$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cdf4ec43-a978-3ad4-9551-d159584c2381.roa File: cdf4ec43-a978-3ad4-9551-d159584c2381.roa (raw, json) Hash identifier: R1eMuRomi7P9ZXQ9ScgTcv5kK9aLwjHkPyow+2UB11I= Subject key identifier: 62:5B:E1:A8:54:37:FC:BB:30:CE:D3:7B:91:A2:32:23:5D:77:7F:92 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F554CD3B6CBF856E0A6258280 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cdf4ec43-a978-3ad4-9551-d159584c2381.roa Signing time: Tue 29 Sep 2026 06:53:57 +0000 ROA not before: Tue 29 Sep 2026 06:53:57 +0000 ROA not after: Mon 28 Dec 2026 07:53:57 +0000 asID: 834 IP address blocks: 170.130.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:55:4c:d3:b6:cb:f8:56:e0:a6:25:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 29 06:53:57 2026 GMT Not After : Dec 28 07:53:57 2026 GMT Subject: CN=1842639e-34f8-4390-93f2-5d73e580375a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:66:3f:d5:55:44:72:15:5b:4d:a1:f8:9b:1f: 0e:c7:51:5f:19:ca:2e:0b:9b:d7:01:dc:ff:95:c9: d7:28:f9:e8:7e:ae:60:a0:81:56:71:33:00:6c:f4: 9d:df:dd:bc:c5:0d:8c:b3:6f:8c:9c:c9:8e:b6:51: bb:8b:ba:4e:fd:45:6c:97:1e:b3:ae:64:e9:19:a9: 7e:d4:9f:54:ac:65:78:e3:d9:01:14:eb:48:dd:72: c8:e7:71:b8:6a:8d:13:27:94:bc:17:53:56:1e:27: f8:fd:93:e8:72:82:e7:24:ee:a9:7b:e4:2b:41:a5: 22:d2:0f:d2:97:92:0b:bb:6c:7b:15:61:e4:a6:e6: d9:8a:13:79:f4:bb:2c:44:2f:ab:c3:5e:06:d4:96: 43:05:dd:dd:54:cb:88:a1:9c:da:93:84:57:99:75: a6:4c:a4:ba:14:72:41:fa:b2:5e:48:74:e7:7e:67: a1:38:c0:7c:25:ab:14:48:9a:fa:b1:30:9d:87:21: 3a:02:d1:db:a1:e2:b2:6e:42:bb:d1:41:59:d2:c4: a6:e0:cc:4c:66:42:a4:c8:47:4d:dc:c1:dd:2e:10: 78:9b:a0:2a:13:c0:f9:b6:c7:5f:d5:fb:de:cc:c2: 0d:df:7d:dc:6b:7e:91:f0:ce:84:2b:02:1b:6f:30: 11:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:5B:E1:A8:54:37:FC:BB:30:CE:D3:7B:91:A2:32:23:5D:77:7F:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cdf4ec43-a978-3ad4-9551-d159584c2381.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 170.130.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:bb:19:82:b6:fd:98:9a:68:84:24:cb:04:c0:f8:76:d2:5c: f2:cc:20:37:35:81:35:55:54:8d:80:44:d1:8d:54:59:ef:82: e0:17:a9:8d:33:51:66:22:5c:2d:d8:ec:9b:12:e5:c0:b4:7b: e5:c5:15:94:e6:09:4f:3f:63:04:11:d4:d9:c1:bf:b6:04:3e: a0:8b:99:fe:1e:d7:47:b4:a3:5c:c0:59:dc:13:ed:93:e8:8e: b5:19:2d:59:86:f6:0f:9e:29:c3:28:41:e2:15:23:4b:9f:4a: 39:55:39:18:88:49:1d:21:9d:90:db:04:7b:68:d5:70:bf:4b: 32:4a:38:1b:f9:e7:92:bf:f9:79:28:f9:49:db:aa:64:ec:e7: 11:d5:bc:b2:44:1d:85:47:72:9a:3b:0a:43:3f:26:4e:39:18: eb:db:72:86:a7:d1:78:1f:88:71:b4:3d:11:36:b1:1d:4d:b2: 4b:2f:12:4b:d1:51:35:c4:fd:50:82:d9:7d:f1:52:c4:fa:14: a3:c9:99:bd:a0:c8:2f:53:ae:98:a3:3e:64:ad:97:52:66:a2: 79:73:08:50:65:c1:47:d5:5e:a9:31:39:f3:a6:29:c0:9c:0d: 77:69:04:d8:a4:22:25:87:14:ed:65:68:3d:75:22:c5:d5:9a: 6b:8c:51:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9VTNO2y/hW4KYlgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyOTA2NTM1N1oXDTI2MTIyODA3NTM1N1owLzEtMCsGA1UEAxMk MTg0MjYzOWUtMzRmOC00MzkwLTkzZjItNWQ3M2U1ODAzNzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2Y/1VVEchVbTaH4mx8Ox1FfGcouC5vXAdz/ lcnXKPnofq5goIFWcTMAbPSd3928xQ2Ms2+MnMmOtlG7i7pO/UVslx6zrmTpGal+ 1J9UrGV449kBFOtI3XLI53G4ao0TJ5S8F1NWHif4/ZPocoLnJO6pe+QrQaUi0g/S l5ILu2x7FWHkpubZihN59LssRC+rw14G1JZDBd3dVMuIoZzak4RXmXWmTKS6FHJB +rJeSHTnfmehOMB8JasUSJr6sTCdhyE6AtHboeKybkK70UFZ0sSm4MxMZkKkyEdN 3MHdLhB4m6AqE8D5tsdf1fvezMIN333ca36R8M6EKwIbbzARNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJb4ahUN/y7MM7Te5GiMiNdd3+SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvY2RmNGVjNDMtYTk3OC0z YWQ0LTk1NTEtZDE1OTU4NGMyMzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqoIqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIi7GYK2/ZiaaIQkywTA+HbSXPLMIDc1gTVVVI2ARNGNVFnvguAXqY0z UWYiXC3Y7JsS5cC0e+XFFZTmCU8/YwQR1NnBv7YEPqCLmf4e10e0o1zAWdwT7ZPo jrUZLVmG9g+eKcMoQeIVI0ufSjlVORiISR0hnZDbBHto1XC/SzJKOBv555K/+Xko +UnbqmTs5xHVvLJEHYVHcpo7CkM/Jk45GOvbcoan0XgfiHG0PRE2sR1NsksvEkvR UTXE/VCC2X3xUsT6FKPJmb2gyC9TrpijPmStl1JmonlzCFBlwUfVXqkxOfOmKcCc DXdpBNikIiWHFO1laD11IsXVmmuMUVg= -----END CERTIFICATE-----Generated at Mon Oct 12 18:22:48 2026 by rpki-client