$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/67cd28d2-df4d-3b0d-9198-70c2a704fd66.roa File: 67cd28d2-df4d-3b0d-9198-70c2a704fd66.roa (raw, json) Hash identifier: gHtFcwGV2a6c5snwQdsvW78TEIli/sJg48zjTkJb0jU= Subject key identifier: 1E:9E:AC:67:BE:CF:BD:D6:53:2F:50:10:A8:08:8C:E6:19:18:C1:B8 Certificate issuer: /CN=aa899632-aef6-4a3b-b807-edc1ca4303b6 Certificate serial: 010D0C9F4328584EE4F1FD0EB7DE0B5EDB44B3C0 Authority key identifier: A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/67cd28d2-df4d-3b0d-9198-70c2a704fd66.roa Signing time: Thu 20 Aug 2026 01:00:12 +0000 ROA not before: Thu 20 Aug 2026 01:00:12 +0000 ROA not after: Wed 18 Nov 2026 02:00:12 +0000 asID: 3128 IP address blocks: 128.104.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:f1:fd:0e:b7:de:0b:5e:db:44:b3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa899632-aef6-4a3b-b807-edc1ca4303b6 Validity Not Before: Aug 20 01:00:12 2026 GMT Not After : Nov 18 02:00:12 2026 GMT Subject: CN=b40c7d00-04d9-4832-975a-4ad37fb8a9fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d8:f2:14:0c:a9:7d:e0:05:18:76:e2:16:5a: 14:58:77:1c:48:06:7a:0d:b2:eb:4c:4a:32:e0:9f: ac:fb:82:bb:21:b4:7c:d4:b1:37:4c:f1:47:76:70: b9:7a:da:b7:c7:0a:30:04:65:7f:cd:2e:d1:c5:47: 91:06:69:97:19:97:3b:7c:05:4c:e2:e4:9f:46:58: d8:be:c4:ab:c1:fb:87:55:c2:9a:b2:78:0e:9f:65: be:54:6a:a9:c7:29:63:75:42:aa:21:3c:68:80:18: aa:0a:fb:e0:0f:51:36:b0:38:08:92:23:e6:36:2b: 54:0c:88:f3:f9:ee:c1:f9:95:dd:75:f8:dd:36:6a: a7:d0:a2:52:a2:4c:3b:70:f8:a2:4e:cd:c4:d0:5c: b0:60:af:ec:8d:ab:99:23:d6:5c:ba:69:08:53:32: a3:01:64:5e:f0:a5:24:f0:b8:12:51:2a:11:d6:13: ca:5e:11:2d:62:9d:a9:3c:aa:3f:dd:66:6e:97:77: 32:00:4d:09:0a:34:13:d6:6e:5c:48:1a:22:19:5b: cf:dd:9b:fc:c1:d0:50:f3:86:0d:e5:a3:66:79:44: 7f:8a:91:e3:9d:cf:ad:07:87:c7:1c:ef:71:2b:2f: cb:bd:40:1f:2d:da:7c:fc:2a:cd:2c:94:f0:4d:e9: 63:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:9E:AC:67:BE:CF:BD:D6:53:2F:50:10:A8:08:8C:E6:19:18:C1:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/67cd28d2-df4d-3b0d-9198-70c2a704fd66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl X509v3 Authority Key Identifier: keyid:A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer sbgp-ipAddrBlock: critical IPv4: 128.104.