$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/3532f2d1-a384-31f4-8652-ffe606421630.roa File: 3532f2d1-a384-31f4-8652-ffe606421630.roa (raw, json) Hash identifier: 4vPs5+hjy1+07PTdJdTTeosEzvSaVUYtUnhrr9PrFRg= Subject key identifier: 63:A8:C6:2E:83:40:D8:81:B2:8D:09:C5:1B:5D:1F:A6:8C:69:82:D8 Certificate issuer: /CN=47c2a6e6-9681-4930-9d85-167ea7f611c2 Certificate serial: 010D0C9F4328584F49754C9268380F911D697280 Authority key identifier: 09:B2:1E:6E:92:30:BC:66:84:26:F0:0C:C7:DB:C5:91:5A:AA:E9:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/3532f2d1-a384-31f4-8652-ffe606421630.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19782 IP address blocks: 159.28.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/47c2a6e6-9681-4930-9d85-167ea7f611c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/47c2a6e6-9681-4930-9d85-167ea7f611c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:4c:92:68:38:0f:91:1d:69:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47c2a6e6-9681-4930-9d85-167ea7f611c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ee8b6f6d-8de4-49a7-a28e-6a914d8e27c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:48:7a:8f:03:d5:78:06:42:7d:85:e7:34:6e: 51:a0:fb:f3:1f:36:0a:53:dc:93:ca:ec:c7:a4:a5: be:d4:89:df:c0:e1:b6:04:aa:a2:b8:f5:a3:7b:32: 91:56:f6:a2:b2:f8:2c:9b:f3:19:c9:a0:20:60:19: e8:72:41:14:15:b3:fd:08:50:25:1b:ac:6c:5e:84: 11:64:c0:9a:03:68:db:94:d0:42:cb:38:85:51:0a: 7d:65:b6:ce:24:83:8b:04:97:25:2a:91:d0:a7:b9: bc:de:32:83:5a:88:54:0c:bc:a3:27:11:dd:af:79: a2:54:36:0b:bd:13:22:35:c1:5c:3a:6f:f9:09:fe: 61:c5:8a:1b:1d:59:5f:1d:1b:81:27:72:4d:95:af: c8:58:ee:12:da:96:31:ae:24:da:63:f4:c0:8a:39: e5:17:ad:fd:da:ae:d2:e3:1b:ac:ee:dc:c1:f5:80: 79:b0:be:39:5b:c6:ca:d3:cf:54:ee:40:85:45:03: 9f:1d:e9:30:6e:8e:94:ec:f8:a5:e6:18:24:9e:d1: 5d:ed:ce:29:1b:da:54:b7:5c:6e:22:46:54:0d:e1: c7:29:0b:ea:f2:0e:02:3d:1b:54:e8:5f:23:28:43: 40:3a:37:34:b7:d0:e0:8c:0f:d1:a4:31:67:23:b9: 52:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A8:C6:2E:83:40:D8:81:B2:8D:09:C5:1B:5D:1F:A6:8C:69:82:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/3532f2d1-a384-31f4-8652-ffe606421630.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/47c2a6e6-9681-4930-9d85-167ea7f611c2.crl X509v3 Authority Key Identifier: keyid:09:B2:1E:6E:92:30:BC:66:84:26:F0:0C:C7:DB:C5:91:5A:AA:E9:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2.cer sbgp-ipAddrBlock: critical IPv4: 159.28.