$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a3dd40de-d42a-397a-9c16-a7876b2a98c4.roa File: a3dd40de-d42a-397a-9c16-a7876b2a98c4.roa (raw, json) Hash identifier: ZDJJOxMzrfD8N7F2U0ksxcgGvU132P9mEU6EjbC8wsQ= Subject key identifier: 9D:59:FE:83:6C:C9:C1:FD:B6:1E:F2:BB:6A:FA:F5:0C:DA:2A:27:98 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F53E419C40D7AFA48874D3BB8 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a3dd40de-d42a-397a-9c16-a7876b2a98c4.roa Signing time: Mon 28 Sep 2026 18:47:08 +0000 ROA not before: Mon 28 Sep 2026 18:47:08 +0000 ROA not after: Sun 27 Dec 2026 19:47:08 +0000 asID: 62904 IP address blocks: 170.130.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:e4:19:c4:0d:7a:fa:48:87:4d:3b:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 28 18:47:08 2026 GMT Not After : Dec 27 19:47:08 2026 GMT Subject: CN=7b6c022b-39a3-4245-906b-7119db1c81b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:78:de:34:14:39:dc:16:af:18:f0:40:af:cc: 00:97:48:ef:e0:f7:6c:9b:8a:5a:1d:9e:0a:99:af: bd:37:07:ee:a3:22:77:a5:58:cd:82:a2:18:b7:54: b1:6d:02:62:27:10:04:16:09:44:1a:5d:ea:5b:ff: 07:ec:c6:b1:6d:9a:24:02:02:8e:27:85:b9:9e:eb: e9:27:7f:d8:11:15:bb:a0:d0:37:5c:fb:5a:2f:64: 3d:ef:94:23:12:32:77:cb:54:1c:77:04:96:4e:bf: cd:0f:b5:bf:9c:12:fd:20:a6:96:11:43:d6:0c:58: 11:70:06:38:0e:73:e1:21:b7:4a:f4:4d:37:99:c8: 7f:b8:30:de:be:b7:5e:7f:67:3a:1a:9a:7c:63:4f: 89:5f:10:e8:b9:5e:64:d7:7e:5d:51:1d:6a:88:45: 06:fa:3e:32:59:a5:7f:d4:0f:5f:65:1f:79:be:19: b4:25:1b:0a:37:9f:04:2e:24:a9:94:a6:04:a5:c4: 11:a7:ce:92:59:4d:d0:c4:3c:74:3f:a8:0e:20:51: f8:d7:ac:c4:e1:bb:29:86:57:f0:78:6f:bf:01:32: d5:da:a4:0e:cc:13:56:60:a4:b2:f0:4f:21:12:bd: 4d:9b:17:02:ed:ce:cd:e0:c0:ae:6d:e3:91:bd:02: 5e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:59:FE:83:6C:C9:C1:FD:B6:1E:F2:BB:6A:FA:F5:0C:DA:2A:27:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a3dd40de-d42a-397a-9c16-a7876b2a98c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 170.130.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:81:f1:6a:00:e7:4c:2f:21:dc:35:f2:31:0a:65:a7:7a:c3: ec:02:f7:6d:4b:fb:4e:0b:4d:62:d1:ba:4f:92:c2:e0:4b:f0: 43:e7:3f:7f:a2:dd:c7:09:fb:d9:4c:d7:27:6c:42:6e:11:b2: bd:9d:6e:1c:c3:83:40:a4:61:26:1d:80:b7:07:de:6f:b5:22: aa:35:de:78:2d:5d:a5:32:e6:fc:7e:76:3a:bf:ba:b9:af:d4: cb:4f:9d:30:36:58:70:c8:0b:a0:2d:07:24:0d:e2:3c:44:ee: 85:51:e6:ee:14:80:a0:89:dd:53:8b:1a:99:31:f3:57:64:5f: 6e:6c:94:20:e4:77:4d:53:a0:51:5c:77:de:3f:56:c7:69:cc: 71:b1:12:b5:7d:49:18:96:25:3a:5a:d2:48:d8:50:f7:5e:1a: b5:a9:36:b2:40:fa:fd:19:15:ad:78:18:dc:04:bf:1b:f0:29: 59:30:fe:91:a8:b4:70:ef:b8:de:ab:75:c1:08:ac:5e:da:7e: 48:7e:e8:e5:82:59:d2:1c:a1:5a:e2:0c:e7:99:70:52:67:c6: c0:f2:8f:83:0f:d0:62:e0:49:4d:9f:f8:33:c7:9c:ef:cf:ea: c7:90:fb:62:d3:14:bd:51:d1:2b:c5:44:47:57:d2:55:82:ba: 39:74:83:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9T5BnEDXr6SIdNO7gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyODE4NDcwOFoXDTI2MTIyNzE5NDcwOFowLzEtMCsGA1UEAxMk N2I2YzAyMmItMzlhMy00MjQ1LTkwNmItNzExOWRiMWM4MWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHjeNBQ53BavGPBAr8wAl0jv4Pdsm4paHZ4K ma+9NwfuoyJ3pVjNgqIYt1SxbQJiJxAEFglEGl3qW/8H7MaxbZokAgKOJ4W5nuvp J3/YERW7oNA3XPtaL2Q975QjEjJ3y1QcdwSWTr/ND7W/nBL9IKaWEUPWDFgRcAY4 DnPhIbdK9E03mch/uDDevrdef2c6Gpp8Y0+JXxDouV5k135dUR1qiEUG+j4yWaV/ 1A9fZR95vhm0JRsKN58ELiSplKYEpcQRp86SWU3QxDx0P6gOIFH416zE4bsphlfw eG+/ATLV2qQOzBNWYKSy8E8hEr1NmxcC7c7N4MCubeORvQJe2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1Z/oNsycH9th7yu2r69QzaKieYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYTNkZDQwZGUtZDQyYS0z OTdhLTljMTYtYTc4NzZiMmE5OGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqoLEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaB8WoA50wvIdw18jEKZad6w+wC921L+04LTWLRuk+SwuBL8EPnP3+i 3ccJ+9lM1ydsQm4Rsr2dbhzDg0CkYSYdgLcH3m+1Iqo13ngtXaUy5vx+djq/urmv 1MtPnTA2WHDIC6AtByQN4jxE7oVR5u4UgKCJ3VOLGpkx81dkX25slCDkd01ToFFc d94/VsdpzHGxErV9SRiWJTpa0kjYUPdeGrWpNrJA+v0ZFa14GNwEvxvwKVkw/pGo tHDvuN6rdcEIrF7afkh+6OWCWdIcoVriDOeZcFJnxsDyj4MP0GLgSU2f+DPHnO/P 6seQ+2LTFL1R0SvFREdX0lWCujl0g/o= -----END CERTIFICATE-----Generated at Sat Oct 10 17:43:18 2026 by rpki-client