$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/8a5e1d0a-c120-3c92-a25f-1220e11a7ae8.roa File: 8a5e1d0a-c120-3c92-a25f-1220e11a7ae8.roa (raw, json) Hash identifier: lNe0Ezk5r9qfT8UE6j0OrCQX9prhVNV3387E/x+pjpw= Subject key identifier: 76:A7:D6:D3:4E:3E:2F:5E:49:24:FB:36:E6:8E:4B:07:5B:FE:1B:4E Certificate issuer: /CN=971a94fb-9c36-412b-ae91-2ddb520de93f Certificate serial: 010D0C9F4328584DD625BB10AB6B66104290AD80 Authority key identifier: E0:27:CC:9E:09:06:01:0F:82:20:10:EE:4A:73:6C:44:EB:86:A5:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/8a5e1d0a-c120-3c92-a25f-1220e11a7ae8.roa Signing time: Fri 15 May 2026 01:00:24 +0000 ROA not before: Fri 15 May 2026 01:00:24 +0000 ROA not after: Thu 13 Aug 2026 01:00:24 +0000 asID: 400729 IP address blocks: 192.157.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/971a94fb-9c36-412b-ae91-2ddb520de93f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/971a94fb-9c36-412b-ae91-2ddb520de93f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d6:25:bb:10:ab:6b:66:10:42:90:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=971a94fb-9c36-412b-ae91-2ddb520de93f Validity Not Before: May 15 01:00:24 2026 GMT Not After : Aug 13 01:00:24 2026 GMT Subject: CN=f307ddab-e511-466e-a42b-e368025acbdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e3:88:c8:d7:6e:93:dd:46:26:ff:70:cc:b6: 81:5f:34:8d:86:9a:3f:f7:84:b0:dc:8d:95:d1:d2: 6b:48:60:c5:5e:18:20:0f:00:62:62:56:33:7d:06: b8:9b:a1:0d:ec:6a:1a:74:9b:52:e7:81:3d:f1:4e: 0d:0b:24:63:94:17:80:71:78:cf:bd:b0:6b:37:f8: ef:67:0c:69:90:ae:6f:b6:ce:9c:ca:0a:52:dc:e7: c1:5a:15:b2:ad:c8:df:78:6e:a3:48:58:fb:f6:80: b4:c7:c3:df:75:b2:a2:80:65:64:3c:74:03:a7:8d: 16:1b:46:bc:e4:0e:71:d1:d3:83:15:cd:86:a3:7b: f8:ba:41:94:20:55:1c:f2:41:1a:19:0b:b4:f4:b8: fe:e5:34:dc:1c:6d:fe:e1:d6:00:cf:1c:f8:e4:21: b1:15:5d:47:cb:43:26:46:27:55:ab:b1:8e:f3:6f: e4:fc:79:8f:e3:5f:0f:10:a9:4a:f6:cc:d9:19:a6: 76:db:e2:02:05:6e:56:70:25:ec:bd:26:46:4e:44: 22:49:f9:12:b8:f6:dc:6f:24:56:a4:5c:03:c0:7c: ee:9e:6e:de:d7:dc:57:82:e5:26:c4:db:f8:71:bc: e3:37:0c:d7:fc:09:2f:e7:61:82:04:49:f3:6a:bb: 77:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A7:D6:D3:4E:3E:2F:5E:49:24:FB:36:E6:8E:4B:07:5B:FE:1B:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/8a5e1d0a-c120-3c92-a25f-1220e11a7ae8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/971a94fb-9c36-412b-ae91-2ddb520de93f.crl X509v3 Authority Key Identifier: keyid:E0:27:CC:9E:09:06:01:0F:82:20:10:EE:4A:73:6C:44:EB:86:A5:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f.cer sbgp-ipAddrBlock: critical IPv4: 192.157.