$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9d6428ca-458c-35b1-b04a-f4c37e354a5a.roa File: 9d6428ca-458c-35b1-b04a-f4c37e354a5a.roa (raw, json) Hash identifier: vrV46HYgieVscHSvdXnwSv2xNOa0HM+Et937HS0CdRQ= Subject key identifier: 65:39:A9:F8:03:17:2E:D9:59:0A:C3:F5:F0:9A:DB:18:76:D6:F1:97 Certificate issuer: /CN=9b502c27-b722-427c-af11-f9048a06a1a5 Certificate serial: 010D0C9F4328584F612D622C0348A35BF4F3D180 Authority key identifier: 96:08:82:21:79:62:80:AC:80:02:9B:E4:86:F6:AB:C9:64:1A:F2:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9d6428ca-458c-35b1-b04a-f4c37e354a5a.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 6939 IP address blocks: 72.21.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9b502c27-b722-427c-af11-f9048a06a1a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9b502c27-b722-427c-af11-f9048a06a1a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:62:2c:03:48:a3:5b:f4:f3:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b502c27-b722-427c-af11-f9048a06a1a5 Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=492ea695-7bb4-40d4-8b0a-916ac9c59ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:57:a4:f1:6d:53:42:53:c4:85:2c:3e:7d:31: 81:85:87:ce:a8:a7:c4:98:e1:d1:9c:e5:b7:b2:e2: a0:9c:f5:fa:a9:e6:dd:f6:4f:b0:21:32:f9:56:c7: 58:a9:88:f2:2a:90:95:c8:48:5f:ee:4f:36:3a:f8: 82:51:73:d1:8d:13:32:29:60:8b:fb:86:81:6e:a4: 24:c3:65:6c:17:31:49:3e:2d:5e:80:e1:0a:19:0b: 0f:13:92:98:44:a8:2a:07:c9:11:3d:31:8c:54:06: 32:b0:ea:72:3c:8f:f4:83:66:7c:b0:ec:47:85:ff: c0:69:51:b4:bb:4c:46:04:54:36:84:f6:33:97:cd: f8:c6:ba:fc:5a:f4:9b:b8:53:ac:6e:94:ae:dc:fc: 34:3e:2a:22:0a:c7:9d:8b:96:2a:83:87:49:28:65: 40:d6:32:c6:e4:7f:cb:b6:c4:0f:4b:03:52:34:31: 6b:f0:5f:8c:49:4d:36:96:70:07:7b:06:52:2d:13: f3:0a:c3:26:55:0b:2b:0c:6c:d2:26:27:1b:b1:fb: 39:27:48:ab:15:16:7d:ce:21:1c:ba:e7:23:61:d4: 2c:a6:37:64:17:a2:04:d2:5d:ec:cd:3f:cc:84:c0: fc:25:4b:db:4f:06:33:ec:75:50:d1:ab:4d:c7:ff: c9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:39:A9:F8:03:17:2E:D9:59:0A:C3:F5:F0:9A:DB:18:76:D6:F1:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9d6428ca-458c-35b1-b04a-f4c37e354a5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9b502c27-b722-427c-af11-f9048a06a1a5.crl X509v3 Authority Key Identifier: keyid:96:08:82:21:79:62:80:AC:80:02:9B:E4:86:F6:AB:C9:64:1A:F2:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5.cer sbgp-ipAddrBlock: critical IPv4: 72.21.