$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/79cba9c2-c2ca-3154-bf62-7b969a37ea48.roa File: 79cba9c2-c2ca-3154-bf62-7b969a37ea48.roa (raw, json) Hash identifier: cakhU8HuqIgZ/UWQMbmhprdavA8U50cWd5KmdMrcS1c= Subject key identifier: 63:3E:13:28:15:96:77:B8:90:FE:87:CC:9E:88:B7:BA:92:8F:B7:3F Certificate issuer: /CN=570595b1-8680-4be0-ba0e-5d08aa118fab Certificate serial: 010D0C9F4328584F49747EBE322FB48544E99400 Authority key identifier: FD:09:09:32:99:88:D4:8A:73:6D:0F:7F:1D:C8:55:6C:B1:30:BD:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/79cba9c2-c2ca-3154-bf62-7b969a37ea48.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3428 IP address blocks: 130.20.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/570595b1-8680-4be0-ba0e-5d08aa118fab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/570595b1-8680-4be0-ba0e-5d08aa118fab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:7e:be:32:2f:b4:85:44:e9:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=570595b1-8680-4be0-ba0e-5d08aa118fab Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3f96bd8a-c228-48cf-9612-9bde35496ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:21:0b:05:7b:ff:2a:a7:5d:cc:21:a7:12:33: 76:85:e0:07:55:ea:a1:3d:ec:73:ad:1c:3e:6a:cb: 52:da:34:f6:da:c9:03:dd:9c:a1:03:a0:13:e9:56: a2:42:68:96:16:73:2a:45:6d:12:41:92:3e:9c:88: 44:26:9c:00:cf:a4:e5:04:4b:60:f3:44:a3:48:c3: ac:25:5c:36:81:30:66:c7:42:f7:5c:46:a2:fa:c1: af:5f:e7:66:63:89:2b:27:8e:b3:b5:fd:84:50:f8: be:8d:ef:82:fa:9d:a0:eb:fd:fb:d0:a7:24:82:67: 20:64:5d:14:26:e9:5a:6f:aa:66:29:45:c0:14:55: 6d:98:f3:3c:1c:63:35:8d:df:82:90:74:f1:d7:3d: 26:b9:10:ec:36:e1:5c:de:57:b6:3f:21:75:dc:83: a6:d2:0f:10:7d:f0:b4:81:1d:c5:10:d5:6d:bf:82: bf:a9:fc:9a:08:d2:c8:5b:53:e2:69:98:c7:67:84: d1:2e:82:15:89:5d:0e:ea:43:28:73:b3:5c:6b:47: df:63:24:9b:82:b1:64:74:b9:46:0a:6b:fd:be:02: 7b:cc:f7:30:5f:9f:4d:a9:45:5d:fb:97:53:42:09: 63:37:2b:89:b5:4e:ff:b4:91:cd:23:c1:7a:a7:95: 01:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:3E:13:28:15:96:77:B8:90:FE:87:CC:9E:88:B7:BA:92:8F:B7:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/79cba9c2-c2ca-3154-bf62-7b969a37ea48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/570595b1-8680-4be0-ba0e-5d08aa118fab.crl X509v3 Authority Key Identifier: keyid:FD:09:09:32:99:88:D4:8A:73:6D:0F:7F:1D:C8:55:6C:B1:30:BD:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab.cer sbgp-ipAddrBlock: critical IPv4: 130.20.