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:15:b2:70:a1:15:0b:61:f1:a1:51:8f:8e:73:b2:45:c3:fa: eb:bf:b1:ae:11:89:00:7e:cc:f9:b9:61:c3:dd:c1:68:e6:48: 19:ea:30:12:d0:c8:f8:c4:7a:bd:1c:f5:b6:7b:0d:24:b4:10: 6c:96:a1:d3:9b:02:56:41:3a:bb:5c:cf:9f:70:fc:6b:7c:75: 9a:e9:2a:06:d9:f3:60:3a:29:19:16:db:e9:3a:c9:5f:62:a2: 25:66:a0:fe:54:ef:c0:2e:c9:c2:ba:6a:9f:02:75:1f:94:4f: c9:ce:d1:4a:a2:d1:3f:da:a8:8a:c7:95:1c:38:da:9c:be:37: 5a:f5:70:96:6e:7e:a6:95:db:40:86:72:a0:da:c2:a7:38:07: ae:a0:c9:9e:c0:4f:c5:e5:85:9c:f1:01:99:ef:79:1e:36:06: 6f:2c:5c:b3:5a:ec:e5:e8:9f:f7:3e:c8:61:e1:e2:e6:73:99: b9:f6:16:d4:6e:ab:e8:1f:42:1c:e2:f8:3c:5c:7c:8e:0a:fc: 45:28:c0:7a:07:7a:e1:ed:c0:ca:2c:56:55:4d:25:d0:71:fc: 35:d5:c8:ec:29:1d:28:6d:5e:ee:0c:4d:03:c1:ab:4f:39:e4: 04:51:4d:8a:71:b6:88:fc:a4:b0:b0:ab:6f:96:89:e5:89:7a: 61:f2:eb:58 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7k8f0Ot94LXttEs8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE4OTk2MzItYWVmNi00YTNiLWI4MDctZWRjMWNhNDMw M2I2MB4XDTI2MDgyMDAxMDAxMloXDTI2MTExODAyMDAxMlowLzEtMCsGA1UEAxMk YjQwYzdkMDAtMDRkOS00ODMyLTk3NWEtNGFkMzdmYjhhOWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytjyFAypfeAFGHbiFloUWHccSAZ6DbLrTEoy 4J+s+4K7IbR81LE3TPFHdnC5etq3xwowBGV/zS7RxUeRBmmXGZc7fAVM4uSfRljY vsSrwfuHVcKasngOn2W+VGqpxyljdUKqITxogBiqCvvgD1E2sDgIkiPmNitUDIjz +e7B+ZXddfjdNmqn0KJSokw7cPiiTs3E0FywYK/sjauZI9ZcumkIUzKjAWRe8KUk 8LgSUSoR1hPKXhEtYp2pPKo/3WZul3cyAE0JCjQT1m5cSBoiGVvP3Zv8wdBQ84YN 5aNmeUR/ipHjnc+tB4fHHO9xKy/LvUAfLdp8/CrNLJTwTeljQwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFB6erGe+z73WUy9QEKgIjOYZGMG4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hYTg5 OTYzMi1hZWY2LTRhM2ItYjgwNy1lZGMxY2E0MzAzYjYvNjdjZDI4ZDItZGY0ZC0z YjBkLTkxOTgtNzBjMmE3MDRmZDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWE4OTk2MzItYWVmNi00YTNiLWI4 MDctZWRjMWNhNDMwM2I2L2FhODk5NjMyLWFlZjYtNGEzYi1iODA3LWVkYzFjYTQz MDNiNi5jcmwwHwYDVR0jBBgwFoAUo8AqY6J4VLbQ5FBNiWjuunsNV40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hYTg5OTYzMi1hZWY2LTRhM2ItYjgwNy1lZGMx Y2E0MzAzYjYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgGgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAHxWycKEVC2HxoVGPjnOyRcP667+xrhGJAH7M+blhw93BaOZIGeowEtDI +MR6vRz1tnsNJLQQbJah05sCVkE6u1zPn3D8a3x1mukqBtnzYDopGRbb6TrJX2Ki JWag/lTvwC7JwrpqnwJ1H5RPyc7RSqLRP9qoiseVHDjanL43WvVwlm5+ppXbQIZy oNrCpzgHrqDJnsBPxeWFnPEBme95HjYGbyxcs1rs5eif9z7IYeHi5nOZufYW1G6r 6B9CHOL4PFx8jgr8RSjAegd64e3AyixWVU0l0HH8NdXI7CkdKG1e7gxNA8GrTznk BFFNinG2iPyksLCrb5aJ5Yl6YfLrWA== -----END CERTIFICATE-----Generated at Tue Sep 22 18:57:55 2026 by rpki-client