$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e9f5b98-5d6e-4ed7-8d23-d046ae67e737/a4fe3294-b315-3c09-9ac1-5a2c1e696dac.roa File: a4fe3294-b315-3c09-9ac1-5a2c1e696dac.roa (raw, json) Hash identifier: gOugRWzXd9sckLcqbNXLd8jzYbWkHpNRNIUvjpvoPso= Subject key identifier: 47:1A:3F:02:9C:9A:73:DB:45:0F:89:96:07:58:2F:34:DB:D5:52:52 Certificate issuer: /CN=9e9f5b98-5d6e-4ed7-8d23-d046ae67e737 Certificate serial: 010D0C9F4328584E9C42649FE0EF85ABD49721A0 Authority key identifier: 41:63:70:E7:5E:2D:C2:88:E5:99:3B:00:04:12:AA:05:B7:54:D6:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e9f5b98-5d6e-4ed7-8d23-d046ae67e737.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e9f5b98-5d6e-4ed7-8d23-d046ae67e737/a4fe3294-b315-3c09-9ac1-5a2c1e696dac.roa Signing time: Sat 25 Jul 2026 00:08:23 +0000 ROA not before: Sat 25 Jul 2026 00:08:23 +0000 ROA not after: Fri 23 Oct 2026 00:08:23 +0000 asID: 399138 IP address blocks: 169.128.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e9f5b98-5d6e-4ed7-8d23-d046ae67e737/9e9f5b98-5d6e-4ed7-8d23-d046ae67e737.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e9f5b98-5d6e-4ed7-8d23-d046ae67e737/9e9f5b98-5d6e-4ed7-8d23-d046ae67e737.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e9f5b98-5d6e-4ed7-8d23-d046ae67e737.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9c:42:64:9f:e0:ef:85:ab:d4:97:21:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e9f5b98-5d6e-4ed7-8d23-d046ae67e737 Validity Not Before: Jul 25 00:08:23 2026 GMT Not After : Oct 23 00:08:23 2026 GMT Subject: CN=5e865612-0861-4fed-99ba-af4d21a8733c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9d:14:14:8e:47:ae:7d:13:c2:79:a0:62:27: 42:bd:65:6b:b1:eb:3f:55:04:1d:10:0c:88:d2:01: 52:48:81:52:26:ae:66:c8:fd:07:f2:76:75:c4:8c: 43:2b:b0:3b:2b:f1:1d:7c:0d:b3:a8:06:b5:e9:91: 78:95:1c:39:6c:3a:80:49:61:56:cf:d3:a9:17:39: 2b:22:6c:10:f9:e6:14:74:c4:32:03:b4:d7:01:bf: 2f:9b:9c:fd:c1:5a:d3:8a:52:55:66:3a:af:44:0f: aa:07:5e:03:26:66:fe:08:5c:28:a9:09:ac:eb:03: d7:ad:bf:f6:8c:c9:cf:cd:84:f3:da:02:73:fc:42: 64:6d:23:d4:34:92:74:c7:ee:a7:9f:e9:a3:57:79: 2c:a9:5a:9f:34:4a:ce:63:82:85:6e:3e:20:69:45: a0:6b:d2:51:f4:21:f7:8f:38:59:7f:81:49:41:bd: c8:e1:90:f3:b9:e2:15:4e:d1:5c:57:f3:39:d9:a5: da:1c:60:9e:f0:66:39:ab:5f:14:5f:06:a4:0b:b8: ba:8f:a5:4e:b9:34:2b:b5:14:6b:c9:07:ec:84:e0: 38:ae:a2:af:f9:14:da:ae:ea:4d:09:32:ef:a2:1f: 1b:a5:d6:9d:94:35:e1:36:a0:05:89:51:b6:de:d7: 42:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:1A:3F:02:9C:9A:73:DB:45:0F:89:96:07:58:2F:34:DB:D5:52:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e9f5b98-5d6e-4ed7-8d23-d046ae67e737/a4fe3294-b315-3c09-9ac1-5a2c1e696dac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e9f5b98-5d6e-4ed7-8d23-d046ae67e737/9e9f5b98-5d6e-4ed7-8d23-d046ae67e737.crl X509v3 Authority Key Identifier: keyid:41:63:70:E7:5E:2D:C2:88:E5:99:3B:00:04:12:AA:05:B7:54:D6:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e9f5b98-5d6e-4ed7-8d23-d046ae67e737.cer sbgp-ipAddrBlock: critical IPv4: 169.128.