$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/84e8903d-ec5b-3551-96bd-d419dbc97d32.roa File: 84e8903d-ec5b-3551-96bd-d419dbc97d32.roa (raw, json) Hash identifier: 1gLneYmb8E5ZUah5U2lRiItLFQRF2jQTZPtAu5KHiT8= Subject key identifier: 49:09:80:EB:17:8D:CC:D3:BF:16:69:22:AB:3F:1A:58:38:70:2C:BC Certificate issuer: /CN=71e68809-5436-4288-ad80-0df35fa0b945 Certificate serial: 010D0C9F4328584EF2E76D00B89BD16293346840 Authority key identifier: 10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/84e8903d-ec5b-3551-96bd-d419dbc97d32.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 14618 IP address blocks: 192.28.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:6d:00:b8:9b:d1:62:93:34:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71e68809-5436-4288-ad80-0df35fa0b945 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=277f65dc-1d31-4082-a028-3b43e7010f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ee:4b:bc:a3:50:26:4a:3c:fb:40:a9:db:79: 9a:fd:5d:8d:ca:50:1a:71:4c:07:4c:c5:b2:8b:8e: 4e:e9:cb:23:c8:3b:e8:75:c2:8b:48:10:8a:42:32: 2c:19:04:f2:89:1a:77:d0:32:87:5c:91:64:e6:85: 1d:44:c4:99:c2:f6:f3:2e:fa:ac:a4:02:88:58:42: 10:0d:d6:71:d0:08:ec:7f:aa:6d:76:6c:3e:72:11: cc:f0:23:f1:d3:3a:5f:38:7c:6f:43:91:e9:71:d2: 5b:61:a0:f2:4a:f8:ca:b3:63:12:6f:82:cf:c3:f2: 4f:f2:33:af:b9:2c:e3:5a:33:0d:11:6d:c8:ef:e6: d6:7b:78:0f:91:29:04:ce:8c:d0:b1:09:1f:76:60: 73:cf:92:37:b3:6a:f5:b5:b4:6a:3d:38:f7:87:e1: ae:30:0a:25:3a:5d:d4:dd:ee:c6:2d:66:bb:45:50: d8:e1:6c:ac:bf:62:3f:60:c7:b2:42:09:ad:ed:7a: 48:21:57:2c:f1:10:33:a9:6c:8c:ce:b4:ae:d9:7c: bf:0b:ac:6e:44:a4:2a:6e:df:bc:00:ac:1b:63:bc: 77:e0:b7:d1:0c:b3:ff:d8:70:35:33:54:3f:a0:9d: ab:6e:28:a3:24:46:84:82:54:d7:c6:00:d3:8a:c6: b8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:09:80:EB:17:8D:CC:D3:BF:16:69:22:AB:3F:1A:58:38:70:2C:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/84e8903d-ec5b-3551-96bd-d419dbc97d32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl X509v3 Authority Key Identifier: keyid:10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer sbgp-ipAddrBlock: critical IPv4: 192.28.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:f6:28:a6:e5:7b:ef:79:02:64:f4:b8:10:45:40:2c:98:ad: 41:ac:5f:d4:af:38:23:ba:ae:a3:79:5b:60:eb:1b:b5:57:fa: 21:71:1a:52:5a:bb:3f:48:db:f6:fb:c2:88:6d:c4:19:17:93: 8e:08:02:74:2e:48:5f:be:cd:9b:82:b9:f9:95:3f:18:b4:4b: d8:e8:38:d9:39:e0:0a:b3:88:11:00:1d:6c:b1:08:1f:b8:92: d6:3a:ad:63:6d:df:43:09:ed:2e:39:fe:5f:6f:dd:6a:ea:6b: 94:6c:ea:82:bc:59:f0:e5:6a:58:14:3a:01:63:d0:e1:d7:c7: cc:95:83:2f:3e:81:a1:c4:4f:99:a5:4f:f3:f5:31:d7:aa:a1: 71:13:11:a5:28:1d:67:af:38:b9:09:0f:6a:81:7a:9c:9f:25: e8:05:05:7d:28:2d:77:11:98:2a:70:d7:1d:38:9e:5a:1a:0b: db:50:81:9e:e7:cd:0f:f7:72:af:7a:ab:88:05:55:16:7d:6b: a4:74:a8:8d:a5:a7:c7:b4:6b:52:13:c1:0f:4d:f8:f2:cb:e6: 2f:a4:be:d0:1c:91:7f:92:cc:c5:09:b5:b5:b0:3a:f1:d6:93: b6:9d:00:30:57:40:70:7e:d4:52:cd:61:84:bf:32:e6:73:ae: f9:bb:68:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y520AuJvRYpM0aEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlNjg4MDktNTQzNi00Mjg4LWFkODAtMGRmMzVmYTBi OTQ1MB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk Mjc3ZjY1ZGMtMWQzMS00MDgyLWEwMjgtM2I0M2U3MDEwZjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu5LvKNQJko8+0Cp23ma/V2NylAacUwHTMWy i45O6csjyDvodcKLSBCKQjIsGQTyiRp30DKHXJFk5oUdRMSZwvbzLvqspAKIWEIQ DdZx0Ajsf6ptdmw+chHM8CPx0zpfOHxvQ5HpcdJbYaDySvjKs2MSb4LPw/JP8jOv uSzjWjMNEW3I7+bWe3gPkSkEzozQsQkfdmBzz5I3s2r1tbRqPTj3h+GuMAolOl3U 3e7GLWa7RVDY4Wysv2I/YMeyQgmt7XpIIVcs8RAzqWyMzrSu2Xy/C6xuRKQqbt+8 AKwbY7x34LfRDLP/2HA1M1Q/oJ2rbiijJEaEglTXxgDTisa4awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkJgOsXjczTvxZpIqs/Glg4cCy8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2 ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYzNWZhMGI5NDUvODRlODkwM2QtZWM1Yi0z NTUxLTk2YmQtZDQxOWRiYzk3ZDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzFlNjg4MDktNTQzNi00Mjg4LWFk ODAtMGRmMzVmYTBiOTQ1LzcxZTY4ODA5LTU0MzYtNDI4OC1hZDgwLTBkZjM1ZmEw Yjk0NS5jcmwwHwYDVR0jBBgwFoAUEFAAX4YwKrkehfZQ9nLTMqW7VE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYz NWZhMGI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwBwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGX2KKble+95AmT0uBBFQCyYrUGsX9SvOCO6rqN5W2DrG7VX+iFxGlJa uz9I2/b7wohtxBkXk44IAnQuSF++zZuCufmVPxi0S9joONk54AqziBEAHWyxCB+4 ktY6rWNt30MJ7S45/l9v3Wrqa5Rs6oK8WfDlalgUOgFj0OHXx8yVgy8+gaHET5ml T/P1MdeqoXETEaUoHWevOLkJD2qBepyfJegFBX0oLXcRmCpw1x04nloaC9tQgZ7n zQ/3cq96q4gFVRZ9a6R0qI2lp8e0a1ITwQ9N+PLL5i+kvtAckX+SzMUJtbWwOvHW k7adADBXQHB+1FLNYYS/MuZzrvm7aD0= -----END CERTIFICATE-----Generated at Sat Sep 5 07:15:13 2026 by rpki-client