$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/9fd81086-d2ab-3b69-873f-c043d5f1123e.roa File: 9fd81086-d2ab-3b69-873f-c043d5f1123e.roa (raw, json) Hash identifier: nH7bIpQSck0B0SQLxaZZvddC7HMPDN5aJ71LIdMVb3g= Subject key identifier: 6C:22:41:81:CE:6E:49:CE:84:6D:37:C2:60:47:0E:B3:7A:00:A6:B2 Certificate issuer: /CN=576c64a5-3cd2-44d5-80c3-626ccc84e087 Certificate serial: 010D0C9F4328584F2C225CB7CED17BE501D91200 Authority key identifier: 93:40:CE:B6:71:96:DA:3E:FD:16:0C:87:23:2E:E0:A8:3B:C7:1C:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/9fd81086-d2ab-3b69-873f-c043d5f1123e.roa Signing time: Mon 14 Sep 2026 13:00:12 +0000 ROA not before: Mon 14 Sep 2026 13:00:12 +0000 ROA not after: Sun 13 Dec 2026 14:00:12 +0000 asID: 14497 IP address blocks: 199.168.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/576c64a5-3cd2-44d5-80c3-626ccc84e087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/576c64a5-3cd2-44d5-80c3-626ccc84e087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2c:22:5c:b7:ce:d1:7b:e5:01:d9:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=576c64a5-3cd2-44d5-80c3-626ccc84e087 Validity Not Before: Sep 14 13:00:12 2026 GMT Not After : Dec 13 14:00:12 2026 GMT Subject: CN=f73f2ddc-7983-41c8-b293-74edb7a11ac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f1:e9:36:eb:e2:ac:3e:d5:72:c5:8b:30:c2: 8c:d2:1a:8e:2a:1c:a8:fe:73:bf:61:86:5f:06:57: 21:98:c5:02:f2:1b:30:1d:0d:fa:67:54:4f:d4:15: 6f:50:49:8a:4e:16:dc:2f:32:a3:b4:08:61:5a:05: 8a:8b:68:12:d4:c8:25:0e:f6:d7:da:bf:4d:f3:df: 08:66:ea:7a:f8:a4:e7:52:99:cb:b7:80:65:54:75: fc:dc:3c:9c:ce:79:6c:de:c0:b3:df:d2:d2:cd:21: c0:67:2e:d7:01:2c:7f:3d:0a:c4:a8:2a:2c:d0:44: f4:a4:db:c0:8b:f9:15:64:6a:66:04:63:95:61:5f: 35:35:79:e1:bb:f3:fd:c6:36:94:4c:b7:b2:c8:34: 84:08:91:31:6c:25:c1:38:33:9f:e6:94:85:a5:10: 01:b9:f8:8f:dc:3b:0a:5f:f0:74:36:65:89:9f:11: 06:a1:c8:b5:65:cf:5d:e6:93:0d:02:22:91:7c:6d: 78:96:1e:44:67:70:a0:df:11:b8:46:a4:82:92:33: ce:b2:c6:4c:75:da:67:ce:d0:6d:0c:01:fb:be:b3: 83:d7:84:ea:5a:ac:d5:ab:e9:04:ed:1c:c9:b2:41: 3c:a1:f0:e9:c1:c0:e2:2c:2f:98:1f:d6:90:3e:40: d9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:22:41:81:CE:6E:49:CE:84:6D:37:C2:60:47:0E:B3:7A:00:A6:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/9fd81086-d2ab-3b69-873f-c043d5f1123e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/576c64a5-3cd2-44d5-80c3-626ccc84e087.crl X509v3 Authority Key Identifier: keyid:93:40:CE:B6:71:96:DA:3E:FD:16:0C:87:23:2E:E0:A8:3B:C7:1C:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087.cer sbgp-ipAddrBlock: critical IPv4: 199.168.