$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/06c9128a-9285-3afb-94e5-19a96b0f2a6f.roa File: 06c9128a-9285-3afb-94e5-19a96b0f2a6f.roa (raw, json) Hash identifier: XGfDIQ/rR9DKCVE4JqNxNcyhw+EAS8H1evTDYb6q62M= Subject key identifier: 79:6D:BC:DF:49:37:6C:20:76:78:13:F8:D8:37:5E:94:49:36:BA:17 Certificate issuer: /CN=28aae7db-2f51-4656-bba0-64f1d3ee3256 Certificate serial: 010D0C9F4328584EFE12273EECE0B55CE0C6E280 Authority key identifier: 8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/06c9128a-9285-3afb-94e5-19a96b0f2a6f.roa Signing time: Sat 29 Aug 2026 01:00:12 +0000 ROA not before: Sat 29 Aug 2026 01:00:12 +0000 ROA not after: Fri 27 Nov 2026 02:00:12 +0000 asID: 30158 IP address blocks: 199.189.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:12:27:3e:ec:e0:b5:5c:e0:c6:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aae7db-2f51-4656-bba0-64f1d3ee3256 Validity Not Before: Aug 29 01:00:12 2026 GMT Not After : Nov 27 02:00:12 2026 GMT Subject: CN=a7f63fb9-4000-44a4-828d-206f7adbae62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4f:99:db:c1:2f:cd:07:3e:06:6d:cd:e4:91: 9c:a7:95:b3:8c:14:eb:ea:86:68:06:aa:f5:09:62: 28:b8:fc:9a:1e:d2:3a:09:f4:42:d7:82:f2:b0:2e: d3:7b:a0:0a:2f:4c:a6:be:6e:23:28:12:b6:6f:c7: d7:d1:30:ca:7a:ae:7b:a9:ce:46:fe:d8:e1:e5:aa: bc:32:bf:7a:ae:23:8e:d5:38:1e:08:0b:25:cc:bf: 7e:71:7d:97:54:eb:66:45:37:8d:79:a6:ad:5f:00: a6:d2:d0:df:32:68:04:b1:c9:85:3e:94:35:43:8f: d0:cf:5c:03:9b:8d:6d:a7:5c:7c:2b:00:bb:6d:a7: 19:97:ed:cc:8b:6c:28:50:ab:e4:f1:e8:26:72:8f: 74:34:ae:eb:8f:7c:d7:29:3e:e1:84:83:33:a3:a0: 0b:97:e3:22:af:4a:0b:f2:27:f0:b1:04:96:45:1a: d5:d0:04:d9:e0:10:c5:3d:92:ef:d7:be:b4:f1:01: c8:19:eb:36:b5:9f:ac:60:fd:cd:6e:52:d1:50:6a: 3f:41:f1:ca:66:47:9b:b2:3f:17:a8:52:cb:a8:4d: 60:a8:ac:62:b6:87:c3:68:2c:57:d1:3a:59:0d:a2: e9:b7:39:d9:90:ca:e3:8c:f5:5b:3a:b4:78:a9:c4: 9f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6D:BC:DF:49:37:6C:20:76:78:13:F8:D8:37:5E:94:49:36:BA:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/06c9128a-9285-3afb-94e5-19a96b0f2a6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl X509v3 Authority Key Identifier: keyid:8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer sbgp-ipAddrBlock: critical IPv4: 199.189.