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:29:c5:96:03:64:ab:62:33:d7:aa:ae:bc:6a:40:35:f2:ec: ba:f2:80:1e:ff:95:c7:d9:aa:c1:0a:82:bd:c9:1f:37:d2:1a: eb:e4:b0:0b:24:e0:eb:62:f5:30:3e:57:50:c8:9d:79:3f:37: 0b:be:74:c9:70:2e:ab:a0:65:ec:07:fe:8f:0e:cd:69:5c:d4: 0f:83:75:02:22:9e:04:1e:90:bf:cf:71:61:d5:b2:22:19:88: ac:15:49:f0:1f:7e:36:fe:4e:2a:f3:a0:db:36:e8:df:60:cb: b6:01:e7:90:98:fc:63:99:de:7c:55:7c:2e:80:c6:4b:2a:a8: b1:7b:a7:12:19:ee:2a:0d:af:20:c6:ef:9a:8b:9f:1c:f1:79: 71:e2:d9:8d:e3:61:5c:58:4d:79:e9:28:ee:c9:f7:62:24:ae: e6:e6:a0:99:eb:e5:e8:b1:91:9c:db:0b:46:93:b1:fc:c6:cd: c3:b5:7a:68:a4:68:06:6c:a8:df:f1:52:15:99:88:88:f9:ad: 01:c0:73:01:1d:34:6a:8f:91:41:eb:59:f2:c8:03:a4:83:36: f1:39:99:29:91:ac:03:5a:d8:97:21:04:d1:5b:8c:fb:a4:8e: 4f:9d:a9:03:d6:20:65:f7:c0:46:85:a3:f4:d5:ad:94:be:a6: 11:31:86:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hLWIsA0ijW/Tz0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWI1MDJjMjctYjcyMi00MjdjLWFmMTEtZjkwNDhhMDZh MWE1MB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk NDkyZWE2OTUtN2JiNC00MGQ0LThiMGEtOTE2YWM5YzU5Y2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFek8W1TQlPEhSw+fTGBhYfOqKfEmOHRnOW3 suKgnPX6qebd9k+wITL5VsdYqYjyKpCVyEhf7k82OviCUXPRjRMyKWCL+4aBbqQk w2VsFzFJPi1egOEKGQsPE5KYRKgqB8kRPTGMVAYysOpyPI/0g2Z8sOxHhf/AaVG0 u0xGBFQ2hPYzl834xrr8WvSbuFOsbpSu3Pw0PioiCsedi5Yqg4dJKGVA1jLG5H/L tsQPSwNSNDFr8F+MSU02lnAHewZSLRPzCsMmVQsrDGzSJicbsfs5J0irFRZ9ziEc uucjYdQspjdkF6IE0l3szT/MhMD8JUvbTwYz7HVQ0atNx//JgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGU5qfgDFy7ZWQrD9fCa2xh21vGXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85YjUw MmMyNy1iNzIyLTQyN2MtYWYxMS1mOTA0OGEwNmExYTUvOWQ2NDI4Y2EtNDU4Yy0z NWIxLWIwNGEtZjRjMzdlMzU0YTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWI1MDJjMjctYjcyMi00MjdjLWFm MTEtZjkwNDhhMDZhMWE1LzliNTAyYzI3LWI3MjItNDI3Yy1hZjExLWY5MDQ4YTA2 YTFhNS5jcmwwHwYDVR0jBBgwFoAUlgiCIXligKyAApvkhvaryWQa8lIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85YjUwMmMyNy1iNzIyLTQyN2MtYWYxMS1mOTA0 OGEwNmExYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBUcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIpxZYDZKtiM9eqrrxqQDXy7LrygB7/lcfZqsEKgr3JHzfSGuvksAsk 4Oti9TA+V1DInXk/Nwu+dMlwLqugZewH/o8OzWlc1A+DdQIingQekL/PcWHVsiIZ iKwVSfAffjb+TirzoNs26N9gy7YB55CY/GOZ3nxVfC6AxksqqLF7pxIZ7ioNryDG 75qLnxzxeXHi2Y3jYVxYTXnpKO7J92IkrubmoJnr5eixkZzbC0aTsfzGzcO1emik aAZsqN/xUhWZiIj5rQHAcwEdNGqPkUHrWfLIA6SDNvE5mSmRrANa2JchBNFbjPuk jk+dqQPWIGX3wEaFo/TVrZS+phExhps= -----END CERTIFICATE-----Generated at Wed Oct 14 17:56:50 2026 by rpki-client