$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/daa4fef1-8408-30c9-a731-41665d183354.roa File: daa4fef1-8408-30c9-a731-41665d183354.roa (raw, json) Hash identifier: N5mGx/l+0fAFlM9O+N7k+uQwhTAkv1iRI3e6N5w4Ow8= Subject key identifier: 5D:FB:83:9D:AF:89:44:37:71:1E:A6:88:2F:A8:DE:AE:B2:F9:76:4A Certificate issuer: /CN=0f9ce8be-7bbe-418b-b78e-42de894133a5 Certificate serial: 010D0C9F4328584EA78877BAF88DDF19673B7E60 Authority key identifier: CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/daa4fef1-8408-30c9-a731-41665d183354.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 14618 IP address blocks: 72.57.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:77:ba:f8:8d:df:19:67:3b:7e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f9ce8be-7bbe-418b-b78e-42de894133a5 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=894fcdd4-3541-483c-aa17-eee74c666323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:67:13:2e:a5:9d:f3:4a:d8:04:7b:7e:08:be: 86:9e:ff:51:6c:31:e6:fa:29:09:05:1e:d2:e6:2f: 8b:55:03:17:38:13:7d:bb:2c:80:83:1c:2e:15:9e: 15:5b:8f:b6:7c:c4:d3:c0:f9:ee:9e:3b:91:64:c2: 7a:47:b6:02:6d:df:d7:65:23:ce:b6:36:b3:66:67: 8e:39:63:25:0b:7e:7c:4c:5a:4a:ef:89:f6:f2:c9: 69:b6:fc:ac:e7:2e:a4:30:63:36:e0:f7:be:76:d7: c6:55:4f:e6:e6:22:f9:de:9b:7d:d1:68:43:00:a3: 87:f7:3a:04:8e:05:b3:9d:c4:19:3b:6f:d9:cb:f3: ab:2d:1e:61:cd:53:b4:42:83:e4:13:95:d8:47:bf: 13:71:b2:36:aa:d3:c5:b0:4e:e8:51:3e:eb:36:fc: 7b:ff:ed:e6:25:27:5e:c7:89:e6:9b:70:7c:d1:d2: 30:2e:25:ca:61:05:61:a8:32:03:1c:97:f0:7b:56: f3:a9:60:74:c2:c5:36:80:b0:6a:ac:97:49:e3:4c: fd:6b:ad:fc:88:ef:13:2e:be:c5:9c:76:cc:11:05: 82:4d:42:d8:31:50:c1:54:17:6d:cd:8c:e1:e6:96: 78:33:26:6d:97:27:1c:73:0c:f1:05:c7:bd:2b:5d: 8d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:FB:83:9D:AF:89:44:37:71:1E:A6:88:2F:A8:DE:AE:B2:F9:76:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/daa4fef1-8408-30c9-a731-41665d183354.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl X509v3 Authority Key Identifier: keyid:CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer sbgp-ipAddrBlock: critical IPv4: 72.57.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:36:7f:af:21:88:24:aa:bf:40:8f:11:b1:9e:69:d2:07:e9: 17:a8:3c:7f:ab:4d:3f:4f:78:94:68:b5:c5:5f:a0:3b:a7:76: 1f:97:60:ce:c0:6e:01:a2:b1:f8:d4:f6:c5:3d:73:f7:c6:9a: 3c:d0:0b:c8:01:b1:81:18:ed:db:17:39:d1:0e:f6:28:8f:86: 61:4e:07:31:8e:1d:16:f7:e7:e8:be:92:f1:16:85:b7:92:5c: 1e:a8:8a:38:91:32:a6:40:3b:58:1f:e0:86:b9:c0:dd:64:49: e4:95:2c:2a:45:7d:4b:d8:45:5f:d5:c4:08:45:f5:b7:dc:a1: 0b:56:9c:cb:3f:4d:87:26:36:97:72:63:35:6d:20:d4:4f:c1: 62:10:59:48:01:11:7b:0d:0a:20:a9:8d:bc:de:ac:d9:d6:ae: 08:ed:12:77:4a:6a:ad:48:66:21:ea:f8:fc:e1:ef:05:29:1d: 85:84:11:53:b1:b5:29:94:14:63:93:ff:ad:9b:f2:99:b5:cc: fe:a3:9f:11:25:3a:38:bd:6d:aa:b2:3e:2b:d8:a7:cd:db:9d: 0c:82:02:ab:a3:72:78:3d:45:01:f4:34:6b:2e:bc:20:5c:6a: 9a:db:e1:9b:c2:57:54:47:7f:61:af:39:02:4a:9e:69:bc:b3: f6:1a:e1:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niHe6+I3fGWc7fmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY5Y2U4YmUtN2JiZS00MThiLWI3OGUtNDJkZTg5NDEz M2E1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODk0ZmNkZDQtMzU0MS00ODNjLWFhMTctZWVlNzRjNjY2MzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmcTLqWd80rYBHt+CL6Gnv9RbDHm+ikJBR7S 5i+LVQMXOBN9uyyAgxwuFZ4VW4+2fMTTwPnunjuRZMJ6R7YCbd/XZSPOtjazZmeO OWMlC358TFpK74n28slptvys5y6kMGM24Pe+dtfGVU/m5iL53pt90WhDAKOH9zoE jgWzncQZO2/Zy/OrLR5hzVO0QoPkE5XYR78TcbI2qtPFsE7oUT7rNvx7/+3mJSde x4nmm3B80dIwLiXKYQVhqDIDHJfwe1bzqWB0wsU2gLBqrJdJ40z9a638iO8TLr7F nHbMEQWCTULYMVDBVBdtzYzh5pZ4MyZtlycccwzxBce9K12NkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF37g52viUQ3cR6miC+o3q6y+XZKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZjlj ZThiZS03YmJlLTQxOGItYjc4ZS00MmRlODk0MTMzYTUvZGFhNGZlZjEtODQwOC0z MGM5LWE3MzEtNDE2NjVkMTgzMzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGY5Y2U4YmUtN2JiZS00MThiLWI3 OGUtNDJkZTg5NDEzM2E1LzBmOWNlOGJlLTdiYmUtNDE4Yi1iNzhlLTQyZGU4OTQx MzNhNS5jcmwwHwYDVR0jBBgwFoAUyou/QT84PnG2tRXF0Ztn1tRgssYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZjljZThiZS03YmJlLTQxOGItYjc4ZS00MmRl ODk0MTMzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSDkcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEA2f68hiCSqv0CPEbGeadIH6ReoPH+rTT9PeJRotcVfoDundh+XYM7A bgGisfjU9sU9c/fGmjzQC8gBsYEY7dsXOdEO9iiPhmFOBzGOHRb35+i+kvEWhbeS XB6oijiRMqZAO1gf4Ia5wN1kSeSVLCpFfUvYRV/VxAhF9bfcoQtWnMs/TYcmNpdy YzVtINRPwWIQWUgBEXsNCiCpjbzerNnWrgjtEndKaq1IZiHq+Pzh7wUpHYWEEVOx tSmUFGOT/62b8pm1zP6jnxElOji9baqyPivYp83bnQyCAqujcng9RQH0NGsuvCBc aprb4ZvCV1RHf2GvOQJKnmm8s/Ya4ds= -----END CERTIFICATE-----Generated at Thu Aug 20 21:58:20 2026 by rpki-client