$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/4701a3d2-ab86-301b-b183-ec499c9b3a73.roa File: 4701a3d2-ab86-301b-b183-ec499c9b3a73.roa (raw, json) Hash identifier: 6Y4kiyo263j9ot6RIUjFAEWDoNIicWbnSvqcLQf6Zbw= Subject key identifier: E8:4A:84:FA:91:3F:DB:E2:61:A6:FE:96:69:29:74:FB:11:63:D8:F6 Certificate issuer: /CN=3d9d359c-ec49-4660-ab04-8247987b8dc7 Certificate serial: 010D0C9F4328584E6F0E3D5EAC9FA292BFFCD440 Authority key identifier: 2D:59:9B:D7:4D:5F:60:F8:28:FA:87:6F:5E:A9:88:8D:60:C3:4E:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/4701a3d2-ab86-301b-b183-ec499c9b3a73.roa Signing time: Wed 08 Jul 2026 19:31:56 +0000 ROA not before: Wed 08 Jul 2026 19:31:56 +0000 ROA not after: Tue 06 Oct 2026 19:31:56 +0000 asID: 402718 IP address blocks: 169.128.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/3d9d359c-ec49-4660-ab04-8247987b8dc7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/3d9d359c-ec49-4660-ab04-8247987b8dc7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:0e:3d:5e:ac:9f:a2:92:bf:fc:d4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d9d359c-ec49-4660-ab04-8247987b8dc7 Validity Not Before: Jul 8 19:31:56 2026 GMT Not After : Oct 6 19:31:56 2026 GMT Subject: CN=c66418a6-9c8e-47fa-bc7d-62236dea18c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ba:7c:c0:a4:55:49:ad:89:a1:43:ab:b7:73: ae:c6:f1:2a:38:5d:e9:7c:45:79:78:d9:1d:4a:76: 7c:82:af:f0:1c:f0:00:cc:a1:62:4e:c9:7b:70:bf: 10:22:1e:49:39:1e:df:d0:af:c7:ad:f6:bb:5a:8a: 38:de:04:9f:fe:dc:62:56:c7:1b:e8:bf:2f:f0:1d: 84:a8:da:3d:ff:23:c0:3a:40:be:03:57:79:e5:89: ad:31:f8:71:84:a5:ab:5f:ef:39:05:26:7e:9f:c4: f3:e6:31:74:06:5b:4b:e6:32:c9:e8:90:21:d3:38: 85:e2:71:34:d8:4b:4c:57:ce:f0:9e:1d:dd:16:bf: 9a:44:1e:e7:cf:42:e3:fc:f1:f4:89:4f:4c:69:d8: 12:dc:10:7c:69:69:63:7e:3f:a7:40:ad:dd:af:86: 8b:e7:48:a2:1e:2b:21:5d:24:ea:8e:89:0b:b2:8b: cd:81:b4:46:9b:9b:a9:3f:85:12:ac:d2:ed:64:a1: 59:1a:01:fb:0e:fd:f8:6c:ad:1d:23:e0:4c:a4:5a: e7:60:69:01:14:84:7b:7b:82:3b:e5:fe:6b:46:9f: 0f:86:2d:a0:14:40:b6:9c:e9:5f:76:c3:48:fa:a3: 4d:d5:2c:9c:71:a8:d0:eb:00:1b:92:4d:4d:98:0b: 45:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:4A:84:FA:91:3F:DB:E2:61:A6:FE:96:69:29:74:FB:11:63:D8:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/4701a3d2-ab86-301b-b183-ec499c9b3a73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/3d9d359c-ec49-4660-ab04-8247987b8dc7.crl X509v3 Authority Key Identifier: keyid:2D:59:9B:D7:4D:5F:60:F8:28:FA:87:6F:5E:A9:88:8D:60:C3:4E:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7.cer sbgp-ipAddrBlock: critical IPv4: 169.128.