$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/ec2fa4f8-a7b3-38e2-aa1a-85221290d1dd.roa File: ec2fa4f8-a7b3-38e2-aa1a-85221290d1dd.roa (raw, json) Hash identifier: aprTBn5JtnixQssSNb1JCM8+r+LUutdi1K8v8Yy+8xA= Subject key identifier: 13:0F:61:18:79:89:76:C8:E9:F0:13:58:D8:D9:7A:AE:F4:95:D9:20 Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Certificate serial: 010D0C9F4328584EA798094302DC89DCA9947400 Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/ec2fa4f8-a7b3-38e2-aa1a-85221290d1dd.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 11273 IP address blocks: 170.186.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:09:43:02:dc:89:dc:a9:94:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=40ed5a11-a602-4652-a989-fac640f015fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:17:7b:c1:4d:41:03:55:aa:f0:45:e2:cd:91: c6:8f:08:76:8b:b7:62:83:c6:a1:47:a4:47:10:d1: d8:7f:87:fc:e2:f2:4c:1c:0a:fd:38:c4:1a:6f:bb: d5:ae:db:ec:13:87:36:6f:03:5f:9b:46:40:20:56: 6e:e8:2c:0c:92:69:8c:e2:27:e8:92:09:76:a0:83: 27:6b:a5:5a:2b:09:ee:fc:b4:e5:57:2a:1f:05:ba: 64:86:e7:22:38:0a:dc:f1:c0:30:29:13:34:8b:cd: 28:f3:19:a3:3a:83:35:ce:cf:b8:6f:a5:07:04:18: 29:c4:4e:45:a0:3c:dc:ff:74:b4:e9:d5:f4:03:28: 71:25:31:78:24:4a:94:a2:4a:0d:22:a5:48:cb:9c: 34:81:56:58:dd:a0:c6:db:16:60:19:06:f8:b5:30: a8:f6:f9:d7:80:43:ad:ec:ac:8b:a6:4c:7a:cf:e1: 38:57:25:8c:87:dd:ae:49:b7:83:c4:56:92:58:98: ab:07:bb:35:78:98:c4:4a:f0:4e:fa:f3:44:50:70: bc:27:2a:43:b2:ab:01:b3:11:3b:89:d8:b1:33:62: 9f:0b:ba:bd:62:7b:17:3b:16:d9:9a:71:7e:98:18: 7f:a6:71:70:de:28:13:d4:32:46:0c:44:ad:31:b5: bf:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:0F:61:18:79:89:76:C8:E9:F0:13:58:D8:D9:7A:AE:F4:95:D9:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/ec2fa4f8-a7b3-38e2-aa1a-85221290d1dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl X509v3 Authority Key Identifier: keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer sbgp-ipAddrBlock: critical IPv4: 170.186.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:6e:61:b7:13:29:37:1d:aa:fd:44:77:72:bb:7d:d8:93:78: 5d:3a:20:2b:7f:9e:53:5d:7b:52:9a:8e:08:70:c2:a2:6d:08: 5a:e2:79:c0:67:12:20:23:51:76:1e:0d:c5:f5:a7:e2:6d:8a: d1:e0:cd:c7:3a:e4:80:39:61:ae:ac:d8:ba:8a:50:7b:85:eb: 0d:ff:cc:7f:ba:3f:83:ef:d3:4c:75:a4:cf:77:d3:c4:86:24: b6:d1:27:61:74:90:01:b4:55:cb:d2:6d:7f:8c:23:50:e7:23: 8c:a3:2c:6b:27:a8:0e:69:b2:bc:3e:cf:21:4f:86:3d:3a:67: 5f:df:8e:dd:c6:10:26:08:97:b4:19:c8:be:d0:bc:71:8f:bd: 63:ec:b1:97:c8:4d:e5:80:3c:ef:63:2a:1c:51:df:2b:98:8c: 58:25:ee:57:b5:e7:76:90:93:6d:5d:0a:28:19:3d:a3:61:9e: c8:5a:d3:da:e7:db:1e:8f:24:58:f7:0c:c0:c0:14:99:8a:90: 7d:79:76:3c:6c:6c:e4:81:99:4b:f6:38:ed:ea:ec:92:ad:6a: 50:be:a7:87:6d:1a:66:b2:f7:e8:28:db:1e:86:c2:95:2d:d4: 6c:c9:25:29:b9:b0:76:8a:59:6d:81:ed:c2:d9:88:be:6a:0d: c9:0a:7b:fd -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6nmAlDAtyJ3KmUdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0 ZDUyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDBlZDVhMTEtYTYwMi00NjUyLWE5ODktZmFjNjQwZjAxNWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxd7wU1BA1Wq8EXizZHGjwh2i7dig8ahR6RH ENHYf4f84vJMHAr9OMQab7vVrtvsE4c2bwNfm0ZAIFZu6CwMkmmM4ifokgl2oIMn a6VaKwnu/LTlVyofBbpkhuciOArc8cAwKRM0i80o8xmjOoM1zs+4b6UHBBgpxE5F oDzc/3S06dX0AyhxJTF4JEqUokoNIqVIy5w0gVZY3aDG2xZgGQb4tTCo9vnXgEOt 7KyLpkx6z+E4VyWMh92uSbeDxFaSWJirB7s1eJjESvBO+vNEUHC8JypDsqsBsxE7 idixM2KfC7q9YnsXOxbZmnF+mBh/pnFw3igT1DJGDEStMbW/dwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBMPYRh5iXbI6fATWNjZeq70ldkgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvZWMyZmE0ZjgtYTdiMy0z OGUyLWFhMWEtODUyMjEyOTBkMWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5 ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4 NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4 MGFjODRkNTIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqrowVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAfm5htxMpNx2q/UR3crt92JN4XTogK3+eU117UpqOCHDCom0IWuJ5wGcS ICNRdh4NxfWn4m2K0eDNxzrkgDlhrqzYuopQe4XrDf/Mf7o/g+/TTHWkz3fTxIYk ttEnYXSQAbRVy9Jtf4wjUOcjjKMsayeoDmmyvD7PIU+GPTpnX9+O3cYQJgiXtBnI vtC8cY+9Y+yxl8hN5YA872MqHFHfK5iMWCXuV7XndpCTbV0KKBk9o2GeyFrT2ufb Ho8kWPcMwMAUmYqQfXl2PGxs5IGZS/Y47erskq1qUL6nh20aZrL36CjbHobClS3U bMklKbmwdopZbYHtwtmIvmoNyQp7/Q== -----END CERTIFICATE-----Generated at Wed Jul 29 09:20:39 2026 by rpki-client