$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/d9b5c80e-ec2a-3a44-a56f-fc659565fd8f.roa File: d9b5c80e-ec2a-3a44-a56f-fc659565fd8f.roa (raw, json) Hash identifier: 9nPbd3XIjM72p7PJWldsrsisAnkibqjvX/66fLI/iwk= Subject key identifier: DF:B7:8B:29:13:FC:3D:1A:2B:DD:21:45:96:F3:4D:92:09:E2:6F:2B Certificate issuer: /CN=3c70845f-7a59-44ea-8f3a-c3d10affa9e5 Certificate serial: 010D0C9F4328584F4976DF912145D5A170DA9100 Authority key identifier: E1:A8:6C:BE:0B:A2:D5:01:82:26:EE:FA:C5:22:58:3D:FF:F8:C9:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/d9b5c80e-ec2a-3a44-a56f-fc659565fd8f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 23162 IP address blocks: 128.163.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:df:91:21:45:d5:a1:70:da:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c70845f-7a59-44ea-8f3a-c3d10affa9e5 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3321b1b8-ebfd-40db-8c04-d08095ca6ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f5:8d:40:34:8d:20:bf:b6:79:ee:4f:a8:38: 40:e7:87:9c:33:49:2b:f9:ba:b1:68:bb:b1:f3:c7: 3b:e9:bb:96:ab:2d:d9:3c:e9:3e:15:f5:3a:fe:97: 5f:b7:be:7f:39:89:3b:d3:d9:30:b5:e5:56:31:c2: 04:d5:8f:e2:9f:47:99:48:a0:49:62:8d:e9:d7:84: e5:24:eb:7d:8e:a3:8f:2c:ef:12:10:5b:fb:e1:5b: 35:10:29:97:55:4c:a8:28:9e:6c:9a:60:e8:68:42: ba:d0:ca:c0:57:84:bb:f8:34:be:54:a0:45:4a:3a: 55:24:29:5b:d4:76:2a:c1:64:d7:9e:3c:5c:60:58: 0b:a6:11:25:f6:30:c2:e8:8b:49:38:ec:ba:68:a7: 3c:e4:92:00:70:88:42:de:8c:03:bd:5c:07:3d:97: 71:65:1f:a4:8b:08:99:55:eb:fb:b6:34:14:03:a9: 1e:e8:44:6b:3e:c6:e8:d4:25:c5:ba:18:e0:90:ab: 25:85:8d:eb:0d:ca:df:c4:e9:e1:b7:77:b0:0e:2e: 70:f2:9f:1b:21:8c:b9:cd:57:20:98:4d:2f:92:79: 4e:8c:02:38:24:0a:af:68:59:44:9e:45:8d:f4:a2: d5:5c:4a:c5:66:e4:6f:2c:b4:f6:95:6a:e4:4e:b1: 22:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B7:8B:29:13:FC:3D:1A:2B:DD:21:45:96:F3:4D:92:09:E2:6F:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/d9b5c80e-ec2a-3a44-a56f-fc659565fd8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.crl X509v3 Authority Key Identifier: keyid:E1:A8:6C:BE:0B:A2:D5:01:82:26:EE:FA:C5:22:58:3D:FF:F8:C9:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer sbgp-ipAddrBlock: critical IPv4: 128.163.