$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/36df8a37-6e86-3583-94c2-83d630d5966e.roa File: 36df8a37-6e86-3583-94c2-83d630d5966e.roa (raw, json) Hash identifier: 86ZBxTdlnJzYHrlEtt3Gd9p7vnYWqI7vQQg1BdxQ6eE= Subject key identifier: B3:40:8B:C7:E2:47:D8:7D:9C:4B:1B:A2:38:D0:14:40:16:07:84:8B Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F53CFC88ED74F0D7146674380 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/36df8a37-6e86-3583-94c2-83d630d5966e.roa Signing time: Mon 28 Sep 2026 18:06:12 +0000 ROA not before: Mon 28 Sep 2026 18:06:12 +0000 ROA not after: Sun 27 Dec 2026 19:06:12 +0000 asID: 62904 IP address blocks: 170.130.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:cf:c8:8e:d7:4f:0d:71:46:67:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 28 18:06:12 2026 GMT Not After : Dec 27 19:06:12 2026 GMT Subject: CN=5a89a656-208e-4556-8ba8-5663a590690b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:81:d1:a3:b4:5e:ee:71:99:73:3c:e3:90:b4: 13:1e:07:21:f9:16:4e:c2:dc:63:13:ac:d6:0b:0a: 7c:a1:76:61:f6:27:e8:28:f1:e4:75:9b:e5:0f:28: 01:b9:60:05:50:66:34:27:d3:e3:fd:7e:a9:a2:c5: 95:6c:9a:61:20:dd:ba:12:d5:ed:52:22:61:8b:d2: 00:11:47:a9:6d:ae:97:c3:58:61:40:86:1f:7d:61: 4f:56:13:b0:ca:7c:da:8f:c8:58:ee:27:00:f2:df: 15:55:d9:2d:65:84:8c:0a:31:39:ea:8e:e8:73:a9: 2a:af:73:78:bc:38:64:f5:d2:21:34:27:d7:0f:c4: 8e:a5:f6:a5:b0:48:eb:af:cc:66:0b:94:e3:9c:56: f0:a8:30:16:f1:a6:8b:a1:ea:f3:04:a6:f3:39:f1: 75:45:ed:26:de:38:d5:d9:64:e9:d5:60:e9:19:61: 03:f5:17:d4:d1:39:d0:12:fb:bd:b9:41:3a:1c:c1: 1f:3b:03:ca:41:db:56:e6:9f:ed:99:6a:7e:ea:b7: 4e:6f:47:56:35:2a:59:60:12:75:9e:6c:0f:b1:03: 6d:ea:c2:99:8e:79:fa:e0:6b:0a:56:ed:f3:3a:97: 93:99:1f:0a:75:d1:b3:ed:13:a7:17:90:d3:cd:fe: b9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:40:8B:C7:E2:47:D8:7D:9C:4B:1B:A2:38:D0:14:40:16:07:84:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/36df8a37-6e86-3583-94c2-83d630d5966e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 170.130.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:ab:43:70:3e:ca:08:f0:be:e2:5c:ee:b0:5e:fa:df:aa:81: 6f:5a:ab:36:8f:66:4c:a8:5f:54:fd:b7:a8:e3:d1:ae:2a:db: 3c:a8:cb:83:8c:cb:f6:e2:3f:48:21:f1:6b:ab:52:75:1b:27: cb:91:82:53:81:17:ff:68:04:48:2e:d1:20:9c:5b:aa:12:c8: fc:4a:81:ad:2e:55:8e:0a:a6:0e:7e:0f:c4:a6:25:51:b4:28: ff:4c:70:bc:f6:ba:7d:66:10:90:2d:4d:df:3a:ea:78:bc:28: 5c:51:8c:a1:33:7f:75:a5:54:4a:b2:be:cd:40:43:cc:bc:0f: ba:67:d4:3e:a0:0a:e1:5e:e9:fe:57:1d:c8:a2:a1:54:fd:98: d5:5c:0c:9e:d7:4a:47:4f:91:3e:cd:25:a6:f5:a2:74:c7:51: 11:e2:7a:db:82:5c:13:f8:0f:80:17:48:bc:61:60:1d:3d:5e: 47:e7:d8:3f:3a:e0:8c:f5:1e:67:10:bc:00:39:2a:8e:4e:18: 92:55:ec:fd:0c:59:5f:ea:bd:16:5f:c4:01:40:6e:87:15:c1: c3:2e:90:2f:51:d2:d9:70:c4:8f:71:a5:fa:4f:41:cb:1f:4b: 2b:58:e8:f6:7b:bd:a2:f0:70:cc:29:90:2e:44:71:10:53:a8: d7:ac:a7:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Tz8iO108NcUZnQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyODE4MDYxMloXDTI2MTIyNzE5MDYxMlowLzEtMCsGA1UEAxMk NWE4OWE2NTYtMjA4ZS00NTU2LThiYTgtNTY2M2E1OTA2OTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoHRo7Re7nGZczzjkLQTHgch+RZOwtxjE6zW Cwp8oXZh9ifoKPHkdZvlDygBuWAFUGY0J9Pj/X6posWVbJphIN26EtXtUiJhi9IA EUepba6Xw1hhQIYffWFPVhOwynzaj8hY7icA8t8VVdktZYSMCjE56o7oc6kqr3N4 vDhk9dIhNCfXD8SOpfalsEjrr8xmC5TjnFbwqDAW8aaLoerzBKbzOfF1Re0m3jjV 2WTp1WDpGWED9RfU0TnQEvu9uUE6HMEfOwPKQdtW5p/tmWp+6rdOb0dWNSpZYBJ1 nmwPsQNt6sKZjnn64GsKVu3zOpeTmR8KddGz7ROnF5DTzf65rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNAi8fiR9h9nEsbojjQFEAWB4SLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMzZkZjhhMzctNmU4Ni0z NTgzLTk0YzItODNkNjMwZDU5NjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqoIEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWrQ3A+ygjwvuJc7rBe+t+qgW9aqzaPZkyoX1T9t6jj0a4q2zyoy4OM y/biP0gh8WurUnUbJ8uRglOBF/9oBEgu0SCcW6oSyPxKga0uVY4Kpg5+D8SmJVG0 KP9McLz2un1mEJAtTd866ni8KFxRjKEzf3WlVEqyvs1AQ8y8D7pn1D6gCuFe6f5X HciioVT9mNVcDJ7XSkdPkT7NJab1onTHURHietuCXBP4D4AXSLxhYB09Xkfn2D86 4Iz1HmcQvAA5Ko5OGJJV7P0MWV/qvRZfxAFAbocVwcMukC9R0tlwxI9xpfpPQcsf SytY6PZ7vaLwcMwpkC5EcRBTqNespxI= -----END CERTIFICATE-----Generated at Sun Oct 11 10:11:48 2026 by rpki-client