3MCHdc= -----END CERTIFICATE-----Generated at Sat Oct 31 12:40:53 2026 by rpki-client