$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c69cf1bf-c992-33f5-9264-46da7b247576.roa File: c69cf1bf-c992-33f5-9264-46da7b247576.roa (raw, json) Hash identifier: WTOLeey4MGJF3jh3h4Fi2wbZ7RkibLFv4dD+8BasGGw= Subject key identifier: 53:89:FE:66:B2:1B:E7:C9:68:73:FF:98:AD:F2:55:D8:A4:AF:BA:1D Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F53E228F056A4589E3DE7F800 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c69cf1bf-c992-33f5-9264-46da7b247576.roa Signing time: Mon 28 Sep 2026 18:43:14 +0000 ROA not before: Mon 28 Sep 2026 18:43:14 +0000 ROA not after: Sun 27 Dec 2026 19:43:14 +0000 asID: 49532 IP address blocks: 170.130.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:e2:28:f0:56:a4:58:9e:3d:e7:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 28 18:43:14 2026 GMT Not After : Dec 27 19:43:14 2026 GMT Subject: CN=f088c31b-3120-4613-9d86-65f515e89360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c0:ab:ee:d8:30:ae:c4:f6:81:24:ff:d6:80: 18:45:5b:3d:ba:ea:7c:74:57:ac:a3:18:44:c2:c3: 79:fa:64:d8:d0:3f:3d:2d:e3:53:57:85:70:68:c7: f2:e9:e8:54:1e:86:b2:ad:50:ff:de:e2:49:37:01: f8:bc:1e:0f:d8:14:2f:5d:95:62:80:cb:5a:a8:32: 0c:57:69:14:43:cf:73:18:fd:7c:c2:ad:86:a9:e1: e1:22:c7:3a:5b:79:cc:68:cd:c0:d2:2a:28:2d:68: a2:74:f5:9d:34:15:09:dc:d6:17:41:bc:53:87:66: 02:14:a9:0e:cd:5e:84:8e:ac:65:0a:c0:5a:89:bf: 50:13:ea:4f:68:b9:b6:7b:e9:9c:72:e0:08:84:2b: 30:7c:5f:57:5d:8d:9a:70:03:f1:7a:9d:78:f8:ba: 76:e0:40:6d:7a:07:8a:52:61:a6:a3:34:c4:34:8e: 03:9a:b6:22:ca:ce:fd:17:35:60:51:2a:40:e4:30: 0a:fd:1f:d2:9d:3f:6e:87:21:bb:7b:b5:d0:d8:6f: d9:d8:16:da:de:40:5c:4f:6a:d3:83:93:d3:5b:84: 49:a8:42:f3:a9:77:a9:92:dc:65:24:8d:26:e8:00: 2f:77:15:2c:bc:b3:5e:8c:35:a8:c8:a1:10:21:73: 8f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:89:FE:66:B2:1B:E7:C9:68:73:FF:98:AD:F2:55:D8:A4:AF:BA:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c69cf1bf-c992-33f5-9264-46da7b247576.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 170.130.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:b7:6d:2f:d0:22:20:34:1a:be:59:94:de:13:28:96:28:d8: fc:02:9e:b7:10:9a:06:dd:e0:44:b4:01:82:91:49:8a:f8:04: 55:2a:7d:6d:21:61:b0:da:c0:4f:ac:67:ed:76:52:ee:57:76: d2:ed:03:5a:46:30:63:47:7f:03:98:02:78:5f:96:13:6e:6a: f1:ee:5d:19:06:1a:88:3f:88:a5:49:77:8e:23:9e:cc:62:0a: 47:c4:8a:eb:95:32:94:b9:b5:69:84:41:1e:89:b7:8b:36:ab: 24:cc:73:77:ac:4f:cc:b0:73:c0:6b:93:bb:d1:7d:da:2b:bb: 37:6b:26:87:e0:8b:2a:2f:1e:3f:5d:40:b1:1f:ba:eb:a3:4f: 83:21:2e:47:37:17:78:da:34:5c:ff:24:74:87:9c:db:2e:ac: 24:0a:5d:e3:6d:63:cc:f7:e0:b7:33:bb:ed:74:fe:35:b1:4c: 9e:f8:b2:65:03:53:66:b1:d3:f6:7b:a5:35:69:be:86:9b:34: ac:5b:f3:03:6c:a8:56:45:6f:65:d2:23:03:2a:3b:8b:47:ad: c3:3b:0c:99:53:17:76:6c:2a:e0:d4:df:a4:fd:fa:85:cc:f0: 4d:8f:95:0b:09:a9:1e:3b:16:b9:1e:b1:ae:cd:fe:79:5a:69: 84:af:fc:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9T4ijwVqRYnj3n+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyODE4NDMxNFoXDTI2MTIyNzE5NDMxNFowLzEtMCsGA1UEAxMk ZjA4OGMzMWItMzEyMC00NjEzLTlkODYtNjVmNTE1ZTg5MzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cCr7tgwrsT2gST/1oAYRVs9uup8dFesoxhE wsN5+mTY0D89LeNTV4VwaMfy6ehUHoayrVD/3uJJNwH4vB4P2BQvXZVigMtaqDIM V2kUQ89zGP18wq2GqeHhIsc6W3nMaM3A0iooLWiidPWdNBUJ3NYXQbxTh2YCFKkO zV6EjqxlCsBaib9QE+pPaLm2e+mccuAIhCswfF9XXY2acAPxep14+Lp24EBtegeK UmGmozTENI4DmrYiys79FzVgUSpA5DAK/R/SnT9uhyG7e7XQ2G/Z2Bba3kBcT2rT g5PTW4RJqELzqXepktxlJI0m6AAvdxUsvLNejDWoyKEQIXOPdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOJ/mayG+fJaHP/mK3yVdikr7odMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYzY5Y2YxYmYtYzk5Mi0z M2Y1LTkyNjQtNDZkYTdiMjQ3NTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqoKsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+3bS/QIiA0Gr5ZlN4TKJYo2PwCnrcQmgbd4ES0AYKRSYr4BFUqfW0h YbDawE+sZ+12Uu5XdtLtA1pGMGNHfwOYAnhflhNuavHuXRkGGog/iKVJd44jnsxi CkfEiuuVMpS5tWmEQR6Jt4s2qyTMc3esT8ywc8Brk7vRfdoruzdrJofgiyovHj9d QLEfuuujT4MhLkc3F3jaNFz/JHSHnNsurCQKXeNtY8z34Lczu+10/jWxTJ74smUD U2ax0/Z7pTVpvoabNKxb8wNsqFZFb2XSIwMqO4tHrcM7DJlTF3ZsKuDU36T9+oXM 8E2PlQsJqR47Frkesa7N/nlaaYSv/JY= -----END CERTIFICATE-----Generated at Thu Oct 8 12:28:57 2026 by rpki-client