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:54:3e:e3:83:4c:e5:c7:e5:31:ee:59:39:c3:93:12:5f:24: 35:b3:2b:30:ad:06:c9:33:48:32:9c:16:79:bc:98:d6:97:2b: 9e:e6:53:7c:3b:fc:05:b3:19:bd:dc:96:80:80:b2:b8:85:5b: 95:9a:3a:95:a7:53:d2:23:63:63:6f:b1:de:87:f3:c6:b4:cc: 15:19:04:4c:cd:6f:3a:ac:6f:47:23:d1:8f:1f:34:89:6f:7e: db:28:8b:2d:90:a2:4a:e6:b0:ba:ff:e6:9e:67:6e:a8:99:cd: 28:ea:9c:b1:06:3c:de:2b:c2:46:e3:09:8f:85:0d:70:34:f9: 6d:93:07:8f:96:32:c9:85:1e:f0:21:6e:8b:42:47:b3:7b:a1: 51:aa:69:ee:73:bb:f6:07:3d:0c:68:86:93:55:f9:e3:ed:4d: 25:a3:bd:b9:85:b1:cd:7c:87:9d:fb:88:70:1f:f1:c1:31:f2: ec:ea:97:15:0a:97:4e:ab:0d:b7:59:16:d5:e2:80:36:19:56: 4e:f6:9c:b4:63:bf:18:6e:c9:35:e3:82:73:6a:7b:43:bc:cd: 8c:ef:46:69:48:8b:61:28:f4:72:6a:fb:43:9a:42:61:46:41: f3:95:0f:27:ed:cf:49:37:42:2c:b2:a4:e8:49:c4:61:61:98: e3:b2:eb:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7+Eic+7OC1XODG4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhYWU3ZGItMmY1MS00NjU2LWJiYTAtNjRmMWQzZWUz MjU2MB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk YTdmNjNmYjktNDAwMC00NGE0LTgyOGQtMjA2ZjdhZGJhZTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnE+Z28EvzQc+Bm3N5JGcp5WzjBTr6oZoBqr1 CWIouPyaHtI6CfRC14LysC7Te6AKL0ymvm4jKBK2b8fX0TDKeq57qc5G/tjh5aq8 Mr96riOO1TgeCAslzL9+cX2XVOtmRTeNeaatXwCm0tDfMmgEscmFPpQ1Q4/Qz1wD m41tp1x8KwC7bacZl+3Mi2woUKvk8egmco90NK7rj3zXKT7hhIMzo6ALl+Mir0oL 8ifwsQSWRRrV0ATZ4BDFPZLv17608QHIGes2tZ+sYP3NblLRUGo/QfHKZkebsj8X qFLLqE1gqKxitofDaCxX0TpZDaLptznZkMrjjPVbOrR4qcSfbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHltvN9JN2wgdngT+Ng3XpRJNroXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yOGFh ZTdkYi0yZjUxLTQ2NTYtYmJhMC02NGYxZDNlZTMyNTYvMDZjOTEyOGEtOTI4NS0z YWZiLTk0ZTUtMTlhOTZiMGYyYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjhhYWU3ZGItMmY1MS00NjU2LWJi YTAtNjRmMWQzZWUzMjU2LzI4YWFlN2RiLTJmNTEtNDY1Ni1iYmEwLTY0ZjFkM2Vl MzI1Ni5jcmwwHwYDVR0jBBgwFoAUjODPFqyPb8zkYyft39+h+edvk48wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yOGFhZTdkYi0yZjUxLTQ2NTYtYmJhMC02NGYx ZDNlZTMyNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx73KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERUPuODTOXH5THuWTnDkxJfJDWzKzCtBskzSDKcFnm8mNaXK57mU3w7 /AWzGb3cloCAsriFW5WaOpWnU9IjY2Nvsd6H88a0zBUZBEzNbzqsb0cj0Y8fNIlv ftsoiy2QokrmsLr/5p5nbqiZzSjqnLEGPN4rwkbjCY+FDXA0+W2TB4+WMsmFHvAh botCR7N7oVGqae5zu/YHPQxohpNV+ePtTSWjvbmFsc18h537iHAf8cEx8uzqlxUK l06rDbdZFtXigDYZVk72nLRjvxhuyTXjgnNqe0O8zYzvRmlIi2Eo9HJq+0OaQmFG QfOVDyftz0k3QiyypOhJxGFhmOOy69I= -----END CERTIFICATE-----Generated at Tue Sep 22 04:23:00 2026 by rpki-client