$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3bbb2e75-122c-4afc-95e9-4be08f1d8b80/0e4817c3-ca9e-36e5-ab84-21fa74cc5f0f.roa File: 0e4817c3-ca9e-36e5-ab84-21fa74cc5f0f.roa (raw, json) Hash identifier: 40xcLmId+6zLK11Jz20zCDPDvrMMScQio5pPJ09wP9Q= Subject key identifier: 73:95:09:89:97:EC:AB:AD:DE:B6:8D:C3:BB:C6:D4:D6:D0:68:2B:E7 Certificate issuer: /CN=3bbb2e75-122c-4afc-95e9-4be08f1d8b80 Certificate serial: 010D0C9F4328584F268D0F889021B1AA3B06CD80 Authority key identifier: 9F:82:B9:F7:21:9B:92:B7:9D:7A:45:4C:81:E2:36:53:6D:6E:36:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3bbb2e75-122c-4afc-95e9-4be08f1d8b80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3bbb2e75-122c-4afc-95e9-4be08f1d8b80/0e4817c3-ca9e-36e5-ab84-21fa74cc5f0f.roa Signing time: Sat 12 Sep 2026 13:00:13 +0000 ROA not before: Sat 12 Sep 2026 13:00:13 +0000 ROA not after: Fri 11 Dec 2026 14:00:13 +0000 asID: 399138 IP address blocks: 169.128.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3bbb2e75-122c-4afc-95e9-4be08f1d8b80/3bbb2e75-122c-4afc-95e9-4be08f1d8b80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3bbb2e75-122c-4afc-95e9-4be08f1d8b80/3bbb2e75-122c-4afc-95e9-4be08f1d8b80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3bbb2e75-122c-4afc-95e9-4be08f1d8b80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:26:8d:0f:88:90:21:b1:aa:3b:06:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bbb2e75-122c-4afc-95e9-4be08f1d8b80 Validity Not Before: Sep 12 13:00:13 2026 GMT Not After : Dec 11 14:00:13 2026 GMT Subject: CN=a4f75dc3-209d-4151-a0bb-74ecfbacef98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:18:91:f0:91:25:e2:e6:e3:0c:7c:33:12:a8: a5:02:aa:26:d9:15:32:be:99:cd:b8:11:29:dc:56: eb:30:c9:f8:c2:03:3c:0e:ed:b5:d6:8a:0f:b2:eb: bb:6e:e5:b1:dd:23:40:ae:4b:77:21:53:a0:d5:b5: 7b:c1:1a:a9:79:ad:d6:ae:0b:10:b2:94:cb:b2:3f: 0c:f2:44:08:50:5e:33:9d:06:68:5f:61:a8:a3:db: 16:16:b8:11:36:0a:ef:5e:f8:b5:3e:d9:7e:9f:2a: 3f:c6:12:68:6d:2f:c6:26:af:dd:64:49:ba:20:65: 06:e8:2b:1f:1d:dc:8c:20:b7:6a:73:03:bb:18:57: 70:f5:3e:c4:f6:cb:d4:d7:30:35:d3:f1:cd:c9:ac: 48:1a:5a:19:9d:e8:86:35:91:ed:71:16:3c:48:8e: 5e:f9:86:88:a7:bd:89:71:8a:2e:6b:3d:e7:9e:a0: aa:10:39:88:2b:97:63:27:c8:3b:37:a3:17:04:96: 43:e3:d7:f0:d8:7f:99:19:7b:5a:46:d3:20:07:b2: 38:61:b8:95:c3:df:5e:e9:36:ea:be:45:0f:c8:9a: 64:22:6e:d0:b5:c4:f4:dd:b5:1e:f3:af:bf:0d:17: cd:3e:44:5f:32:83:ff:4e:f9:ae:d2:55:4b:1b:37: 40:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:95:09:89:97:EC:AB:AD:DE:B6:8D:C3:BB:C6:D4:D6:D0:68:2B:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3bbb2e75-122c-4afc-95e9-4be08f1d8b80/0e4817c3-ca9e-36e5-ab84-21fa74cc5f0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3bbb2e75-122c-4afc-95e9-4be08f1d8b80/3bbb2e75-122c-4afc-95e9-4be08f1d8b80.crl X509v3 Authority Key Identifier: keyid:9F:82:B9:F7:21:9B:92:B7:9D:7A:45:4C:81:E2:36:53:6D:6E:36:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3bbb2e75-122c-4afc-95e9-4be08f1d8b80.cer sbgp-ipAddrBlock: critical IPv4: 169.128.