$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/8c8d0b17-5f96-3b2e-b888-95fdc95f187e.roa File: 8c8d0b17-5f96-3b2e-b888-95fdc95f187e.roa (raw, json) Hash identifier: KmzxQtL4KeG54Qy3JJXy3jqTyMIAH7QXaFi7cyIdfNU= Subject key identifier: 29:E8:27:C3:34:2F:27:4E:46:42:19:D4:25:6C:89:85:8C:25:86:95 Certificate issuer: /CN=d28e4965-df1a-4ee0-91f8-24c72779af73 Certificate serial: 010D0C9F4328584F30527134B1CC2B64F4669240 Authority key identifier: 13:DC:6C:27:24:03:F7:89:82:D4:B0:D4:E8:6E:7D:37:AC:A0:8E:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/8c8d0b17-5f96-3b2e-b888-95fdc95f187e.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 21709 IP address blocks: 69.54.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/d28e4965-df1a-4ee0-91f8-24c72779af73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/d28e4965-df1a-4ee0-91f8-24c72779af73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:71:34:b1:cc:2b:64:f4:66:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d28e4965-df1a-4ee0-91f8-24c72779af73 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=36f9bb6f-6bbf-487d-ad71-d9e917e2d4d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d8:31:3f:4f:9c:83:7c:dd:1e:ef:ca:52:89: 5a:80:f9:dd:a1:dc:68:fb:f6:7b:76:4e:ce:ba:25: 2e:0e:6f:47:02:95:bd:f1:3d:3f:90:51:31:03:73: c6:e7:0e:38:7f:a5:b3:c3:cd:e7:db:1f:2e:fb:b1: 28:ab:65:20:c7:2f:2b:3c:22:7e:40:55:8b:bc:66: 1a:be:24:64:0d:8a:92:b8:13:64:6d:0c:1c:89:41: 9b:d1:d2:ef:d9:16:fd:ba:9f:1c:d8:54:26:f1:02: b7:14:64:70:3c:27:7f:30:bb:b0:28:ce:f2:55:79: 67:48:ef:ec:0c:d4:ec:20:ba:8b:b1:25:78:37:88: 3a:12:57:07:2c:d4:16:a0:4b:eb:c8:61:d2:bd:7c: 9a:83:63:16:65:be:c7:c3:49:ca:39:6d:46:56:0a: ba:b2:7e:be:ac:18:9e:d5:20:fa:5c:73:d0:37:95: a2:43:8d:ee:14:3b:21:d4:ac:80:64:b7:b7:92:21: 8d:30:40:39:d2:18:ff:0b:d3:f8:c5:bc:1f:a5:ff: 7a:dd:a5:fb:5f:0e:86:42:f9:8c:5d:22:60:df:f9: 7a:d1:87:54:5d:f9:7b:61:3d:2d:a5:9a:14:ec:b6: 70:41:f2:5f:ed:6f:65:6a:56:63:61:56:69:ae:5b: 04:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E8:27:C3:34:2F:27:4E:46:42:19:D4:25:6C:89:85:8C:25:86:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/8c8d0b17-5f96-3b2e-b888-95fdc95f187e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/d28e4965-df1a-4ee0-91f8-24c72779af73.crl X509v3 Authority Key Identifier: keyid:13:DC:6C:27:24:03:F7:89:82:D4:B0:D4:E8:6E:7D:37:AC:A0:8E:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73.cer sbgp-ipAddrBlock: critical IPv4: 69.54.