$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7f032a49-4919-3dbf-91a5-48231a6a6ba2.roa File: 7f032a49-4919-3dbf-91a5-48231a6a6ba2.roa (raw, json) Hash identifier: KVWAIFaYhFCD6DwJ42g+Lgb42G0QF8U0iBxaHq9824I= Subject key identifier: B2:3D:32:EE:65:F4:39:31:4C:D6:EA:34:B3:3D:4E:0A:72:65:4B:89 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F53DD7FCE54BF4207EBA7BB00 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7f032a49-4919-3dbf-91a5-48231a6a6ba2.roa Signing time: Mon 28 Sep 2026 18:33:50 +0000 ROA not before: Mon 28 Sep 2026 18:33:50 +0000 ROA not after: Sun 27 Dec 2026 19:33:50 +0000 asID: 62904 IP address blocks: 170.130.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:dd:7f:ce:54:bf:42:07:eb:a7:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 28 18:33:50 2026 GMT Not After : Dec 27 19:33:50 2026 GMT Subject: CN=89664af8-ae63-4912-86c7-8927d79cd1c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cb:d5:18:c0:f6:32:27:4f:d7:9c:0b:79:1d: 5f:3a:ff:8f:58:3b:08:c9:12:5c:81:33:59:a8:d9: fd:f0:9c:e1:9f:a6:f9:9f:15:5c:46:cc:10:b5:7f: 7e:9f:66:02:76:9c:bd:03:ba:a3:eb:be:8a:3b:27: 55:18:ed:36:19:01:19:89:9d:27:c4:a7:07:6e:66: da:2f:bb:bf:e2:4f:eb:e1:20:d1:d0:fe:df:7b:c5: 91:0b:d6:f1:38:40:cb:dc:77:ba:93:12:40:88:c7: 75:1e:98:be:95:c4:49:66:96:40:50:48:f0:73:00: 1c:8b:c8:e3:c6:1d:3f:0e:17:81:3f:0d:89:9c:2f: 10:85:c9:5d:c2:c1:fe:02:18:58:b1:7a:f2:97:97: e6:d3:3b:d6:8e:b3:da:f7:f8:9b:37:4f:43:90:1e: db:40:c3:83:90:24:b6:a8:51:41:35:45:8c:bb:07: e8:29:12:13:1b:33:e6:15:2a:f8:eb:1e:5a:a0:92: 00:46:6e:46:04:0f:0a:7d:b1:f5:94:82:b5:59:17: 7b:b0:fe:25:0f:56:69:b0:ee:12:17:2f:f6:8e:cb: 56:0e:34:54:4d:96:5a:7d:97:b0:47:4f:44:4a:99: d4:55:f2:ff:fa:26:57:50:e6:fb:a0:d6:3f:19:02: ea:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:3D:32:EE:65:F4:39:31:4C:D6:EA:34:B3:3D:4E:0A:72:65:4B:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7f032a49-4919-3dbf-91a5-48231a6a6ba2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 170.130.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:a2:72:10:15:f8:05:10:12:8e:5d:34:fa:89:c4:32:9b:30: b9:7b:8a:74:5b:ed:29:33:2a:3f:c5:cc:6d:08:d2:53:9a:60: a6:46:71:a1:f8:a8:b3:0c:f2:0b:85:e9:b9:60:bd:27:d7:b5: b4:e5:e1:9b:53:94:af:ac:ca:92:71:d2:77:a7:96:f8:39:17: 5c:c4:5a:10:fa:28:eb:83:47:13:60:04:d4:09:74:12:33:36: b8:4b:6a:6b:51:f7:ea:86:6e:76:db:2f:7a:a8:11:da:7f:a3: 6e:e4:59:44:9d:b0:00:e6:2a:bb:17:0b:17:f9:20:5e:91:d7: 09:f6:b3:76:9c:8c:c4:c4:45:cb:36:83:c8:8f:eb:f9:87:24: 10:30:46:e3:83:42:a8:0b:e5:00:40:52:5e:58:e0:bc:ef:32: 28:5f:13:c8:c0:4f:a1:f2:62:60:4e:9d:e2:c2:7f:06:ee:0b: ef:9a:c5:25:c7:59:8d:cd:72:9d:14:3b:88:c3:d9:16:c2:bf: c2:4a:1c:e4:d6:e3:e3:00:70:42:d5:9b:02:73:1f:f0:67:b5: 0b:29:e0:74:e3:98:27:41:db:d8:2d:6b:fe:8e:d5:93:9b:74: 60:a6:3e:75:d6:ad:3b:35:a5:1d:1b:5a:8b:83:67:fa:74:da: d5:b1:8e:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9T3X/OVL9CB+unuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyODE4MzM1MFoXDTI2MTIyNzE5MzM1MFowLzEtMCsGA1UEAxMk ODk2NjRhZjgtYWU2My00OTEyLTg2YzctODkyN2Q3OWNkMWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisvVGMD2MidP15wLeR1fOv+PWDsIyRJcgTNZ qNn98Jzhn6b5nxVcRswQtX9+n2YCdpy9A7qj676KOydVGO02GQEZiZ0nxKcHbmba L7u/4k/r4SDR0P7fe8WRC9bxOEDL3He6kxJAiMd1Hpi+lcRJZpZAUEjwcwAci8jj xh0/DheBPw2JnC8QhcldwsH+AhhYsXryl5fm0zvWjrPa9/ibN09DkB7bQMODkCS2 qFFBNUWMuwfoKRITGzPmFSr46x5aoJIARm5GBA8KfbH1lIK1WRd7sP4lD1ZpsO4S Fy/2jstWDjRUTZZafZewR09ESpnUVfL/+iZXUOb7oNY/GQLqWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLI9Mu5l9DkxTNbqNLM9TgpyZUuJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvN2YwMzJhNDktNDkxOS0z ZGJmLTkxYTUtNDgyMzFhNmE2YmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqoKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOichAV+AUQEo5dNPqJxDKbMLl7inRb7SkzKj/FzG0I0lOaYKZGcaH4 qLMM8guF6blgvSfXtbTl4ZtTlK+sypJx0nenlvg5F1zEWhD6KOuDRxNgBNQJdBIz NrhLamtR9+qGbnbbL3qoEdp/o27kWUSdsADmKrsXCxf5IF6R1wn2s3acjMTERcs2 g8iP6/mHJBAwRuODQqgL5QBAUl5Y4LzvMihfE8jAT6HyYmBOneLCfwbuC++axSXH WY3Ncp0UO4jD2RbCv8JKHOTW4+MAcELVmwJzH/BntQsp4HTjmCdB29gta/6O1ZOb dGCmPnXWrTs1pR0bWouDZ/p02tWxjhI= -----END CERTIFICATE-----Generated at Sat Oct 10 17:42:42 2026 by rpki-client