$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f945b47f-0137-34d2-a4e7-474e05194f7a.roa File: f945b47f-0137-34d2-a4e7-474e05194f7a.roa (raw, json) Hash identifier: rFn32m+CM45LDddaCcSzbLxNjP+BbxzV2QIXGSOQfqE= Subject key identifier: F5:10:31:7D:07:A6:C0:50:D9:FD:35:72:02:FE:88:97:9A:AA:CE:73 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F41128247F41BB86151616E00 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f945b47f-0137-34d2-a4e7-474e05194f7a.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 62904 IP address blocks: 170.130.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:82:47:f4:1b:b8:61:51:61:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=f3498e50-d933-4baa-8e8d-6da6814a8bbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:bf:f3:e3:79:0b:63:b0:4e:35:18:c4:2f:03: fc:05:56:8a:1c:45:0e:eb:fa:ab:1b:77:b6:84:76: 05:bf:26:5a:a8:2e:30:fd:86:55:4d:55:08:f4:6b: 98:ac:bb:06:46:45:0a:82:c9:ce:ce:3e:45:b0:00: 21:01:66:cb:98:19:81:69:9e:68:11:3a:68:50:65: f6:93:e6:67:dc:e2:38:35:77:d9:c5:e9:0c:1f:17: 80:22:bc:30:27:41:9f:44:cc:50:ea:c6:57:cc:1e: 8c:a6:a4:0b:3a:f1:04:8b:06:a7:7a:0a:0c:b0:47: a8:a8:e8:a0:a6:db:6b:70:a0:7b:57:94:4b:23:5b: fc:c1:a7:90:49:22:cd:f5:2a:ac:d7:9d:36:1b:fb: fe:3e:96:7d:64:89:47:e5:8b:10:67:38:32:9a:4c: d5:8c:a1:30:9b:5c:39:78:04:78:e2:76:c1:04:f5: 43:88:72:44:51:ab:ec:bb:2d:d2:02:21:c9:70:4c: af:3a:5e:fc:16:8b:39:8a:75:e0:93:a7:92:c4:7e: 8a:25:73:2c:af:12:cd:f7:c5:bc:9e:de:58:0f:da: a9:67:85:1a:11:91:ac:04:35:79:9f:c6:64:11:f4: 18:5f:73:d7:61:63:f6:55:99:2d:20:c8:d0:ef:2a: 09:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:10:31:7D:07:A6:C0:50:D9:FD:35:72:02:FE:88:97:9A:AA:CE:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f945b47f-0137-34d2-a4e7-474e05194f7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 170.130.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:86:6a:75:cc:4c:1d:44:69:78:23:56:97:40:54:bd:46:3b: 31:88:ec:09:fc:68:7f:22:ef:0f:fc:e6:9f:34:cb:6e:2e:f3: b6:fb:fe:8e:9f:0e:f5:44:50:be:73:5f:bf:f3:69:6b:12:29: b4:c3:13:83:89:2d:68:ab:27:b8:73:74:bc:75:ab:32:73:4e: c5:cf:40:d6:53:92:9e:1d:3a:7d:bc:b4:f3:2f:00:15:16:18: ec:74:07:b6:4f:80:de:b8:bb:04:78:51:7a:58:11:da:3a:84: 8c:56:95:cd:4f:2c:69:bc:6d:90:a2:b8:fa:34:45:a1:22:bc: 7d:5f:3f:cc:c6:1a:ed:55:54:a6:05:b4:0f:f9:57:a3:c3:0d: 8c:91:90:5e:b0:d6:10:ee:e8:d9:04:f6:49:44:3a:59:ab:65: 25:9e:5e:9b:9d:a6:7d:74:83:9e:82:59:3c:a1:bd:95:16:57: 11:eb:44:71:78:56:47:46:1e:fd:df:1a:5e:8d:36:b9:a2:60: 5c:e3:f9:9e:c1:e1:cf:77:ba:01:36:94:00:cb:01:d8:cc:3b: 15:6c:82:27:8c:a7:4d:92:70:14:e5:bf:9c:d4:ee:04:05:89: 47:c9:b1:c8:b4:c0:49:cd:58:b5:07:4f:5b:a6:86:af:7f:4e: b5:e4:a3:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEoJH9Bu4YVFhbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk ZjM0OThlNTAtZDkzMy00YmFhLThlOGQtNmRhNjgxNGE4YmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7/z43kLY7BONRjELwP8BVaKHEUO6/qrG3e2 hHYFvyZaqC4w/YZVTVUI9GuYrLsGRkUKgsnOzj5FsAAhAWbLmBmBaZ5oETpoUGX2 k+Zn3OI4NXfZxekMHxeAIrwwJ0GfRMxQ6sZXzB6MpqQLOvEEiwanegoMsEeoqOig pttrcKB7V5RLI1v8waeQSSLN9Sqs1502G/v+PpZ9ZIlH5YsQZzgymkzVjKEwm1w5 eAR44nbBBPVDiHJEUavsuy3SAiHJcEyvOl78Fos5inXgk6eSxH6KJXMsrxLN98W8 nt5YD9qpZ4UaEZGsBDV5n8ZkEfQYX3PXYWP2VZktIMjQ7yoJJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUQMX0HpsBQ2f01cgL+iJeaqs5zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZjk0NWI0N2YtMDEzNy0z NGQyLWE0ZTctNDc0ZTA1MTk0ZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqoJ2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWGanXMTB1EaXgjVpdAVL1GOzGI7An8aH8i7w/85p80y24u87b7/o6f DvVEUL5zX7/zaWsSKbTDE4OJLWirJ7hzdLx1qzJzTsXPQNZTkp4dOn28tPMvABUW GOx0B7ZPgN64uwR4UXpYEdo6hIxWlc1PLGm8bZCiuPo0RaEivH1fP8zGGu1VVKYF tA/5V6PDDYyRkF6w1hDu6NkE9klEOlmrZSWeXpudpn10g56CWTyhvZUWVxHrRHF4 VkdGHv3fGl6NNrmiYFzj+Z7B4c93ugE2lADLAdjMOxVsgieMp02ScBTlv5zU7gQF iUfJsci0wEnNWLUHT1umhq9/TrXko/0= -----END CERTIFICATE-----Generated at Sat Sep 26 09:33:28 2026 by rpki-client