$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d9539683-6b8c-3be2-ad36-3ec7c7a069b4.roa File: d9539683-6b8c-3be2-ad36-3ec7c7a069b4.roa (raw, json) Hash identifier: XtAnHky7iNe1Kg0tQOE9b1/Twio0ij/8pJ5rsLBkFUQ= Subject key identifier: B7:E5:8F:49:DD:C6:FB:D7:46:00:D3:5D:E9:CA:67:D5:AD:87:EF:8B Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584F3CE298836A1CA5D4F6B2C300 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d9539683-6b8c-3be2-ad36-3ec7c7a069b4.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 147.53.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:98:83:6a:1c:a5:d4:f6:b2:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=8995dc8e-28c8-4c9e-815c-63ac6b99a70e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:2b:a8:42:51:43:03:60:b1:b3:3d:b7:60:56: 0a:28:4e:0a:1d:aa:c7:f7:84:67:78:26:00:1b:a3: 6b:03:bf:32:4d:0f:54:6e:2c:bf:3b:a0:c5:49:c5: aa:9e:b4:03:17:e8:6c:c5:2c:e7:74:76:ab:56:ec: 5d:42:02:e0:3d:e8:2c:3e:ba:ac:8b:5d:92:2f:b4: b9:cd:6b:25:9a:8c:16:83:60:47:b4:e6:24:f8:93: e3:36:4a:8b:8a:ad:8d:a8:fa:0f:92:a2:e3:7e:43: 97:b6:9d:87:d6:94:84:6b:1e:10:0d:c8:16:d6:f3: f5:ef:2f:17:44:66:67:fd:e4:83:79:26:68:37:20: 59:8f:13:85:a7:5f:80:91:31:d0:20:56:c5:4f:0e: f9:35:91:43:fb:2f:5e:8f:99:4a:dd:72:02:15:4e: d4:aa:31:57:66:c3:cc:af:06:66:05:2d:57:32:b5: 33:d2:e5:89:d9:82:30:34:ba:cb:c4:f7:f6:b3:41: 9b:fc:89:4a:d5:13:01:2f:e7:a6:f4:e4:0b:ea:80: 4d:09:6b:f6:4d:1d:a0:36:e9:cc:c5:09:2b:d1:1f: 8e:58:45:33:2c:73:e6:44:25:b2:5e:99:c1:43:25: 11:64:3b:99:b7:57:01:a7:1c:ed:eb:93:d1:ac:44: 46:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E5:8F:49:DD:C6:FB:D7:46:00:D3:5D:E9:CA:67:D5:AD:87:EF:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d9539683-6b8c-3be2-ad36-3ec7c7a069b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 147.53.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:6d:65:e3:b1:fd:de:7f:8d:6a:51:fe:54:38:d6:ef:37:9a: 12:87:63:7a:7e:ed:69:cd:3f:6c:7b:b2:15:20:d4:ff:66:f1: bc:0e:18:aa:01:75:81:ac:95:89:5e:50:0a:2e:c8:2e:82:bc: d9:9e:7d:45:0a:c3:19:bd:9b:d8:d3:9d:9b:34:12:68:93:65: b8:ac:d5:e6:24:8f:5a:a0:15:3e:8d:b4:1e:07:b3:b9:3b:a3: a4:27:96:61:e5:38:17:4a:ea:a8:e7:e5:69:2d:56:8d:10:42: 44:84:40:37:83:2c:aa:29:59:5c:4b:f8:0e:af:dd:77:f7:04: 5b:c2:3a:d9:a5:c3:5d:5c:ec:72:f6:34:14:a3:9b:2a:9a:12: c8:aa:d5:f8:5f:e5:28:1f:61:e2:3f:c4:b3:dd:5f:b3:eb:2a: 51:41:8b:48:eb:f3:41:34:da:5f:20:c9:b4:11:c1:f5:25:ff: 50:49:8f:dc:a4:54:56:d6:fe:09:2e:d0:5e:4d:ac:7c:9b:50: 94:1e:72:3d:ee:c8:be:f3:1b:06:7d:be:75:6a:0d:69:8e:f0: d2:50:3f:bd:e8:36:23:96:32:13:58:b2:ca:0e:0e:cd:1c:e4: b1:12:76:e8:15:3b:97:a7:bf:18:de:2f:91:c8:4b:3c:6f:83: 87:ec:fc:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884piDahyl1PaywwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk ODk5NWRjOGUtMjhjOC00YzllLTgxNWMtNjNhYzZiOTlhNzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyuoQlFDA2Cxsz23YFYKKE4KHarH94RneCYA G6NrA78yTQ9Ubiy/O6DFScWqnrQDF+hsxSzndHarVuxdQgLgPegsPrqsi12SL7S5 zWslmowWg2BHtOYk+JPjNkqLiq2NqPoPkqLjfkOXtp2H1pSEax4QDcgW1vP17y8X RGZn/eSDeSZoNyBZjxOFp1+AkTHQIFbFTw75NZFD+y9ej5lK3XICFU7UqjFXZsPM rwZmBS1XMrUz0uWJ2YIwNLrLxPf2s0Gb/IlK1RMBL+em9OQL6oBNCWv2TR2gNunM xQkr0R+OWEUzLHPmRCWyXpnBQyURZDuZt1cBpxzt65PRrERGsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLflj0ndxvvXRgDTXenKZ9Wth++LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZDk1Mzk2ODMtNmI4Yy0z YmUyLWFkMzYtM2VjN2M3YTA2OWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkzV0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZtZeOx/d5/jWpR/lQ41u83mhKHY3p+7WnNP2x7shUg1P9m8bwOGKoB dYGslYleUAouyC6CvNmefUUKwxm9m9jTnZs0EmiTZbis1eYkj1qgFT6NtB4Hs7k7 o6QnlmHlOBdK6qjn5WktVo0QQkSEQDeDLKopWVxL+A6v3Xf3BFvCOtmlw11c7HL2 NBSjmyqaEsiq1fhf5SgfYeI/xLPdX7PrKlFBi0jr80E02l8gybQRwfUl/1BJj9yk VFbW/gku0F5NrHybUJQecj3uyL7zGwZ9vnVqDWmO8NJQP73oNiOWMhNYssoODs0c 5LESdugVO5envxjeL5HISzxvg4fs/A0= -----END CERTIFICATE-----Generated at Sat Sep 26 23:38:51 2026 by rpki-client