$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7f9bfed5-7587-48e5-9b67-f2ef1b415fea/17917937-3e41-37bd-99b9-b5ae9e23c408.roa File: 17917937-3e41-37bd-99b9-b5ae9e23c408.roa (raw, json) Hash identifier: AXCYGrZigSzujpazztWQa+0i1oqo6aOv8yiBKYoY+0k= Subject key identifier: 27:41:2E:25:47:32:04:44:B8:2E:4F:F6:A6:6F:86:66:D3:E5:F1:D7 Certificate issuer: /CN=7f9bfed5-7587-48e5-9b67-f2ef1b415fea Certificate serial: 010D0C9F4328584F00DCC13DDBA8C8E344B6E340 Authority key identifier: C8:2B:CC:FA:69:DC:6A:B8:47:0B:0C:40:1E:08:51:3F:1A:9B:3A:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7f9bfed5-7587-48e5-9b67-f2ef1b415fea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7f9bfed5-7587-48e5-9b67-f2ef1b415fea/17917937-3e41-37bd-99b9-b5ae9e23c408.roa Signing time: Sun 30 Aug 2026 01:00:12 +0000 ROA not before: Sun 30 Aug 2026 01:00:12 +0000 ROA not after: Sat 28 Nov 2026 02:00:12 +0000 asID: 22040 IP address blocks: 169.128.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7f9bfed5-7587-48e5-9b67-f2ef1b415fea/7f9bfed5-7587-48e5-9b67-f2ef1b415fea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7f9bfed5-7587-48e5-9b67-f2ef1b415fea/7f9bfed5-7587-48e5-9b67-f2ef1b415fea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7f9bfed5-7587-48e5-9b67-f2ef1b415fea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:00:dc:c1:3d:db:a8:c8:e3:44:b6:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f9bfed5-7587-48e5-9b67-f2ef1b415fea Validity Not Before: Aug 30 01:00:12 2026 GMT Not After : Nov 28 02:00:12 2026 GMT Subject: CN=ff196867-28cb-4bcb-ae1f-7caeabd9a7a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1c:38:2d:64:4d:b3:a2:b0:c4:d7:ef:9e:53: e5:17:fc:af:ed:33:6f:10:1c:8e:47:b0:e5:66:33: 89:4a:51:81:48:d2:e3:25:9c:bf:9e:93:96:15:72: a6:f8:67:1d:76:36:06:32:bb:8f:ed:1f:41:7d:5a: e3:16:81:56:13:9c:1a:65:de:11:e0:6b:4f:98:2e: 49:ba:87:5a:20:0c:80:bd:ef:ac:12:45:8d:c3:b5: a9:b9:f5:49:7e:95:b1:55:24:dd:15:50:8b:03:31: 09:ea:6e:6f:19:6c:15:92:57:9b:78:a2:8b:e2:84: 13:ce:8d:58:0f:b4:64:79:ba:45:ef:29:9b:21:c6: 36:0a:b6:d1:bc:6b:e6:9a:2d:8b:8c:61:22:27:3a: 0a:fd:ea:53:a5:48:ee:b3:a9:5d:23:cd:16:e5:71: 07:3e:38:2c:3e:e1:69:cf:f3:c5:be:76:e0:46:a9: 22:7c:11:ca:5e:65:ab:c8:eb:49:6b:42:23:79:f9: 12:f3:21:bd:f5:3c:e4:80:1e:d3:5b:01:fd:f3:0a: e1:08:99:98:dc:e2:18:ff:9c:5c:25:89:23:c4:56: 9c:22:ae:fd:bd:88:1f:70:f7:01:85:93:81:72:12: 2d:25:0e:27:a5:fd:ef:ce:7b:c4:d8:b7:6a:7d:64: c0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:41:2E:25:47:32:04:44:B8:2E:4F:F6:A6:6F:86:66:D3:E5:F1:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7f9bfed5-7587-48e5-9b67-f2ef1b415fea/17917937-3e41-37bd-99b9-b5ae9e23c408.