$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d7175206-08f3-3c69-a0cf-cef08664a79f.roa File: d7175206-08f3-3c69-a0cf-cef08664a79f.roa (raw, json) Hash identifier: wFE078Y3MGe5nEdUJzsTnG20Lr8Es9QqqYCRHIaA+l4= Subject key identifier: 93:C8:14:9C:5C:32:3F:39:9D:3A:5E:7F:21:D7:72:99:AE:7C:6C:D3 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584EED520E2859E193A0A0ABB380 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d7175206-08f3-3c69-a0cf-cef08664a79f.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 20454 IP address blocks: 209.188.28.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:0e:28:59:e1:93:a0:a0:ab:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=5f9846d4-d31a-4221-9616-b07d1a962b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:96:5b:85:46:58:33:33:b1:0d:2a:db:14:a2: f5:b7:84:9d:ec:a4:bb:d6:8d:af:31:c2:8b:7a:52: 61:09:c4:f1:98:13:75:0a:b9:e7:a3:a7:eb:2d:45: a5:4c:43:81:02:74:e4:7f:5b:a0:af:ca:a8:55:a6: 10:96:d5:a1:90:33:04:03:31:f4:78:ef:d5:31:b3: 2e:79:d5:5d:bd:0b:6f:23:23:6f:65:39:66:b0:23: 5b:f5:fa:54:2d:af:5c:88:b3:33:13:6d:cb:f3:eb: e7:60:45:20:93:d9:54:4f:68:e1:cb:0e:3c:b0:97: 15:56:a5:6b:88:3d:97:d5:ee:96:38:48:eb:a5:47: d4:69:9e:7c:a0:c6:74:7f:81:60:87:b0:52:17:6e: f6:14:12:bd:c3:86:50:59:54:2f:3e:72:91:46:a8: 8e:50:e7:d4:5d:cf:ce:48:ed:80:f8:08:10:05:8f: a2:34:d0:2d:63:81:ef:7c:ba:73:44:c0:0d:50:82: cf:4d:cc:87:53:95:a8:0a:45:71:f0:dc:c1:0e:01: 47:f3:5d:a8:60:4a:dd:39:e2:33:fb:21:e8:76:2c: 0a:09:00:ac:1a:24:ba:55:2a:2e:a2:92:8d:44:e4: c8:48:d5:a9:fc:88:23:23:fd:90:e8:91:af:f1:49: 60:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C8:14:9C:5C:32:3F:39:9D:3A:5E:7F:21:D7:72:99:AE:7C:6C:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d7175206-08f3-3c69-a0cf-cef08664a79f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 209.188.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:b1:c5:f5:50:db:a4:44:74:92:7b:b5:15:32:a2:33:42:b1: 9a:1e:d4:dd:d7:81:57:3d:2a:fe:9f:3c:b7:c5:be:7a:9b:a2: a7:31:77:44:a3:b1:58:7e:77:89:bf:bb:77:06:93:d2:52:81: a5:58:fb:1b:08:d4:b7:74:e0:1a:ac:67:24:e1:6d:db:27:b0: 93:e2:9a:70:ea:b9:bd:fd:88:a4:2e:fe:a4:37:08:14:5c:0a: 7d:fe:7f:d8:ea:d6:46:81:4f:c6:1e:a0:12:7f:29:49:4c:6d: 52:9f:a2:45:76:b2:16:be:0b:18:d7:0e:db:f8:ad:29:63:cf: 85:f6:75:2f:84:6c:27:17:cc:4d:fc:88:74:dd:30:34:d5:a5: 92:69:f9:82:99:02:8a:9f:04:21:b1:7a:4a:30:53:cd:1b:b9: f7:89:7f:75:5b:ae:bf:cf:d1:ef:7f:e6:65:39:96:a1:ef:ca: 03:e6:cb:9b:47:d2:7d:4e:e0:8e:0f:b8:b7:2f:42:51:49:3d: ad:2d:f1:96:9e:40:e3:af:92:82:c3:32:65:7f:dd:88:00:eb: 36:95:c2:30:6f:6e:04:73:19:c4:cd:30:2d:dd:e8:c5:ec:9a: 39:04:96:27:b2:74:50:a6:42:5f:ff:9f:54:49:e4:dc:6b:40: 08:3a:3d:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUg4oWeGToKCrs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk NWY5ODQ2ZDQtZDMxYS00MjIxLTk2MTYtYjA3ZDFhOTYyYjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65ZbhUZYMzOxDSrbFKL1t4Sd7KS71o2vMcKL elJhCcTxmBN1Crnno6frLUWlTEOBAnTkf1ugr8qoVaYQltWhkDMEAzH0eO/VMbMu edVdvQtvIyNvZTlmsCNb9fpULa9ciLMzE23L8+vnYEUgk9lUT2jhyw48sJcVVqVr iD2X1e6WOEjrpUfUaZ58oMZ0f4Fgh7BSF272FBK9w4ZQWVQvPnKRRqiOUOfUXc/O SO2A+AgQBY+iNNAtY4HvfLpzRMANUILPTcyHU5WoCkVx8NzBDgFH812oYErdOeIz +yHodiwKCQCsGiS6VSouopKNROTISNWp/IgjI/2Q6JGv8UlgkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJPIFJxcMj85nTpefyHXcpmufGzTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZDcxNzUyMDYtMDhmMy0z YzY5LWEwY2YtY2VmMDg2NjRhNzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bwcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuxxfVQ26REdJJ7tRUyojNCsZoe1N3XgVc9Kv6fPLfFvnqboqcxd0Sj sVh+d4m/u3cGk9JSgaVY+xsI1Ld04BqsZyThbdsnsJPimnDqub39iKQu/qQ3CBRc Cn3+f9jq1kaBT8YeoBJ/KUlMbVKfokV2sha+CxjXDtv4rSljz4X2dS+EbCcXzE38 iHTdMDTVpZJp+YKZAoqfBCGxekowU80bufeJf3Vbrr/P0e9/5mU5lqHvygPmy5tH 0n1O4I4PuLcvQlFJPa0t8ZaeQOOvkoLDMmV/3YgA6zaVwjBvbgRzGcTNMC3d6MXs mjkElieydFCmQl//n1RJ5NxrQAg6Pfw= -----END CERTIFICATE-----Generated at Sat Sep 5 03:26:49 2026 by rpki-client