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:f6:86:76:68:7d:0c:f2:38:8d:98:f9:49:ec:0d:45:69:e1: ce:39:d8:ba:2e:fd:80:51:50:3e:fd:24:d5:33:ec:96:e8:ac: fd:d8:01:16:f9:ba:10:5d:0c:5c:a7:2a:c9:a3:7a:11:3a:f3: 32:e2:30:f9:5f:17:88:42:20:12:1a:5f:76:9a:a0:0a:9d:c0: 5f:d3:0a:84:3a:14:db:27:24:7c:97:6b:8c:39:12:3a:30:7b: 54:2a:51:ed:5f:48:a5:f5:b1:95:59:13:cf:36:6f:1e:93:11: 38:0f:57:fd:37:c4:88:57:98:36:1d:08:01:34:0a:79:72:b3: e5:e5:c3:c1:f9:a2:fe:1f:ef:6b:dc:cd:9d:60:f9:bf:64:0b: 15:b7:e0:7c:03:42:bf:db:a9:99:4b:c0:e8:3b:5d:ec:73:dc: 7e:34:bc:5e:aa:23:88:31:fe:dd:05:12:13:f7:32:5e:93:dc: df:3c:41:e6:fc:8e:a1:b3:04:a1:00:d2:e4:eb:94:47:ed:10: 6f:7c:33:ff:55:5c:68:4e:97:d4:42:55:80:3d:d4:a5:25:67: 52:cf:29:49:d2:2e:05:c1:79:48:25:d5:c6:e0:b1:97:3e:91: c9:12:f6:e8:d8:cb:b5:c3:41:63:55:d6:cd:65:ff:99:e0:3f: 8d:07:4d:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUnE0scwrZPRmkkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDI4ZTQ5NjUtZGYxYS00ZWUwLTkxZjgtMjRjNzI3Nzlh ZjczMB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk MzZmOWJiNmYtNmJiZi00ODdkLWFkNzEtZDllOTE3ZTJkNGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9gxP0+cg3zdHu/KUolagPndodxo+/Z7dk7O uiUuDm9HApW98T0/kFExA3PG5w44f6Wzw83n2x8u+7Eoq2Ugxy8rPCJ+QFWLvGYa viRkDYqSuBNkbQwciUGb0dLv2Rb9up8c2FQm8QK3FGRwPCd/MLuwKM7yVXlnSO/s DNTsILqLsSV4N4g6ElcHLNQWoEvryGHSvXyag2MWZb7Hw0nKOW1GVgq6sn6+rBie 1SD6XHPQN5WiQ43uFDsh1KyAZLe3kiGNMEA50hj/C9P4xbwfpf963aX7Xw6GQvmM XSJg3/l60YdUXfl7YT0tpZoU7LZwQfJf7W9lalZjYVZprlsE0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnoJ8M0LydORkIZ1CVsiYWMJYaVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMjhl NDk2NS1kZjFhLTRlZTAtOTFmOC0yNGM3Mjc3OWFmNzMvOGM4ZDBiMTctNWY5Ni0z YjJlLWI4ODgtOTVmZGM5NWYxODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDI4ZTQ5NjUtZGYxYS00ZWUwLTkx ZjgtMjRjNzI3NzlhZjczL2QyOGU0OTY1LWRmMWEtNGVlMC05MWY4LTI0YzcyNzc5 YWY3My5jcmwwHwYDVR0jBBgwFoAUE9xsJyQD94mC1LDU6G59N6ygji8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMjhlNDk2NS1kZjFhLTRlZTAtOTFmOC0yNGM3 Mjc3OWFmNzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERTYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALf2hnZofQzyOI2Y+UnsDUVp4c452Lou/YBRUD79JNUz7JborP3YARb5 uhBdDFynKsmjehE68zLiMPlfF4hCIBIaX3aaoAqdwF/TCoQ6FNsnJHyXa4w5Ejow e1QqUe1fSKX1sZVZE882bx6TETgPV/03xIhXmDYdCAE0Cnlys+Xlw8H5ov4f72vc zZ1g+b9kCxW34HwDQr/bqZlLwOg7Xexz3H40vF6qI4gx/t0FEhP3Ml6T3N88Qeb8 jqGzBKEA0uTrlEftEG98M/9VXGhOl9RCVYA91KUlZ1LPKUnSLgXBeUgl1cbgsZc+ kckS9ujYy7XDQWNV1s1l/5ngP40HTSc= -----END CERTIFICATE-----Generated at Sun Sep 27 10:59:35 2026 by rpki-client