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:e6:ee:df:51:16:61:0e:b9:55:38:c1:92:0f:c8:71:10:4a: 5c:3c:05:f3:ba:42:fc:80:04:36:0d:b6:b5:f6:01:b7:ab:7c: 4f:83:e1:fc:0e:d0:3e:a0:85:26:aa:42:24:bd:6c:ac:f7:23: b5:b5:d0:c3:07:64:ad:73:d1:74:62:3b:0f:cd:39:5d:6b:41: 69:82:a9:3c:86:a7:7c:c3:c9:a5:67:68:b6:88:c9:c8:cd:68: 4e:33:7d:8d:10:e5:d8:1b:42:4d:e2:8f:8b:62:21:35:2d:be: 96:d5:54:40:b6:11:65:83:43:62:3a:3b:60:fa:3d:b1:a8:09: a7:29:79:a9:cd:a2:c8:dd:b0:49:47:3a:6f:a3:76:ae:92:02: e3:75:91:34:02:8d:7a:db:4d:df:08:76:4a:5e:16:9b:30:fc: 89:4e:6d:86:ba:e2:e2:d3:35:89:69:7a:6e:c5:d9:16:f5:cb: e8:6f:27:6f:ce:26:1c:1a:eb:13:2e:e2:06:a3:e4:b0:ae:6c: eb:f8:fd:ec:c1:4c:f7:a2:3d:e2:0d:2e:ba:51:3e:5f:77:49: 80:ec:fe:9e:96:8e:d9:0d:8e:3a:72:09:22:9b:a6:db:32:c3: 84:40:ec:79:6a:c1:33:c3:bf:51:a5:0f:68:95:66:c4:be:0a: d8:ef:92:ae -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9JdH6+Mi+0hUTplAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTcwNTk1YjEtODY4MC00YmUwLWJhMGUtNWQwOGFhMTE4 ZmFiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2Y5NmJkOGEtYzIyOC00OGNmLTk2MTItOWJkZTM1NDk2YWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCELBXv/KqddzCGnEjN2heAHVeqhPexzrRw+ astS2jT22skD3ZyhA6AT6VaiQmiWFnMqRW0SQZI+nIhEJpwAz6TlBEtg80SjSMOs JVw2gTBmx0L3XEai+sGvX+dmY4krJ46ztf2EUPi+je+C+p2g6/370KckgmcgZF0U Julab6pmKUXAFFVtmPM8HGM1jd+CkHTx1z0muRDsNuFc3le2PyF13IOm0g8QffC0 gR3FENVtv4K/qfyaCNLIW1PiaZjHZ4TRLoIViV0O6kMoc7Nca0ffYySbgrFkdLlG Cmv9vgJ7zPcwX59NqUVd+5dTQgljNyuJtU7/tJHNI8F6p5UBzwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGM+EygVlne4kP6HzJ6It7qSj7c/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81NzA1 OTViMS04NjgwLTRiZTAtYmEwZS01ZDA4YWExMThmYWIvNzljYmE5YzItYzJjYS0z MTU0LWJmNjItN2I5NjlhMzdlYTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTcwNTk1YjEtODY4MC00YmUwLWJh MGUtNWQwOGFhMTE4ZmFiLzU3MDU5NWIxLTg2ODAtNGJlMC1iYTBlLTVkMDhhYTEx OGZhYi5jcmwwHwYDVR0jBBgwFoAU/QkJMpmI1IpzbQ9/HchVbLEwvdAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81NzA1OTViMS04NjgwLTRiZTAtYmEwZS01ZDA4 YWExMThmYWIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAghQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAUObu31EWYQ65VTjBkg/IcRBKXDwF87pC/IAENg22tfYBt6t8T4Ph/A7Q PqCFJqpCJL1srPcjtbXQwwdkrXPRdGI7D805XWtBaYKpPIanfMPJpWdotojJyM1o TjN9jRDl2BtCTeKPi2IhNS2+ltVUQLYRZYNDYjo7YPo9sagJpyl5qc2iyN2wSUc6 b6N2rpIC43WRNAKNettN3wh2Sl4WmzD8iU5thrri4tM1iWl6bsXZFvXL6G8nb84m HBrrEy7iBqPksK5s6/j97MFM96I94g0uulE+X3dJgOz+npaO2Q2OOnIJIpum2zLD hEDseWrBM8O/UaUPaJVmxL4K2O+Srg== -----END CERTIFICATE-----Generated at Sun Oct 4 17:04:38 2026 by rpki-client