$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/2d0ca016-1614-37fc-aada-e73a723128de.roa File: 2d0ca016-1614-37fc-aada-e73a723128de.roa (raw, json) Hash identifier: xq6mQEbIajLom7EKcHJdKVpZAfNHKDPJqB+IuT7f/7I= Subject key identifier: 97:A1:B3:FB:B9:75:13:AB:A7:E9:CF:7F:AE:1B:3D:3B:D4:B6:BE:10 Certificate issuer: /CN=3d9d359c-ec49-4660-ab04-8247987b8dc7 Certificate serial: 010D0C9F4328584F119CDDC18FD3FA35D0C2C100 Authority key identifier: 2D:59:9B:D7:4D:5F:60:F8:28:FA:87:6F:5E:A9:88:8D:60:C3:4E:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/2d0ca016-1614-37fc-aada-e73a723128de.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 402718 IP address blocks: 169.128.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/3d9d359c-ec49-4660-ab04-8247987b8dc7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/3d9d359c-ec49-4660-ab04-8247987b8dc7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:dd:c1:8f:d3:fa:35:d0:c2:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d9d359c-ec49-4660-ab04-8247987b8dc7 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=0649f8af-bf51-4c7b-8fb9-98abeacf4e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b3:91:20:4e:54:ca:28:f6:18:9b:db:72:aa: 73:4e:91:db:54:25:47:f9:48:93:29:1b:de:c9:2f: ac:02:4b:79:72:90:37:50:7f:4b:ce:ba:c0:68:41: 77:20:66:6f:c8:f1:4a:55:d6:33:85:a6:c9:8c:47: e5:3c:6a:bd:a7:c4:f5:7b:aa:7a:b4:66:8c:9e:34: 8c:a0:50:88:58:4c:e3:07:27:3c:cc:a6:5e:8f:91: 19:c2:c4:b8:5d:88:33:4f:4d:05:37:96:cc:36:b1: c9:5d:1f:b4:4d:d1:01:2c:38:9a:b7:5e:fc:4a:e2: 38:3c:e8:f7:35:66:cf:ff:77:4d:db:82:74:49:a8: 73:ad:67:a0:94:58:2b:80:e6:5d:c8:88:cd:a2:7b: 20:7d:16:f4:f6:94:56:8b:bc:be:c8:35:19:62:d5: a8:57:c1:83:16:fe:3e:43:41:a0:3a:5b:3c:75:24: 21:64:2d:6e:af:ac:e3:59:1f:71:ab:6e:f9:34:30: 55:80:a9:09:60:2b:38:a7:c8:20:b2:16:ee:79:84: e5:bb:8d:08:b5:c4:be:51:1d:cc:a4:f2:cd:c4:b2: 7c:27:ec:85:fe:7e:ca:b7:0c:ba:eb:b7:3b:d4:9b: ff:45:85:c6:78:bd:27:64:40:02:48:0d:86:77:ea: d4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A1:B3:FB:B9:75:13:AB:A7:E9:CF:7F:AE:1B:3D:3B:D4:B6:BE:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/2d0ca016-1614-37fc-aada-e73a723128de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/3d9d359c-ec49-4660-ab04-8247987b8dc7.crl X509v3 Authority Key Identifier: keyid:2D:59:9B:D7:4D:5F:60:F8:28:FA:87:6F:5E:A9:88:8D:60:C3:4E:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7.cer sbgp-ipAddrBlock: critical IPv4: 169.128.