$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/cfd88921-323c-3d33-a709-2cbf44c3df7f.roa File: cfd88921-323c-3d33-a709-2cbf44c3df7f.roa (raw, json) Hash identifier: Hof6JTW1xadzRMSB83NtaEbP1mqWnvy4H2X395nrmUw= Subject key identifier: B3:00:EC:40:47:41:DF:C4:9B:D7:7D:D1:27:56:19:67:D3:88:F9:C6 Certificate issuer: /CN=3d9d359c-ec49-4660-ab04-8247987b8dc7 Certificate serial: 010D0C9F4328584F119CDF7E990025A961E9EBF0 Authority key identifier: 2D:59:9B:D7:4D:5F:60:F8:28:FA:87:6F:5E:A9:88:8D:60:C3:4E:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/cfd88921-323c-3d33-a709-2cbf44c3df7f.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 402718 IP address blocks: 169.128.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/3d9d359c-ec49-4660-ab04-8247987b8dc7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/3d9d359c-ec49-4660-ab04-8247987b8dc7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:df:7e:99:00:25:a9:61:e9:eb:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d9d359c-ec49-4660-ab04-8247987b8dc7 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=73fece7a-f9e6-4d0e-b331-f61b3b9d8fa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:31:48:ee:52:5e:33:d2:aa:78:bc:f2:59:00: 48:36:26:5d:c2:23:3e:53:ea:4b:7c:67:c7:70:d1: 72:0e:e5:c5:81:0b:1c:b7:50:b3:b5:38:38:e3:4c: d1:d2:30:71:dd:e8:9d:da:57:67:00:c7:77:e3:f5: 49:2f:f6:9f:5f:ad:d8:ef:b7:da:48:64:ff:fe:1c: 12:a3:ed:4e:f1:70:06:b4:fb:8b:e1:0d:af:d9:ed: d9:ed:18:a9:24:ce:f6:16:e3:07:a2:c3:d8:f2:15: 71:c1:e6:ac:88:a5:04:ee:4f:cb:c9:0a:53:45:ce: dd:1a:52:5d:bb:cf:5a:0d:a7:7a:c2:be:7a:af:e7: 69:ae:1a:d9:9e:3c:9a:92:46:67:c5:39:ef:7c:22: 6b:4a:e4:af:49:05:95:06:d8:09:1a:8f:2d:9c:34: 2a:08:03:17:0e:74:c4:9f:8a:98:c1:11:97:c1:5f: fb:9d:31:c4:66:8d:e1:2f:08:90:80:4d:80:79:19: c1:3a:3e:6f:b1:75:d9:24:ab:59:34:6a:f9:16:ab: 63:12:fb:24:48:7a:df:cf:fd:07:04:ab:ce:1a:65: e5:9d:98:47:0e:30:b7:52:6a:37:84:4a:db:47:52: e7:51:e5:c7:bf:f2:b7:95:ea:4d:e3:13:40:eb:40: be:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:00:EC:40:47:41:DF:C4:9B:D7:7D:D1:27:56:19:67:D3:88:F9:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/cfd88921-323c-3d33-a709-2cbf44c3df7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/3d9d359c-ec49-4660-ab04-8247987b8dc7.crl X509v3 Authority Key Identifier: keyid:2D:59:9B:D7:4D:5F:60:F8:28:FA:87:6F:5E:A9:88:8D:60:C3:4E:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7.cer sbgp-ipAddrBlock: critical IPv4: 169.128.