$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/157ba081-05d4-354b-847f-6a7f1507e1c0.roa File: 157ba081-05d4-354b-847f-6a7f1507e1c0.roa (raw, json) Hash identifier: Zz+1rdrkssbxhTH6RNvxH60IrfL5B5znE9jtxjF8NLQ= Subject key identifier: CF:EB:02:5C:83:73:3B:B4:F9:5F:A4:8F:38:DA:C9:71:11:24:00:26 Certificate issuer: /CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Certificate serial: 010D0C9F4328584F1467AB52446749A5986B6600 Authority key identifier: F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/157ba081-05d4-354b-847f-6a7f1507e1c0.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 22641 IP address blocks: 216.169.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:ab:52:44:67:49:a5:98:6b:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=2969cba1-e141-432a-94be-619bd6a81eae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:dc:92:f9:3c:f2:0d:99:6c:8f:b5:53:cd:f5: 8c:54:0c:35:2f:b0:91:ae:2f:a0:2c:14:2a:71:8c: f9:c1:09:e1:06:30:c2:dd:b4:76:d3:a3:b1:bc:d9: fc:e8:ee:e7:54:1d:28:65:3c:85:72:5f:f3:81:80: 9d:bb:62:86:38:1b:2e:8c:eb:7c:ed:22:0c:f7:a7: f4:80:cd:17:b3:5b:00:fb:46:c7:52:26:ae:28:0c: 5c:d6:fa:bf:56:4e:80:00:6e:a8:80:9a:e2:a6:c1: 33:a3:26:07:8b:ce:c9:28:8b:79:7b:cc:69:f0:3a: 60:05:eb:ab:61:f5:10:fb:17:0d:07:f3:69:ea:4f: f7:45:1d:4e:03:89:22:0f:06:7d:84:47:4f:f3:fc: a3:ff:4e:a3:8f:17:75:10:a5:5a:0a:56:7c:3a:3f: c3:c4:75:e2:db:f8:64:66:de:8a:2f:cc:b3:b7:64: 13:8a:b7:dc:7f:90:71:92:56:ed:4c:85:d3:5b:40: c9:eb:c6:78:ad:65:9e:b7:1f:7c:2a:bd:ae:e3:00: 8b:13:ca:03:e0:da:3d:a4:56:7d:d5:a9:c4:7d:a6: e0:73:f4:46:6f:53:9a:6b:7b:33:a4:f3:aa:7d:a9: 52:06:38:fb:cc:df:f2:39:2d:ef:83:c7:3a:99:4e: 08:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:EB:02:5C:83:73:3B:B4:F9:5F:A4:8F:38:DA:C9:71:11:24:00:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/157ba081-05d4-354b-847f-6a7f1507e1c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl X509v3 Authority Key Identifier: keyid:F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer sbgp-ipAddrBlock: critical IPv4: 216.169.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:ec:58:66:8b:60:36:a1:a4:21:34:f7:b0:8c:0e:34:c1:dd: 41:f9:e4:aa:57:75:b4:b8:1a:3a:a6:63:c6:4a:4a:4f:a2:30: 63:6b:5c:75:84:fc:7d:5a:57:26:88:23:5d:35:82:a1:8e:5e: d4:22:b7:c1:75:35:bc:fc:48:e1:b0:2c:07:ec:48:97:3a:55: bc:4a:2e:06:53:0b:cf:61:4e:f7:a4:c4:b4:75:1e:2f:a3:6a: 95:c5:62:e0:05:4d:b7:d0:f4:1f:65:e1:b2:8f:0e:9a:a0:db: d2:4f:24:5d:f4:89:60:93:18:81:c2:dc:dc:ba:1c:88:33:d4: 6f:71:6f:78:20:b1:1d:cd:2e:35:ab:02:06:73:ec:50:ea:70: 12:e2:3f:cd:c1:dc:ab:f6:81:7f:c4:e3:5a:23:78:a1:0e:7d: 28:b2:00:aa:43:ee:0f:67:35:f8:0e:43:5a:3f:b3:43:98:5b: ee:95:db:57:c6:94:5d:9e:82:41:aa:ab:14:bc:32:2c:aa:16: 92:11:1f:1b:e1:dd:ce:76:55:d8:ff:7e:d9:4a:2f:6d:fc:c6: 6c:31:49:ea:0d:24:27:5b:b8:c9:cf:55:a0:1f:fb:8c:62:3c: 3d:2c:30:dd:1a:ca:10:dc:c1:bc:8c:1e:95:e6:c2:a5:04:10: a5:37:0a:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ6tSRGdJpZhrZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgwMzVlYTItYzFkNS00YjI5LWE4YzQtMWIzMTM3OWM4 YWZmMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk Mjk2OWNiYTEtZTE0MS00MzJhLTk0YmUtNjE5YmQ2YTgxZWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNyS+TzyDZlsj7VTzfWMVAw1L7CRri+gLBQq cYz5wQnhBjDC3bR206OxvNn86O7nVB0oZTyFcl/zgYCdu2KGOBsujOt87SIM96f0 gM0Xs1sA+0bHUiauKAxc1vq/Vk6AAG6ogJripsEzoyYHi87JKIt5e8xp8DpgBeur YfUQ+xcNB/Np6k/3RR1OA4kiDwZ9hEdP8/yj/06jjxd1EKVaClZ8Oj/DxHXi2/hk Zt6KL8yzt2QTirfcf5BxklbtTIXTW0DJ68Z4rWWetx98Kr2u4wCLE8oD4No9pFZ9 1anEfabgc/RGb1Oaa3szpPOqfalSBjj7zN/yOS3vg8c6mU4IBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/rAlyDczu0+V+kjzjayXERJAAmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yODAz NWVhMi1jMWQ1LTRiMjktYThjNC0xYjMxMzc5YzhhZmYvMTU3YmEwODEtMDVkNC0z NTRiLTg0N2YtNmE3ZjE1MDdlMWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjgwMzVlYTItYzFkNS00YjI5LWE4 YzQtMWIzMTM3OWM4YWZmLzI4MDM1ZWEyLWMxZDUtNGIyOS1hOGM0LTFiMzEzNzlj OGFmZi5jcmwwHwYDVR0jBBgwFoAU8a/gxj9B23Vcsh798dH499Cp++AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yODAzNWVhMi1jMWQ1LTRiMjktYThjNC0xYjMx Mzc5YzhhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KneMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTsWGaLYDahpCE097CMDjTB3UH55KpXdbS4GjqmY8ZKSk+iMGNrXHWE /H1aVyaII101gqGOXtQit8F1Nbz8SOGwLAfsSJc6VbxKLgZTC89hTvekxLR1Hi+j apXFYuAFTbfQ9B9l4bKPDpqg29JPJF30iWCTGIHC3Ny6HIgz1G9xb3ggsR3NLjWr AgZz7FDqcBLiP83B3Kv2gX/E41ojeKEOfSiyAKpD7g9nNfgOQ1o/s0OYW+6V21fG lF2egkGqqxS8MiyqFpIRHxvh3c52Vdj/ftlKL238xmwxSeoNJCdbuMnPVaAf+4xi PD0sMN0ayhDcwbyMHpXmwqUEEKU3Cv0= -----END CERTIFICATE-----Generated at Tue Sep 22 16:56:10 2026 by rpki-client