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:01:8a:43:f6:fb:91:41:3f:53:37:94:49:9b:03:e5:1f:81: 47:e2:06:07:46:2c:6e:0b:de:e2:66:6d:a9:9b:72:78:ea:23: 79:05:9e:ae:65:94:65:51:95:1f:4b:0d:82:74:03:72:54:0f: 52:54:90:30:fe:27:6d:2b:02:7a:ad:d9:8a:2a:40:b2:ed:11: 0f:23:44:7b:e5:38:c2:26:71:81:ac:9f:63:15:da:50:06:a1: 4b:25:86:dc:57:e9:e1:96:54:ac:1c:05:31:43:a4:f3:f6:10: 4e:a3:65:00:67:70:f4:f5:57:26:ef:e5:b9:88:4a:74:41:f5: f5:0a:84:6a:51:79:d5:71:3f:62:e1:d6:4f:1b:cc:a9:bd:30: 5e:6e:58:27:d6:74:7f:2d:46:2b:8a:be:11:2e:c7:76:f7:91: 4f:a3:03:80:63:c7:f8:93:24:1a:f2:87:38:e4:83:6e:c9:34: 33:3f:57:c0:df:a0:18:38:37:99:6f:79:8b:c9:1c:59:79:86: 22:6f:f3:60:34:4b:60:ef:bd:63:9f:22:af:2d:d1:ad:df:d5: 70:d1:10:5a:af:67:8b:0f:9b:de:14:ef:c4:da:70:e6:f4:41: a7:09:1f:93:bc:90:a7:cb:d0:4e:12:fb:0a:c5:e4:d7:b8:fa: 08:fa:76:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vDj1erJ+ikr/81EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q5ZDM1OWMtZWM0OS00NjYwLWFiMDQtODI0Nzk4N2I4 ZGM3MB4XDTI2MDcwODE5MzE1NloXDTI2MTAwNjE5MzE1NlowLzEtMCsGA1UEAxMk YzY2NDE4YTYtOWM4ZS00N2ZhLWJjN2QtNjIyMzZkZWExOGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrp8wKRVSa2JoUOrt3OuxvEqOF3pfEV5eNkd SnZ8gq/wHPAAzKFiTsl7cL8QIh5JOR7f0K/Hrfa7Woo43gSf/txiVscb6L8v8B2E qNo9/yPAOkC+A1d55YmtMfhxhKWrX+85BSZ+n8Tz5jF0BltL5jLJ6JAh0ziF4nE0 2EtMV87wnh3dFr+aRB7nz0Lj/PH0iU9MadgS3BB8aWljfj+nQK3dr4aL50iiHish XSTqjokLsovNgbRGm5upP4USrNLtZKFZGgH7Dv34bK0dI+BMpFrnYGkBFIR7e4I7 5f5rRp8Phi2gFEC2nOlfdsNI+qNN1SyccajQ6wAbkk1NmAtFnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhKhPqRP9viYab+lmkpdPsRY9j2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zZDlk MzU5Yy1lYzQ5LTQ2NjAtYWIwNC04MjQ3OTg3YjhkYzcvNDcwMWEzZDItYWI4Ni0z MDFiLWIxODMtZWM0OTljOWIzYTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvM2Q5ZDM1OWMtZWM0OS00NjYwLWFi MDQtODI0Nzk4N2I4ZGM3LzNkOWQzNTljLWVjNDktNDY2MC1hYjA0LTgyNDc5ODdi OGRjNy5jcmwwHwYDVR0jBBgwFoAULVmb101fYPgo+odvXqmIjWDDTkAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8zZDlkMzU5Yy1lYzQ5LTQ2NjAtYWIwNC04MjQ3 OTg3YjhkYzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqYCqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIBikP2+5FBP1M3lEmbA+UfgUfiBgdGLG4L3uJmbambcnjqI3kFnq5l lGVRlR9LDYJ0A3JUD1JUkDD+J20rAnqt2YoqQLLtEQ8jRHvlOMImcYGsn2MV2lAG oUslhtxX6eGWVKwcBTFDpPP2EE6jZQBncPT1Vybv5bmISnRB9fUKhGpRedVxP2Lh 1k8bzKm9MF5uWCfWdH8tRiuKvhEux3b3kU+jA4Bjx/iTJBryhzjkg27JNDM/V8Df oBg4N5lveYvJHFl5hiJv82A0S2DvvWOfIq8t0a3f1XDREFqvZ4sPm94U78TacOb0 QacJH5O8kKfL0E4S+wrF5Ne4+gj6dqA= -----END CERTIFICATE-----Generated at Tue Jul 21 20:17:14 2026 by rpki-client