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7f9bfed5-7587-48e5-9b67-f2ef1b415fea/7f9bfed5-7587-48e5-9b67-f2ef1b415fea.crl X509v3 Authority Key Identifier: keyid:C8:2B:CC:FA:69:DC:6A:B8:47:0B:0C:40:1E:08:51:3F:1A:9B:3A:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7f9bfed5-7587-48e5-9b67-f2ef1b415fea.cer sbgp-ipAddrBlock: critical IPv4: 169.128.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:79:6e:8f:22:7f:ef:0b:9a:df:0e:75:f0:45:0c:f8:b6:a2: 3f:f4:42:04:ad:9d:5e:7c:d0:fa:58:92:21:ce:ed:bd:2c:62: 33:0f:5d:a4:00:b6:03:71:fe:83:f2:4f:07:c8:10:dd:d1:a6: e8:f6:aa:5d:f1:6d:22:33:6b:b7:50:93:cc:ba:d2:3c:5e:b2: 3f:9f:bd:c1:10:bc:1a:ea:b8:58:b5:9d:03:6b:1f:36:0b:0a: c2:9d:07:7d:45:75:0b:c1:49:44:b4:fd:60:26:30:68:13:24: 8f:e8:54:20:53:f7:98:63:35:12:e7:24:10:fc:0e:ff:99:ec: 7f:61:55:09:07:fd:17:b9:62:09:c0:a6:ae:65:07:c5:86:c9: 2c:bf:c7:73:ed:5b:dd:e5:75:b0:df:96:af:ea:60:b6:4a:04: 95:0f:e1:b2:a1:d4:44:db:b2:ba:e4:88:12:d7:57:cf:e1:1e: 5e:f7:26:95:b7:69:43:08:bc:02:7b:34:a7:2c:d0:44:81:4e: 30:0c:d9:2a:6f:91:7c:bb:42:31:a0:d4:84:e2:e3:fb:a1:47: 2e:10:a4:bc:3d:b2:50:41:d1:3c:90:7a:58:a4:c6:be:77:8b: 36:30:06:52:67:80:75:ed:55:4c:15:97:6f:ba:54:00:34:25: 87:2f:c5:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8A3ME926jI40S240AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y5YmZlZDUtNzU4Ny00OGU1LTliNjctZjJlZjFiNDE1 ZmVhMB4XDTI2MDgzMDAxMDAxMloXDTI2MTEyODAyMDAxMlowLzEtMCsGA1UEAxMk ZmYxOTY4NjctMjhjYi00YmNiLWFlMWYtN2NhZWFiZDlhN2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhw4LWRNs6KwxNfvnlPlF/yv7TNvEByOR7Dl ZjOJSlGBSNLjJZy/npOWFXKm+GcddjYGMruP7R9BfVrjFoFWE5waZd4R4GtPmC5J uodaIAyAve+sEkWNw7WpufVJfpWxVSTdFVCLAzEJ6m5vGWwVklebeKKL4oQTzo1Y D7RkebpF7ymbIcY2CrbRvGvmmi2LjGEiJzoK/epTpUjus6ldI80W5XEHPjgsPuFp z/PFvnbgRqkifBHKXmWryOtJa0IjefkS8yG99TzkgB7TWwH98wrhCJmY3OIY/5xc JYkjxFacIq79vYgfcPcBhZOBchItJQ4npf3vznvE2LdqfWTAiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdBLiVHMgREuC5P9qZvhmbT5fHXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi83Zjli ZmVkNS03NTg3LTQ4ZTUtOWI2Ny1mMmVmMWI0MTVmZWEvMTc5MTc5MzctM2U0MS0z N2JkLTk5YjktYjVhZTllMjNjNDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvN2Y5YmZlZDUtNzU4Ny00OGU1LTli NjctZjJlZjFiNDE1ZmVhLzdmOWJmZWQ1LTc1ODctNDhlNS05YjY3LWYyZWYxYjQx NWZlYS5jcmwwHwYDVR0jBBgwFoAUyCvM+mncarhHCwxAHghRPxqbOqIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi83ZjliZmVkNS03NTg3LTQ4ZTUtOWI2Ny1mMmVm MWI0MTVmZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqYD8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFB5bo8if+8Lmt8OdfBFDPi2oj/0QgStnV580PpYkiHO7b0sYjMPXaQA tgNx/oPyTwfIEN3Rpuj2ql3xbSIza7dQk8y60jxesj+fvcEQvBrquFi1nQNrHzYL CsKdB31FdQvBSUS0/WAmMGgTJI/oVCBT95hjNRLnJBD8Dv+Z7H9hVQkH/Re5YgnA pq5lB8WGySy/x3PtW93ldbDflq/qYLZKBJUP4bKh1ETbsrrkiBLXV8/hHl73JpW3 aUMIvAJ7NKcs0ESBTjAM2SpvkXy7QjGg1ITi4/uhRy4QpLw9slBB0TyQelikxr53 izYwBlJngHXtVUwVl2+6VAA0JYcvxcE= -----END CERTIFICATE-----Generated at Sat Sep 5 06:49:53 2026 by rpki-client