$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66/fcca3cda-e2f3-32ac-9dbe-e25c2a42fd7b.roa File: fcca3cda-e2f3-32ac-9dbe-e25c2a42fd7b.roa (raw, json) Hash identifier: AjpXKMNjwJqLgc095w/gk71J4p1c+bwfnw60l4Yae/8= Subject key identifier: 6C:A9:7A:52:8F:C4:D3:9D:02:DB:20:14:F5:3B:07:ED:E6:D0:74:4A Certificate issuer: /CN=ee9986fc-001f-49c5-949c-333fec29fe66 Certificate serial: 010D0C9F4328584F4974E26E18EB5FF30646E848 Authority key identifier: 2C:6A:93:4E:58:18:37:EB:09:24:3D:FC:9A:24:D0:3A:36:A9:59:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66/fcca3cda-e2f3-32ac-9dbe-e25c2a42fd7b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 38177 IP address blocks: 170.170.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66/ee9986fc-001f-49c5-949c-333fec29fe66.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66/ee9986fc-001f-49c5-949c-333fec29fe66.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:e2:6e:18:eb:5f:f3:06:46:e8:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee9986fc-001f-49c5-949c-333fec29fe66 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=62fdc425-b80d-4bfb-9696-9bdb6fe3c416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4d:10:22:d2:a9:7e:a1:81:19:c6:89:3c:6a: 42:75:0f:77:bf:b8:ea:d6:bd:07:73:4f:e1:7b:da: 29:d2:81:bb:ae:60:07:0b:37:1f:2b:16:fc:c1:14: b8:d8:28:dd:ff:6c:9e:4b:d4:49:49:29:09:d1:44: eb:6c:50:3c:fa:54:99:87:39:f4:13:10:df:bd:4e: a5:dc:e1:c4:bb:3c:55:0e:61:47:39:03:26:3d:9f: 07:1b:ea:a3:3d:55:45:d2:91:b6:97:34:b8:6c:1a: 83:65:d5:ad:71:19:40:22:35:86:a4:09:d8:24:70: f2:63:3e:15:ef:96:60:e1:ee:52:75:ba:f6:b9:85: 49:d2:41:9c:38:4e:9f:6c:c4:41:da:7c:ff:b9:63: 74:bf:1f:24:11:7d:24:a3:b2:38:c8:e3:4e:23:11: a9:0f:20:7c:e3:e6:00:c9:f5:72:69:0a:ba:41:14: fa:04:ea:55:f8:f7:04:5a:e7:14:10:55:48:95:59: 6b:66:9e:50:63:e8:55:fa:01:13:0f:2c:df:6a:fd: 13:ea:f7:89:5f:1c:9b:ac:75:2b:75:98:23:a9:93: 5e:36:d8:b1:f9:9b:9b:0c:4b:5d:7c:fa:9e:30:4d: 38:2a:a2:d6:59:26:de:ed:0a:ac:c9:d9:d3:af:22: 84:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A9:7A:52:8F:C4:D3:9D:02:DB:20:14:F5:3B:07:ED:E6:D0:74:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66/fcca3cda-e2f3-32ac-9dbe-e25c2a42fd7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66/ee9986fc-001f-49c5-949c-333fec29fe66.crl X509v3 Authority Key Identifier: keyid:2C:6A:93:4E:58:18:37:EB:09:24:3D:FC:9A:24:D0:3A:36:A9:59:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66.cer sbgp-ipAddrBlock: critical IPv4: 170.170.