$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/d8561cc0-42de-398c-82a6-2cae487ec735.roa File: d8561cc0-42de-398c-82a6-2cae487ec735.roa (raw, json) Hash identifier: 1L+NdB0bXzyLjj0Y2HAt+S5PZlPIo7QjT1GIExLfBvo= Subject key identifier: F5:AF:DC:97:B8:0F:98:19:18:11:0C:FA:B0:25:D1:7C:33:1B:C9:BD Certificate issuer: /CN=1b683a16-e9c4-489a-a5e9-3bb1b401f190 Certificate serial: 010D0C9F4328584ED431E1BA14ACFB4FCBC87980 Authority key identifier: BA:9B:1D:28:3D:C9:F8:2F:10:17:0C:0E:A5:14:79:05:16:35:4D:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/d8561cc0-42de-398c-82a6-2cae487ec735.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 18863 IP address blocks: 64.28.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/1b683a16-e9c4-489a-a5e9-3bb1b401f190.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/1b683a16-e9c4-489a-a5e9-3bb1b401f190.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:31:e1:ba:14:ac:fb:4f:cb:c8:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b683a16-e9c4-489a-a5e9-3bb1b401f190 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=7f7c3161-8c5d-4a45-913b-873ed226bf7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f2:a1:5e:71:04:95:46:e0:e9:88:2e:97:38: fd:06:61:1b:e9:85:eb:22:ed:68:98:4b:46:38:ef: 80:46:68:6e:a8:c9:43:77:bd:b5:00:47:16:95:ed: b4:5c:28:fd:bf:95:01:7b:65:50:dd:5e:96:c8:42: 17:bf:f5:cf:ea:a6:7b:a7:fa:6d:80:2b:b1:52:7e: e0:3a:b2:26:14:94:01:1b:01:38:7c:4d:fa:e9:25: c4:92:c5:e1:22:6f:b4:71:ac:c1:b0:e9:07:de:70: 38:b9:90:3a:51:bc:fb:86:06:2b:2d:4a:23:66:fa: 43:7b:e4:d9:15:28:3e:29:b4:33:c4:e4:b1:2f:43: f8:27:1a:9c:d7:2d:d2:73:cd:c4:ec:f3:1e:cf:6d: eb:60:9f:a6:b0:c6:af:d6:8f:ad:9e:d0:6e:aa:58: 5f:83:b3:79:b5:c8:f4:c3:0a:bf:76:18:43:b9:5e: a3:e5:47:71:17:a5:c9:c6:64:3a:24:79:6b:7d:b9: e5:8b:a8:42:2a:ba:6c:81:24:8a:c6:27:e5:76:b5: 90:68:6e:b2:44:d7:94:9e:79:8a:b6:a3:4a:3f:09: e7:04:69:13:11:a2:94:70:d7:b6:9b:bf:0a:e0:b0: 1d:08:d8:e6:42:48:1c:6b:a2:5c:76:df:5e:83:0e: d4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:AF:DC:97:B8:0F:98:19:18:11:0C:FA:B0:25:D1:7C:33:1B:C9:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/d8561cc0-42de-398c-82a6-2cae487ec735.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/1b683a16-e9c4-489a-a5e9-3bb1b401f190.crl X509v3 Authority Key Identifier: keyid:BA:9B:1D:28:3D:C9:F8:2F:10:17:0C:0E:A5:14:79:05:16:35:4D:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190.cer sbgp-ipAddrBlock: critical IPv4: 64.28.