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:ff:07:8f:e8:36:f9:0e:b3:8e:51:e5:d4:01:0c:36:12:be: 79:10:24:cb:cf:e0:a6:52:8b:11:cc:f4:b5:53:e0:52:1d:70: 48:cb:40:fc:86:f8:2e:71:7c:f7:1b:75:51:66:0c:b6:11:e6: 8f:d7:d3:1f:14:35:5c:01:36:eb:08:86:11:d8:b4:7e:d3:c3: 57:a4:e4:fe:4b:f0:fe:bb:e5:04:d2:91:61:2f:2a:05:38:f6: 69:fc:7d:d6:cf:60:65:b1:f1:47:6f:c8:9e:d3:6b:34:53:c7: 01:35:c9:c1:52:32:cc:9a:fa:9c:d7:4f:6e:58:1b:e2:c5:f8: ff:6b:74:cf:b6:cd:5e:62:41:1c:16:5d:07:5d:3b:8e:ed:90: bc:dd:d9:37:d2:d1:d4:6a:aa:f4:20:6b:9c:8d:81:a0:c4:67: e2:9a:74:16:2d:59:1e:03:fc:c1:48:57:08:95:ca:40:46:22: 30:fc:42:9c:23:16:8b:a8:39:db:43:b0:39:58:3d:bd:2e:43: ef:43:d2:43:68:9e:12:b9:57:1e:8a:6d:60:fb:a8:77:37:70: c1:5e:0e:e7:75:bc:73:22:21:82:63:2f:ab:7c:ec:3b:77:b6: 8d:c0:ce:a7:ea:17:f9:3e:6d:04:c2:68:55:bc:b4:45:94:f0: b2:f3:c7:e7 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9Jdt+RIUXVoXDakQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M3MDg0NWYtN2E1OS00NGVhLThmM2EtYzNkMTBhZmZh OWU1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzMyMWIxYjgtZWJmZC00MGRiLThjMDQtZDA4MDk1Y2E2YWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvWNQDSNIL+2ee5PqDhA54ecM0kr+bqxaLux 88c76buWqy3ZPOk+FfU6/pdft75/OYk709kwteVWMcIE1Y/in0eZSKBJYo3p14Tl JOt9jqOPLO8SEFv74Vs1ECmXVUyoKJ5smmDoaEK60MrAV4S7+DS+VKBFSjpVJClb 1HYqwWTXnjxcYFgLphEl9jDC6ItJOOy6aKc85JIAcIhC3owDvVwHPZdxZR+kiwiZ Vev7tjQUA6ke6ERrPsbo1CXFuhjgkKslhY3rDcrfxOnht3ewDi5w8p8bIYy5zVcg mE0vknlOjAI4JAqvaFlEnkWN9KLVXErFZuRvLLT2lWrkTrEiHwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFN+3iykT/D0aK90hRZbzTZIJ4m8rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zYzcw ODQ1Zi03YTU5LTQ0ZWEtOGYzYS1jM2QxMGFmZmE5ZTUvZDliNWM4MGUtZWMyYS0z YTQ0LWE1NmYtZmM2NTk1NjVmZDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2M3MDg0NWYtN2E1OS00NGVhLThm M2EtYzNkMTBhZmZhOWU1LzNjNzA4NDVmLTdhNTktNDRlYS04ZjNhLWMzZDEwYWZm YTllNS5jcmwwHwYDVR0jBBgwFoAU4ahsvgui1QGCJu76xSJYPf/4yTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zYzcwODQ1Zi03YTU5LTQ0ZWEtOGYzYS1jM2Qx MGFmZmE5ZTUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgKMwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAOv8Hj+g2+Q6zjlHl1AEMNhK+eRAky8/gplKLEcz0tVPgUh1wSMtA/Ib4 LnF89xt1UWYMthHmj9fTHxQ1XAE26wiGEdi0ftPDV6Tk/kvw/rvlBNKRYS8qBTj2 afx91s9gZbHxR2/IntNrNFPHATXJwVIyzJr6nNdPblgb4sX4/2t0z7bNXmJBHBZd B107ju2QvN3ZN9LR1Gqq9CBrnI2BoMRn4pp0Fi1ZHgP8wUhXCJXKQEYiMPxCnCMW i6g520OwOVg9vS5D70PSQ2ieErlXHoptYPuodzdwwV4O53W8cyIhgmMvq3zsO3e2 jcDOp+oX+T5tBMJoVby0RZTwsvPH5w== -----END CERTIFICATE-----Generated at Sat Sep 26 09:57:29 2026 by rpki-client