$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/20b975e8-3fac-3f7e-b84a-27e54e618e4a.roa File: 20b975e8-3fac-3f7e-b84a-27e54e618e4a.roa (raw, json) Hash identifier: KJ0tHS/p67S+ikR4ir1CphHDkGmYOdCksUiZdJNQqNs= Subject key identifier: AA:25:56:1E:CA:4C:D9:87:CD:D8:41:47:3E:A7:61:57:63:23:E7:B6 Certificate issuer: /CN=28d0c262-8ea2-444a-ab1e-6d07c3483e45 Certificate serial: 010D0C9F4328584F27F2553D08C2B7AFC5889B80 Authority key identifier: 7B:FD:21:C3:F3:A0:5F:FC:74:CB:DE:A6:8F:D9:34:04:EC:8B:08:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/20b975e8-3fac-3f7e-b84a-27e54e618e4a.roa Signing time: Sun 13 Sep 2026 01:00:12 +0000 ROA not before: Sun 13 Sep 2026 01:00:12 +0000 ROA not after: Sat 12 Dec 2026 02:00:12 +0000 asID: 10753 IP address blocks: 216.169.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:27:f2:55:3d:08:c2:b7:af:c5:88:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28d0c262-8ea2-444a-ab1e-6d07c3483e45 Validity Not Before: Sep 13 01:00:12 2026 GMT Not After : Dec 12 02:00:12 2026 GMT Subject: CN=20cb2624-4fbd-4ced-a333-3fbe2e3f77ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:30:bf:f1:92:e1:5f:d7:c8:78:d4:1b:b9:e0: 15:b7:87:74:17:d1:99:96:8d:98:c1:10:66:39:dd: 6d:e0:ba:63:96:71:b4:29:aa:9d:e8:5d:24:d0:8d: 37:f5:fc:3b:78:d2:6e:af:91:4a:e9:cf:2b:97:f3: 29:d1:b2:bc:63:d1:30:0b:0f:a6:cd:1a:23:c9:be: e6:d9:ea:d6:06:c7:85:06:df:e1:14:28:76:e8:ed: 7b:f1:aa:43:c9:3f:b2:d8:30:42:64:e4:65:cd:f1: 99:5d:02:fd:74:e1:4b:9d:15:6a:60:fc:c6:ce:85: 07:98:37:11:6f:18:80:a5:ba:a5:1f:55:fe:d7:5f: e8:e6:b3:b7:fa:92:1d:40:e6:40:b3:f7:3d:3a:4a: 81:e4:44:91:00:32:be:46:78:ec:04:7a:54:05:f4: cb:92:a3:c5:80:1f:fb:99:f3:ed:0d:e0:99:f5:ab: dc:d6:c4:90:ac:31:1f:c7:e7:53:c4:ea:9f:b2:4f: c9:c9:d6:5c:e8:60:0b:a8:18:d3:da:99:6b:b8:b9: 93:4b:68:33:65:4c:69:2d:42:86:e1:62:de:e6:8a: 6a:ac:47:bc:02:7b:a7:1c:39:a0:1f:09:60:a6:5d: 41:40:df:db:6d:21:51:3e:45:2c:6d:ce:01:a6:c8: 57:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:25:56:1E:CA:4C:D9:87:CD:D8:41:47:3E:A7:61:57:63:23:E7:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/20b975e8-3fac-3f7e-b84a-27e54e618e4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.crl X509v3 Authority Key Identifier: keyid:7B:FD:21:C3:F3:A0:5F:FC:74:CB:DE:A6:8F:D9:34:04:EC:8B:08:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer sbgp-ipAddrBlock: critical IPv4: 216.169.