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:fe:0a:1a:8b:73:6a:eb:08:bf:ea:0d:65:69:ff:ad:36:94: 33:c7:87:c9:61:c4:1e:aa:15:6f:f3:da:76:4b:7d:3a:42:2e: 79:b8:5c:6f:b6:49:25:59:12:84:a9:98:c1:86:38:c7:97:ef: 94:c4:d2:ed:ad:ca:6a:c7:38:29:a1:8e:70:54:dd:59:76:ac: 56:bf:d6:35:f9:ee:ff:64:26:33:80:bc:0a:9a:db:d9:c0:c8: 2b:52:a8:ea:36:30:4f:73:d0:2d:df:50:57:a6:56:69:1c:28: c6:0c:4c:5f:d2:7f:5c:61:b8:a9:2c:da:d3:6a:2a:43:78:95: 14:d2:98:46:df:f7:76:d3:9c:40:5b:4a:15:f5:19:f9:50:ba: ec:85:59:7b:16:c3:dc:4f:f8:03:14:8c:5e:cb:f4:d1:b1:5c: f3:5b:22:82:5d:6b:5a:1e:d4:fc:aa:1e:20:35:a1:50:52:2a: 02:d5:ef:0c:2b:1a:6a:a2:78:fa:6f:a5:4e:45:6d:5d:b0:d5: d9:82:b8:62:cf:a4:90:20:dd:e6:6e:ac:62:2f:c4:8f:f0:a6: e0:1a:e8:4d:97:c5:3e:82:50:d5:cf:15:24:a0:15:fe:4f:05: bc:a4:b7:09:11:90:67:a6:be:0d:5c:52:e4:92:19:2e:93:9a: c4:d9:17:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdOJuGOtf8wZG6EgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWU5OTg2ZmMtMDAxZi00OWM1LTk0OWMtMzMzZmVjMjlm ZTY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjJmZGM0MjUtYjgwZC00YmZiLTk2OTYtOWJkYjZmZTNjNDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq00QItKpfqGBGcaJPGpCdQ93v7jq1r0Hc0/h e9op0oG7rmAHCzcfKxb8wRS42Cjd/2yeS9RJSSkJ0UTrbFA8+lSZhzn0ExDfvU6l 3OHEuzxVDmFHOQMmPZ8HG+qjPVVF0pG2lzS4bBqDZdWtcRlAIjWGpAnYJHDyYz4V 75Zg4e5Sdbr2uYVJ0kGcOE6fbMRB2nz/uWN0vx8kEX0ko7I4yONOIxGpDyB84+YA yfVyaQq6QRT6BOpV+PcEWucUEFVIlVlrZp5QY+hV+gETDyzfav0T6veJXxybrHUr dZgjqZNeNtix+ZubDEtdfPqeME04KqLWWSbe7QqsydnTryKEnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGypelKPxNOdAtsgFPU7B+3m0HRKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lZTk5 ODZmYy0wMDFmLTQ5YzUtOTQ5Yy0zMzNmZWMyOWZlNjYvZmNjYTNjZGEtZTJmMy0z MmFjLTlkYmUtZTI1YzJhNDJmZDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZWU5OTg2ZmMtMDAxZi00OWM1LTk0 OWMtMzMzZmVjMjlmZTY2L2VlOTk4NmZjLTAwMWYtNDljNS05NDljLTMzM2ZlYzI5 ZmU2Ni5jcmwwHwYDVR0jBBgwFoAULGqTTlgYN+sJJD38miTQOjapWXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lZTk5ODZmYy0wMDFmLTQ5YzUtOTQ5Yy0zMzNm ZWMyOWZlNjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqqoIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHX+ChqLc2rrCL/qDWVp/602lDPHh8lhxB6qFW/z2nZLfTpCLnm4XG+2 SSVZEoSpmMGGOMeX75TE0u2tymrHOCmhjnBU3Vl2rFa/1jX57v9kJjOAvAqa29nA yCtSqOo2ME9z0C3fUFemVmkcKMYMTF/Sf1xhuKks2tNqKkN4lRTSmEbf93bTnEBb ShX1GflQuuyFWXsWw9xP+AMUjF7L9NGxXPNbIoJda1oe1PyqHiA1oVBSKgLV7wwr GmqiePpvpU5FbV2w1dmCuGLPpJAg3eZurGIvxI/wpuAa6E2XxT6CUNXPFSSgFf5P BbyktwkRkGemvg1cUuSSGS6TmsTZFyo= -----END CERTIFICATE-----Generated at Sat Sep 26 10:54:25 2026 by rpki-client