$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c08c0b71-24f3-3ee7-82a3-255dedbafdb8.roa File: c08c0b71-24f3-3ee7-82a3-255dedbafdb8.roa (raw, json) Hash identifier: kfn844M2xgk2ob7mmmfMk5G6LkoTYKCRj6YGIcaw3aU= Subject key identifier: 26:05:8A:F3:53:3E:1B:99:1D:44:53:ED:A5:C6:27:E7:26:59:72:BE Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584F498B78FD9E8240E10B537200 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c08c0b71-24f3-3ee7-82a3-255dedbafdb8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20001 IP address blocks: 172.96.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:78:fd:9e:82:40:e1:0b:53:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c076eda1-e707-4aa0-95e9-6e0a654d80e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:48:7c:6f:a2:5f:9f:67:2b:2e:47:47:9e:02: a4:eb:de:c8:98:00:a0:34:16:64:ca:2e:f2:28:b8: 9c:5f:9c:c6:81:f3:c9:f9:99:c7:07:01:e5:38:69: 4f:83:90:52:9b:13:e6:9d:5f:40:63:e5:95:b2:2c: 01:03:c7:68:ae:66:63:88:f9:8b:20:a0:c3:56:92: c0:ad:03:27:72:37:81:e8:36:1e:16:54:e1:b2:1f: f6:8f:a4:04:e1:f8:61:2f:28:87:e3:c7:c7:6f:07: 06:d7:18:94:f7:e6:03:ee:02:42:2c:1b:85:1b:7b: 88:e5:a3:e7:80:27:f6:28:ea:03:c3:10:ae:6f:5e: f4:e3:ef:7b:81:ec:31:cc:eb:60:27:53:4c:a4:9f: ed:5e:c3:54:80:bd:29:9c:91:ca:4d:3d:67:93:8e: 12:eb:db:77:de:86:a5:02:a1:57:d4:d6:e8:45:a0: 08:e5:20:d8:30:b9:ed:46:bd:a5:ef:6e:af:89:2a: 31:3c:34:13:bf:ee:e2:24:70:d6:f5:80:8c:a8:8d: 80:fa:44:0a:6d:a3:99:b9:19:3f:00:3b:6c:8b:be: 51:eb:65:04:19:67:14:56:f0:52:bc:54:0f:aa:b8: 9b:2e:e3:56:1d:74:a5:58:21:da:a2:16:94:d6:bc: 93:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:05:8A:F3:53:3E:1B:99:1D:44:53:ED:A5:C6:27:E7:26:59:72:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c08c0b71-24f3-3ee7-82a3-255dedbafdb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 172.96.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:d1:d6:0b:71:26:6b:3f:0d:e0:7f:03:c4:bc:a8:b9:69:73: 1b:02:96:a3:d4:ab:7b:b8:87:fb:c5:8c:1c:6c:40:65:02:fc: 4e:53:36:3c:0f:47:48:51:0e:11:3b:dd:23:ab:71:d0:9a:f0: c4:77:48:0e:47:00:f6:7b:9c:f5:90:62:d9:06:33:68:52:aa: b8:16:d2:f7:36:61:28:85:e5:a7:96:56:e8:8a:0a:b2:b1:49: e6:7b:59:b3:30:b6:a8:f2:60:99:f1:bf:3d:a0:7e:6d:bd:d5: 3b:d6:a8:b3:f3:ce:eb:d3:4e:9c:c0:a8:1d:ae:36:cb:9e:ca: 9d:ed:4d:8a:79:f9:59:cb:dc:49:3b:a2:e9:9a:82:a2:91:7b: e0:ee:e6:10:8c:c8:b7:f9:83:bc:04:40:72:d4:74:e9:2d:f5: 26:be:6c:d2:12:f5:5f:6b:47:14:90:b6:68:29:ae:8d:16:f1: de:a9:68:ef:a3:d0:00:06:4e:37:48:29:c0:c6:54:14:9d:59: e1:3d:f0:de:01:2b:c8:39:b9:d7:9b:8a:de:c9:b6:57:ba:c3: ea:22:e8:b1:20:44:60:86:79:7b:26:7f:34:28:b4:3b:56:65: 9a:19:96:d2:86:a1:49:10:85:a6:2e:4b:93:8d:e1:d0:5b:aa: a4:b6:5d:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji3j9noJA4QtTcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzA3NmVkYTEtZTcwNy00YWEwLTk1ZTktNmUwYTY1NGQ4MGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Eh8b6Jfn2crLkdHngKk697ImACgNBZkyi7y KLicX5zGgfPJ+ZnHBwHlOGlPg5BSmxPmnV9AY+WVsiwBA8dormZjiPmLIKDDVpLA rQMncjeB6DYeFlThsh/2j6QE4fhhLyiH48fHbwcG1xiU9+YD7gJCLBuFG3uI5aPn gCf2KOoDwxCub1704+97gewxzOtgJ1NMpJ/tXsNUgL0pnJHKTT1nk44S69t33oal AqFX1NboRaAI5SDYMLntRr2l726viSoxPDQTv+7iJHDW9YCMqI2A+kQKbaOZuRk/ ADtsi75R62UEGWcUVvBSvFQPqribLuNWHXSlWCHaohaU1ryTPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCYFivNTPhuZHURT7aXGJ+cmWXK+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYzA4YzBiNzEtMjRmMy0z ZWU3LTgyYTMtMjU1ZGVkYmFmZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGBSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzR1gtxJms/DeB/A8S8qLlpcxsClqPUq3u4h/vFjBxsQGUC/E5TNjwP R0hRDhE73SOrcdCa8MR3SA5HAPZ7nPWQYtkGM2hSqrgW0vc2YSiF5aeWVuiKCrKx SeZ7WbMwtqjyYJnxvz2gfm291TvWqLPzzuvTTpzAqB2uNsueyp3tTYp5+VnL3Ek7 oumagqKRe+Du5hCMyLf5g7wEQHLUdOkt9Sa+bNIS9V9rRxSQtmgpro0W8d6paO+j 0AAGTjdIKcDGVBSdWeE98N4BK8g5udebit7Jtle6w+oi6LEgRGCGeXsmfzQotDtW ZZoZltKGoUkQhaYuS5ON4dBbqqS2XUU= -----END CERTIFICATE-----Generated at Sat Sep 26 08:39:53 2026 by rpki-client