$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0/2fdc2e62-cbc2-34e6-a8a3-d03e46438f89.roa File: 2fdc2e62-cbc2-34e6-a8a3-d03e46438f89.roa (raw, json) Hash identifier: 2lCPElNby5+JoCgKzSRM8p1XD8mqW+Ern78VobSQc4I= Subject key identifier: C0:35:A1:B0:A1:FF:C4:A9:D3:F2:10:D8:F6:65:38:49:99:F6:16:FF Certificate issuer: /CN=28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0 Certificate serial: 010D0C9F4328584F4974D877897738FBC1C11600 Authority key identifier: 68:0C:3E:64:98:6C:59:FC:C6:FB:4F:C2:65:48:47:2D:A1:96:54:71 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0/2fdc2e62-cbc2-34e6-a8a3-d03e46438f89.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 398479 IP address blocks: 66.118.8.0/22 maxlen: 24 162.253.208.0/22 maxlen: 24 199.46.120.0/22 maxlen: 24 2605:e3c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:d8:77:89:77:38:fb:c1:c1:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=76688a6d-be87-45bb-b6b9-6779b910e7a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4f:83:fc:0a:1f:b5:ed:f5:ad:88:4e:49:87: 2c:9b:77:6d:29:08:99:56:58:e1:a0:f6:9e:a6:31: 56:4d:65:d6:e4:a8:97:be:28:bc:72:b3:fa:23:ef: cb:60:f2:a3:69:b9:52:80:e2:09:8d:c0:37:2e:b0: 0b:2a:dd:85:73:48:a3:45:56:5f:f3:f0:43:df:a0: 05:a8:9c:cb:3e:d0:1f:aa:61:8b:66:ea:a4:f5:c5: b9:09:66:5c:08:2d:1a:16:a5:2e:0c:88:c3:c3:6b: a9:58:97:3f:e0:94:a7:34:36:f0:d1:3d:96:8d:a1: 62:72:95:52:32:f4:ce:06:19:db:f0:9a:91:b8:7f: 2c:7d:fd:21:fb:09:9c:15:c7:fe:ea:80:31:e6:3f: 78:31:e9:74:89:1c:a8:6c:2c:1b:94:7c:7f:ba:5a: 63:ee:6f:12:4b:fa:db:3f:e4:6b:dd:bd:5b:45:27: d0:4b:34:1c:81:0a:5d:73:87:99:d7:c5:1b:66:f6: 0f:64:0a:7d:8c:12:08:5e:59:a3:c4:bd:ec:65:fd: 71:55:4a:27:74:f1:60:c1:20:0d:aa:42:e7:4b:40: 85:7d:70:7e:94:c2:93:17:a2:c2:e2:01:91:15:c5: 54:fb:27:53:20:5e:4c:3a:d6:09:d2:90:08:d0:6c: 8f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:35:A1:B0:A1:FF:C4:A9:D3:F2:10:D8:F6:65:38:49:99:F6:16:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0/2fdc2e62-cbc2-34e6-a8a3-d03e46438f89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0.crl X509v3 Authority Key Identifier: keyid:68:0C:3E:64:98:6C:59:FC:C6:FB:4F:C2:65:48:47:2D:A1:96:54:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0.cer sbgp-ipAddrBlock: critical IPv4: 66.118.8.0/22 162.253.208.0/22 199.46.120.0/22 IPv6: 2605:e3c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:bd:43:eb:2c:25:dc:3f:bb:1e:a7:dc:aa:a9:b1:85:04:63: 2b:67:ad:52:a8:a1:e0:9f:60:98:e4:e7:a4:f5:1f:db:7c:e9: 