$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/28359768-8609-3330-b158-3935a9eb2526.roa File: 28359768-8609-3330-b158-3935a9eb2526.roa (raw, json) Hash identifier: /D+jN1S2Z+Qhmh97gBAKPMDWLHElgDDWJDuBjisIPU8= Subject key identifier: 00:C3:F7:14:DE:8A:33:CC:85:E1:FE:52:A6:AD:0A:5B:A7:57:93:F1 Certificate issuer: /CN=d41e310e-2b6f-4f90-9f70-bc303b64a823 Certificate serial: 010D0C9F4328584E5B432D2F478B1CABBC530100 Authority key identifier: D7:1F:02:7D:0E:D3:31:BA:F5:C5:80:CE:B4:D2:95:31:07:11:BA:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/28359768-8609-3330-b158-3935a9eb2526.roa Signing time: Wed 01 Jul 2026 17:22:25 +0000 ROA not before: Wed 01 Jul 2026 17:22:25 +0000 ROA not after: Tue 29 Sep 2026 17:22:25 +0000 asID: 401815 IP address blocks: 216.21.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5b:43:2d:2f:47:8b:1c:ab:bc:53:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d41e310e-2b6f-4f90-9f70-bc303b64a823 Validity Not Before: Jul 1 17:22:25 2026 GMT Not After : Sep 29 17:22:25 2026 GMT Subject: CN=87b88529-44fb-4428-b9a2-1e58c73d80b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ba:75:fd:27:3e:00:2e:c5:44:b2:cf:b7:cf: ca:71:b5:4f:95:4e:df:01:ad:57:b3:c2:54:0e:2f: 5e:9f:34:54:12:12:ed:17:dd:51:23:fb:33:f3:01: 8a:f6:fc:18:29:88:02:98:b8:83:aa:89:f6:f7:bd: fc:71:d4:d5:48:83:1a:21:60:65:19:03:ed:66:a8: 52:1b:ae:56:1b:a3:14:16:fe:1a:8a:60:b4:fa:12: a2:c5:ef:19:ee:70:c6:9d:50:dc:75:d5:90:5b:ef: 00:f3:50:d2:93:0a:1b:aa:71:25:c9:f0:b4:de:b4: ac:5f:b4:bd:fc:16:09:02:ae:78:00:43:81:19:ac: eb:50:6c:7b:f3:2c:4d:7c:cd:a2:ec:e6:8f:f9:89: 3a:71:4e:e6:96:bb:17:7a:3c:ab:d1:14:54:9b:7c: ce:31:86:f6:f8:88:f4:3d:62:45:79:58:39:15:01: 52:bb:01:21:e4:4b:f1:a7:5b:20:79:c0:c8:11:bd: c3:87:37:a9:0d:3c:08:f8:30:16:a5:88:f3:77:72: 7b:a5:2a:62:71:b6:46:2e:b4:2c:8e:52:67:39:21: 16:09:ce:61:07:76:50:3c:16:8d:da:4c:8e:e1:59: 9a:5c:2d:db:7f:77:f6:ac:f5:fe:8f:69:16:56:8c: 40:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C3:F7:14:DE:8A:33:CC:85:E1:FE:52:A6:AD:0A:5B:A7:57:93:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/28359768-8609-3330-b158-3935a9eb2526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.crl X509v3 Authority Key Identifier: keyid:D7:1F:02:7D:0E:D3:31:BA:F5:C5:80:CE:B4:D2:95:31:07:11:BA:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823.cer sbgp-ipAddrBlock: critical IPv4: 216.21.