$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d5168aed-9e88-395e-a9e4-21f68cbb1f1b.roa File: d5168aed-9e88-395e-a9e4-21f68cbb1f1b.roa (raw, json) Hash identifier: o6eA8ATnYaiXWLKkhdcck4ipUACZm6IhEalJIKR7+Uw= Subject key identifier: 9C:15:45:CE:46:8F:61:43:53:A5:93:3D:35:43:B8:D7:E1:2C:A6:96 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584EA78745F427260E109ED72880 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d5168aed-9e88-395e-a9e4-21f68cbb1f1b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20001 IP address blocks: 172.96.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:45:f4:27:26:0e:10:9e:d7:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=13b76386-f501-40d1-9357-41610f3e1266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:eb:fb:84:d5:d4:c8:78:2d:5e:e9:40:b9:2c: e1:4e:34:dd:58:3f:52:f1:ce:62:5c:5a:e0:66:09: 72:e9:45:40:a5:dc:f0:9c:0c:f6:03:40:73:25:97: d8:63:ed:5d:c1:29:ec:e1:d4:9b:b9:50:32:b0:91: 18:bd:cb:36:c3:1a:0b:a6:d5:99:b9:1f:25:53:24: cf:7a:e1:b6:29:96:9c:4e:8b:4e:42:3b:d1:79:23: d3:c7:68:7c:1b:02:99:41:1b:6e:12:8e:9e:7b:27: 01:4c:01:cb:c7:d0:1d:a1:bd:d3:d8:2a:a0:bc:d9: 02:73:b8:fd:be:21:83:29:39:aa:ff:bc:8f:f6:7e: ce:f6:d1:d5:f2:c8:5c:8b:4e:f5:3e:ea:71:2f:28: f0:37:20:34:80:ef:70:55:00:ea:c0:3a:68:52:61: 82:a3:20:8a:0e:aa:54:56:34:5c:30:fc:b6:be:8c: 0a:a6:89:08:5d:8f:2a:cd:09:0f:11:8c:d6:89:eb: 45:cf:7a:5e:ec:cb:74:16:5c:c7:08:ed:f5:c9:bf: 34:32:a7:fb:14:d3:33:3e:ae:3e:5a:ab:2b:94:76: c9:5c:9f:d3:89:1b:1a:2f:b1:d7:6e:19:c2:42:91: 58:ce:c8:29:8c:1e:c3:4e:75:b2:50:92:3b:d2:84: 79:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:15:45:CE:46:8F:61:43:53:A5:93:3D:35:43:B8:D7:E1:2C:A6:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d5168aed-9e88-395e-a9e4-21f68cbb1f1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 172.96.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:7e:c1:dd:2e:bb:4d:a2:4f:73:5d:b4:d2:83:81:9d:a4:8e: 7c:cc:49:dd:6b:f9:88:34:9b:6a:23:f9:d7:b8:3d:58:c9:b2: 15:36:98:03:f5:7b:83:f6:88:2e:11:35:1a:db:b3:48:8d:31: e5:70:b5:ee:4b:7e:8b:8c:34:38:05:73:6e:0a:20:7b:95:71: ae:25:a1:5e:44:59:71:15:27:17:78:12:2e:90:6e:ac:84:4f: 1d:f6:c0:f7:a7:75:1f:70:19:02:73:ec:ec:83:3e:fd:2b:f4: ae:f2:ec:1d:ba:b6:78:b4:22:68:47:8c:58:8a:1a:97:c5:d6: f7:50:dd:5e:d8:19:f7:f5:ad:05:66:15:62:0d:02:b7:3a:10: 26:42:bd:63:c2:f6:4e:5e:d8:cf:26:8b:8e:df:15:92:cb:fb: 81:c5:a4:5e:9b:93:0b:ea:8a:c6:0d:13:63:ca:bd:d1:76:9f: b8:49:d6:8c:05:51:8a:40:87:a1:11:b7:d9:a1:40:01:11:6c: 87:cc:25:98:55:3e:28:6f:2f:a4:47:10:82:47:c8:fc:fe:64: 93:76:c9:eb:f4:f1:3d:c6:a3:c3:c6:bf:ef:1d:0a:31:a7:2c: ca:4d:78:8e:57:d9:36:fd:73:87:9b:d5:8b:05:98:b5:6d:51: 7b:00:41:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh0X0JyYOEJ7XKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTNiNzYzODYtZjUwMS00MGQxLTkzNTctNDE2MTBmM2UxMjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+v7hNXUyHgtXulAuSzhTjTdWD9S8c5iXFrg Zgly6UVApdzwnAz2A0BzJZfYY+1dwSns4dSbuVAysJEYvcs2wxoLptWZuR8lUyTP euG2KZacTotOQjvReSPTx2h8GwKZQRtuEo6eeycBTAHLx9Adob3T2CqgvNkCc7j9 viGDKTmq/7yP9n7O9tHV8shci071PupxLyjwNyA0gO9wVQDqwDpoUmGCoyCKDqpU VjRcMPy2vowKpokIXY8qzQkPEYzWietFz3pe7Mt0FlzHCO31yb80Mqf7FNMzPq4+ WqsrlHbJXJ/TiRsaL7HXbhnCQpFYzsgpjB7DTnWyUJI70oR5LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwVRc5Gj2FDU6WTPTVDuNfhLKaWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZDUxNjhhZWQtOWU4OC0z OTVlLWE5ZTQtMjFmNjhjYmIxZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGBXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMh+wd0uu02iT3NdtNKDgZ2kjnzMSd1r+Yg0m2oj+de4PVjJshU2mAP1 e4P2iC4RNRrbs0iNMeVwte5LfouMNDgFc24KIHuVca4loV5EWXEVJxd4Ei6QbqyE Tx32wPendR9wGQJz7OyDPv0r9K7y7B26tni0ImhHjFiKGpfF1vdQ3V7YGff1rQVm FWINArc6ECZCvWPC9k5e2M8mi47fFZLL+4HFpF6bkwvqisYNE2PKvdF2n7hJ1owF UYpAh6ERt9mhQAERbIfMJZhVPihvL6RHEIJHyPz+ZJN2yev08T3Go8PGv+8dCjGn LMpNeI5X2Tb9c4eb1YsFmLVtUXsAQdI= -----END CERTIFICATE-----Generated at Wed Jul 29 04:12:53 2026 by rpki-client