$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f4f66f26-8fc8-3f2e-a218-76df062a6499.roa File: f4f66f26-8fc8-3f2e-a218-76df062a6499.roa (raw, json) Hash identifier: sCzKrT4Teh5Tig0iqrEMofjKU4eYL01XY7/WJI9x3RY= Subject key identifier: E7:77:B5:6F:E5:7B:F3:6A:10:6B:D0:F3:B3:73:7D:D8:7B:2D:7B:50 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F53E7096C43FC6E187EAA79E0 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f4f66f26-8fc8-3f2e-a218-76df062a6499.roa Signing time: Mon 28 Sep 2026 18:53:03 +0000 ROA not before: Mon 28 Sep 2026 18:53:03 +0000 ROA not after: Sun 27 Dec 2026 19:53:03 +0000 asID: 62904 IP address blocks: 170.130.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:e7:09:6c:43:fc:6e:18:7e:aa:79:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 28 18:53:03 2026 GMT Not After : Dec 27 19:53:03 2026 GMT Subject: CN=5e1aa606-3a58-4bb0-8574-358e489d3e5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:03:1c:45:4e:63:8a:b3:f2:a0:9c:f4:23:ce: 41:9e:27:2e:bf:18:7c:0c:35:bb:27:15:9b:59:70: ab:73:d7:a0:5b:73:73:e6:d0:89:f4:69:7b:24:1a: 9e:70:2c:b5:68:8d:53:9e:a4:ab:76:83:fc:4c:b7: 87:e2:b7:74:2d:a3:34:0d:fb:82:5a:46:72:c0:9d: ae:13:b0:2d:f6:bd:a4:00:2e:0c:8a:58:85:9d:4a: 51:35:85:d5:38:e6:ee:99:cc:1d:68:a4:0e:e4:98: 53:dd:59:c9:95:34:47:1f:19:ed:37:1c:1a:53:71: 44:1b:cb:49:28:dc:69:6a:ed:da:35:cb:42:82:40: 8f:36:1f:8b:68:10:95:d9:4f:76:da:61:01:68:4d: f6:96:29:ed:67:5a:ff:d2:c0:a6:df:e1:81:79:1e: 16:ec:84:9b:ac:ee:66:d1:23:11:73:bb:44:7e:16: f9:8c:8d:a5:a6:8e:8e:53:d0:5e:71:4d:0e:9f:2e: 47:cf:82:20:0d:c2:22:8a:f5:47:b9:5f:02:aa:db: d3:08:42:d1:78:10:b8:7e:81:d1:09:15:ba:9a:68: ec:87:06:c7:bd:8b:21:82:d3:3f:72:2e:1d:c1:a8: 64:5c:63:dd:2c:37:e8:dc:82:68:7c:04:92:70:b5: ac:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:77:B5:6F:E5:7B:F3:6A:10:6B:D0:F3:B3:73:7D:D8:7B:2D:7B:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f4f66f26-8fc8-3f2e-a218-76df062a6499.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 170.130.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:d4:0c:47:05:40:7d:6b:6f:7c:65:8b:a1:30:58:7c:67:11: ac:6c:fe:6b:9d:04:64:c2:8e:ca:f6:ee:33:3d:cf:2d:cf:49: 3a:75:d2:b4:c7:d6:f2:48:c8:19:a5:4e:9f:34:f1:bf:b8:ac: 89:e8:38:5d:cb:31:14:42:02:a3:f9:48:b1:04:a7:64:21:9e: 25:19:47:42:c9:39:2f:38:ab:fc:bc:c8:4d:a1:f9:4b:89:a6: 52:1e:4a:68:b4:49:1b:24:9f:66:c6:ac:ef:5f:25:1f:cc:f5: a8:75:16:fb:b2:cb:24:7c:bf:9d:81:5f:e2:2c:dd:c0:69:9a: 50:bd:46:5e:fa:7d:69:6a:c2:2b:ad:d1:9c:40:9c:ea:8f:c8: 5e:4a:b9:50:4a:2d:3a:1c:3b:0d:23:c8:76:54:73:48:38:c8: 38:f6:e2:80:7a:71:99:49:63:9a:d4:54:d0:9b:c0:3c:fb:1f: 0d:83:23:e9:2f:f1:de:92:f1:0b:dd:77:b8:b4:ab:3a:c3:68: 73:b6:b4:ff:b6:ae:6d:08:f6:57:c3:b1:0f:cd:2e:26:c8:b8: 34:7f:d6:bc:2c:06:09:48:77:bf:72:0e:4b:35:e7:b1:73:82: 4b:87:38:c0:4a:57:5c:50:e3:06:68:df:d2:9a:29:c9:50:f9: ee:e1:ff:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9T5wlsQ/xuGH6qeeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyODE4NTMwM1oXDTI2MTIyNzE5NTMwM1owLzEtMCsGA1UEAxMk NWUxYWE2MDYtM2E1OC00YmIwLTg1NzQtMzU4ZTQ4OWQzZTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQMcRU5jirPyoJz0I85Bnicuvxh8DDW7JxWb WXCrc9egW3Nz5tCJ9Gl7JBqecCy1aI1TnqSrdoP8TLeH4rd0LaM0DfuCWkZywJ2u E7At9r2kAC4MiliFnUpRNYXVOObumcwdaKQO5JhT3VnJlTRHHxntNxwaU3FEG8tJ KNxpau3aNctCgkCPNh+LaBCV2U922mEBaE32lintZ1r/0sCm3+GBeR4W7ISbrO5m 0SMRc7tEfhb5jI2lpo6OU9BecU0Ony5Hz4IgDcIiivVHuV8CqtvTCELReBC4foHR CRW6mmjshwbHvYshgtM/ci4dwahkXGPdLDfo3IJofASScLWseQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOd3tW/le/NqEGvQ87Nzfdh7LXtQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZjRmNjZmMjYtOGZjOC0z ZjJlLWEyMTgtNzZkZjA2MmE2NDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqoL0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLUDEcFQH1rb3xli6EwWHxnEaxs/mudBGTCjsr27jM9zy3PSTp10rTH 1vJIyBmlTp808b+4rInoOF3LMRRCAqP5SLEEp2QhniUZR0LJOS84q/y8yE2h+UuJ plIeSmi0SRskn2bGrO9fJR/M9ah1FvuyyyR8v52BX+Is3cBpmlC9Rl76fWlqwiut 0ZxAnOqPyF5KuVBKLTocOw0jyHZUc0g4yDj24oB6cZlJY5rUVNCbwDz7Hw2DI+kv 8d6S8Qvdd7i0qzrDaHO2tP+2rm0I9lfDsQ/NLibIuDR/1rwsBglId79yDks157Fz gkuHOMBKV1xQ4wZo39KaKclQ+e7h/3E= -----END CERTIFICATE-----Generated at Sun Oct 11 22:21:44 2026 by rpki-client