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:76:51:da:34:26:fb:40:06:81:ad:3c:17:c3:74:e9:73:1d: ce:c2:45:98:9d:a6:c2:d6:8f:6c:cc:8d:0f:a1:ad:55:c1:ce: ff:6f:90:7f:7f:0c:f4:b3:69:96:93:0a:ac:84:dc:2e:77:35: c7:5b:9a:c4:bc:ca:ff:ec:aa:8a:3e:7e:78:75:ca:e8:97:ae: df:29:85:54:00:fb:f1:74:34:6d:cb:f2:b8:a3:5f:9b:02:ba: 40:4b:57:fd:b6:1c:5f:7e:0f:96:0b:91:ec:4d:46:7d:b8:3e: 03:bd:d3:42:47:24:2e:b5:94:9a:e8:4a:97:75:e3:59:63:db: 6a:71:34:1f:bc:16:2a:54:54:2d:fc:97:e4:1a:3c:5c:ab:70: af:d4:14:3e:18:0b:25:6e:61:4f:e8:8f:a6:36:2b:37:b4:30: b4:36:5e:c8:6e:14:1d:f2:ab:87:00:26:20:59:ae:dc:3b:8a: 09:17:2a:06:77:7c:3b:f8:18:dc:df:33:23:75:60:df:ad:8b: 0e:55:e6:6b:68:96:92:6e:a8:35:4f:d3:ea:14:f5:74:ed:2a: 6d:83:df:f7:3a:d7:86:8a:9e:95:3b:f1:7a:15:ac:4d:49:0a: ae:b4:1a:76:f2:e6:c4:ba:4c:91:e7:21:45:dc:10:2a:8c:5e: 00:81:de:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5bQy0vR4scq7xTAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQxZTMxMGUtMmI2Zi00ZjkwLTlmNzAtYmMzMDNiNjRh ODIzMB4XDTI2MDcwMTE3MjIyNVoXDTI2MDkyOTE3MjIyNVowLzEtMCsGA1UEAxMk ODdiODg1MjktNDRmYi00NDI4LWI5YTItMWU1OGM3M2Q4MGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7p1/Sc+AC7FRLLPt8/KcbVPlU7fAa1Xs8JU Di9enzRUEhLtF91RI/sz8wGK9vwYKYgCmLiDqon29738cdTVSIMaIWBlGQPtZqhS G65WG6MUFv4aimC0+hKixe8Z7nDGnVDcddWQW+8A81DSkwobqnElyfC03rSsX7S9 /BYJAq54AEOBGazrUGx78yxNfM2i7OaP+Yk6cU7mlrsXejyr0RRUm3zOMYb2+Ij0 PWJFeVg5FQFSuwEh5Evxp1sgecDIEb3DhzepDTwI+DAWpYjzd3J7pSpicbZGLrQs jlJnOSEWCc5hB3ZQPBaN2kyO4VmaXC3bf3f2rPX+j2kWVoxA0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADD9xTeijPMheH+UqatClunV5PxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kNDFl MzEwZS0yYjZmLTRmOTAtOWY3MC1iYzMwM2I2NGE4MjMvMjgzNTk3NjgtODYwOS0z MzMwLWIxNTgtMzkzNWE5ZWIyNTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDQxZTMxMGUtMmI2Zi00ZjkwLTlm NzAtYmMzMDNiNjRhODIzL2Q0MWUzMTBlLTJiNmYtNGY5MC05ZjcwLWJjMzAzYjY0 YTgyMy5jcmwwHwYDVR0jBBgwFoAU1x8CfQ7TMbr1xYDOtNKVMQcRuiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kNDFlMzEwZS0yYjZmLTRmOTAtOWY3MC1iYzMw M2I2NGE4MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BXyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABB2Udo0JvtABoGtPBfDdOlzHc7CRZidpsLWj2zMjQ+hrVXBzv9vkH9/ DPSzaZaTCqyE3C53NcdbmsS8yv/sqoo+fnh1yuiXrt8phVQA+/F0NG3L8rijX5sC ukBLV/22HF9+D5YLkexNRn24PgO900JHJC61lJroSpd141lj22pxNB+8FipUVC38 l+QaPFyrcK/UFD4YCyVuYU/oj6Y2Kze0MLQ2XshuFB3yq4cAJiBZrtw7igkXKgZ3 fDv4GNzfMyN1YN+tiw5V5mtolpJuqDVP0+oU9XTtKm2D3/c614aKnpU78XoVrE1J Cq60Gnby5sS6TJHnIUXcECqMXgCB3gQ= -----END CERTIFICATE-----Generated at Mon Jul 6 20:08:28 2026 by rpki-client