$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/d14d99f6-81f6-3077-9604-b996080b45c9.roa File: d14d99f6-81f6-3077-9604-b996080b45c9.roa (raw, json) Hash identifier: eP3bE+IZZTg6GPgiWkSKdVq5AfL3NnwnEEzjGXnWy74= Subject key identifier: 06:8F:A3:02:0F:72:07:F4:01:15:3E:62:FE:85:8D:42:0B:8A:00:25 Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Certificate serial: 010D0C9F4328584F49751C0149D1F8EDD9714DA0 Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/d14d99f6-81f6-3077-9604-b996080b45c9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11273 IP address blocks: 204.194.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:1c:01:49:d1:f8:ed:d9:71:4d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1e3e366e-2f62-4812-8aa8-b8094101b67c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:53:84:c4:6a:40:ee:d7:3b:40:8e:e3:3f:50: 2f:1b:e0:b9:54:65:3f:aa:55:08:e1:32:2a:5c:47: 71:45:95:18:35:fd:2b:d9:a6:4b:15:3b:f8:1b:84: 93:d8:69:56:d7:ea:dd:bb:ac:47:f2:41:59:52:04: 2e:dd:f4:cf:c8:fa:67:4a:e9:4b:66:06:b0:7d:61: 88:4a:bc:95:2d:e5:c9:7f:d2:51:9b:c2:a0:1e:90: 89:46:9e:9a:84:7b:20:1b:8f:0a:cf:56:91:c7:a5: fd:6b:fb:48:f4:37:24:1f:7d:de:d8:1b:50:df:aa: 62:1e:e0:d7:41:3b:29:a1:77:1f:a8:28:25:9f:c3: ab:b7:6b:a9:15:41:86:42:5b:3f:46:7c:2c:a2:0d: 4d:2e:76:6f:52:79:8e:de:38:cf:56:3c:e3:ed:16: a3:6e:ab:20:f8:92:2c:31:af:65:fc:74:9f:37:da: 15:6b:45:e5:5c:b5:65:2f:43:58:44:99:5b:37:b9: d2:3a:d8:b7:67:e8:8c:71:b3:b2:cc:0a:ee:97:dd: 19:ce:14:f9:09:87:55:e3:a2:9c:99:15:e1:10:77: c0:83:5b:30:07:91:22:e8:6c:db:5c:48:15:5b:5e: eb:98:8c:6a:3c:bb:d5:3a:ae:d3:db:44:8c:81:e7: 98:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:8F:A3:02:0F:72:07:F4:01:15:3E:62:FE:85:8D:42:0B:8A:00:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/d14d99f6-81f6-3077-9604-b996080b45c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl X509v3 Authority Key Identifier: keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer sbgp-ipAddrBlock: critical IPv4: 204.194.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:59:d9:41:1f:35:97:88:2f:9d:73:19:4e:1b:a6:d4:61:77: 14:5a:a6:b3:57:a4:ad:50:3a:45:eb:8b:b1:8f:23:45:9e:2e: ba:fc:e2:9c:f5:95:ac:47:84:b0:92:57:49:c6:b8:7f:a8:0d: b8:3c:a4:f7:79:44:57:fd:22:94:d0:60:c4:53:a3:8b:0d:d0: 60:55:7f:7f:29:68:40:88:4c:1c:56:48:a7:ee:2b:17:50:ee: 60:b0:9e:0e:7e:eb:ca:7a:d6:77:eb:cb:3d:6c:a7:bc:10:69: 8d:06:30:7a:42:25:cd:8e:18:ea:6f:62:fb:31:99:93:4a:63: fe:0c:93:3b:f2:1b:26:9a:17:f8:c1:0f:6c:48:bc:52:e7:8c: 4c:e6:9d:a9:41:a5:45:ea:33:45:91:23:fa:64:17:3e:c7:f3: 0a:eb:2e:46:4e:c5:c6:be:56:78:54:a6:6c:48:4f:19:d5:e5: c2:a7:43:7b:5a:78:25:83:06:43:8f:32:62:50:93:24:05:d3: 0f:da:39:d9:e7:56:dc:87:a1:79:4c:63:dd:b6:db:4d:8e:5c: 30:8b:38:3d:b5:b2:f9:bd:6f:d6:8e:20:77:37:c9:37:92:f6: 22:c6:97:7b:69:dd:52:68:43:42:85:97:10:a3:1c:a9:10:5e: af:11:4d:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdRwBSdH47dlxTaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0 ZDUyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWUzZTM2NmUtMmY2Mi00ODEyLThhYTgtYjgwOTQxMDFiNjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FOExGpA7tc7QI7jP1AvG+C5VGU/qlUI4TIq XEdxRZUYNf0r2aZLFTv4G4ST2GlW1+rdu6xH8kFZUgQu3fTPyPpnSulLZgawfWGI SryVLeXJf9JRm8KgHpCJRp6ahHsgG48Kz1aRx6X9a/tI9DckH33e2BtQ36piHuDX QTspoXcfqCgln8Ort2upFUGGQls/Rnwsog1NLnZvUnmO3jjPVjzj7Rajbqsg+JIs Ma9l/HSfN9oVa0XlXLVlL0NYRJlbN7nSOti3Z+iMcbOyzArul90ZzhT5CYdV46Kc mRXhEHfAg1swB5Ei6GzbXEgVW17rmIxqPLvVOq7T20SMgeeY6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAaPowIPcgf0ARU+Yv6FjUILigAlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvZDE0ZDk5ZjYtODFmNi0z MDc3LTk2MDQtYjk5NjA4MGI0NWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5 ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4 NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4 MGFjODRkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzMKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK9Z2UEfNZeIL51zGU4bptRhdxRaprNXpK1QOkXri7GPI0WeLrr84pz1 laxHhLCSV0nGuH+oDbg8pPd5RFf9IpTQYMRTo4sN0GBVf38paECITBxWSKfuKxdQ 7mCwng5+68p61nfryz1sp7wQaY0GMHpCJc2OGOpvYvsxmZNKY/4MkzvyGyaaF/jB D2xIvFLnjEzmnalBpUXqM0WRI/pkFz7H8wrrLkZOxca+VnhUpmxITxnV5cKnQ3ta eCWDBkOPMmJQkyQF0w/aOdnnVtyHoXlMY922202OXDCLOD21svm9b9aOIHc3yTeS 9iLGl3tp3VJoQ0KFlxCjHKkQXq8RTYQ= -----END CERTIFICATE-----Generated at Sat Oct 10 13:18:38 2026 by rpki-client