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:51:b0:d7:63:d8:f9:a0:5a:3b:e9:f3:06:d5:b6:07:a8:f8: be:e5:33:df:4b:e6:ca:b9:77:5e:39:96:94:61:cb:24:8b:84: d4:cb:b8:bc:a9:07:16:ae:0d:69:cd:a5:7b:d3:e3:1c:9e:64: 33:ba:81:b1:fa:be:13:db:36:0c:e1:41:27:ff:bd:63:23:2c: 4a:02:b8:49:3a:0b:b6:5b:69:2b:88:00:49:e3:be:fc:b3:39: c5:85:4d:41:e1:74:bd:ca:12:91:08:9d:a4:bc:bb:da:15:9b: 9d:c4:be:34:08:b0:65:d3:3c:29:cc:0e:94:95:ce:53:73:c6: 0f:a6:56:1d:aa:41:05:44:62:c0:35:d7:3c:fe:58:7c:96:c1: e4:b3:82:51:ab:e7:ab:cf:e0:65:c5:46:92:25:83:33:48:b8: 46:1a:6b:dc:3e:ba:a8:f4:69:0a:f4:71:d1:4e:02:14:a8:3a: 7c:06:3c:a5:07:dc:cf:4c:74:45:24:3f:ae:ac:a6:0d:00:df: 5f:70:57:ee:6a:1f:b9:4a:7a:e9:d8:b1:17:d3:de:f4:47:3c: 20:23:37:0b:f5:f3:8e:ee:e1:4f:82:6f:69:85:33:89:9a:37: 0f:cd:ca:6d:3b:7c:5f:7d:34:00:d7:0b:5c:90:90:97:e9:e4: ef:95:14:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8n8lU9CMK3r8WIm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhkMGMyNjItOGVhMi00NDRhLWFiMWUtNmQwN2MzNDgz ZTQ1MB4XDTI2MDkxMzAxMDAxMloXDTI2MTIxMjAyMDAxMlowLzEtMCsGA1UEAxMk MjBjYjI2MjQtNGZiZC00Y2VkLWEzMzMtM2ZiZTJlM2Y3N2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzC/8ZLhX9fIeNQbueAVt4d0F9GZlo2YwRBm Od1t4LpjlnG0Kaqd6F0k0I039fw7eNJur5FK6c8rl/Mp0bK8Y9EwCw+mzRojyb7m 2erWBseFBt/hFCh26O178apDyT+y2DBCZORlzfGZXQL9dOFLnRVqYPzGzoUHmDcR bxiApbqlH1X+11/o5rO3+pIdQOZAs/c9OkqB5ESRADK+RnjsBHpUBfTLkqPFgB/7 mfPtDeCZ9avc1sSQrDEfx+dTxOqfsk/JydZc6GALqBjT2plruLmTS2gzZUxpLUKG 4WLe5opqrEe8AnunHDmgHwlgpl1BQN/bbSFRPkUsbc4BpshXKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKolVh7KTNmHzdhBRz6nYVdjI+e2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yOGQw YzI2Mi04ZWEyLTQ0NGEtYWIxZS02ZDA3YzM0ODNlNDUvMjBiOTc1ZTgtM2ZhYy0z ZjdlLWI4NGEtMjdlNTRlNjE4ZTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjhkMGMyNjItOGVhMi00NDRhLWFi MWUtNmQwN2MzNDgzZTQ1LzI4ZDBjMjYyLThlYTItNDQ0YS1hYjFlLTZkMDdjMzQ4 M2U0NS5jcmwwHwYDVR0jBBgwFoAUe/0hw/OgX/x0y96mj9k0BOyLCO4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yOGQwYzI2Mi04ZWEyLTQ0NGEtYWIxZS02ZDA3 YzM0ODNlNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Kl2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpRsNdj2PmgWjvp8wbVtgeo+L7lM99L5sq5d145lpRhyySLhNTLuLyp BxauDWnNpXvT4xyeZDO6gbH6vhPbNgzhQSf/vWMjLEoCuEk6C7ZbaSuIAEnjvvyz OcWFTUHhdL3KEpEInaS8u9oVm53EvjQIsGXTPCnMDpSVzlNzxg+mVh2qQQVEYsA1 1zz+WHyWweSzglGr56vP4GXFRpIlgzNIuEYaa9w+uqj0aQr0cdFOAhSoOnwGPKUH 3M9MdEUkP66spg0A319wV+5qH7lKeunYsRfT3vRHPCAjNwv1847u4U+Cb2mFM4ma Nw/Nym07fF99NADXC1yQkJfp5O+VFAc= -----END CERTIFICATE-----Generated at Sun Sep 20 16:28:42 2026 by rpki-client