$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4bf449ad-38c7-403a-8696-f8c8e69b7390/39c0d06a-f74c-37d8-b04a-fefe25716b16.roa File: 39c0d06a-f74c-37d8-b04a-fefe25716b16.roa (raw, json) Hash identifier: 9JtlhdEbihd13AwhhKWXflnFSaSVza15OOdkc3uDOK0= Subject key identifier: 35:5A:D4:6A:1F:3C:DA:91:D3:07:57:36:F0:8D:BC:D9:C1:A2:F5:85 Certificate issuer: /CN=4bf449ad-38c7-403a-8696-f8c8e69b7390 Certificate serial: 010D0C9F4328584F4AD7E19DA36E37094EE62480 Authority key identifier: 63:45:1D:5D:AC:E8:9C:18:17:8E:4A:D4:6D:36:83:77:23:E2:30:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4bf449ad-38c7-403a-8696-f8c8e69b7390.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4bf449ad-38c7-403a-8696-f8c8e69b7390/39c0d06a-f74c-37d8-b04a-fefe25716b16.roa Signing time: Fri 25 Sep 2026 13:00:11 +0000 ROA not before: Fri 25 Sep 2026 13:00:11 +0000 ROA not after: Thu 24 Dec 2026 14:00:11 +0000 asID: 399468 IP address blocks: 169.128.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4bf449ad-38c7-403a-8696-f8c8e69b7390/4bf449ad-38c7-403a-8696-f8c8e69b7390.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4bf449ad-38c7-403a-8696-f8c8e69b7390/4bf449ad-38c7-403a-8696-f8c8e69b7390.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4bf449ad-38c7-403a-8696-f8c8e69b7390.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4a:d7:e1:9d:a3:6e:37:09:4e:e6:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bf449ad-38c7-403a-8696-f8c8e69b7390 Validity Not Before: Sep 25 13:00:11 2026 GMT Not After : Dec 24 14:00:11 2026 GMT Subject: CN=1fec2507-9965-442b-a8f4-f85197655b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:bb:e9:e4:14:f5:0d:bf:ff:fa:52:87:d7:0b: c2:2a:e9:f6:06:56:d2:fa:9f:7f:f0:71:c0:7f:b4: ea:9b:f8:45:58:95:c7:bc:ec:ae:b5:be:d1:6d:1d: a7:62:94:d7:79:40:2f:52:4f:27:fb:5d:ae:95:89: 2a:c4:c1:bf:18:cd:21:84:78:db:80:35:58:26:f0: c4:44:4c:f3:13:a1:ae:48:31:71:59:21:15:a6:83: fa:e2:1b:ac:9a:64:52:3f:e4:11:83:29:ff:a1:e1: 64:bd:8b:a5:3b:22:1f:9c:7d:fc:50:72:9a:54:cf: 88:60:23:49:7d:07:f5:c4:8f:a5:20:43:29:3f:c9: 8b:51:3c:50:48:6a:9d:0a:23:ed:1b:02:50:0c:6a: e7:dc:63:ac:71:2e:0b:62:00:7a:84:01:f4:b5:d9: 9e:83:f2:cb:af:6c:01:65:36:0b:7f:8c:83:6c:20: 8c:6b:9a:67:f9:60:f0:53:ef:9d:da:04:2e:07:ba: fd:d8:06:a1:2f:25:87:6c:81:9c:67:7b:e3:0b:ca: c6:36:b1:45:43:fd:a1:d9:b4:ab:eb:af:93:02:60: d9:48:fa:1c:d5:30:c0:61:c6:94:20:f2:e9:ad:34: 27:73:00:4e:bd:49:bc:66:ca:c1:1d:89:41:cd:fa: 9c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:5A:D4:6A:1F:3C:DA:91:D3:07:57:36:F0:8D:BC:D9:C1:A2:F5:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4bf449ad-38c7-403a-8696-f8c8e69b7390/39c0d06a-f74c-37d8-b04a-fefe25716b16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4bf449ad-38c7-403a-8696-f8c8e69b7390/4bf449ad-38c7-403a-8696-f8c8e69b7390.crl X509v3 Authority Key Identifier: keyid:63:45:1D:5D:AC:E8:9C:18:17:8E:4A:D4:6D:36:83:77:23:E2:30:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4bf449ad-38c7-403a-8696-f8c8e69b7390.cer sbgp-ipAddrBlock: critical IPv4: 169.128.