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:fb:af:06:56:a9:e2:65:d9:df:cc:08:ad:c8:ac:50:96:c0: 63:ba:da:88:0a:b5:4c:ee:4a:84:3a:91:fc:87:48:a9:bd:46: 3d:85:da:0a:9b:36:4e:f0:e5:0e:f1:fb:9b:2f:2a:ef:4d:c4: 1b:b1:d7:b3:2d:c2:90:b5:55:e8:cd:8f:e3:10:d5:67:35:44: 15:19:90:b2:74:92:5a:48:85:ba:86:0c:6d:d3:29:9d:04:57: 40:1a:9b:2d:e8:25:ca:1f:2c:e6:b2:29:b4:c1:08:f5:59:2c: 18:56:45:69:49:d0:e6:34:8d:3d:9b:27:97:e1:be:43:8e:a2: 42:9b:18:ca:5f:be:08:36:f9:80:5b:ae:32:1c:07:94:c0:0a: 6c:43:f6:b4:71:3d:72:c1:0d:e6:82:7c:77:63:86:59:16:4a: 21:2b:e6:8e:8f:2c:a5:ec:3a:0f:ba:1e:4d:b6:dd:36:89:9c: 31:bb:4a:08:af:7c:4c:32:57:a2:50:c5:de:8e:a6:11:57:2b: e9:24:fa:2a:49:4e:4b:0e:62:18:b9:c6:c4:ea:40:13:e2:3e: fa:12:82:01:87:81:6d:dd:0c:26:a8:8a:14:e3:36:4c:7b:03: 6c:c9:00:3d:08:b7:ac:37:ce:da:ea:99:9f:34:56:e3:a4:9a: b0:7a:b6:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnN3Bj9P6NdDCwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q5ZDM1OWMtZWM0OS00NjYwLWFiMDQtODI0Nzk4N2I4 ZGM3MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MDY0OWY4YWYtYmY1MS00YzdiLThmYjktOThhYmVhY2Y0ZThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrORIE5Uyij2GJvbcqpzTpHbVCVH+UiTKRve yS+sAkt5cpA3UH9LzrrAaEF3IGZvyPFKVdYzhabJjEflPGq9p8T1e6p6tGaMnjSM oFCIWEzjByc8zKZej5EZwsS4XYgzT00FN5bMNrHJXR+0TdEBLDiat178SuI4POj3 NWbP/3dN24J0SahzrWeglFgrgOZdyIjNonsgfRb09pRWi7y+yDUZYtWoV8GDFv4+ Q0GgOls8dSQhZC1ur6zjWR9xq275NDBVgKkJYCs4p8ggshbueYTlu40ItcS+UR3M pPLNxLJ8J+yF/n7Ktwy667c71Jv/RYXGeL0nZEACSA2Gd+rUoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJehs/u5dROrp+nPf64bPTvUtr4QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zZDlk MzU5Yy1lYzQ5LTQ2NjAtYWIwNC04MjQ3OTg3YjhkYzcvMmQwY2EwMTYtMTYxNC0z N2ZjLWFhZGEtZTczYTcyMzEyOGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvM2Q5ZDM1OWMtZWM0OS00NjYwLWFi MDQtODI0Nzk4N2I4ZGM3LzNkOWQzNTljLWVjNDktNDY2MC1hYjA0LTgyNDc5ODdi OGRjNy5jcmwwHwYDVR0jBBgwFoAULVmb101fYPgo+odvXqmIjWDDTkAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8zZDlkMzU5Yy1lYzQ5LTQ2NjAtYWIwNC04MjQ3 OTg3YjhkYzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqYCoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAb7rwZWqeJl2d/MCK3IrFCWwGO62ogKtUzuSoQ6kfyHSKm9Rj2F2gqb Nk7w5Q7x+5svKu9NxBux17MtwpC1VejNj+MQ1Wc1RBUZkLJ0klpIhbqGDG3TKZ0E V0Aamy3oJcofLOayKbTBCPVZLBhWRWlJ0OY0jT2bJ5fhvkOOokKbGMpfvgg2+YBb rjIcB5TACmxD9rRxPXLBDeaCfHdjhlkWSiEr5o6PLKXsOg+6Hk223TaJnDG7Sgiv fEwyV6JQxd6OphFXK+kk+ipJTksOYhi5xsTqQBPiPvoSggGHgW3dDCaoihTjNkx7 A2zJAD0It6w3ztrqmZ80VuOkmrB6tlI= -----END CERTIFICATE-----Generated at Sat Sep 5 09:32:44 2026 by rpki-client