$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/4f714fc6-281c-3084-8018-09ef764e7e1c.roa File: 4f714fc6-281c-3084-8018-09ef764e7e1c.roa (raw, json) Hash identifier: t5Ome4BoaLRSnfcl6D7jaicnqDfISt0VlPMrMk4smEA= Subject key identifier: DC:05:56:9A:1C:3D:92:8F:91:ED:A8:63:98:AC:1A:15:98:3A:D3:7E Certificate issuer: /CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Certificate serial: 010D0C9F4328584F655D6D9C7C6AD9345F0507E8 Authority key identifier: F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/4f714fc6-281c-3084-8018-09ef764e7e1c.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 22641 IP address blocks: 216.169.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:6d:9c:7c:6a:d9:34:5f:05:07:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=7aec92be-8e00-4d46-baf8-6ffbb9cd1591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:3c:c0:30:8a:24:a9:4c:65:60:ce:1f:5e:62: 10:25:ee:66:be:4c:da:fc:6b:f6:6e:03:8b:13:ed: 93:8e:64:7f:48:cf:37:53:69:5d:cd:fa:ba:05:5d: 54:4d:0b:81:d9:01:a9:4b:77:71:03:d8:ba:27:67: be:f3:56:e3:9b:1a:cd:95:36:55:0c:d7:70:59:82: 08:cb:01:d1:3e:8c:5f:06:f2:c3:1b:d7:32:aa:fd: 4b:8f:41:6d:1d:12:c6:25:70:bf:71:f4:09:65:14: c0:6f:50:92:40:25:91:73:2b:54:fd:7a:9c:8f:23: 2f:6c:0f:0d:35:d6:dd:86:67:24:72:34:3e:8a:7d: 7b:68:54:1b:30:91:c5:30:f3:cd:fc:12:0a:bb:18: f7:02:50:0a:bb:55:a4:56:dc:dc:c1:aa:b8:83:c3: ec:c0:07:6c:56:f8:00:cd:b2:43:3e:15:72:d4:ad: 59:5e:cb:15:dd:82:ae:32:40:dd:ac:4d:cc:8a:f0: 25:33:06:bd:01:56:fe:ef:68:17:4b:6c:9b:5a:4e: 29:04:4b:56:cb:a5:c0:1f:5d:2c:9c:dc:64:18:22: 1b:94:06:06:5b:1c:37:49:8f:79:a7:ca:ca:c9:99: 4e:a9:1b:60:a4:f7:8a:9e:49:56:7e:0f:0e:a2:51: 3f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:05:56:9A:1C:3D:92:8F:91:ED:A8:63:98:AC:1A:15:98:3A:D3:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/4f714fc6-281c-3084-8018-09ef764e7e1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl X509v3 Authority Key Identifier: keyid:F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer sbgp-ipAddrBlock: critical IPv4: 216.169.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:fb:16:49:16:02:fb:e6:b6:82:70:e9:99:b9:a2:27:e2:3f: c0:7f:3c:29:23:5b:d9:f5:c5:86:92:2e:92:fa:a3:a4:7c:3f: dc:e6:36:84:b4:a8:ca:bf:52:69:e2:d5:1a:38:04:30:60:32: e6:03:eb:45:c9:f4:16:89:a1:f1:9a:82:f8:7e:9c:d6:42:a5: 97:8f:44:5f:41:16:57:b1:f4:60:80:59:c9:65:54:d0:c6:9a: 50:2c:1a:3b:0c:c7:9e:1b:69:dd:21:a0:cd:42:c7:19:65:dc: a5:fe:41:ad:30:6a:a8:82:19:52:c5:8b:2f:bf:67:fa:36:c7: d2:a7:d0:69:a2:63:5f:68:af:0a:08:ee:49:67:33:25:f4:e8: 70:d8:e2:f9:8d:7e:44:d5:32:6c:bc:b3:2b:f8:d6:19:5a:94: 85:a4:30:d6:e2:e3:d2:c1:7b:85:25:87:83:6e:65:79:b8:15: b0:9e:89:1b:8f:c4:95:00:fb:72:29:ec:4a:48:e9:6e:d4:c2: 0f:24:73:3f:91:13:37:47:71:71:8b:a3:b3:c5:8b:2c:3c:9b: d1:82:97:e1:b5:91:a1:00:84:b2:34:cd:d9:ee:81:aa:0f:b4: 83:9d:33:13:78:8d:23:64:02:7a:1c:34:19:9b:93:df:21:ee: 75:eb:1e:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXW2cfGrZNF8FB+gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgwMzVlYTItYzFkNS00YjI5LWE4YzQtMWIzMTM3OWM4 YWZmMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk N2FlYzkyYmUtOGUwMC00ZDQ2LWJhZjgtNmZmYmI5Y2QxNTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7TzAMIokqUxlYM4fXmIQJe5mvkza/Gv2bgOL E+2TjmR/SM83U2ldzfq6BV1UTQuB2QGpS3dxA9i6J2e+81bjmxrNlTZVDNdwWYII ywHRPoxfBvLDG9cyqv1Lj0FtHRLGJXC/cfQJZRTAb1CSQCWRcytU/XqcjyMvbA8N NdbdhmckcjQ+in17aFQbMJHFMPPN/BIKuxj3AlAKu1WkVtzcwaq4g8PswAdsVvgA zbJDPhVy1K1ZXssV3YKuMkDdrE3MivAlMwa9AVb+72gXS2ybWk4pBEtWy6XAH10s nNxkGCIblAYGWxw3SY95p8rKyZlOqRtgpPeKnklWfg8OolE//QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwFVpocPZKPke2oY5isGhWYOtN+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yODAz NWVhMi1jMWQ1LTRiMjktYThjNC0xYjMxMzc5YzhhZmYvNGY3MTRmYzYtMjgxYy0z MDg0LTgwMTgtMDllZjc2NGU3ZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjgwMzVlYTItYzFkNS00YjI5LWE4 YzQtMWIzMTM3OWM4YWZmLzI4MDM1ZWEyLWMxZDUtNGIyOS1hOGM0LTFiMzEzNzlj OGFmZi5jcmwwHwYDVR0jBBgwFoAU8a/gxj9B23Vcsh798dH499Cp++AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yODAzNWVhMi1jMWQ1LTRiMjktYThjNC0xYjMx Mzc5YzhhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2KnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGT7FkkWAvvmtoJw6Zm5oifiP8B/PCkjW9n1xYaSLpL6o6R8P9zmNoS0 qMq/Umni1Ro4BDBgMuYD60XJ9BaJofGagvh+nNZCpZePRF9BFlex9GCAWcllVNDG mlAsGjsMx54bad0hoM1Cxxll3KX+Qa0waqiCGVLFiy+/Z/o2x9Kn0GmiY19orwoI 7klnMyX06HDY4vmNfkTVMmy8syv41hlalIWkMNbi49LBe4Ulh4NuZXm4FbCeiRuP xJUA+3Ip7EpI6W7Uwg8kcz+REzdHcXGLo7PFiyw8m9GCl+G1kaEAhLI0zdnugaoP tIOdMxN4jSNkAnocNBmbk98h7nXrHu0= -----END CERTIFICATE-----Generated at Sun Oct 11 01:04:58 2026 by rpki-client