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:00:e1:f4:98:8a:ac:1a:64:fe:9c:cc:72:38:08:c9:c1:ef: a5:8b:cb:66:96:67:0b:9a:13:01:55:ff:0e:bd:6c:a6:cc:0b: e9:b9:88:5a:be:02:69:c8:6f:73:4b:cb:f7:33:d3:7e:e6:2b: db:85:86:24:d8:72:dc:21:ee:3f:45:1f:31:79:03:cb:60:b7: af:34:29:e5:2d:aa:5f:21:55:59:c5:24:e5:c7:8f:5a:f7:a5: d6:6f:2c:3e:c1:48:47:cc:0c:69:07:52:44:eb:59:c0:73:f5: 7f:61:fe:0c:e4:b4:50:8e:b5:02:b5:05:9e:c8:31:65:73:3e: c0:0e:ea:b6:f6:04:e5:ce:88:7b:ad:9b:bf:47:d1:ea:05:33: 9a:75:5d:6f:ee:3d:1d:82:c7:56:0d:eb:36:7d:10:0b:8c:4e: c8:8b:61:94:ce:00:44:c5:12:17:be:a9:3e:c7:04:0d:ad:fe: f5:9e:b0:f9:95:1c:d5:db:19:20:d0:3b:9a:60:c1:e3:7e:38: e7:5b:d0:26:13:22:05:20:41:0c:aa:db:dc:ea:9f:de:73:8e: 01:db:63:cb:2f:25:0e:85:4c:cc:58:47:a5:bb:72:35:dc:6e: 24:43:7e:7a:ab:a5:cf:70:fe:f7:f6:e6:0c:6f:53:4a:34:13: a5:9b:24:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnN9+mQAlqWHp6/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q5ZDM1OWMtZWM0OS00NjYwLWFiMDQtODI0Nzk4N2I4 ZGM3MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NzNmZWNlN2EtZjllNi00ZDBlLWIzMzEtZjYxYjNiOWQ4ZmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjFI7lJeM9KqeLzyWQBINiZdwiM+U+pLfGfH cNFyDuXFgQsct1CztTg440zR0jBx3eid2ldnAMd34/VJL/afX63Y77faSGT//hwS o+1O8XAGtPuL4Q2v2e3Z7RipJM72FuMHosPY8hVxweasiKUE7k/LyQpTRc7dGlJd u89aDad6wr56r+dprhrZnjyakkZnxTnvfCJrSuSvSQWVBtgJGo8tnDQqCAMXDnTE n4qYwRGXwV/7nTHEZo3hLwiQgE2AeRnBOj5vsXXZJKtZNGr5FqtjEvskSHrfz/0H BKvOGmXlnZhHDjC3Umo3hErbR1LnUeXHv/K3lepN4xNA60C+CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMA7EBHQd/Em9d90SdWGWfTiPnGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zZDlk MzU5Yy1lYzQ5LTQ2NjAtYWIwNC04MjQ3OTg3YjhkYzcvY2ZkODg5MjEtMzIzYy0z ZDMzLWE3MDktMmNiZjQ0YzNkZjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvM2Q5ZDM1OWMtZWM0OS00NjYwLWFi MDQtODI0Nzk4N2I4ZGM3LzNkOWQzNTljLWVjNDktNDY2MC1hYjA0LTgyNDc5ODdi OGRjNy5jcmwwHwYDVR0jBBgwFoAULVmb101fYPgo+odvXqmIjWDDTkAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8zZDlkMzU5Yy1lYzQ5LTQ2NjAtYWIwNC04MjQ3 OTg3YjhkYzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqYCpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwA4fSYiqwaZP6czHI4CMnB76WLy2aWZwuaEwFV/w69bKbMC+m5iFq+ AmnIb3NLy/cz037mK9uFhiTYctwh7j9FHzF5A8tgt680KeUtql8hVVnFJOXHj1r3 pdZvLD7BSEfMDGkHUkTrWcBz9X9h/gzktFCOtQK1BZ7IMWVzPsAO6rb2BOXOiHut m79H0eoFM5p1XW/uPR2Cx1YN6zZ9EAuMTsiLYZTOAETFEhe+qT7HBA2t/vWesPmV HNXbGSDQO5pgweN+OOdb0CYTIgUgQQyq29zqn95zjgHbY8svJQ6FTMxYR6W7cjXc biRDfnqrpc9w/vf25gxvU0o0E6WbJBc= -----END CERTIFICATE-----Generated at Sat Sep 5 07:13:29 2026 by rpki-client