$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/eab32de1-6b18-3b8f-abc5-f44a304c3a1e.roa File: eab32de1-6b18-3b8f-abc5-f44a304c3a1e.roa (raw, json) Hash identifier: UPYqbfjryfbUnlTB/Rd3TFVI0h7YeepczAJ/gbl23Vs= Subject key identifier: DD:DC:EA:8A:AD:AD:45:E4:A2:2D:BF:04:1C:76:D3:E0:4B:81:A5:33 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F53DABCF47B63364E88D44F00 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/eab32de1-6b18-3b8f-abc5-f44a304c3a1e.roa Signing time: Mon 28 Sep 2026 18:28:16 +0000 ROA not before: Mon 28 Sep 2026 18:28:16 +0000 ROA not after: Sun 27 Dec 2026 19:28:16 +0000 asID: 62904 IP address blocks: 170.130.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:da:bc:f4:7b:63:36:4e:88:d4:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 28 18:28:16 2026 GMT Not After : Dec 27 19:28:16 2026 GMT Subject: CN=1cd2ebde-83ec-4c26-a61d-3f341b4f4f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:68:69:d3:b4:67:3a:45:85:2a:88:b6:a6:b6: ad:81:22:d6:48:bb:00:de:4a:35:7d:ff:68:12:7c: ae:54:76:2b:07:c6:02:30:5d:d9:5b:cd:56:d2:09: fd:40:97:c0:45:cf:51:c3:e8:40:27:3a:9f:6b:72: ec:85:ff:9c:24:39:bc:29:e1:8c:28:06:e5:e5:17: ce:ab:69:f1:8d:54:de:6c:35:91:f7:78:ee:ef:ba: f9:d8:97:fc:25:74:5a:13:e2:b2:0b:57:7c:44:f4: 97:16:c6:72:a2:b1:fe:9c:59:3a:2a:59:6f:f5:22: b5:84:23:f6:3b:84:d6:f4:9c:40:b6:6e:3f:4d:f4: 19:54:c1:49:d1:3c:78:b9:bd:48:8f:97:f4:36:29: 80:7b:93:e7:85:d0:c8:31:57:31:0f:ed:01:14:85: 7c:19:82:6c:b6:55:b4:a3:4a:93:12:18:66:6b:b8: bd:94:8f:f7:d8:b7:da:58:70:53:92:b6:27:52:80: b6:30:05:ad:9c:6d:35:c6:f9:55:6f:d8:f0:e9:05: 33:21:f9:1e:ee:ea:9e:ca:cf:48:cb:0d:15:16:c0: 0b:2e:1d:2d:0f:0f:4a:e0:f1:c1:7b:65:2f:6f:ec: 5b:8c:68:79:fb:f4:b3:73:07:f8:e0:2f:89:ee:da: d0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:DC:EA:8A:AD:AD:45:E4:A2:2D:BF:04:1C:76:D3:E0:4B:81:A5:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/eab32de1-6b18-3b8f-abc5-f44a304c3a1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 170.130.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:90:b2:af:a7:d7:6d:8f:43:e7:bd:f1:9f:90:c5:fc:98:d5: e3:14:1b:10:23:85:a5:b3:32:78:ec:a2:d8:56:00:c7:e1:86: f3:ad:00:08:70:c3:23:cb:f5:e6:f0:d8:24:a0:ac:49:6d:b8: 2f:1d:66:bb:3b:24:aa:4d:37:e6:12:82:de:a9:fe:c7:8b:cb: 1f:a9:60:46:84:39:b3:62:e3:0c:f0:c8:1c:7c:42:d0:af:56: 62:0c:24:fe:33:47:0b:1b:00:67:5c:63:58:c2:05:ba:7b:8d: d0:7a:63:fd:c6:49:c2:bb:6d:9a:cc:5b:21:84:49:8a:5f:c5: 81:fb:35:bd:d2:ba:14:48:36:e5:25:6a:42:31:c5:15:e7:22: 44:53:86:41:7d:d6:f0:55:d2:d6:42:fc:f4:c6:11:01:4e:0d: 2d:d7:f7:91:80:ea:dc:5a:3d:42:bd:f5:26:26:c5:86:88:95: 86:ae:dc:86:25:25:5c:f6:ee:1d:91:bf:50:ab:71:b8:1a:04: f9:ae:e9:69:79:f2:a9:cd:e7:98:d2:53:82:d0:73:4a:a2:10: 7f:c5:1c:df:09:8e:54:5c:00:b3:67:1d:81:9d:4a:5b:e8:6c: 4c:d4:2a:0d:91:83:76:8a:24:9b:37:32:5f:c9:43:22:68:a7: 59:68:e9:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9T2rz0e2M2TojUTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyODE4MjgxNloXDTI2MTIyNzE5MjgxNlowLzEtMCsGA1UEAxMk MWNkMmViZGUtODNlYy00YzI2LWE2MWQtM2YzNDFiNGY0ZjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mhp07RnOkWFKoi2pratgSLWSLsA3ko1ff9o EnyuVHYrB8YCMF3ZW81W0gn9QJfARc9Rw+hAJzqfa3Lshf+cJDm8KeGMKAbl5RfO q2nxjVTebDWR93ju77r52Jf8JXRaE+KyC1d8RPSXFsZyorH+nFk6Kllv9SK1hCP2 O4TW9JxAtm4/TfQZVMFJ0Tx4ub1Ij5f0NimAe5PnhdDIMVcxD+0BFIV8GYJstlW0 o0qTEhhma7i9lI/32LfaWHBTkrYnUoC2MAWtnG01xvlVb9jw6QUzIfke7uqeys9I yw0VFsALLh0tDw9K4PHBe2Uvb+xbjGh5+/Szcwf44C+J7trQYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3c6oqtrUXkoi2/BBx20+BLgaUzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZWFiMzJkZTEtNmIxOC0z YjhmLWFiYzUtZjQ0YTMwNGMzYTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqoJiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCQsq+n122PQ+e98Z+QxfyY1eMUGxAjhaWzMnjsothWAMfhhvOtAAhw wyPL9ebw2CSgrEltuC8dZrs7JKpNN+YSgt6p/seLyx+pYEaEObNi4wzwyBx8QtCv VmIMJP4zRwsbAGdcY1jCBbp7jdB6Y/3GScK7bZrMWyGESYpfxYH7Nb3SuhRINuUl akIxxRXnIkRThkF91vBV0tZC/PTGEQFODS3X95GA6txaPUK99SYmxYaIlYau3IYl JVz27h2Rv1CrcbgaBPmu6Wl58qnN55jSU4LQc0qiEH/FHN8JjlRcALNnHYGdSlvo bEzUKg2Rg3aKJJs3Ml/JQyJop1lo6Qk= -----END CERTIFICATE-----Generated at Sun Oct 11 20:47:57 2026 by rpki-client