$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/84e8903d-ec5b-3551-96bd-d419dbc97d32.roa File: 84e8903d-ec5b-3551-96bd-d419dbc97d32.roa (raw, json) Hash identifier: dJQo86WZst6OS2P/4OR7XLe0UFSgMeq3UlOwQvIYM/c= Subject key identifier: 46:C5:62:61:97:4E:B6:4F:04:BE:E9:0C:C7:24:FB:A6:D7:E1:DC:A1 Certificate issuer: /CN=71e68809-5436-4288-ad80-0df35fa0b945 Certificate serial: 010D0C9F4328584F94D34D95D74CA06A914A00C0 Authority key identifier: 10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/84e8903d-ec5b-3551-96bd-d419dbc97d32.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 14618 IP address blocks: 192.28.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:4d:95:d7:4c:a0:6a:91:4a:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71e68809-5436-4288-ad80-0df35fa0b945 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=ab9dc7b0-2781-4516-88d7-b17f32ed5353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5b:7b:09:16:d0:2f:ff:ed:4f:e1:51:9d:f9: 89:5b:79:65:39:8e:13:5d:32:2b:ca:3a:38:db:a2: 14:76:c1:84:46:dd:d8:d3:6c:5d:6c:52:ad:16:96: 30:86:6c:42:d0:ac:bd:8d:b1:af:45:28:6f:91:d0: 80:af:d3:55:89:ef:ee:40:ec:4e:95:df:2d:80:f9: 95:90:b0:d1:74:e6:48:38:c6:fb:4b:15:87:ef:75: d3:a0:ec:6e:8b:4a:d6:71:63:aa:59:ce:fb:7e:e2: 6a:0d:10:ba:cb:42:75:f2:1a:02:ab:0b:8b:5e:5f: 81:33:a7:22:61:01:06:c3:3d:04:30:ba:b2:8c:3e: 98:b7:f6:31:c4:b4:94:e6:54:f7:4f:b1:b3:df:19: 7c:48:01:86:43:a8:e8:f0:73:72:de:fd:c4:ad:5a: d1:8d:da:e8:f1:c5:53:cb:06:78:ca:a8:92:5a:cf: 21:f5:a4:36:da:9a:ea:91:19:67:eb:1d:dd:1f:ea: dd:7b:ad:e8:2d:02:5c:da:9d:f9:80:85:aa:17:d6: 45:cb:a3:4e:be:6a:9c:7c:1e:4a:4a:41:4f:2a:75: 07:e6:a9:22:ac:8b:67:7c:69:24:19:5a:81:80:88: df:72:7d:a1:29:78:2e:26:0d:d8:92:55:d8:6c:69: c9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C5:62:61:97:4E:B6:4F:04:BE:E9:0C:C7:24:FB:A6:D7:E1:DC:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/84e8903d-ec5b-3551-96bd-d419dbc97d32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl X509v3 Authority Key Identifier: keyid:10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer sbgp-ipAddrBlock: critical IPv4: 192.28.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:ce:50:f5:af:5c:2a:68:cd:9f:dc:fe:8e:3d:41:26:dd:5c: 81:7e:a6:0e:5a:22:d7:7c:fc:d7:b1:52:df:91:df:8c:42:d0: 66:56:f0:61:3d:ba:70:72:e5:e4:da:18:0d:6f:17:db:43:35: 4c:52:f5:fc:89:8a:5a:a4:7a:7b:2f:35:61:c9:36:27:77:82: 29:87:56:88:5a:db:ba:b6:aa:b9:7b:36:f6:d9:1f:69:c4:33: 7b:85:05:24:85:28:12:1c:83:ed:58:36:0b:6e:e7:a6:80:52: b4:b9:d1:84:cb:ee:e3:aa:81:f1:0a:c3:9f:5b:58:5d:5e:75: e7:c7:00:d7:e9:cd:db:f4:a0:88:2c:2c:28:47:de:2b:aa:8f: 42:bb:89:2b:0d:13:f8:de:3a:30:eb:87:6a:54:6c:05:58:a1: df:36:df:06:a3:d3:5d:d9:2c:51:e1:07:d4:27:03:cb:d1:34: 38:c2:60:f7:9d:97:25:6b:d2:e9:f7:f8:87:e2:f6:6a:9a:f1: 5f:df:8d:c7:42:a9:61:5d:53:a2:36:be:54:b3:6f:52:af:54: ae:ed:59:6f:63:57:45:3e:67:83:2e:bb:b9:43:d5:a9:0f:73: ad:fc:5c:d3:1f:4e:8a:51:e7:c6:5f:79:02:3e:58:c8:13:e9: a7:25:9c:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+U002V10ygapFKAMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlNjg4MDktNTQzNi00Mjg4LWFkODAtMGRmMzVmYTBi OTQ1MB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk YWI5ZGM3YjAtMjc4MS00NTE2LTg4ZDctYjE3ZjMyZWQ1MzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1t7CRbQL//tT+FRnfmJW3llOY4TXTIryjo4 26IUdsGERt3Y02xdbFKtFpYwhmxC0Ky9jbGvRShvkdCAr9NVie/uQOxOld8tgPmV kLDRdOZIOMb7SxWH73XToOxui0rWcWOqWc77fuJqDRC6y0J18hoCqwuLXl+BM6ci YQEGwz0EMLqyjD6Yt/YxxLSU5lT3T7Gz3xl8SAGGQ6jo8HNy3v3ErVrRjdro8cVT ywZ4yqiSWs8h9aQ22prqkRln6x3dH+rde63oLQJc2p35gIWqF9ZFy6NOvmqcfB5K SkFPKnUH5qkirItnfGkkGVqBgIjfcn2hKXguJg3YklXYbGnJeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbFYmGXTrZPBL7pDMck+6bX4dyhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2 ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYzNWZhMGI5NDUvODRlODkwM2QtZWM1Yi0z NTUxLTk2YmQtZDQxOWRiYzk3ZDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzFlNjg4MDktNTQzNi00Mjg4LWFk ODAtMGRmMzVmYTBiOTQ1LzcxZTY4ODA5LTU0MzYtNDI4OC1hZDgwLTBkZjM1ZmEw Yjk0NS5jcmwwHwYDVR0jBBgwFoAUEFAAX4YwKrkehfZQ9nLTMqW7VE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYz NWZhMGI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwBwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/OUPWvXCpozZ/c/o49QSbdXIF+pg5aItd8/NexUt+R34xC0GZW8GE9 unBy5eTaGA1vF9tDNUxS9fyJilqkensvNWHJNid3gimHVoha27q2qrl7NvbZH2nE M3uFBSSFKBIcg+1YNgtu56aAUrS50YTL7uOqgfEKw59bWF1edefHANfpzdv0oIgs LChH3iuqj0K7iSsNE/jeOjDrh2pUbAVYod823waj013ZLFHhB9QnA8vRNDjCYPed lyVr0un3+Ifi9mqa8V/fjcdCqWFdU6I2vlSzb1KvVK7tWW9jV0U+Z4Muu7lD1akP c638XNMfTopR58ZfeQI+WMgT6aclnN8= -----END CERTIFICATE-----Generated at Thu Oct 29 03:22:38 2026 by rpki-client