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:e8:a6:b8:0b:be:2e:be:d9:90:ad:96:c1:67:7a:ef:47:55: 0a:c5:e7:dd:88:30:32:28:41:d6:b6:d2:fd:63:ae:37:46:ed: c0:36:0e:63:6b:78:a2:47:c1:3e:6a:ec:1d:34:58:bf:2f:5e: b5:b1:b4:e2:de:e1:f9:0c:6d:f4:d8:5c:1e:4a:6f:cc:ab:2a: 1f:d2:c1:54:dd:ee:ff:38:8e:79:89:7a:d3:d6:d7:50:b3:c9: 91:9c:90:18:ab:6d:a8:15:39:24:b7:14:70:cc:fe:37:3c:40: a8:85:fe:7f:7d:49:a6:43:a7:c9:92:88:83:cb:57:f9:ea:f8: 92:a6:8f:b0:91:07:11:98:db:59:4a:61:0a:5e:c0:3d:43:b6: 83:21:4a:ed:a5:5f:fe:50:85:cb:f6:6f:50:86:b5:a9:71:88: 74:9f:b2:db:af:cd:08:03:7d:d1:05:1d:de:47:ca:aa:c8:2f: f0:e8:10:ce:9d:b7:ed:f5:2b:8d:d7:a0:3d:7e:cc:33:3d:6e: ad:cb:5e:2d:88:96:2e:9b:69:d8:c3:47:42:d2:ae:90:49:ba: 75:74:71:fb:7e:ab:1d:8e:2a:01:46:f3:10:c9:2f:3f:9a:ad: 1c:c2:2c:6a:6b:4f:8b:57:39:cb:0d:f0:6d:34:5b:4b:ad:b3: 6b:b5:c4:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8mjQ+IkCGxqjsGzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiYjJlNzUtMTIyYy00YWZjLTk1ZTktNGJlMDhmMWQ4 YjgwMB4XDTI2MDkxMjEzMDAxM1oXDTI2MTIxMTE0MDAxM1owLzEtMCsGA1UEAxMk YTRmNzVkYzMtMjA5ZC00MTUxLWEwYmItNzRlY2ZiYWNlZjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BiR8JEl4ubjDHwzEqilAqom2RUyvpnNuBEp 3FbrMMn4wgM8Du211ooPsuu7buWx3SNArkt3IVOg1bV7wRqpea3WrgsQspTLsj8M 8kQIUF4znQZoX2Goo9sWFrgRNgrvXvi1Ptl+nyo/xhJobS/GJq/dZEm6IGUG6Csf HdyMILdqcwO7GFdw9T7E9svU1zA10/HNyaxIGloZneiGNZHtcRY8SI5e+YaIp72J cYouaz3nnqCqEDmIK5djJ8g7N6MXBJZD49fw2H+ZGXtaRtMgB7I4YbiVw99e6Tbq vkUPyJpkIm7QtcT03bUe86+/DRfNPkRfMoP/Tvmu0lVLGzdATQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOVCYmX7Kut3raNw7vG1NbQaCvnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zYmJi MmU3NS0xMjJjLTRhZmMtOTVlOS00YmUwOGYxZDhiODAvMGU0ODE3YzMtY2E5ZS0z NmU1LWFiODQtMjFmYTc0Y2M1ZjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvM2JiYjJlNzUtMTIyYy00YWZjLTk1 ZTktNGJlMDhmMWQ4YjgwLzNiYmIyZTc1LTEyMmMtNGFmYy05NWU5LTRiZTA4ZjFk OGI4MC5jcmwwHwYDVR0jBBgwFoAUn4K59yGbkredekVMgeI2U21uNvswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8zYmJiMmU3NS0xMjJjLTRhZmMtOTVlOS00YmUw OGYxZDhiODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqYDsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDoprgLvi6+2ZCtlsFneu9HVQrF592IMDIoQda20v1jrjdG7cA2DmNr eKJHwT5q7B00WL8vXrWxtOLe4fkMbfTYXB5Kb8yrKh/SwVTd7v84jnmJetPW11Cz yZGckBirbagVOSS3FHDM/jc8QKiF/n99SaZDp8mSiIPLV/nq+JKmj7CRBxGY21lK YQpewD1DtoMhSu2lX/5Qhcv2b1CGtalxiHSfstuvzQgDfdEFHd5HyqrIL/DoEM6d t+31K43XoD1+zDM9bq3LXi2Ili6badjDR0LSrpBJunV0cft+qx2OKgFG8xDJLz+a rRzCLGprT4tXOcsN8G00W0uts2u1xLU= -----END CERTIFICATE-----Generated at Wed Sep 23 11:37:20 2026 by rpki-client