$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8c42e76c-a4e4-3aac-b1cb-82d79097b7b8.roa File: 8c42e76c-a4e4-3aac-b1cb-82d79097b7b8.roa (raw, json) Hash identifier: UPJA+2mSrzJY0JZgYHKmY7YhfTDvfzdGdxYGbVtyQsI= Subject key identifier: 50:DF:56:7E:A0:7F:A6:1B:E7:8A:74:98:10:01:C8:6E:63:00:11:B1 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584E9A7FABBD02C9C3EA040BF480 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8c42e76c-a4e4-3aac-b1cb-82d79097b7b8.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 7029 IP address blocks: 170.199.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:ab:bd:02:c9:c3:ea:04:0b:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=a87270f9-72eb-42b0-a5f5-804d61fe854a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3c:cb:f9:21:94:2c:8d:65:55:99:39:72:f0: c3:66:61:30:8d:11:18:bf:48:ba:9d:31:13:21:37: 12:fe:f0:c0:67:75:a4:fc:0f:3d:04:e3:e8:77:37: 50:8e:28:f7:90:a2:e0:52:d1:a8:9d:02:a8:0e:d4: c7:03:28:41:89:95:57:31:86:26:03:81:3d:93:9f: 4b:ac:89:1c:21:50:af:0c:85:e1:08:8f:be:d1:14: 84:8d:c3:a5:6e:b9:b9:fc:84:f5:c6:08:df:68:1e: 1d:14:2e:a1:16:0a:9e:bf:4c:66:5d:08:49:c3:17: 20:8a:05:19:b5:02:a2:26:18:bb:bc:1e:1d:9c:25: 76:42:c4:c7:34:a2:a5:72:7e:e5:1a:df:e9:4e:a8: aa:4d:eb:ba:c5:01:e9:9d:74:ec:a1:4d:ef:dc:2b: 18:ab:53:78:e9:a3:0a:75:ab:91:80:3a:63:75:22: 49:d5:1a:26:89:66:da:f4:f3:55:9b:f2:ca:60:73: cf:26:95:61:1b:31:0d:78:c4:5e:fc:eb:f0:44:73: 84:67:57:5e:8e:bf:d7:7e:40:d5:cc:b7:c1:72:ab: 54:53:91:cf:82:8c:55:e6:d1:96:54:f5:2a:eb:d0: 38:33:07:22:f6:df:1a:b3:f4:21:3d:66:2d:b1:07: 90:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:DF:56:7E:A0:7F:A6:1B:E7:8A:74:98:10:01:C8:6E:63:00:11:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8c42e76c-a4e4-3aac-b1cb-82d79097b7b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 170.199.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:52:ca:9f:1f:f7:83:25:a1:53:50:e0:0a:6a:d1:05:da:a6: e1:8b:b4:2d:a1:40:35:c3:f6:b8:05:55:9a:0d:15:9a:07:f1: 97:91:bd:de:f4:c0:3e:48:81:48:3f:19:69:5f:b7:0f:f4:07: 87:6b:e7:74:5e:d3:6a:a1:f7:a9:59:78:b6:69:97:41:17:09: 8c:b4:c5:9e:bd:59:9f:2b:ea:bf:5f:cb:ce:20:9c:fa:e3:2f: 58:32:f4:ad:a7:53:80:db:2c:0f:ae:21:f2:9e:90:d5:69:a7: e1:82:8a:ae:e7:79:dc:a7:1b:47:94:6e:93:c0:24:ff:58:c6: f2:5e:e7:21:0f:59:8e:db:d1:1a:75:22:54:80:e4:7a:89:a0: fb:83:9d:52:6b:f1:f7:50:03:97:91:59:58:f7:60:90:ea:4c: 22:fd:c3:6d:e8:fd:4c:fe:5a:9d:f4:b7:31:09:63:55:d1:8c: 14:04:f2:eb:92:06:a1:16:02:48:c4:04:b8:5b:11:50:99:8c: 65:5f:43:13:b8:45:f7:cd:15:17:ef:6b:2f:23:17:ff:dd:7f: e3:be:2f:16:72:66:90:da:fd:4c:bc:f6:93:ba:a5:ad:11:84: 1f:23:70:d9:b2:02:db:ed:d0:2c:54:57:58:7f:af:ff:44:3e: 32:27:7f:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af6u9AsnD6gQL9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk YTg3MjcwZjktNzJlYi00MmIwLWE1ZjUtODA0ZDYxZmU4NTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDzL+SGULI1lVZk5cvDDZmEwjREYv0i6nTET ITcS/vDAZ3Wk/A89BOPodzdQjij3kKLgUtGonQKoDtTHAyhBiZVXMYYmA4E9k59L rIkcIVCvDIXhCI++0RSEjcOlbrm5/IT1xgjfaB4dFC6hFgqev0xmXQhJwxcgigUZ tQKiJhi7vB4dnCV2QsTHNKKlcn7lGt/pTqiqTeu6xQHpnXTsoU3v3CsYq1N46aMK dauRgDpjdSJJ1RomiWba9PNVm/LKYHPPJpVhGzENeMRe/OvwRHOEZ1dejr/XfkDV zLfBcqtUU5HPgoxV5tGWVPUq69A4Mwci9t8as/QhPWYtsQeQoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDfVn6gf6Yb54p0mBAByG5jABGxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvOGM0MmU3NmMtYTRlNC0z YWFjLWIxY2ItODJkNzkwOTdiN2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsfhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZSyp8f94MloVNQ4Apq0QXapuGLtC2hQDXD9rgFVZoNFZoH8ZeRvd70 wD5IgUg/GWlftw/0B4dr53Re02qh96lZeLZpl0EXCYy0xZ69WZ8r6r9fy84gnPrj L1gy9K2nU4DbLA+uIfKekNVpp+GCiq7nedynG0eUbpPAJP9YxvJe5yEPWY7b0Rp1 IlSA5HqJoPuDnVJr8fdQA5eRWVj3YJDqTCL9w23o/Uz+Wp30tzEJY1XRjBQE8uuS BqEWAkjEBLhbEVCZjGVfQxO4RffNFRfvay8jF//df+O+LxZyZpDa/Uy89pO6pa0R hB8jcNmyAtvt0CxUV1h/r/9EPjInfyE= -----END CERTIFICATE-----Generated at Tue Jul 28 19:33:01 2026 by rpki-client