$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/28db5388-3028-3372-82b7-0e51f7f410ea.roa File: 28db5388-3028-3372-82b7-0e51f7f410ea.roa (raw, json) Hash identifier: 8ftxBwv4PBLgvwdIIntQKKzboZelGZlid7UT+4zFFO0= Subject key identifier: 16:F2:46:26:DA:E3:5D:77:27:7E:66:7C:BB:4F:80:ED:1E:17:29:55 Certificate issuer: /CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Certificate serial: 010D0C9F4328584F497410FF41E2DFE006820500 Authority key identifier: F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/28db5388-3028-3372-82b7-0e51f7f410ea.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 400564 IP address blocks: 207.174.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:10:ff:41:e2:df:e0:06:82:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=249a1aa0-1979-41d6-b7d2-74f6388d6acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:15:02:b0:fb:b9:10:85:01:46:06:7e:91:aa: 26:f4:9b:74:63:44:38:d6:b9:d7:41:18:85:89:2c: a4:1a:f0:cc:04:26:20:93:69:f6:83:4f:fc:20:d1: cc:7a:0b:93:00:1f:f4:16:4c:85:9d:d2:b9:e8:06: 0a:b0:68:e3:54:72:9f:b2:f1:f2:0d:e4:12:0c:dd: 28:61:d2:22:76:8e:ae:91:42:93:ab:ac:02:03:d5: 2e:4c:98:bb:01:e3:b5:70:df:c2:92:ee:51:72:11: d8:ba:88:29:64:38:4b:ce:73:fa:14:c0:10:23:13: ba:22:88:9b:eb:13:6d:ba:94:b6:30:60:78:fe:60: e2:7c:73:f9:16:d0:ab:4e:d0:1b:47:28:b8:60:f1: d9:d0:e1:1f:b2:b0:8a:94:ee:c4:f7:5b:84:3e:64: fd:d7:65:d5:c1:37:62:7e:44:c6:9c:63:64:05:c0: 64:0e:0b:99:a4:5e:50:b3:56:eb:2b:6e:ce:c7:c2: 7f:55:28:88:5e:96:21:74:49:8e:be:b2:4b:6d:83: 35:97:bd:a1:d0:39:fa:29:da:35:5c:4d:d4:0e:25: 87:9d:57:36:f6:26:01:d5:1c:f2:d8:bc:8d:02:d5: a1:8f:77:00:80:de:5b:dc:71:1c:a3:65:c0:fc:bc: ad:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F2:46:26:DA:E3:5D:77:27:7E:66:7C:BB:4F:80:ED:1E:17:29:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/28db5388-3028-3372-82b7-0e51f7f410ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl X509v3 Authority Key Identifier: keyid:F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer sbgp-ipAddrBlock: critical IPv4: 207.174.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:e1:8a:38:aa:89:12:54:f9:ed:36:b6:f0:7e:67:26:45:50: c8:b9:09:bd:5e:7c:e4:ea:5a:71:db:01:19:4b:07:3c:d8:92: 00:a1:dd:f1:47:25:ab:70:7f:7d:f7:60:79:36:11:62:a5:24: d9:9e:05:87:ad:1f:c0:56:e9:b5:f0:8c:22:e3:13:9d:ae:6a: 7b:ff:87:52:22:03:a5:a0:cf:6e:c7:1d:80:b7:ab:20:7e:b9: 13:d9:0b:cf:71:de:ef:76:95:14:68:6c:1f:a3:81:89:97:d2: 0b:fe:f0:4e:4c:19:5b:5c:9e:a6:b6:2f:26:d5:8f:2b:11:7d: b8:af:32:64:9b:00:4e:5c:b0:88:ab:18:35:8c:b2:b9:76:bd: 48:f6:6c:a1:57:62:37:eb:80:7b:ca:c6:9a:3c:ba:b2:33:66: a3:a8:dc:4a:d2:b0:e9:fa:4d:1a:04:90:7b:b8:37:c5:6e:28: 27:e2:07:cd:ae:c1:27:83:7f:9c:1d:e6:7d:04:bc:2d:f9:97: 6b:9e:9e:8f:d9:10:f8:0d:58:17:bb:04:7d:c7:04:ec:20:3e: 1b:46:b6:3d:5e:25:b6:4e:5d:9c:06:d2:7e:07:ab:41:e5:ac: 1b:40:b5:d9:ba:56:10:1d:80:81:6c:79:93:08:7c:d7:cd:15: 79:81:1c:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdBD/QeLf4AaCBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4OTM5YTYtNmFjYi00OGU1LWFmOWEtZDFmN2NjYTNi MThlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjQ5YTFhYTAtMTk3OS00MWQ2LWI3ZDItNzRmNjM4OGQ2YWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBUCsPu5EIUBRgZ+kaom9Jt0Y0Q41rnXQRiF iSykGvDMBCYgk2n2g0/8INHMeguTAB/0FkyFndK56AYKsGjjVHKfsvHyDeQSDN0o YdIido6ukUKTq6wCA9UuTJi7AeO1cN/Cku5RchHYuogpZDhLznP6FMAQIxO6Ioib 6xNtupS2MGB4/mDifHP5FtCrTtAbRyi4YPHZ0OEfsrCKlO7E91uEPmT912XVwTdi fkTGnGNkBcBkDguZpF5Qs1brK27Ox8J/VSiIXpYhdEmOvrJLbYM1l72h0Dn6Kdo1 XE3UDiWHnVc29iYB1Rzy2LyNAtWhj3cAgN5b3HEco2XA/Lyt4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbyRiba4113J35mfLtPgO0eFylVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5 MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3Y2NhM2IxOGUvMjhkYjUzODgtMzAyOC0z MzcyLTgyYjctMGU1MWY3ZjQxMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGU4OTM5YTYtNmFjYi00OGU1LWFm OWEtZDFmN2NjYTNiMThlL2RlODkzOWE2LTZhY2ItNDhlNS1hZjlhLWQxZjdjY2Ez YjE4ZS5jcmwwHwYDVR0jBBgwFoAU9xsfJFQFgH9uxl1GG4KiieftgsYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3 Y2NhM2IxOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz64UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbhijiqiRJU+e02tvB+ZyZFUMi5Cb1efOTqWnHbARlLBzzYkgCh3fFH Jatwf333YHk2EWKlJNmeBYetH8BW6bXwjCLjE52uanv/h1IiA6Wgz27HHYC3qyB+ uRPZC89x3u92lRRobB+jgYmX0gv+8E5MGVtcnqa2LybVjysRfbivMmSbAE5csIir GDWMsrl2vUj2bKFXYjfrgHvKxpo8urIzZqOo3ErSsOn6TRoEkHu4N8VuKCfiB82u wSeDf5wd5n0EvC35l2ueno/ZEPgNWBe7BH3HBOwgPhtGtj1eJbZOXZwG0n4Hq0Hl rBtAtdm6VhAdgIFseZMIfNfNFXmBHKs= -----END CERTIFICATE-----Generated at Tue Sep 29 04:50:25 2026 by rpki-client