23:43:79:1a:cf:22:03:d7:96:55:2e:0a:7b:93:fd:9d:d7:eb: 6b:70:12:64:8c:f0:cc:e0:3c:4d:c7:cb:de:2f:56:a1:fa:a0: cd:95:cd:37:ef:5b:eb:df:58:39:a1:d8:00:a2:cc:0b:01:33: 42:56:e3:6e:ed:ee:a4:16:e8:eb:05:1e:f5:2c:96:b6:b3:3e: 21:22:ff:16:ab:04:0c:2d:79:70:0e:48:07:8b:41:da:c2:6c: 2a:89:40:1e:9e:ef:65:6f:09:30:8f:9d:24:02:8e:46:07:89: a0:31:e0:55:68:ea:d2:e6:c5:ea:5a:00:93:cc:2d:ee:32:42: 86:fd:6d:aa:2a:4a:27:4b:57:15:98:b4:a1:86:bf:6d:d3:74: 8b:d5:11:58:b0:e2:3d:7d:2c:23:e9:eb:d8:ec:69:86:24:7d: 31:a3:9d:f3:d0:85:7e:08:d8:ba:65:73:97:be:c9:9a:97:b6: 29:02:84:0b:3d:5b:7b:3a:f1:76:10:22:b0:85:4a:dc:f4:46: d8:cf:6f:d8:e5:96:3c:17:dc:b9:9b:f6:1c:7e:82:4d:7f:9a: b3:4a:48:25 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWE9JdNh3iXc4+8HBFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhkNGRlZDItZmIyZi00N2JjLWI5Y2QtYzQ1YzllMTIw ZmYwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzY2ODhhNmQtYmU4Ny00NWJiLWI2YjktNjc3OWI5MTBlN2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk+D/Aofte31rYhOSYcsm3dtKQiZVljhoPae pjFWTWXW5KiXvii8crP6I+/LYPKjablSgOIJjcA3LrALKt2Fc0ijRVZf8/BD36AF qJzLPtAfqmGLZuqk9cW5CWZcCC0aFqUuDIjDw2upWJc/4JSnNDbw0T2WjaFicpVS MvTOBhnb8JqRuH8sff0h+wmcFcf+6oAx5j94Mel0iRyobCwblHx/ulpj7m8SS/rb P+Rr3b1bRSfQSzQcgQpdc4eZ18UbZvYPZAp9jBIIXlmjxL3sZf1xVUondPFgwSAN qkLnS0CFfXB+lMKTF6LC4gGRFcVU+ydTIF5MOtYJ0pAI0GyPJwIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFMA1obCh/8Sp0/IQ2PZlOEmZ9hb/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yOGQ0 ZGVkMi1mYjJmLTQ3YmMtYjljZC1jNDVjOWUxMjBmZjAvMmZkYzJlNjItY2JjMi0z NGU2LWE4YTMtZDAzZTQ2NDM4Zjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjhkNGRlZDItZmIyZi00N2JjLWI5 Y2QtYzQ1YzllMTIwZmYwLzI4ZDRkZWQyLWZiMmYtNDdiYy1iOWNkLWM0NWM5ZTEy MGZmMC5jcmwwHwYDVR0jBBgwFoAUaAw+ZJhsWfzG+0/CZUhHLaGWVHEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yOGQ0ZGVkMi1mYjJmLTQ3YmMtYjljZC1jNDVj OWUxMjBmZjAuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCQnYIAwQC ov3QAwQCxy54MA0EAgACMAcDBQAmBePAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACu9Q+ssJdw/ux6n3Kqp sYUEYytnrVKooeCfYJjk56T1H9t86SNDeRrPIgPXllUuCnuT/Z3X62twEmSM8Mzg PE3Hy94vVqH6oM2VzTfvW+vfWDmh2ACizAsBM0JW427t7qQW6OsFHvUslrazPiEi /xarBAwteXAOSAeLQdrCbCqJQB6e72VvCTCPnSQCjkYHiaAx4FVo6tLmxepaAJPM Le4yQob9baoqSidLVxWYtKGGv23TdIvVEViw4j19LCPp69jsaYYkfTGjnfPQhX4I 2Lplc5e+yZqXtikChAs9W3s68XYQIrCFStz0RtjPb9jlljwX3Lmb9hx+gk1/mrNK SCU= -----END CERTIFICATE-----Generated at Sun Oct 11 23:11:42 2026 by rpki-client