$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/957700b3-3fcd-334a-aaa6-8dc9d3a76624.roa File: 957700b3-3fcd-334a-aaa6-8dc9d3a76624.roa (raw, json) Hash identifier: fCjSY84SdfWU/E4V0Irk4JB+sqEs/fxczQa8VNd3ABo= Subject key identifier: 05:6F:83:DE:B5:A6:40:8F:08:67:F5:02:2A:8E:66:DF:4D:41:CF:D3 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F53E532C5FA3713390C6B9840 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/957700b3-3fcd-334a-aaa6-8dc9d3a76624.roa Signing time: Mon 28 Sep 2026 18:49:21 +0000 ROA not before: Mon 28 Sep 2026 18:49:21 +0000 ROA not after: Sun 27 Dec 2026 19:49:21 +0000 asID: 62904 IP address blocks: 170.130.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:e5:32:c5:fa:37:13:39:0c:6b:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 28 18:49:21 2026 GMT Not After : Dec 27 19:49:21 2026 GMT Subject: CN=f0d83066-7832-42d9-9aeb-1e3830b3b6f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3f:3b:b6:39:e8:01:f7:bb:67:47:c6:d6:e7: 24:65:5c:35:9f:1d:e6:d1:93:ee:55:10:cd:d1:68: 68:60:fe:f3:a4:12:2e:f0:40:72:51:22:a8:01:82: 05:e8:23:40:29:8d:74:59:41:af:e9:b0:02:6b:c4: 64:4f:a0:02:ba:d5:b2:c8:d8:cf:af:aa:a5:20:2e: 46:42:e3:cf:16:23:8d:b3:6b:14:3a:c6:f2:6a:9e: 79:46:95:8f:97:d4:71:34:a2:5d:cc:72:d2:51:03: 8b:0c:a1:f2:db:96:8e:ce:f7:8a:03:d5:0e:9b:88: de:e9:99:ba:aa:8f:4a:19:e3:d5:54:a5:f6:56:10: b2:bb:0a:cf:0a:01:17:a3:52:79:9e:dc:7d:ac:b6: 97:ca:27:ae:8a:5c:66:54:06:0f:cc:85:00:df:f8: 85:07:e8:68:ba:47:ae:d7:0d:8b:aa:c3:ae:d4:4b: 48:f5:51:b2:db:00:92:c6:92:a7:9d:0c:6c:bf:d4: 55:d6:2f:8c:02:52:bf:1b:ab:f0:0b:f9:a7:65:55: 0d:b5:8b:5e:db:69:35:39:10:71:71:5a:63:69:d4: 43:f5:32:b6:10:a4:fd:dc:a3:a8:3f:b7:ad:74:4b: 6c:02:2e:ac:75:10:10:49:64:68:e4:51:39:56:97: e8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:6F:83:DE:B5:A6:40:8F:08:67:F5:02:2A:8E:66:DF:4D:41:CF:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/957700b3-3fcd-334a-aaa6-8dc9d3a76624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 170.130.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:2e:6f:e3:f7:27:b7:1a:76:5f:04:35:1d:06:bc:ab:98:af: 57:76:96:a4:95:9c:93:46:75:f5:20:4a:8b:42:5b:79:29:55: 15:ee:1d:56:55:af:f0:0b:08:82:86:7f:95:be:06:66:bb:5b: e1:00:65:3f:e4:8a:70:35:03:80:8f:e6:d5:e4:43:df:df:3f: 0a:c3:db:f3:e4:00:65:04:bd:3b:ea:65:c8:d5:fa:3a:54:06: 22:de:04:aa:24:ed:67:a1:1a:e9:40:84:28:dd:f5:f7:0d:76: de:2c:e3:6e:95:d0:31:9d:1b:5a:6c:ef:57:51:c0:c6:64:d7: 0b:a5:c7:87:d8:dd:20:80:85:aa:37:58:cd:67:0a:44:63:ef: 29:88:74:46:91:e6:fe:a5:f2:a8:09:dc:6a:68:6f:09:16:1e: b0:9f:c3:ef:49:7a:d7:a4:8d:71:a6:52:5f:db:ab:6b:9a:20: 5c:1c:c8:c9:4e:6f:64:03:9e:7a:5a:14:e8:ad:bf:86:8a:92: 72:83:fa:c2:35:bd:2f:c8:4b:36:45:b3:68:bf:aa:f7:20:87: bd:34:ba:17:e9:18:fe:71:f7:f6:ae:1b:80:e8:23:8b:74:95: d2:7c:02:25:4e:c2:48:25:16:79:d7:82:98:a3:90:24:17:d0: dc:89:f9:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9T5TLF+jcTOQxrmEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyODE4NDkyMVoXDTI2MTIyNzE5NDkyMVowLzEtMCsGA1UEAxMk ZjBkODMwNjYtNzgzMi00MmQ5LTlhZWItMWUzODMwYjNiNmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuD87tjnoAfe7Z0fG1uckZVw1nx3m0ZPuVRDN 0WhoYP7zpBIu8EByUSKoAYIF6CNAKY10WUGv6bACa8RkT6ACutWyyNjPr6qlIC5G QuPPFiONs2sUOsbyap55RpWPl9RxNKJdzHLSUQOLDKHy25aOzveKA9UOm4je6Zm6 qo9KGePVVKX2VhCyuwrPCgEXo1J5ntx9rLaXyieuilxmVAYPzIUA3/iFB+houkeu 1w2LqsOu1EtI9VGy2wCSxpKnnQxsv9RV1i+MAlK/G6vwC/mnZVUNtYte22k1ORBx cVpjadRD9TK2EKT93KOoP7etdEtsAi6sdRAQSWRo5FE5VpfoewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVvg961pkCPCGf1AiqOZt9NQc/TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvOTU3NzAwYjMtM2ZjZC0z MzRhLWFhYTYtOGRjOWQzYTc2NjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqoLUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoub+P3J7cadl8ENR0GvKuYr1d2lqSVnJNGdfUgSotCW3kpVRXuHVZV r/ALCIKGf5W+Bma7W+EAZT/kinA1A4CP5tXkQ9/fPwrD2/PkAGUEvTvqZcjV+jpU BiLeBKok7WehGulAhCjd9fcNdt4s426V0DGdG1ps71dRwMZk1wulx4fY3SCAhao3 WM1nCkRj7ymIdEaR5v6l8qgJ3GpobwkWHrCfw+9JetekjXGmUl/bq2uaIFwcyMlO b2QDnnpaFOitv4aKknKD+sI1vS/ISzZFs2i/qvcgh700uhfpGP5x9/auG4DoI4t0 ldJ8AiVOwkglFnnXgpijkCQX0NyJ+QY= -----END CERTIFICATE-----Generated at Sun Oct 11 19:01:50 2026 by rpki-client