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:19:69:1a:5e:b8:bc:08:4f:0a:b9:bb:12:10:36:cc:38:85: 78:2b:ed:10:9d:e5:95:79:25:f4:b0:e0:4b:b3:2d:73:eb:4d: dc:b4:f2:91:f9:26:e6:95:4d:cf:af:5a:83:0f:2c:a6:96:c4: de:8b:60:01:df:67:23:7e:e1:a3:83:5b:39:1a:ad:8a:aa:6a: d3:71:45:8f:af:2b:a9:85:f6:1d:4d:4b:6d:ef:fe:9c:75:48: f9:53:aa:53:fa:55:84:bc:27:5e:3c:8d:57:12:00:26:62:9f: fa:1f:33:fb:1c:39:a7:30:78:d7:55:51:06:6b:7a:21:b1:97: 46:49:db:37:e3:51:eb:f4:55:21:0b:2f:4d:74:99:55:d1:cd: 29:bd:0f:82:48:0a:52:d7:a5:e6:75:91:11:91:8e:e7:b1:e8: e0:43:ea:1f:ff:9e:48:0b:5d:92:5f:bc:24:54:85:ac:fd:19: b6:32:a5:97:9d:b3:c3:c8:7c:42:c8:99:c8:4a:fe:9a:23:36: 7b:6d:dc:42:a8:6b:4e:ea:46:3b:ca:31:73:1c:d7:e1:42:82: ed:ff:64:56:9f:45:65:08:40:5e:3c:66:d9:81:97:38:34:53: 0b:3a:98:7f:e2:15:d4:c0:d2:82:c0:2c:60:e7:7f:72:f1:f6: b8:6c:05:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8sIly3ztF75QHZEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTc2YzY0YTUtM2NkMi00NGQ1LTgwYzMtNjI2Y2NjODRl MDg3MB4XDTI2MDkxNDEzMDAxMloXDTI2MTIxMzE0MDAxMlowLzEtMCsGA1UEAxMk ZjczZjJkZGMtNzk4My00MWM4LWIyOTMtNzRlZGI3YTExYWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvHpNuvirD7VcsWLMMKM0hqOKhyo/nO/YYZf BlchmMUC8hswHQ36Z1RP1BVvUEmKThbcLzKjtAhhWgWKi2gS1MglDvbX2r9N898I Zup6+KTnUpnLt4BlVHX83Dycznls3sCz39LSzSHAZy7XASx/PQrEqCos0ET0pNvA i/kVZGpmBGOVYV81NXnhu/P9xjaUTLeyyDSECJExbCXBODOf5pSFpRABufiP3DsK X/B0NmWJnxEGoci1Zc9d5pMNAiKRfG14lh5EZ3Cg3xG4RqSCkjPOssZMddpnztBt DAH7vrOD14TqWqzVq+kE7RzJskE8ofDpwcDiLC+YH9aQPkDZHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGwiQYHObknOhG03wmBHDrN6AKayMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81NzZj NjRhNS0zY2QyLTQ0ZDUtODBjMy02MjZjY2M4NGUwODcvOWZkODEwODYtZDJhYi0z YjY5LTg3M2YtYzA0M2Q1ZjExMjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTc2YzY0YTUtM2NkMi00NGQ1LTgw YzMtNjI2Y2NjODRlMDg3LzU3NmM2NGE1LTNjZDItNDRkNS04MGMzLTYyNmNjYzg0 ZTA4Ny5jcmwwHwYDVR0jBBgwFoAUk0DOtnGW2j79FgyHIy7gqDvHHIkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81NzZjNjRhNS0zY2QyLTQ0ZDUtODBjMy02MjZj Y2M4NGUwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx6gcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgZaRpeuLwITwq5uxIQNsw4hXgr7RCd5ZV5JfSw4EuzLXPrTdy08pH5 JuaVTc+vWoMPLKaWxN6LYAHfZyN+4aODWzkarYqqatNxRY+vK6mF9h1NS23v/px1 SPlTqlP6VYS8J148jVcSACZin/ofM/scOacweNdVUQZreiGxl0ZJ2zfjUev0VSEL L010mVXRzSm9D4JIClLXpeZ1kRGRjuex6OBD6h//nkgLXZJfvCRUhaz9GbYypZed s8PIfELImchK/pojNntt3EKoa07qRjvKMXMc1+FCgu3/ZFafRWUIQF48ZtmBlzg0 Uws6mH/iFdTA0oLALGDnf3Lx9rhsBf0= -----END CERTIFICATE-----Generated at Sun Sep 27 01:43:46 2026 by rpki-client