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:be:59:df:5e:27:9b:b6:47:aa:ef:de:70:8e:87:7d:b2:8e: 36:8d:52:07:41:0a:dc:97:0b:59:49:95:2e:f6:5c:0c:21:23: 31:77:91:3e:6e:5f:97:3d:75:3e:2c:bc:78:a3:74:e0:52:3b: 35:d6:03:9c:18:e4:d8:05:2f:21:72:29:21:d8:8c:cb:5d:4d: b4:19:90:7a:17:ac:4c:54:ae:7b:08:85:c5:ac:fc:c0:b8:26: c0:4f:19:6e:8f:8f:df:ff:f4:f1:8c:f0:5f:89:c1:b3:b5:06: 37:a3:c8:b0:5f:8e:e7:dc:9f:4a:a7:ee:48:2d:4b:55:a6:7f: aa:5d:0c:b5:43:d0:98:04:47:c7:9f:01:67:2d:ae:9f:b1:21: 78:30:68:ac:6c:bd:23:f7:df:ed:42:b2:27:40:59:39:df:0b: 24:05:6a:7f:a0:fd:d0:a0:5c:b7:c5:bb:e1:25:d7:bb:7b:0a: b7:46:5a:14:8e:58:1b:ae:57:2e:92:f6:74:ad:f8:5b:7a:1c: e1:c3:46:b8:e3:63:5e:6f:c6:eb:27:73:72:cc:d8:2f:25:29: 36:7a:1f:7f:ec:17:14:1a:73:fc:7e:b5:eb:d9:f6:6b:49:ed: 99:bc:05:8c:75:0c:d6:dc:f6:40:39:8e:dd:58:9c:64:15:34: 21:ca:c2:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMeG6FKz7T8vIeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWI2ODNhMTYtZTljNC00ODlhLWE1ZTktM2JiMWI0MDFm MTkwMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk N2Y3YzMxNjEtOGM1ZC00YTQ1LTkxM2ItODczZWQyMjZiZjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvKhXnEElUbg6Ygulzj9BmEb6YXrIu1omEtG OO+ARmhuqMlDd721AEcWle20XCj9v5UBe2VQ3V6WyEIXv/XP6qZ7p/ptgCuxUn7g OrImFJQBGwE4fE366SXEksXhIm+0cazBsOkH3nA4uZA6Ubz7hgYrLUojZvpDe+TZ FSg+KbQzxOSxL0P4Jxqc1y3Sc83E7PMez23rYJ+msMav1o+tntBuqlhfg7N5tcj0 wwq/dhhDuV6j5UdxF6XJxmQ6JHlrfbnli6hCKrpsgSSKxifldrWQaG6yRNeUnnmK tqNKPwnnBGkTEaKUcNe2m78K4LAdCNjmQkgca6Jcdt9egw7UpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWv3Je4D5gZGBEM+rAl0XwzG8m9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYjY4 M2ExNi1lOWM0LTQ4OWEtYTVlOS0zYmIxYjQwMWYxOTAvZDg1NjFjYzAtNDJkZS0z OThjLTgyYTYtMmNhZTQ4N2VjNzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWI2ODNhMTYtZTljNC00ODlhLWE1 ZTktM2JiMWI0MDFmMTkwLzFiNjgzYTE2LWU5YzQtNDg5YS1hNWU5LTNiYjFiNDAx ZjE5MC5jcmwwHwYDVR0jBBgwFoAUupsdKD3J+C8QFwwOpRR5BRY1TZMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYjY4M2ExNi1lOWM0LTQ4OWEtYTVlOS0zYmIx YjQwMWYxOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBzuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAm+Wd9eJ5u2R6rv3nCOh32yjjaNUgdBCtyXC1lJlS72XAwhIzF3kT5u X5c9dT4svHijdOBSOzXWA5wY5NgFLyFyKSHYjMtdTbQZkHoXrExUrnsIhcWs/MC4 JsBPGW6Pj9//9PGM8F+JwbO1BjejyLBfjufcn0qn7kgtS1Wmf6pdDLVD0JgER8ef AWctrp+xIXgwaKxsvSP33+1CsidAWTnfCyQFan+g/dCgXLfFu+El17t7CrdGWhSO WBuuVy6S9nSt+Ft6HOHDRrjjY15vxusnc3LM2C8lKTZ6H3/sFxQac/x+tevZ9mtJ 7Zm8BYx1DNbc9kA5jt1YnGQVNCHKwms= -----END CERTIFICATE-----Generated at Sat Aug 22 18:05:31 2026 by rpki-client