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:68:f5:cf:26:a7:94:2a:d2:67:53:ad:30:0f:1c:5f:6c:fe: 63:03:cb:d8:25:12:4d:d4:ae:cd:27:59:1a:33:6c:17:54:b1: a0:cf:60:8f:70:99:e4:0f:ad:42:ef:30:ff:34:79:98:c2:13: 9d:56:c1:ae:05:b2:c6:59:d8:17:42:94:de:4b:8f:f0:1f:a7: d8:d9:54:18:09:f8:0f:68:e7:cb:9d:fc:0a:fa:cd:94:af:07: dc:2f:65:cc:4f:f2:95:5a:4f:e6:9b:49:ad:94:20:01:d7:46: 5e:ec:98:d2:90:55:03:21:98:18:51:72:44:7e:f0:4c:cc:44: 19:44:da:c1:6d:2d:f1:f7:9e:bf:88:8e:12:f4:6c:ef:1f:0a: 02:7d:95:95:4d:dc:2a:92:e0:f5:53:ed:04:ca:b9:80:ad:a0: 5f:31:b9:29:aa:88:55:1f:45:9b:68:9b:e0:39:dd:f4:b1:a4: 8b:eb:e6:68:c4:5a:1c:46:f1:19:4b:71:ed:01:70:d3:d4:48: 12:1d:ae:e6:27:30:eb:c9:f1:de:64:12:4f:6a:77:0b:a9:ef: b6:b6:29:c4:e7:1a:8d:62:bb:c1:5e:e1:13:cd:ff:08:76:e3: 03:9e:57:71:2e:6c:4e:4f:6b:e6:ee:c5:16:59:5a:ed:a2:f0: 3d:dd:46:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3WJbsQq2tmEEKQrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTcxYTk0ZmItOWMzNi00MTJiLWFlOTEtMmRkYjUyMGRl OTNmMB4XDTI2MDUxNTAxMDAyNFoXDTI2MDgxMzAxMDAyNFowLzEtMCsGA1UEAxMk ZjMwN2RkYWItZTUxMS00NjZlLWE0MmItZTM2ODAyNWFjYmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuOIyNduk91GJv9wzLaBXzSNhpo/94Sw3I2V 0dJrSGDFXhggDwBiYlYzfQa4m6EN7GoadJtS54E98U4NCyRjlBeAcXjPvbBrN/jv ZwxpkK5vts6cygpS3OfBWhWyrcjfeG6jSFj79oC0x8PfdbKigGVkPHQDp40WG0a8 5A5x0dODFc2Go3v4ukGUIFUc8kEaGQu09Lj+5TTcHG3+4dYAzxz45CGxFV1Hy0Mm RidVq7GO82/k/HmP418PEKlK9szZGaZ22+ICBW5WcCXsvSZGTkQiSfkSuPbcbyRW pFwDwHzunm7e19xXguUmxNv4cbzjNwzX/Akv52GCBEnzart3bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHan1tNOPi9eSST7NuaOSwdb/htOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85NzFh OTRmYi05YzM2LTQxMmItYWU5MS0yZGRiNTIwZGU5M2YvOGE1ZTFkMGEtYzEyMC0z YzkyLWEyNWYtMTIyMGUxMWE3YWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTcxYTk0ZmItOWMzNi00MTJiLWFl OTEtMmRkYjUyMGRlOTNmLzk3MWE5NGZiLTljMzYtNDEyYi1hZTkxLTJkZGI1MjBk ZTkzZi5jcmwwHwYDVR0jBBgwFoAU4CfMngkGAQ+CIBDuSnNsROuGpe0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85NzFhOTRmYi05YzM2LTQxMmItYWU5MS0yZGRi NTIwZGU5M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ0cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpo9c8mp5Qq0mdTrTAPHF9s/mMDy9glEk3Urs0nWRozbBdUsaDPYI9w meQPrULvMP80eZjCE51Wwa4FssZZ2BdClN5Lj/Afp9jZVBgJ+A9o58ud/Ar6zZSv B9wvZcxP8pVaT+abSa2UIAHXRl7smNKQVQMhmBhRckR+8EzMRBlE2sFtLfH3nr+I jhL0bO8fCgJ9lZVN3CqS4PVT7QTKuYCtoF8xuSmqiFUfRZtom+A53fSxpIvr5mjE WhxG8RlLce0BcNPUSBIdruYnMOvJ8d5kEk9qdwup77a2KcTnGo1iu8Fe4RPN/wh2 4wOeV3EubE5Pa+buxRZZWu2i8D3dRpo= -----END CERTIFICATE-----Generated at Fri May 22 18:30:20 2026 by rpki-client