$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/d94c666c-ab56-3b94-8d3a-1c41efa3490f.roa File: d94c666c-ab56-3b94-8d3a-1c41efa3490f.roa (raw, json) Hash identifier: Ba936wG7lrC0EBoklUtNpSXRcnnF51ZU62NHqTn8Xq8= Subject key identifier: 28:4D:B6:09:12:DA:2C:19:2F:9B:C4:7C:F9:C2:8E:6B:CC:02:96:32 Certificate issuer: /CN=71e68809-5436-4288-ad80-0df35fa0b945 Certificate serial: 010D0C9F4328584EA796F6EEECC5FCA9160A0B00 Authority key identifier: 10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/d94c666c-ab56-3b94-8d3a-1c41efa3490f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 14618 IP address blocks: 192.28.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:f6:ee:ec:c5:fc:a9:16:0a:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71e68809-5436-4288-ad80-0df35fa0b945 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ed43d56f-4572-4997-a4eb-294d6b057f1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fa:e8:e0:e1:ee:f3:5d:50:0e:00:64:51:46: c8:bf:65:a6:8f:58:20:a9:1c:f0:f5:56:1d:d8:63: 03:63:8c:87:23:f5:62:6b:3b:b7:fd:a1:88:ea:f4: de:5c:5c:3e:05:5c:53:87:4a:62:ab:ae:39:f8:9e: d4:cd:fc:d4:90:69:0b:a6:36:2a:b6:c7:59:4c:e4: ea:79:54:c3:d0:c6:42:88:26:f3:84:f6:92:11:8b: 0c:93:92:33:6a:da:fd:60:7d:8f:b4:17:ea:c3:79: e2:a0:53:af:07:ba:85:05:34:98:57:fe:6c:6b:1b: 17:5d:8c:8c:ef:18:9f:5e:28:46:fb:7a:e6:86:51: fb:40:5f:a2:5a:03:fd:f9:65:7d:62:91:4e:76:b1: 79:d7:73:75:9f:2b:02:fd:0d:e0:e9:7b:3a:9a:42: 97:f9:f6:17:e1:b9:4f:4d:cd:e3:69:96:73:79:16: 2b:72:58:5a:ca:f0:e6:99:2a:31:e0:8a:ec:e9:67: 0d:4b:07:c0:95:6c:94:ea:40:ff:fb:8c:77:a6:ae: 7b:17:8c:46:dc:1b:73:b5:d7:2e:bd:fa:fc:86:6c: 8c:61:52:5b:80:7f:7a:7d:bf:57:70:6b:ab:f2:03: 6b:dc:41:e9:2e:f8:25:d9:f2:27:6c:fd:49:60:56: 78:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:4D:B6:09:12:DA:2C:19:2F:9B:C4:7C:F9:C2:8E:6B:CC:02:96:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/d94c666c-ab56-3b94-8d3a-1c41efa3490f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl X509v3 Authority Key Identifier: keyid:10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer sbgp-ipAddrBlock: critical IPv4: 192.28.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:76:66:a7:4f:52:1b:d3:41:f4:76:d1:f6:00:02:c0:f9:73: a1:0c:3f:f9:66:63:c5:4d:90:e8:a8:2e:e9:c0:ee:d3:d6:8e: b6:4c:7e:ad:93:50:40:53:6d:0f:ed:e2:48:7e:ef:63:b9:82: 7c:9d:60:e0:76:7c:dd:bb:3c:2f:ee:c4:fa:d3:da:79:a8:55: 28:77:bf:bd:e6:76:57:b8:4d:7e:0b:18:7f:35:1a:4f:18:83: 63:f3:06:62:06:7a:24:f3:54:57:a4:7f:71:45:ef:08:d3:34: 4f:80:9a:28:3a:9c:a6:bd:1d:6e:15:f8:a9:49:cc:92:43:62: c6:50:b9:a8:ed:ec:4e:22:b8:41:06:24:89:77:eb:18:f8:08: 3c:5e:dd:8d:61:cd:00:57:be:8e:f0:62:9a:30:c1:2b:71:81: 84:3b:35:1f:97:00:ff:93:d2:a1:6b:bf:43:80:3c:84:2a:cd: ea:0a:3a:8a:65:53:94:62:1b:05:24:e6:bd:72:76:73:e7:28: b8:1c:4f:0d:f7:9e:6f:44:8c:09:36:06:05:14:1d:89:88:d5: 83:22:eb:a3:60:40:8c:44:d5:49:f5:95:c3:c5:1a:c7:a7:e7: 7b:12:7e:72:63:aa:63:74:8b:6a:9c:eb:2e:7d:e9:a3:eb:2c: 85:72:44:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlvbu7MX8qRYKCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlNjg4MDktNTQzNi00Mjg4LWFkODAtMGRmMzVmYTBi OTQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZWQ0M2Q1NmYtNDU3Mi00OTk3LWE0ZWItMjk0ZDZiMDU3ZjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/ro4OHu811QDgBkUUbIv2Wmj1ggqRzw9VYd 2GMDY4yHI/Viazu3/aGI6vTeXFw+BVxTh0piq645+J7UzfzUkGkLpjYqtsdZTOTq eVTD0MZCiCbzhPaSEYsMk5Izatr9YH2PtBfqw3nioFOvB7qFBTSYV/5saxsXXYyM 7xifXihG+3rmhlH7QF+iWgP9+WV9YpFOdrF513N1nysC/Q3g6Xs6mkKX+fYX4blP Tc3jaZZzeRYrclhayvDmmSox4Irs6WcNSwfAlWyU6kD/+4x3pq57F4xG3Btztdcu vfr8hmyMYVJbgH96fb9XcGur8gNr3EHpLvgl2fInbP1JYFZ42QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChNtgkS2iwZL5vEfPnCjmvMApYyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2 ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYzNWZhMGI5NDUvZDk0YzY2NmMtYWI1Ni0z Yjk0LThkM2EtMWM0MWVmYTM0OTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzFlNjg4MDktNTQzNi00Mjg4LWFk ODAtMGRmMzVmYTBiOTQ1LzcxZTY4ODA5LTU0MzYtNDI4OC1hZDgwLTBkZjM1ZmEw Yjk0NS5jcmwwHwYDVR0jBBgwFoAUEFAAX4YwKrkehfZQ9nLTMqW7VE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYz NWZhMGI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJ2ZqdPUhvTQfR20fYAAsD5c6EMP/lmY8VNkOioLunA7tPWjrZMfq2T UEBTbQ/t4kh+72O5gnydYOB2fN27PC/uxPrT2nmoVSh3v73mdle4TX4LGH81Gk8Y g2PzBmIGeiTzVFekf3FF7wjTNE+Amig6nKa9HW4V+KlJzJJDYsZQuajt7E4iuEEG JIl36xj4CDxe3Y1hzQBXvo7wYpowwStxgYQ7NR+XAP+T0qFrv0OAPIQqzeoKOopl U5RiGwUk5r1ydnPnKLgcTw33nm9EjAk2BgUUHYmI1YMi66NgQIxE1Un1lcPFGsen 53sSfnJjqmN0i2qc6y596aPrLIVyRDQ= -----END CERTIFICATE-----Generated at Sat Sep 5 09:41:13 2026 by rpki-client