$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21732a88-a633-4eb1-af32-60e5e0e1082e/a60234c3-31b1-3bbe-9f20-c72c5ed4ec72.roa File: a60234c3-31b1-3bbe-9f20-c72c5ed4ec72.roa (raw, json) Hash identifier: YKIAi89o6rhNutKbhqZM8fEqdwbei3DviJjt14zimCc= Subject key identifier: C6:E3:EB:02:D4:80:C5:51:7D:8B:72:D1:43:56:62:28:C2:F7:2D:12 Certificate issuer: /CN=21732a88-a633-4eb1-af32-60e5e0e1082e Certificate serial: 010D0C9F4328584EFE8989E632B11372379D44C0 Authority key identifier: 4D:F1:90:12:40:73:2C:5D:DC:39:67:AD:C1:9B:29:46:E7:C6:56:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21732a88-a633-4eb1-af32-60e5e0e1082e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21732a88-a633-4eb1-af32-60e5e0e1082e/a60234c3-31b1-3bbe-9f20-c72c5ed4ec72.roa Signing time: Sat 29 Aug 2026 05:00:57 +0000 ROA not before: Sat 29 Aug 2026 05:00:57 +0000 ROA not after: Fri 27 Nov 2026 06:00:57 +0000 asID: 402901 IP address blocks: 169.128.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21732a88-a633-4eb1-af32-60e5e0e1082e/21732a88-a633-4eb1-af32-60e5e0e1082e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21732a88-a633-4eb1-af32-60e5e0e1082e/21732a88-a633-4eb1-af32-60e5e0e1082e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21732a88-a633-4eb1-af32-60e5e0e1082e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:89:89:e6:32:b1:13:72:37:9d:44:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21732a88-a633-4eb1-af32-60e5e0e1082e Validity Not Before: Aug 29 05:00:57 2026 GMT Not After : Nov 27 06:00:57 2026 GMT Subject: CN=cdbc5d10-ba68-434d-a307-0669b9062f35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2e:a8:7b:56:c6:3b:f3:38:1a:42:28:46:36: 02:05:48:4a:5c:1b:b9:97:8b:5c:d5:2d:5c:00:99: a0:c1:c3:ea:f8:c3:4e:25:f0:17:11:7e:70:4d:01: 5a:17:50:8d:f9:45:06:86:a4:0f:06:16:4e:f2:9c: b2:4d:ab:ec:65:f5:e8:1f:6a:c4:1c:2d:69:4a:5e: 96:98:ce:b3:cd:a4:23:72:fc:41:fb:b8:fc:c7:b9: 19:e6:7e:f2:2a:ab:53:7e:62:bd:87:34:79:a5:d1: 74:ee:88:9e:de:a8:3d:88:88:56:49:16:45:d2:e9: 96:c0:d6:80:fb:08:05:ef:3f:69:fc:62:05:1e:07: 1c:0b:05:d4:c3:45:15:93:98:f1:54:eb:0b:b1:5f: 62:9c:e3:68:1c:c4:b6:59:dd:1f:43:58:9a:e5:82: f0:6d:79:55:ee:d1:57:61:87:1e:34:d7:5f:a3:84: 2b:15:20:62:19:50:85:5a:e4:52:93:94:37:54:af: 8b:5e:59:2d:3f:94:2d:a9:85:c9:ea:21:46:1d:1b: 51:87:21:73:de:a3:85:9d:36:81:92:ec:61:b8:fe: e8:65:a9:8f:9c:24:20:33:ea:da:4d:b2:8f:46:6d: 03:39:36:2b:fa:dd:1e:df:72:c4:21:eb:36:43:d2: 18:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E3:EB:02:D4:80:C5:51:7D:8B:72:D1:43:56:62:28:C2:F7:2D:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21732a88-a633-4eb1-af32-60e5e0e1082e/a60234c3-31b1-3bbe-9f20-c72c5ed4ec72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21732a88-a633-4eb1-af32-60e5e0e1082e/21732a88-a633-4eb1-af32-60e5e0e1082e.crl X509v3 Authority Key Identifier: keyid:4D:F1:90:12:40:73:2C:5D:DC:39:67:AD:C1:9B:29:46:E7:C6:56:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21732a88-a633-4eb1-af32-60e5e0e1082e.cer sbgp-ipAddrBlock: critical IPv4: 169.128.