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:bc:a6:50:4b:63:a4:c2:a2:19:04:72:26:5a:56:5c:06:3e: 53:0d:82:69:6c:9e:bf:d8:20:b6:9c:1e:4d:aa:d4:58:bc:ad: fd:6a:87:e5:e6:52:62:4f:da:b9:88:e7:39:31:9c:5f:41:39: 0a:28:96:a8:d2:1f:99:f6:a3:bb:ae:88:5a:29:78:ac:ff:12: 05:cb:8d:98:20:dc:29:de:cc:2e:e2:31:6b:21:39:52:f5:c4: 33:62:84:1d:49:19:28:c1:4d:b5:fb:59:dc:b5:ba:9f:e9:c2: d5:26:d8:43:0a:a9:e4:50:ec:2d:1e:be:d3:dc:83:85:d6:f5: 5b:47:16:37:e5:1a:a8:53:d2:3a:74:90:6f:dc:53:29:5d:ba: b9:82:8e:9e:ac:be:48:88:38:a7:02:43:cb:bb:e4:14:6a:f5: 84:52:10:07:01:1b:d2:8b:c1:f6:74:46:40:87:1c:f0:20:96: 27:76:19:dd:1b:6f:6a:c1:0d:52:48:b5:32:eb:6c:16:ec:c1: a9:5b:96:34:85:a7:8b:52:ba:b4:ef:f3:b5:ae:4b:92:51:c5: a1:a2:71:f6:2d:fc:11:f0:33:9d:49:11:7c:2d:b2:fe:5d:39: f9:3d:84:96:c6:95:99:74:52:d6:2a:ba:df:c8:9d:94:97:cd: 5e:cf:36:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6cQmSf4O+Fq9SXIaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWU5ZjViOTgtNWQ2ZS00ZWQ3LThkMjMtZDA0NmFlNjdl NzM3MB4XDTI2MDcyNTAwMDgyM1oXDTI2MTAyMzAwMDgyM1owLzEtMCsGA1UEAxMk NWU4NjU2MTItMDg2MS00ZmVkLTk5YmEtYWY0ZDIxYTg3MzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ0UFI5Hrn0TwnmgYidCvWVrses/VQQdEAyI 0gFSSIFSJq5myP0H8nZ1xIxDK7A7K/EdfA2zqAa16ZF4lRw5bDqASWFWz9OpFzkr ImwQ+eYUdMQyA7TXAb8vm5z9wVrTilJVZjqvRA+qB14DJmb+CFwoqQms6wPXrb/2 jMnPzYTz2gJz/EJkbSPUNJJ0x+6nn+mjV3ksqVqfNErOY4KFbj4gaUWga9JR9CH3 jzhZf4FJQb3I4ZDzueIVTtFcV/M52aXaHGCe8GY5q18UXwakC7i6j6VOuTQrtRRr yQfshOA4rqKv+RTarupNCTLvoh8bpdadlDXhNqAFiVG23tdCRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEcaPwKcmnPbRQ+JlgdYLzTb1VJSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi85ZTlm NWI5OC01ZDZlLTRlZDctOGQyMy1kMDQ2YWU2N2U3MzcvYTRmZTMyOTQtYjMxNS0z YzA5LTlhYzEtNWEyYzFlNjk2ZGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOWU5ZjViOTgtNWQ2ZS00ZWQ3LThk MjMtZDA0NmFlNjdlNzM3LzllOWY1Yjk4LTVkNmUtNGVkNy04ZDIzLWQwNDZhZTY3 ZTczNy5jcmwwHwYDVR0jBBgwFoAUQWNw514twojlmTsABBKqBbdU1q4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi85ZTlmNWI5OC01ZDZlLTRlZDctOGQyMy1kMDQ2 YWU2N2U3MzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqYAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFS8plBLY6TCohkEciZaVlwGPlMNgmlsnr/YILacHk2q1Fi8rf1qh+Xm UmJP2rmI5zkxnF9BOQoolqjSH5n2o7uuiFopeKz/EgXLjZgg3CnezC7iMWshOVL1 xDNihB1JGSjBTbX7Wdy1up/pwtUm2EMKqeRQ7C0evtPcg4XW9VtHFjflGqhT0jp0 kG/cUyldurmCjp6svkiIOKcCQ8u75BRq9YRSEAcBG9KLwfZ0RkCHHPAglid2Gd0b b2rBDVJItTLrbBbswalbljSFp4tSurTv87WuS5JRxaGicfYt/BHwM51JEXwtsv5d Ofk9hJbGlZl0UtYqut/InZSXzV7PNv4= -----END CERTIFICATE-----Generated at Sat Jul 25 04:01:15 2026 by rpki-client