$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/2fecfb56-a7bd-3805-90cc-ffcacd30a74a.roa File: 2fecfb56-a7bd-3805-90cc-ffcacd30a74a.roa (raw, json) Hash identifier: DxFIRjBmVxPXqEFnRJ1vFviQlEZCOiCfMnoXyMwdue8= Subject key identifier: 13:FD:AA:0A:B2:CA:2F:22:36:C1:29:BA:03:E4:9E:D3:A5:10:8D:7D Certificate issuer: /CN=d28e4965-df1a-4ee0-91f8-24c72779af73 Certificate serial: 010D0C9F4328584F2EED0AD4B357287F51F65A80 Authority key identifier: 13:DC:6C:27:24:03:F7:89:82:D4:B0:D4:E8:6E:7D:37:AC:A0:8E:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/2fecfb56-a7bd-3805-90cc-ffcacd30a74a.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 21709 IP address blocks: 173.225.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/d28e4965-df1a-4ee0-91f8-24c72779af73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/d28e4965-df1a-4ee0-91f8-24c72779af73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:0a:d4:b3:57:28:7f:51:f6:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d28e4965-df1a-4ee0-91f8-24c72779af73 Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=caf1f1dc-0ac4-4938-b1dc-66e57bb0a77b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c1:7b:b7:39:77:d6:93:0a:9f:bf:55:dc:08: 96:9b:3a:39:ce:f6:5f:97:e3:82:a8:aa:fe:0c:2f: 57:dd:8a:a6:e9:b7:13:6d:e6:bb:58:00:ac:f4:30: fb:a9:d7:12:ba:b0:2c:b7:5d:36:38:1d:4b:32:fe: 46:e2:7a:ab:1e:44:ec:93:10:b5:6e:ff:b0:73:7a: c4:22:87:39:db:a4:2f:f2:a0:89:0c:0e:82:39:cf: 17:26:52:63:21:06:31:30:33:f2:1f:30:ee:ca:73: c9:82:af:16:12:cd:7e:8b:87:aa:28:83:4e:ad:b1: 25:7e:b9:c6:fa:b4:c6:dd:61:42:73:da:ed:e1:3a: cb:47:16:24:04:0f:b2:c7:06:64:06:b4:c3:9a:0a: 05:61:57:7a:33:46:a4:6f:ed:9f:0a:a3:86:d8:c1: de:53:a4:f2:6c:62:31:67:f4:66:68:f8:7f:d2:06: 4a:8c:c5:98:48:9b:89:6d:ea:27:86:b9:37:f5:cb: 8c:29:3a:66:a1:ec:69:07:92:ab:d1:9d:e0:90:cf: 63:26:d4:3b:a9:00:1a:bb:80:8c:23:a9:ec:84:92: f1:dd:69:93:77:48:16:fc:5d:38:9f:4d:94:a6:4e: 0e:6f:81:ee:64:d8:ea:f8:3f:18:e8:34:e6:8e:30: ea:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:FD:AA:0A:B2:CA:2F:22:36:C1:29:BA:03:E4:9E:D3:A5:10:8D:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/2fecfb56-a7bd-3805-90cc-ffcacd30a74a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/d28e4965-df1a-4ee0-91f8-24c72779af73.crl X509v3 Authority Key Identifier: keyid:13:DC:6C:27:24:03:F7:89:82:D4:B0:D4:E8:6E:7D:37:AC:A0:8E:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73.cer sbgp-ipAddrBlock: critical IPv4: 173.225.