$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/051d41b1-fc48-3fd0-9525-aa3701ddeab9.roa File: 051d41b1-fc48-3fd0-9525-aa3701ddeab9.roa (raw, json) Hash identifier: XCntozg7tLPjbS4e9D6vd7uvjOgeJN3pZlsTSAXbEPA= Subject key identifier: C6:3A:51:F6:EF:66:8D:F6:FB:42:F2:3D:A9:EF:39:33:91:2A:20:D8 Certificate issuer: /CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Certificate serial: 010D0C9F4328584F14678EA97FB883A6EF11E200 Authority key identifier: F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/051d41b1-fc48-3fd0-9525-aa3701ddeab9.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 22641 IP address blocks: 216.169.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:8e:a9:7f:b8:83:a6:ef:11:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=403f048a-223d-47ec-b8b1-4bb3114b0f0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c3:37:ae:03:87:b3:9e:6f:ba:7e:9b:6d:d3: 2e:f2:3f:52:bf:0d:13:c7:7b:6c:25:a5:cd:b5:e0: 0f:84:29:72:03:67:15:2e:b6:db:58:af:aa:1a:7b: e1:3a:c9:60:27:ae:ca:4c:b1:8b:9c:98:cc:40:86: a9:35:d9:06:e4:43:d6:4c:99:2d:18:cb:c2:45:ee: 02:b8:be:0f:ed:26:f3:36:02:6b:6c:40:08:57:48: bd:70:58:ea:04:99:b7:1a:55:3d:0e:f3:bf:e4:e5: 36:c1:55:8b:26:c2:33:6b:79:1f:16:86:b8:04:d8: e7:ff:1e:d6:3b:ed:70:1b:5e:f4:fb:a5:21:7e:9a: 07:1f:80:a9:d6:f4:67:6e:20:74:da:60:da:60:c4: fc:85:9b:04:f8:2c:48:04:93:b7:3b:47:a3:76:fd: 30:1d:4a:37:fa:df:09:7c:7a:ce:3c:25:02:b1:a9: e1:54:70:24:bf:cb:f0:0c:fb:48:2a:fd:50:ad:82: 15:d3:d5:f9:d8:ff:68:7a:22:6d:ca:37:f3:8c:8e: 76:70:e4:d1:52:b4:2f:ca:38:e0:45:78:0b:71:e9: 2d:2c:aa:a8:6a:94:2c:40:e4:99:ed:40:2d:67:49: 00:c8:e7:f2:45:76:21:b5:16:08:d0:25:ce:43:d7: 7a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:3A:51:F6:EF:66:8D:F6:FB:42:F2:3D:A9:EF:39:33:91:2A:20:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/051d41b1-fc48-3fd0-9525-aa3701ddeab9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl X509v3 Authority Key Identifier: keyid:F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer sbgp-ipAddrBlock: critical IPv4: 216.169.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:5b:a5:93:09:aa:39:2b:50:a3:9a:59:e4:04:04:c7:d9:17: af:e5:44:9b:5a:3d:cf:33:f3:75:a8:3e:2b:9b:a0:5c:be:75: 2e:16:76:13:b4:3b:3c:fc:22:3c:d4:1e:d8:9f:5d:74:5b:fa: 1f:e0:90:68:72:18:85:f6:82:52:9c:e1:c8:68:99:b9:3e:98: 03:4a:10:96:41:0e:31:14:30:dc:fe:97:1d:d2:41:e1:94:50: 85:a4:8f:e1:99:6c:b2:6c:f1:44:e8:d4:82:69:94:6d:d5:33: a3:3e:c9:0a:a0:e7:3d:9c:4b:4f:46:8f:19:83:ed:75:bd:28: 72:2e:7b:02:8c:c9:67:8b:c7:74:bf:c3:6c:8a:3c:07:d7:da: f0:28:82:b0:ba:7d:36:2a:a6:b5:9d:6a:e7:fd:18:13:cf:b0: a5:3a:cc:c3:69:da:f2:80:14:b9:18:d0:ea:62:21:2c:f7:da: 3e:45:01:19:a4:e3:a9:01:87:37:7d:92:ca:16:03:f1:99:bf: 19:3a:0e:2b:13:9d:34:4d:f0:90:88:18:35:4a:f9:30:56:b1: ca:4c:a3:1b:03:26:f8:0e:96:dd:95:c5:ae:70:45:9d:7c:1e: 7b:c5:83:17:aa:54:a6:d8:80:93:6d:05:d0:d3:4d:fd:fe:5e: 8f:68:50:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ46pf7iDpu8R4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgwMzVlYTItYzFkNS00YjI5LWE4YzQtMWIzMTM3OWM4 YWZmMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk NDAzZjA0OGEtMjIzZC00N2VjLWI4YjEtNGJiMzExNGIwZjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcM3rgOHs55vun6bbdMu8j9Svw0Tx3tsJaXN teAPhClyA2cVLrbbWK+qGnvhOslgJ67KTLGLnJjMQIapNdkG5EPWTJktGMvCRe4C uL4P7SbzNgJrbEAIV0i9cFjqBJm3GlU9DvO/5OU2wVWLJsIza3kfFoa4BNjn/x7W O+1wG170+6UhfpoHH4Cp1vRnbiB02mDaYMT8hZsE+CxIBJO3O0ejdv0wHUo3+t8J fHrOPCUCsanhVHAkv8vwDPtIKv1QrYIV09X52P9oeiJtyjfzjI52cOTRUrQvyjjg RXgLcektLKqoapQsQOSZ7UAtZ0kAyOfyRXYhtRYI0CXOQ9d6cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMY6UfbvZo32+0LyPanvOTORKiDYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yODAz NWVhMi1jMWQ1LTRiMjktYThjNC0xYjMxMzc5YzhhZmYvMDUxZDQxYjEtZmM0OC0z ZmQwLTk1MjUtYWEzNzAxZGRlYWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjgwMzVlYTItYzFkNS00YjI5LWE4 YzQtMWIzMTM3OWM4YWZmLzI4MDM1ZWEyLWMxZDUtNGIyOS1hOGM0LTFiMzEzNzlj OGFmZi5jcmwwHwYDVR0jBBgwFoAU8a/gxj9B23Vcsh798dH499Cp++AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yODAzNWVhMi1jMWQ1LTRiMjktYThjNC0xYjMx Mzc5YzhhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KndMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALdbpZMJqjkrUKOaWeQEBMfZF6/lRJtaPc8z83WoPiuboFy+dS4WdhO0 Ozz8IjzUHtifXXRb+h/gkGhyGIX2glKc4chombk+mANKEJZBDjEUMNz+lx3SQeGU UIWkj+GZbLJs8UTo1IJplG3VM6M+yQqg5z2cS09GjxmD7XW9KHIuewKMyWeLx3S/ w2yKPAfX2vAogrC6fTYqprWdauf9GBPPsKU6zMNp2vKAFLkY0OpiISz32j5FARmk 46kBhzd9ksoWA/GZvxk6DisTnTRN8JCIGDVK+TBWscpMoxsDJvgOlt2Vxa5wRZ18 HnvFgxeqVKbYgJNtBdDTTf3+Xo9oUNs= -----END CERTIFICATE-----Generated at Tue Sep 22 21:28:54 2026 by rpki-client