$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/10dac507-c90e-3df7-9f1f-8a0ee4a266ab.roa File: 10dac507-c90e-3df7-9f1f-8a0ee4a266ab.roa (raw, json) Hash identifier: QJVwevParITShDMF29sQTVcth9PomvvTX01vR7ylSeQ= Subject key identifier: 1B:C1:3D:C5:DD:33:F7:B6:78:BB:D4:61:18:46:02:B5:51:98:4D:22 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584F2957C4D786FE2E0FA10A2D00 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/10dac507-c90e-3df7-9f1f-8a0ee4a266ab.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 64267 IP address blocks: 199.250.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:c4:d7:86:fe:2e:0f:a1:0a:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=43feb860-f4d9-4b42-a833-1dbabcd17e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ab:ef:5f:38:11:fd:2c:22:93:59:86:8c:7a: c3:14:3b:18:2c:95:5c:ab:2d:6d:26:44:3e:d0:f6: 23:bc:2d:25:d2:d6:5d:03:fa:71:42:6f:ea:d9:cb: 15:a2:b1:98:28:45:2c:e9:4b:32:68:4e:11:f7:21: 91:13:4c:58:1a:76:27:de:39:19:51:87:1c:80:ed: 66:4a:9c:b5:aa:73:8f:ec:00:4a:35:7b:13:d1:61: f1:7b:27:19:b5:95:a1:80:a7:d0:3e:c4:75:b8:88: c4:f6:6b:e8:29:dc:6b:64:6a:0e:88:94:72:a1:fd: 62:04:3d:04:cd:fa:5d:55:52:f5:f2:01:a9:e9:d6: 94:b1:12:4c:07:82:9b:1b:3d:f2:b2:d4:be:9d:9d: 1a:ee:fb:73:02:51:28:84:af:40:bd:d6:4e:18:d6: 6a:66:86:a1:e2:7f:37:35:c7:fe:02:77:11:8d:a0: f6:5c:a5:26:97:11:1c:90:d4:ca:35:1f:0e:4f:6a: 44:e7:6a:b1:f0:6e:f9:b0:f1:1f:07:86:09:a1:9c: 76:9c:73:2e:2e:9a:fc:0b:b8:73:69:82:13:4c:15: 02:62:ed:b8:ec:3a:da:85:7b:58:a4:79:f8:7a:b6: 56:bf:db:53:1a:9a:f7:b2:40:97:3c:b5:86:d2:dc: 29:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C1:3D:C5:DD:33:F7:B6:78:BB:D4:61:18:46:02:B5:51:98:4D:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/10dac507-c90e-3df7-9f1f-8a0ee4a266ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 199.250.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:06:e6:ac:1f:eb:ba:b6:c2:be:77:b7:0d:d1:ae:7e:54:44: a5:60:47:29:7a:d4:3f:22:e9:f4:0f:8f:04:05:1c:3c:79:01: c8:17:95:b3:fa:15:1c:a2:5c:1b:da:d0:6c:54:33:b5:69:97: 5a:04:9e:a0:64:4e:02:88:39:14:35:c5:4a:7c:51:d1:5e:0b: 16:64:35:71:1d:56:c7:91:1d:ce:9b:14:5a:00:79:b0:cf:40: 18:73:1c:fb:10:fd:16:d0:c1:6e:39:b3:28:c7:9e:94:53:17: 50:2f:1a:3c:e0:df:a0:b9:e3:e2:ef:8f:aa:a4:63:20:88:89: d1:f4:d7:f0:f6:9f:a1:1a:bf:64:b3:06:1a:84:80:c1:44:52: 08:61:11:10:44:3c:29:b5:0d:41:e8:6c:80:94:1f:b7:22:3a: 4a:6b:0d:27:3b:b4:04:4e:8a:57:47:aa:4b:19:d0:6f:6a:a3: 08:30:30:f8:ca:42:69:76:d6:0c:41:80:64:f3:91:33:7c:3e: 45:85:a8:a2:d8:65:ab:b6:2a:c3:25:5e:dd:cf:f2:99:61:94: 6e:18:e0:7d:e9:ef:63:87:f6:3c:04:d5:f6:37:36:b5:2d:77: 07:1b:26:66:a0:6b:52:a7:5c:6b:e3:65:b7:51:9d:94:b9:b2: 10:9e:4f:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV8TXhv4uD6EKLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk NDNmZWI4NjAtZjRkOS00YjQyLWE4MzMtMWRiYWJjZDE3ZTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgavvXzgR/Swik1mGjHrDFDsYLJVcqy1tJkQ+ 0PYjvC0l0tZdA/pxQm/q2csVorGYKEUs6UsyaE4R9yGRE0xYGnYn3jkZUYccgO1m Spy1qnOP7ABKNXsT0WHxeycZtZWhgKfQPsR1uIjE9mvoKdxrZGoOiJRyof1iBD0E zfpdVVL18gGp6daUsRJMB4KbGz3ystS+nZ0a7vtzAlEohK9AvdZOGNZqZoah4n83 Ncf+AncRjaD2XKUmlxEckNTKNR8OT2pE52qx8G75sPEfB4YJoZx2nHMuLpr8C7hz aYITTBUCYu247DrahXtYpHn4erZWv9tTGpr3skCXPLWG0twp3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvBPcXdM/e2eLvUYRhGArVRmE0iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMTBkYWM1MDctYzkwZS0z ZGY3LTlmMWYtOGEwZWU0YTI2NmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/q9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALUG5qwf67q2wr53tw3Rrn5URKVgRyl61D8i6fQPjwQFHDx5AcgXlbP6 FRyiXBva0GxUM7Vpl1oEnqBkTgKIORQ1xUp8UdFeCxZkNXEdVseRHc6bFFoAebDP QBhzHPsQ/RbQwW45syjHnpRTF1AvGjzg36C54+Lvj6qkYyCIidH01/D2n6Eav2Sz BhqEgMFEUghhERBEPCm1DUHobICUH7ciOkprDSc7tAROildHqksZ0G9qowgwMPjK Qml21gxBgGTzkTN8PkWFqKLYZau2KsMlXt3P8plhlG4Y4H3p72OH9jwE1fY3NrUt dwcbJmaga1KnXGvjZbdRnZS5shCeTzE= -----END CERTIFICATE-----Generated at Tue Sep 22 20:00:33 2026 by rpki-client