$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aad996ae-f5a1-3f15-86e0-00a6135d1c79.roa File: aad996ae-f5a1-3f15-86e0-00a6135d1c79.roa (raw, json) Hash identifier: fXjzhLWl5qQnH0isAoSsgjUNNPAh7vtp01UHXfcJVFs= Subject key identifier: 17:37:D9:F2:54:69:C9:2E:B6:4F:2D:5B:6D:75:F0:0B:65:AB:33:28 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584F4C3D5363C7438891793C4600 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aad996ae-f5a1-3f15-86e0-00a6135d1c79.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 64267 IP address blocks: 68.234.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:53:63:c7:43:88:91:79:3c:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=c704ef35-370b-4d04-ac07-ceebb2dff00c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d1:c5:6d:15:c9:04:25:62:05:ab:c8:9b:08: bc:eb:65:73:55:03:19:08:56:40:84:33:33:9c:20: f4:71:62:78:67:32:86:51:87:8b:be:0b:79:fd:a3: 37:df:49:8b:f2:ef:8a:c3:c5:c2:7f:24:55:6a:24: ec:c4:6b:92:f2:d3:3e:c4:2e:0f:85:2b:3e:48:06: d7:5d:0b:f1:e2:2d:cc:3c:4f:47:cd:43:ab:7d:c5: bb:f8:c0:24:4c:7a:63:bf:a7:59:a9:c7:12:bc:ca: 1f:b8:96:6a:b5:73:80:be:15:16:7e:0b:63:8e:d4: af:5d:d8:e2:0f:a5:13:dd:fc:d3:26:88:6a:9e:b4: ce:d3:61:95:df:25:fc:10:fa:a6:60:20:9f:78:d7: b4:ae:6c:9e:2c:a2:46:f7:da:10:15:da:c3:19:49: ef:82:72:60:25:a9:5a:6c:c6:51:5c:ca:89:3e:f4: 4b:aa:e2:fe:59:45:ba:77:8c:01:61:50:e2:7e:89: d5:d9:52:c7:4e:96:47:b5:43:20:73:27:b4:f7:88: 17:3e:74:ca:d3:ab:c7:69:70:b5:23:ca:b8:ab:4a: 1d:1c:a8:dd:3d:2a:6b:cc:4f:6e:7e:17:4c:97:9f: 71:22:11:38:38:0c:78:01:aa:d4:65:89:cd:75:dd: 2c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:37:D9:F2:54:69:C9:2E:B6:4F:2D:5B:6D:75:F0:0B:65:AB:33:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aad996ae-f5a1-3f15-86e0-00a6135d1c79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 68.234.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:c2:35:6e:b9:3f:c0:f7:14:2e:1f:b6:f2:1b:f4:a4:44:92: cc:47:df:e4:58:1f:e2:38:2a:be:78:72:cd:ec:dc:4e:81:62: e0:9f:d3:dd:0b:00:a4:5e:36:7b:e9:dd:4d:2e:d0:2a:e3:19: 9d:f4:05:aa:04:42:2e:22:da:da:1b:bd:e1:22:0c:33:f3:c8: 6e:3f:19:af:e9:10:d9:04:09:64:ea:64:43:4b:3a:ed:69:7d: 95:ab:e6:39:f7:60:ba:97:d2:a3:4e:58:34:13:eb:f5:6b:97: de:50:b4:2c:78:32:06:a6:69:8a:31:76:fd:6a:ba:40:f7:fe: 87:8c:45:0f:2f:9b:a7:66:01:3f:8e:6b:a3:59:80:50:8b:9a: 59:50:4b:a2:db:71:f5:5a:95:f6:f5:79:e7:a8:bd:be:1d:dc: 2f:4a:18:9e:f1:c2:a1:a0:97:88:78:6d:bc:3e:72:15:9f:fd: 03:35:9e:ca:b1:ec:29:f2:f0:e9:db:d7:26:6f:bc:a6:95:a8: f2:8b:51:c7:32:7d:58:f7:f8:08:95:d1:0d:62:05:33:5d:64: 09:b6:4a:e4:42:e6:ea:c7:31:28:7c:1f:9b:a5:46:fe:f4:70: 7c:7b:1f:1b:13:a7:d5:93:c7:45:85:46:f5:3f:da:04:27:9b: ba:ac:6b:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPVNjx0OIkXk8RgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YzcwNGVmMzUtMzcwYi00ZDA0LWFjMDctY2VlYmIyZGZmMDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNHFbRXJBCViBavImwi862VzVQMZCFZAhDMz nCD0cWJ4ZzKGUYeLvgt5/aM330mL8u+Kw8XCfyRVaiTsxGuS8tM+xC4PhSs+SAbX XQvx4i3MPE9HzUOrfcW7+MAkTHpjv6dZqccSvMofuJZqtXOAvhUWfgtjjtSvXdji D6UT3fzTJohqnrTO02GV3yX8EPqmYCCfeNe0rmyeLKJG99oQFdrDGUnvgnJgJala bMZRXMqJPvRLquL+WUW6d4wBYVDifonV2VLHTpZHtUMgcye094gXPnTK06vHaXC1 I8q4q0odHKjdPSprzE9ufhdMl59xIhE4OAx4AarUZYnNdd0sdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBc32fJUackutk8tW2118AtlqzMoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYWFkOTk2YWUtZjVhMS0z ZjE1LTg2ZTAtMDBhNjEzNWQxYzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROooMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLCNW65P8D3FC4ftvIb9KREksxH3+RYH+I4Kr54cs3s3E6BYuCf090L AKReNnvp3U0u0CrjGZ30BaoEQi4i2tobveEiDDPzyG4/Ga/pENkECWTqZENLOu1p fZWr5jn3YLqX0qNOWDQT6/Vrl95QtCx4MgamaYoxdv1qukD3/oeMRQ8vm6dmAT+O a6NZgFCLmllQS6LbcfValfb1eeeovb4d3C9KGJ7xwqGgl4h4bbw+chWf/QM1nsqx 7Cny8Onb1yZvvKaVqPKLUccyfVj3+AiV0Q1iBTNdZAm2SuRC5urHMSh8H5ulRv70 cHx7HxsTp9WTx0WFRvU/2gQnm7qsa1M= -----END CERTIFICATE-----Generated at Mon Sep 28 21:23:22 2026 by rpki-client