$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0033fba4-37db-34fb-a723-5858f2b64e22.roa File: 0033fba4-37db-34fb-a723-5858f2b64e22.roa (raw, json) Hash identifier: 6GIXlUfoz852Je8eNaqvZ/f/E6XnXBwYKIonh2wtNJA= Subject key identifier: F8:9D:26:B3:D0:97:85:8A:AD:8D:68:7A:A5:AF:C3:21:B4:DC:34:98 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584F3CE2AE3055AB509BA53E3240 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0033fba4-37db-34fb-a723-5858f2b64e22.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 22516 IP address blocks: 170.199.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:ae:30:55:ab:50:9b:a5:3e:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=588b70df-ea7a-4311-9c8d-f4cbc1b8ea62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7e:d2:66:a1:a6:3e:aa:48:1d:ee:99:58:c8: 3f:f3:d1:09:58:47:17:5e:9e:70:20:c0:60:10:46: ff:b9:bb:a7:16:b4:20:86:b2:51:c0:68:9c:03:bf: 21:39:34:48:0c:9b:35:95:7d:49:82:da:17:7c:ed: 1f:bf:8e:1f:e5:1f:32:a5:57:7c:27:4c:33:3b:17: 97:0a:12:8c:90:e0:fc:92:ea:b4:39:6d:d2:4a:06: 9f:7f:65:f1:5c:5a:87:69:be:db:07:c4:c6:49:9a: 3d:e5:37:81:b9:da:43:b2:bf:76:41:43:12:03:4a: ee:fc:28:0e:c6:4a:80:9a:ea:19:9d:59:d7:9f:1f: c3:6b:d1:95:f3:6e:c4:cb:93:b4:ae:04:22:09:d9: 9d:cf:2c:66:99:8f:5c:69:01:73:b1:1e:d0:1b:a5: c8:e4:b2:55:d0:b6:6f:20:b4:39:ac:d9:1a:fc:69: 1a:a3:2a:cc:1d:e7:ec:87:61:91:68:ac:34:ac:4b: 9c:ba:b6:40:ab:4a:89:5a:bb:4a:b0:76:3f:21:46: f1:5c:8c:a9:21:a8:ee:7b:39:29:eb:0c:22:6f:00: 26:22:5a:f7:aa:bc:88:ef:02:cb:7f:9a:0c:5b:7b: 01:cf:23:2b:6c:06:c0:a9:81:0d:38:64:c9:a0:ce: 2c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:9D:26:B3:D0:97:85:8A:AD:8D:68:7A:A5:AF:C3:21:B4:DC:34:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0033fba4-37db-34fb-a723-5858f2b64e22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 170.199.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:3d:8c:f7:89:c8:96:e8:60:45:78:4f:f9:e2:77:87:e6:6c: ef:f9:10:db:ac:bd:47:a7:90:83:d7:45:5f:50:36:24:42:a8: bb:b8:39:cf:16:d0:71:fd:a1:f6:31:3c:92:de:c1:eb:c4:95: 31:a0:cb:3c:b9:e1:80:ce:1f:a7:8b:a2:65:a2:aa:46:2c:e4: 65:4e:b3:d4:ea:73:e6:5c:af:ae:6b:37:90:04:8e:1d:03:63: f8:18:15:34:5e:8c:99:04:17:97:fe:be:79:70:96:42:62:89: de:a4:21:86:1d:0e:bd:b0:f4:50:8e:83:47:84:ed:63:1a:51: 5a:e1:57:48:cf:39:53:c8:c6:fd:6e:24:0b:f4:21:0e:21:bd: 2b:30:99:b6:15:78:ff:93:b9:0b:ea:4f:f9:d7:43:5e:84:d9: 7f:2c:7f:c6:98:57:45:0b:9e:3c:a6:b3:fc:c6:2b:16:b7:b5: 8e:3e:0e:be:fc:12:c7:5c:a2:e8:86:c9:ad:94:f7:11:61:6a: 5c:ab:60:fe:b8:5c:e2:d9:f9:aa:e7:1d:ba:89:e3:68:42:bf: 2a:57:ff:ea:3e:da:10:d3:79:de:98:22:4a:43:eb:cd:2f:f4: b1:61:eb:f7:5d:a2:42:4a:e2:65:7b:5f:7a:5c:77:f7:42:88: 19:d4:9d:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884q4wVatQm6U+MkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk NTg4YjcwZGYtZWE3YS00MzExLTljOGQtZjRjYmMxYjhlYTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp37SZqGmPqpIHe6ZWMg/89EJWEcXXp5wIMBg EEb/ubunFrQghrJRwGicA78hOTRIDJs1lX1JgtoXfO0fv44f5R8ypVd8J0wzOxeX ChKMkOD8kuq0OW3SSgaff2XxXFqHab7bB8TGSZo95TeBudpDsr92QUMSA0ru/CgO xkqAmuoZnVnXnx/Da9GV827Ey5O0rgQiCdmdzyxmmY9caQFzsR7QG6XI5LJV0LZv ILQ5rNka/GkaoyrMHefsh2GRaKw0rEucurZAq0qJWrtKsHY/IUbxXIypIajuezkp 6wwibwAmIlr3qryI7wLLf5oMW3sBzyMrbAbAqYENOGTJoM4sFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPidJrPQl4WKrY1oeqWvwyG03DSYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMDAzM2ZiYTQtMzdkYi0z NGZiLWE3MjMtNTg1OGYyYjY0ZTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsfkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA49jPeJyJboYEV4T/nid4fmbO/5ENusvUenkIPXRV9QNiRCqLu4Oc8W 0HH9ofYxPJLewevElTGgyzy54YDOH6eLomWiqkYs5GVOs9Tqc+Zcr65rN5AEjh0D Y/gYFTRejJkEF5f+vnlwlkJiid6kIYYdDr2w9FCOg0eE7WMaUVrhV0jPOVPIxv1u JAv0IQ4hvSswmbYVeP+TuQvqT/nXQ16E2X8sf8aYV0ULnjyms/zGKxa3tY4+Dr78 EsdcouiGya2U9xFhalyrYP64XOLZ+arnHbqJ42hCvypX/+o+2hDTed6YIkpD680v 9LFh6/ddokJK4mV7X3pcd/dCiBnUnUM= -----END CERTIFICATE-----Generated at Sun Sep 20 23:09:54 2026 by rpki-client