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:49:20:bb:27:aa:50:1f:e1:f8:2d:9d:29:e4:7e:80:45:d4: 18:bf:db:df:97:4c:1c:f9:f8:6d:15:a1:fb:c4:fe:d8:de:af: b9:6f:86:97:56:c1:eb:96:b3:eb:4b:08:da:06:3b:0e:bd:d4: e3:e5:d3:24:aa:47:18:f4:44:e9:04:c6:80:1c:77:9b:f8:4c: 86:f5:46:9a:1d:1a:22:7f:e3:70:8e:a1:f8:b6:f1:cf:fb:e4: eb:22:be:40:d8:24:9a:c1:02:5a:51:e2:0f:72:e2:0b:e4:09: 0a:a8:22:c3:e2:2c:02:b0:51:c6:c2:55:3c:a9:55:65:bd:c3: 22:72:cd:45:c6:14:de:92:a6:9c:0f:4b:8d:63:3c:c0:dc:27: 3e:37:38:e6:12:16:6d:9b:20:e9:7f:8c:68:17:20:4f:a8:d0: 7f:49:93:99:e3:c5:fc:5f:b3:b9:ca:bd:5e:f3:3e:d6:be:3f: 90:f3:c0:d4:d2:12:be:cf:24:6f:f7:fd:78:65:0b:c8:2c:51: a0:4b:db:18:72:1d:cd:5d:0a:f9:05:5c:5e:b2:b2:04:44:9b: 5d:b2:1e:21:7e:a5:41:e0:ce:69:69:42:79:21:65:f8:16:7c: c9:a0:7c:70:08:9c:9d:50:c8:51:a5:4f:0f:13:42:0a:45:92: 84:1d:c0:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7QrUs1cof1H2WoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDI4ZTQ5NjUtZGYxYS00ZWUwLTkxZjgtMjRjNzI3Nzlh ZjczMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk Y2FmMWYxZGMtMGFjNC00OTM4LWIxZGMtNjZlNTdiYjBhNzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8F7tzl31pMKn79V3AiWmzo5zvZfl+OCqKr+ DC9X3Yqm6bcTbea7WACs9DD7qdcSurAst102OB1LMv5G4nqrHkTskxC1bv+wc3rE Ioc526Qv8qCJDA6COc8XJlJjIQYxMDPyHzDuynPJgq8WEs1+i4eqKINOrbElfrnG +rTG3WFCc9rt4TrLRxYkBA+yxwZkBrTDmgoFYVd6M0akb+2fCqOG2MHeU6TybGIx Z/RmaPh/0gZKjMWYSJuJbeonhrk39cuMKTpmoexpB5Kr0Z3gkM9jJtQ7qQAau4CM I6nshJLx3WmTd0gW/F04n02Upk4Ob4HuZNjq+D8Y6DTmjjDq+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBP9qgqyyi8iNsEpugPkntOlEI19MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMjhl NDk2NS1kZjFhLTRlZTAtOTFmOC0yNGM3Mjc3OWFmNzMvMmZlY2ZiNTYtYTdiZC0z ODA1LTkwY2MtZmZjYWNkMzBhNzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDI4ZTQ5NjUtZGYxYS00ZWUwLTkx ZjgtMjRjNzI3NzlhZjczL2QyOGU0OTY1LWRmMWEtNGVlMC05MWY4LTI0YzcyNzc5 YWY3My5jcmwwHwYDVR0jBBgwFoAUE9xsJyQD94mC1LDU6G59N6ygji8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMjhlNDk2NS1kZjFhLTRlZTAtOTFmOC0yNGM3 Mjc3OWFmNzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEreGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdJILsnqlAf4fgtnSnkfoBF1Bi/29+XTBz5+G0VofvE/tjer7lvhpdW weuWs+tLCNoGOw691OPl0ySqRxj0ROkExoAcd5v4TIb1RpodGiJ/43COofi28c/7 5OsivkDYJJrBAlpR4g9y4gvkCQqoIsPiLAKwUcbCVTypVWW9wyJyzUXGFN6SppwP S41jPMDcJz43OOYSFm2bIOl/jGgXIE+o0H9Jk5njxfxfs7nKvV7zPta+P5DzwNTS Er7PJG/3/XhlC8gsUaBL2xhyHc1dCvkFXF6ysgREm12yHiF+pUHgzmlpQnkhZfgW fMmgfHAInJ1QyFGlTw8TQgpFkoQdwKw= -----END CERTIFICATE-----Generated at Wed Sep 23 20:34:27 2026 by rpki-client