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:7c:f6:1a:9e:66:10:d5:d2:0a:66:8d:66:71:49:a4:5e:c2: e5:fc:6d:ee:ed:8a:fd:fe:ae:2c:fc:a1:76:c1:d7:04:55:33: d0:65:eb:86:3d:a0:49:e5:8c:89:fd:86:75:97:7a:85:61:74: 21:62:8b:ef:70:f6:2f:18:21:e8:55:83:c0:11:01:a9:80:c2: 50:16:3d:d8:64:6f:b4:d2:f9:91:9e:9e:68:9a:f0:cd:98:b2: f7:db:c2:6d:9b:bb:ee:25:88:69:c1:9a:a1:74:16:70:4a:21: dc:42:87:51:be:8d:23:d6:58:d0:9b:82:ac:9e:ed:45:0d:b6: 7d:02:c5:2a:33:cd:22:ec:62:27:c2:5a:5b:58:ec:d6:1a:81: a9:e8:5e:e3:f1:79:0b:35:34:4c:3a:ee:d5:e4:4b:36:cb:ba: bb:81:12:1b:ab:86:a9:f7:52:95:70:b0:38:e8:3b:72:bd:39: de:05:20:82:88:5e:e7:d9:7b:93:e6:11:f3:f4:5b:20:b9:84: fc:3b:fb:ed:1a:91:3e:20:4c:2d:13:37:be:95:7b:5a:5e:56: e2:68:85:57:25:e9:bc:9c:d0:37:a1:dc:1f:d2:e9:4d:b5:f6: e5:ea:89:45:f5:fa:01:8d:ae:2c:2b:60:40:be:5c:85:84:0d: 98:76:7a:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9K1+Gdo243CU7mJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJmNDQ5YWQtMzhjNy00MDNhLTg2OTYtZjhjOGU2OWI3 MzkwMB4XDTI2MDkyNTEzMDAxMVoXDTI2MTIyNDE0MDAxMVowLzEtMCsGA1UEAxMk MWZlYzI1MDctOTk2NS00NDJiLWE4ZjQtZjg1MTk3NjU1YjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7vp5BT1Db//+lKH1wvCKun2BlbS+p9/8HHA f7Tqm/hFWJXHvOyutb7RbR2nYpTXeUAvUk8n+12ulYkqxMG/GM0hhHjbgDVYJvDE REzzE6GuSDFxWSEVpoP64husmmRSP+QRgyn/oeFkvYulOyIfnH38UHKaVM+IYCNJ fQf1xI+lIEMpP8mLUTxQSGqdCiPtGwJQDGrn3GOscS4LYgB6hAH0tdmeg/LLr2wB ZTYLf4yDbCCMa5pn+WDwU++d2gQuB7r92AahLyWHbIGcZ3vjC8rGNrFFQ/2h2bSr 66+TAmDZSPoc1TDAYcaUIPLprTQncwBOvUm8ZsrBHYlBzfqc8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVa1GofPNqR0wdXNvCNvNnBovWFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80YmY0 NDlhZC0zOGM3LTQwM2EtODY5Ni1mOGM4ZTY5YjczOTAvMzljMGQwNmEtZjc0Yy0z N2Q4LWIwNGEtZmVmZTI1NzE2YjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNGJmNDQ5YWQtMzhjNy00MDNhLTg2 OTYtZjhjOGU2OWI3MzkwLzRiZjQ0OWFkLTM4YzctNDAzYS04Njk2LWY4YzhlNjli NzM5MC5jcmwwHwYDVR0jBBgwFoAUY0UdXazonBgXjkrUbTaDdyPiMAgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi80YmY0NDlhZC0zOGM3LTQwM2EtODY5Ni1mOGM4 ZTY5YjczOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqYDEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKh89hqeZhDV0gpmjWZxSaRewuX8be7tiv3+riz8oXbB1wRVM9Bl64Y9 oEnljIn9hnWXeoVhdCFii+9w9i8YIehVg8ARAamAwlAWPdhkb7TS+ZGenmia8M2Y svfbwm2bu+4liGnBmqF0FnBKIdxCh1G+jSPWWNCbgqye7UUNtn0CxSozzSLsYifC WltY7NYaganoXuPxeQs1NEw67tXkSzbLuruBEhurhqn3UpVwsDjoO3K9Od4FIIKI XufZe5PmEfP0WyC5hPw7++0akT4gTC0TN76Ve1peVuJohVcl6byc0Deh3B/S6U21 9uXqiUX1+gGNriwrYEC+XIWEDZh2eiM= -----END CERTIFICATE-----Generated at Sun Oct 11 19:43:39 2026 by rpki-client