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:94:6d:28:ec:d9:5c:a7:f8:ab:35:35:b1:b3:d3:f5:a1:8b: 7d:c2:e1:e5:35:62:3b:51:a9:d3:fb:f3:ea:a8:8a:59:2e:52: 35:86:bd:24:3c:a4:f2:64:3a:a6:7c:3c:7c:9c:95:9b:25:3f: 68:ce:bf:84:75:e3:8b:66:5e:c5:9f:e6:3d:c6:33:3d:78:81: 63:89:cc:59:8c:fa:8f:6c:ae:d5:c6:c5:d5:e4:d3:b4:d0:f7: a9:58:a2:4f:33:ee:21:86:59:0f:7c:e5:75:60:78:66:64:23: 40:bf:4e:a6:bb:12:e2:51:b0:76:3c:1e:74:6c:a7:50:e8:e2: ab:49:42:a3:20:19:6d:8b:7c:9b:d4:56:45:ed:4e:c0:3a:08: 8c:a5:21:ae:3b:6f:75:09:d8:61:09:a7:77:c3:db:63:4d:07: 19:16:8f:7a:28:41:9a:86:ee:4c:d1:7b:88:76:15:90:e7:c0: a8:b1:b8:f0:38:9a:e8:c2:25:9a:cb:53:38:8c:e0:65:ff:05: f6:57:a6:8b:cc:5d:04:82:3b:65:41:fb:bc:40:63:da:2f:d3: 30:85:4b:03:46:ef:cc:7c:a2:d0:d1:4e:e7:dd:33:3f:e8:1c: 0a:fb:70:c4:9a:1e:8a:90:2d:19:b9:0a:42:8b:b5:c0:f9:65: a8:b2:21:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7+iYnmMrETcjedRMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE3MzJhODgtYTYzMy00ZWIxLWFmMzItNjBlNWUwZTEw ODJlMB4XDTI2MDgyOTA1MDA1N1oXDTI2MTEyNzA2MDA1N1owLzEtMCsGA1UEAxMk Y2RiYzVkMTAtYmE2OC00MzRkLWEzMDctMDY2OWI5MDYyZjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApC6oe1bGO/M4GkIoRjYCBUhKXBu5l4tc1S1c AJmgwcPq+MNOJfAXEX5wTQFaF1CN+UUGhqQPBhZO8pyyTavsZfXoH2rEHC1pSl6W mM6zzaQjcvxB+7j8x7kZ5n7yKqtTfmK9hzR5pdF07oie3qg9iIhWSRZF0umWwNaA +wgF7z9p/GIFHgccCwXUw0UVk5jxVOsLsV9inONoHMS2Wd0fQ1ia5YLwbXlV7tFX YYceNNdfo4QrFSBiGVCFWuRSk5Q3VK+LXlktP5QtqYXJ6iFGHRtRhyFz3qOFnTaB kuxhuP7oZamPnCQgM+raTbKPRm0DOTYr+t0e33LEIes2Q9IYTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbj6wLUgMVRfYty0UNWYijC9y0SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yMTcz MmE4OC1hNjMzLTRlYjEtYWYzMi02MGU1ZTBlMTA4MmUvYTYwMjM0YzMtMzFiMS0z YmJlLTlmMjAtYzcyYzVlZDRlYzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjE3MzJhODgtYTYzMy00ZWIxLWFm MzItNjBlNWUwZTEwODJlLzIxNzMyYTg4LWE2MzMtNGViMS1hZjMyLTYwZTVlMGUx MDgyZS5jcmwwHwYDVR0jBBgwFoAUTfGQEkBzLF3cOWetwZspRufGVrIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yMTczMmE4OC1hNjMzLTRlYjEtYWYzMi02MGU1 ZTBlMTA4MmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqYB1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaUbSjs2Vyn+Ks1NbGz0/Whi33C4eU1YjtRqdP78+qoilkuUjWGvSQ8 pPJkOqZ8PHyclZslP2jOv4R144tmXsWf5j3GMz14gWOJzFmM+o9srtXGxdXk07TQ 96lYok8z7iGGWQ985XVgeGZkI0C/Tqa7EuJRsHY8HnRsp1Do4qtJQqMgGW2LfJvU VkXtTsA6CIylIa47b3UJ2GEJp3fD22NNBxkWj3ooQZqG7kzRe4h2FZDnwKixuPA4 mujCJZrLUziM4GX/BfZXpovMXQSCO2VB+7xAY9ov0zCFSwNG78x8otDRTufdMz/o HAr7cMSaHoqQLRm5CkKLtcD5ZaiyIfQ= -----END CERTIFICATE-----Generated at Sat Sep 5 02:40:32 2026 by rpki-client