$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/05aafed3-9d0a-3a82-8b90-612690957dab.roa File: 05aafed3-9d0a-3a82-8b90-612690957dab.roa (raw, json) Hash identifier: tRWchLNF6TPUIJlJgsmxmudVq0ZIeoxQp3tkxMm/Y+o= Subject key identifier: EC:C9:7B:F8:E8:29:E9:DB:81:71:5A:1B:EC:78:F8:1F:4F:B7:CC:1E Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584F506D517600B6C4AD64ED8E00 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/05aafed3-9d0a-3a82-8b90-612690957dab.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 64267 IP address blocks: 209.251.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:51:76:00:b6:c4:ad:64:ed:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=3c135326-5f79-439c-b246-ab88380b462c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:93:f3:6a:ef:29:15:8d:7a:d1:47:3e:06:49: aa:8d:d7:e3:ed:39:a1:d2:84:7e:82:8a:6a:b3:b9: be:c6:bd:8b:f0:91:cb:8c:62:3c:e3:61:b1:d3:a0: ee:e7:fb:ad:a7:ee:93:ae:49:0f:d8:cd:9c:35:07: ab:d3:e7:ed:74:39:bf:99:34:3a:53:7b:eb:4e:cb: cd:af:f3:fa:80:5e:3b:5e:42:fd:cb:f4:70:54:8e: 19:15:b2:9c:05:d5:19:be:dc:49:a2:81:4e:b0:7b: d2:42:1d:05:08:85:63:a4:32:49:6b:04:2d:83:22: 56:6e:fe:ad:6f:bc:e8:c3:b5:9b:06:9f:4c:c1:aa: 69:51:97:81:6f:56:5f:4a:5c:92:4f:04:ca:5f:21: f7:4d:83:95:32:f6:82:ca:8e:13:36:cc:fc:c7:5a: 2d:b4:b3:a4:84:e9:2f:23:e0:c2:f5:c9:2f:4d:e9: 91:bd:13:8f:85:20:36:5b:f7:8f:61:e1:25:6d:d3: 0a:8f:a9:cc:4c:22:30:28:67:67:d1:53:6a:a6:3a: 3a:19:90:c3:1a:0e:9c:30:dd:ad:ea:e9:42:f4:fe: d9:18:cf:86:7f:43:42:a5:9c:00:22:be:fb:ac:73: 79:36:b0:37:1b:7c:b5:65:69:5f:b8:4b:67:4e:70: 97:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C9:7B:F8:E8:29:E9:DB:81:71:5A:1B:EC:78:F8:1F:4F:B7:CC:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/05aafed3-9d0a-3a82-8b90-612690957dab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 209.251.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:4d:21:a1:35:92:41:c1:b5:df:72:4d:10:42:77:63:96:2e: 53:73:ea:83:26:ad:f9:2d:f4:2e:c8:a1:16:20:b9:58:22:34: 19:f8:24:54:a7:01:45:df:c5:12:01:7a:c5:68:71:47:b5:fb: 5d:52:41:5a:17:3f:5a:8f:9b:98:88:62:a0:a3:80:1f:0c:4a: 8d:c4:80:cd:c5:42:ed:37:51:b3:23:f8:3a:04:11:be:20:4b: 4d:cd:7a:c6:c1:c8:17:e1:e4:e8:f3:67:96:05:a5:d0:1e:e8: 26:5a:9c:f9:c9:13:2a:bf:2f:91:18:cb:85:99:e3:97:2e:e0: 42:79:83:22:29:72:7a:83:1a:55:8a:6e:f0:2c:68:7e:78:a0: c1:e4:ab:0f:41:6c:44:c8:24:08:a1:2e:7e:5f:5a:07:99:b6: 6a:9d:be:b4:74:a6:ca:c4:78:1f:63:8f:5a:2f:16:76:21:4d: 21:42:c3:35:29:ee:a3:86:8b:dc:4e:9c:6c:0a:10:29:79:87: 90:a9:4a:31:1b:72:5b:73:2f:65:e1:9d:4a:4f:03:56:c3:2b: f4:f4:4b:e6:ea:51:19:01:93:13:43:c9:8f:26:ca:68:21:2d: 2d:36:b3:54:b9:86:dd:9c:11:78:55:ec:cb:22:12:53:0a:93: 6f:c2:b3:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbVF2ALbErWTtjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk M2MxMzUzMjYtNWY3OS00MzljLWIyNDYtYWI4ODM4MGI0NjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZPzau8pFY160Uc+Bkmqjdfj7Tmh0oR+gopq s7m+xr2L8JHLjGI842Gx06Du5/utp+6TrkkP2M2cNQer0+ftdDm/mTQ6U3vrTsvN r/P6gF47XkL9y/RwVI4ZFbKcBdUZvtxJooFOsHvSQh0FCIVjpDJJawQtgyJWbv6t b7zow7WbBp9MwappUZeBb1ZfSlySTwTKXyH3TYOVMvaCyo4TNsz8x1ottLOkhOkv I+DC9ckvTemRvROPhSA2W/ePYeElbdMKj6nMTCIwKGdn0VNqpjo6GZDDGg6cMN2t 6ulC9P7ZGM+Gf0NCpZwAIr77rHN5NrA3G3y1ZWlfuEtnTnCX1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzJe/joKenbgXFaG+x4+B9Pt8weMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMDVhYWZlZDMtOWQwYS0z YTgyLThiOTAtNjEyNjkwOTU3ZGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0fsQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANZNIaE1kkHBtd9yTRBCd2OWLlNz6oMmrfkt9C7IoRYguVgiNBn4JFSn AUXfxRIBesVocUe1+11SQVoXP1qPm5iIYqCjgB8MSo3EgM3FQu03UbMj+DoEEb4g S03NesbByBfh5OjzZ5YFpdAe6CZanPnJEyq/L5EYy4WZ45cu4EJ5gyIpcnqDGlWK bvAsaH54oMHkqw9BbETIJAihLn5fWgeZtmqdvrR0psrEeB9jj1ovFnYhTSFCwzUp 7qOGi9xOnGwKECl5h5CpSjEbcltzL2XhnUpPA1bDK/T0S+bqURkBkxNDyY8mymgh LS02s1S5ht2cEXhV7MsiElMKk2/CsxY= -----END CERTIFICATE-----Generated at Mon Sep 28 21:11:13 2026 by rpki-client