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:84:ca:58:93:9f:4f:85:84:df:6e:3e:b0:7f:a9:e9:70:d9: 62:3b:6a:d9:34:60:ca:89:76:58:3f:a6:4f:99:39:65:d5:7d: eb:9d:59:b1:e9:28:03:63:59:a2:ba:dd:a7:74:8e:6b:7c:55: f2:4b:35:43:5d:99:36:a7:85:ff:30:13:fd:ab:72:9a:9f:14: 53:43:01:1c:19:c5:be:ca:ff:c2:e9:66:d6:f2:46:49:3c:18: 51:82:0b:5c:2e:72:87:5d:c0:57:3c:60:b4:24:d5:7f:9d:1b: 67:12:7e:da:2c:14:35:b0:8b:1c:dc:a2:00:17:3c:b4:8e:fb: 9e:76:32:3e:4d:b3:89:2d:b8:16:0a:22:5e:6b:28:86:d8:c8: 2d:cc:29:ca:98:32:8e:63:d8:b1:e8:fc:a0:f9:c7:27:6d:43: 37:b1:4d:57:e8:4e:a9:81:6e:b0:64:99:51:2c:9f:66:d7:e6: 09:05:9c:45:b5:ed:51:f9:6a:8d:21:ee:6f:56:ee:f4:72:09: 12:c0:15:25:28:6b:b7:25:73:db:e7:9f:4c:ce:82:0a:be:4d: ec:b4:57:75:e8:92:9e:f0:ea:1b:3d:00:a6:92:d3:f1:47:fb: 4f:4b:b9:6e:0a:5d:2a:7d:37:31:0f:23:60:74:ff:7e:ac:d2: 64:99:7a:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdUySaDgPkR1pcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdjMmE2ZTYtOTY4MS00OTMwLTlkODUtMTY3ZWE3ZjYx MWMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWU4YjZmNmQtOGRlNC00OWE3LWEyOGUtNmE5MTRkOGUyN2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0h6jwPVeAZCfYXnNG5RoPvzHzYKU9yTyuzH pKW+1InfwOG2BKqiuPWjezKRVvaisvgsm/MZyaAgYBnockEUFbP9CFAlG6xsXoQR ZMCaA2jblNBCyziFUQp9ZbbOJIOLBJclKpHQp7m83jKDWohUDLyjJxHdr3miVDYL vRMiNcFcOm/5Cf5hxYobHVlfHRuBJ3JNla/IWO4S2pYxriTaY/TAijnlF6392q7S 4xus7tzB9YB5sL45W8bK089U7kCFRQOfHekwbo6U7Pil5hgkntFd7c4pG9pUt1xu IkZUDeHHKQvq8g4CPRtU6F8jKENAOjc0t9DgjA/RpDFnI7lSswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOoxi6DQNiBso0JxRtdH6aMaYLYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80N2My YTZlNi05NjgxLTQ5MzAtOWQ4NS0xNjdlYTdmNjExYzIvMzUzMmYyZDEtYTM4NC0z MWY0LTg2NTItZmZlNjA2NDIxNjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDdjMmE2ZTYtOTY4MS00OTMwLTlk ODUtMTY3ZWE3ZjYxMWMyLzQ3YzJhNmU2LTk2ODEtNDkzMC05ZDg1LTE2N2VhN2Y2 MTFjMi5jcmwwHwYDVR0jBBgwFoAUCbIebpIwvGaEJvAMx9vFkVqq6SgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80N2MyYTZlNi05NjgxLTQ5MzAtOWQ4NS0xNjdl YTdmNjExYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGnxwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiEyliTn0+FhN9uPrB/qelw2WI7atk0YMqJdlg/pk+ZOWXVfeudWbHp KANjWaK63ad0jmt8VfJLNUNdmTanhf8wE/2rcpqfFFNDARwZxb7K/8LpZtbyRkk8 GFGCC1wucoddwFc8YLQk1X+dG2cSftosFDWwixzcogAXPLSO+552Mj5Ns4ktuBYK Il5rKIbYyC3MKcqYMo5j2LHo/KD5xydtQzexTVfoTqmBbrBkmVEsn2bX5gkFnEW1 7VH5ao0h7m9W7vRyCRLAFSUoa7clc9vnn0zOggq+Tey0V3Xokp7w6hs9AKaS0/FH +09LuW4KXSp9NzEPI2B0/36s0mSZepI= -----END CERTIFICATE-----Generated at Mon Sep 28 22:58:27 2026 by rpki-client