$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/237e22c1-1d5e-3e56-ab84-1316298cd75c.roa File: 237e22c1-1d5e-3e56-ab84-1316298cd75c.roa (raw, json) Hash identifier: dsbiJxyMmtifPEGSI0jolttYWqwq+RNdxlpyqM7Ybkk= Subject key identifier: 00:CF:A9:43:A4:70:E4:06:07:93:F7:92:B6:6A:F4:FA:0D:25:26:32 Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Certificate serial: 010D0C9F4328584EA79809F3BA4DFA3FB04CECB0 Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/237e22c1-1d5e-3e56-ab84-1316298cd75c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 11273 IP address blocks: 216.66.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:09:f3:ba:4d:fa:3f:b0:4c:ec:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=325a8ae3-efda-485f-bcfe-52c830b3d020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:70:23:f6:cd:d7:cd:ba:71:4c:dc:96:b5:11: ad:a5:03:fb:72:52:84:1e:0f:78:1d:3a:f1:e8:4f: 84:b0:68:6c:28:f3:df:d2:e7:ed:0b:94:c2:30:cd: 08:62:7a:e8:a4:d6:64:8e:25:1e:44:24:51:db:48: 94:3b:d2:b5:25:bd:4e:c4:8d:7f:8f:bc:db:ca:fe: ae:ff:04:93:a1:43:7f:24:d8:ed:a9:9b:9c:c4:27: f3:f1:9e:94:f1:6b:0e:46:8d:61:d8:12:d0:60:12: 80:39:29:2d:e5:6c:37:d5:58:da:b8:56:19:14:0b: 90:c2:f8:b7:2d:6b:df:7e:9e:e4:f8:04:0c:39:9f: f5:ee:8f:54:3e:99:a1:ef:e4:fe:a6:72:9f:22:7c: a9:7d:13:98:fe:dd:70:bc:9e:9e:e3:98:17:54:fa: c1:69:f0:96:39:f8:c1:de:1d:d7:3e:2a:f7:14:9d: 3a:d8:c1:0e:66:79:10:de:a4:6b:1b:ea:25:0a:1c: 31:96:79:40:d8:d8:74:b2:5e:f4:fa:d8:04:e8:86: 00:55:53:ef:e1:9a:4c:19:47:b9:df:58:43:e8:11: 60:18:68:2d:33:09:08:40:91:22:39:49:da:e4:44: e8:2c:8c:c3:2f:78:ea:b7:fd:29:80:65:f0:65:3c: 7b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CF:A9:43:A4:70:E4:06:07:93:F7:92:B6:6A:F4:FA:0D:25:26:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/237e22c1-1d5e-3e56-ab84-1316298cd75c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl X509v3 Authority Key Identifier: keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer sbgp-ipAddrBlock: critical IPv4: 216.66.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:3d:6e:44:f9:e3:a5:f5:cc:4f:6a:6a:fc:c3:58:f1:b5:d0: a6:0e:61:56:c9:5c:60:5d:c2:9b:52:17:c6:4d:bb:d2:2f:c7: 4f:9d:4e:40:61:82:50:a7:68:26:68:e2:cc:2f:19:d9:3f:2f: c5:15:49:95:09:65:f0:73:8a:99:fa:17:95:5a:d8:b2:e6:1a: 84:a2:51:0d:53:f5:99:59:56:6a:c8:64:63:db:b9:14:78:12: 34:df:0d:30:c6:a6:ea:54:1e:10:9f:6b:1f:3a:ea:b4:9f:b6: 37:fa:f3:ac:33:65:70:2d:94:d2:7d:4e:78:f4:ac:9b:e2:39: 12:0d:7a:70:86:4c:99:05:77:7b:29:d3:a4:e9:63:c6:d5:8c: 04:28:94:91:35:6b:30:45:ef:c3:4b:a5:2d:d7:57:c9:2c:dc: aa:52:41:a6:cd:85:a7:b3:66:e1:cd:55:03:67:b7:61:58:4a: d6:ca:4e:d5:13:c7:be:82:40:72:b9:52:cc:1c:8a:18:4e:a3: 87:04:0d:eb:08:f5:8b:9d:2a:01:50:83:03:90:67:fb:b6:22: 97:82:53:9f:5f:84:98:6c:67:c1:5c:e5:8c:78:99:c5:89:e2: 6e:be:57:42:54:b5:84:a9:0b:f6:38:ad:70:8a:64:8a:d5:0a: 27:23:97:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmAnzuk36P7BM7LAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0 ZDUyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzI1YThhZTMtZWZkYS00ODVmLWJjZmUtNTJjODMwYjNkMDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3Aj9s3XzbpxTNyWtRGtpQP7clKEHg94HTrx 6E+EsGhsKPPf0uftC5TCMM0IYnropNZkjiUeRCRR20iUO9K1Jb1OxI1/j7zbyv6u /wSToUN/JNjtqZucxCfz8Z6U8WsORo1h2BLQYBKAOSkt5Ww31VjauFYZFAuQwvi3 LWvffp7k+AQMOZ/17o9UPpmh7+T+pnKfInypfROY/t1wvJ6e45gXVPrBafCWOfjB 3h3XPir3FJ062MEOZnkQ3qRrG+olChwxlnlA2Nh0sl70+tgE6IYAVVPv4ZpMGUe5 31hD6BFgGGgtMwkIQJEiOUna5EToLIzDL3jqt/0pgGXwZTx7awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADPqUOkcOQGB5P3krZq9PoNJSYyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvMjM3ZTIyYzEtMWQ1ZS0z ZTU2LWFiODQtMTMxNjI5OGNkNzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5 ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4 NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4 MGFjODRkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2ELQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL09bkT546X1zE9qavzDWPG10KYOYVbJXGBdwptSF8ZNu9Ivx0+dTkBh glCnaCZo4swvGdk/L8UVSZUJZfBzipn6F5Va2LLmGoSiUQ1T9ZlZVmrIZGPbuRR4 EjTfDTDGpupUHhCfax866rSftjf686wzZXAtlNJ9Tnj0rJviORINenCGTJkFd3sp 06TpY8bVjAQolJE1azBF78NLpS3XV8ks3KpSQabNhaezZuHNVQNnt2FYStbKTtUT x76CQHK5UswcihhOo4cEDesI9YudKgFQgwOQZ/u2IpeCU59fhJhsZ8Fc5Yx4mcWJ 4m6+V0JUtYSpC/Y4rXCKZIrVCicjlzM= -----END CERTIFICATE-----Generated at Wed Jul 29 08:43:38 2026 by rpki-client