$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/21eb79ef-e9fb-33c7-8de9-8a347564d235.roa File: 21eb79ef-e9fb-33c7-8de9-8a347564d235.roa (raw, json) Hash identifier: tzpxPdZqgjM9DmV3uvD4RYchqb3x52zJ41CgQWEUv7k= Subject key identifier: 6B:43:1F:81:49:3B:12:AE:57:ED:45:1D:02:D7:C5:04:31:34:D7:61 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F53E74CBEBB81FADCA6F5F834 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/21eb79ef-e9fb-33c7-8de9-8a347564d235.roa Signing time: Mon 28 Sep 2026 18:53:35 +0000 ROA not before: Mon 28 Sep 2026 18:53:35 +0000 ROA not after: Sun 27 Dec 2026 19:53:35 +0000 asID: 62904 IP address blocks: 170.130.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:e7:4c:be:bb:81:fa:dc:a6:f5:f8:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 28 18:53:35 2026 GMT Not After : Dec 27 19:53:35 2026 GMT Subject: CN=426cd00c-4aaa-40e1-8299-7568d92f11c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9d:3b:27:93:a0:79:41:2d:f6:37:b0:ba:59: c2:92:13:33:db:bb:95:4d:eb:bd:e4:9c:ea:3e:96: 54:48:03:7d:7c:9c:dd:48:58:8c:78:52:a7:88:4b: 08:49:e8:15:c5:a5:e6:94:f3:2d:bb:06:fb:af:aa: 41:e6:40:c0:b1:9f:1c:48:de:9d:56:48:fa:6f:64: 82:b6:4e:ce:aa:21:01:ec:c8:9f:28:8f:25:27:3e: e4:d9:10:8d:d6:4b:6d:5b:17:e2:a2:4f:8c:01:45: 72:4f:02:0c:13:0e:20:30:43:58:75:36:5d:95:af: 19:59:f5:8d:0e:0e:d5:27:fa:e6:7d:e5:13:f0:e8: a0:6c:39:ca:1a:87:48:4e:76:29:08:6a:0a:6d:66: e2:3e:49:41:cd:6c:3f:2c:7a:32:eb:01:98:24:30: 39:c4:1a:3f:7e:88:88:f7:73:cf:9a:af:db:04:55: 18:55:a0:da:5c:13:bd:31:8e:8a:94:43:07:cd:2e: 17:52:1a:80:58:20:10:fd:08:53:b4:1f:3f:18:26: f5:95:b8:75:ba:c6:6e:29:25:29:32:dc:dc:cf:8d: a4:96:19:f0:74:ab:91:23:9b:7d:bd:c7:db:0c:a9: ab:ed:da:1f:c3:8e:db:77:bb:44:1d:4d:b6:39:d5: 9f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:43:1F:81:49:3B:12:AE:57:ED:45:1D:02:D7:C5:04:31:34:D7:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/21eb79ef-e9fb-33c7-8de9-8a347564d235.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 170.130.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:28:25:6e:f7:9b:ac:12:5a:f2:35:34:de:45:a0:38:98:9d: 3e:48:bc:60:d7:8e:3e:47:56:f1:7c:81:97:ab:82:1c:f9:af: ef:05:3d:69:f2:0a:12:42:1d:c6:6f:b7:37:63:8c:1a:f0:4b: ea:d6:43:6e:16:ce:11:d2:22:40:52:51:18:5e:28:25:c2:6c: d4:f2:d3:59:4e:f0:4d:76:9a:bf:92:17:a9:f0:54:85:84:e9: 1a:39:a4:39:d7:c5:0a:26:94:dc:5d:8f:dc:71:45:1a:dc:83: 19:89:5c:92:5e:8c:f7:9e:a7:e5:d5:1d:b8:30:48:21:ed:b8: 1a:41:7e:be:49:fd:aa:b3:ce:70:f1:9f:73:9b:01:b6:2b:4a: 13:f4:33:1a:58:4e:ae:05:78:b6:09:d4:d7:4c:fe:87:9e:c7: 4a:b5:2f:37:19:14:33:5a:26:d2:d6:93:a6:8a:94:52:24:65: 51:e1:9f:45:d3:5a:5b:6a:69:58:d7:db:31:54:bc:3e:a9:a7: 64:75:a3:05:0f:7b:9b:d0:e0:10:66:8b:c3:e7:0c:b8:67:85: a4:b0:78:fd:bb:12:5a:d0:ac:8b:8f:68:12:de:c5:35:42:a4: 46:f3:6a:fc:4e:91:95:09:11:47:53:d6:15:8a:32:ee:a3:3f: 0c:65:c6:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9T50y+u4H63Kb1+DQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyODE4NTMzNVoXDTI2MTIyNzE5NTMzNVowLzEtMCsGA1UEAxMk NDI2Y2QwMGMtNGFhYS00MGUxLTgyOTktNzU2OGQ5MmYxMWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ07J5OgeUEt9jewulnCkhMz27uVTeu95Jzq PpZUSAN9fJzdSFiMeFKniEsISegVxaXmlPMtuwb7r6pB5kDAsZ8cSN6dVkj6b2SC tk7OqiEB7MifKI8lJz7k2RCN1kttWxfiok+MAUVyTwIMEw4gMENYdTZdla8ZWfWN Dg7VJ/rmfeUT8OigbDnKGodITnYpCGoKbWbiPklBzWw/LHoy6wGYJDA5xBo/foiI 93PPmq/bBFUYVaDaXBO9MY6KlEMHzS4XUhqAWCAQ/QhTtB8/GCb1lbh1usZuKSUp Mtzcz42klhnwdKuRI5t9vcfbDKmr7dofw47bd7tEHU22OdWfJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtDH4FJOxKuV+1FHQLXxQQxNNdhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMjFlYjc5ZWYtZTlmYi0z M2M3LThkZTktOGEzNDc1NjRkMjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqoL4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJsoJW73m6wSWvI1NN5FoDiYnT5IvGDXjj5HVvF8gZerghz5r+8FPWny ChJCHcZvtzdjjBrwS+rWQ24WzhHSIkBSURheKCXCbNTy01lO8E12mr+SF6nwVIWE 6Ro5pDnXxQomlNxdj9xxRRrcgxmJXJJejPeep+XVHbgwSCHtuBpBfr5J/aqzznDx n3ObAbYrShP0MxpYTq4FeLYJ1NdM/oeex0q1LzcZFDNaJtLWk6aKlFIkZVHhn0XT WltqaVjX2zFUvD6pp2R1owUPe5vQ4BBmi8PnDLhnhaSweP27ElrQrIuPaBLexTVC pEbzavxOkZUJEUdT1hWKMu6jPwxlxjo= -----END CERTIFICATE-----Generated at Sat Oct 10 22:43:04 2026 by rpki-client