$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50/f6c66651-4b9b-3d1e-bfd0-379aa9bb9386.roa File: f6c66651-4b9b-3d1e-bfd0-379aa9bb9386.roa (raw, json) Hash identifier: KYJ+QSSAEqCvHAEaDcB9IY1+dd2SqqwwSeg4ZZAlh7M= Subject key identifier: 8C:F1:0E:5C:0D:B9:5D:17:88:B3:CE:7C:6D:6B:D8:C9:D3:12:FA:F7 Certificate issuer: /CN=a6e2845d-3d1c-4612-b11c-d852ceebfa50 Certificate serial: 010D0C9F4328584F71EDA5E5C2B377DF4120BEE0 Authority key identifier: 44:B8:D9:FC:45:E5:BB:CC:B1:A4:1C:76:06:E3:87:07:47:3D:94:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50/f6c66651-4b9b-3d1e-bfd0-379aa9bb9386.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 396431 IP address blocks: 130.51.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50/a6e2845d-3d1c-4612-b11c-d852ceebfa50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50/a6e2845d-3d1c-4612-b11c-d852ceebfa50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:a5:e5:c2:b3:77:df:41:20:be:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6e2845d-3d1c-4612-b11c-d852ceebfa50 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=20f227fd-25cc-4173-a905-488b8841d659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:51:43:32:f1:39:e8:c4:ee:4f:94:e8:85:8d: 51:6f:97:40:3d:fe:2a:af:7c:4d:18:52:09:ef:36: 8d:61:98:a4:c5:d7:4d:08:fc:f4:28:37:f6:6f:6d: dc:cc:74:4f:b2:d8:1c:cc:4a:0d:d6:c4:93:d6:b4: 21:f8:ed:93:c4:79:8c:ee:07:ef:e3:3f:6f:7e:c9: da:f8:b5:4e:b6:38:2d:2e:b4:e0:0d:e6:8e:5b:b4: 57:3b:b4:c2:74:ba:49:5d:00:cb:6a:80:ad:0f:43: 7c:fe:d0:2c:73:70:d4:6b:8a:cf:c3:b7:d5:4c:a8: 8a:e2:c2:ad:2f:f0:d4:e6:be:cb:9b:29:f9:cd:c1: 1e:64:46:41:b9:94:ec:51:d3:45:e9:32:19:64:3d: d3:fa:9e:9b:4e:7f:34:90:b6:a6:8d:91:81:a6:c6: 90:14:76:19:14:0f:e1:11:ec:d9:35:5d:d6:d8:7c: ed:8b:d8:70:0c:95:ae:70:c8:7e:51:7d:e9:4e:51: 0e:63:9f:83:63:65:8e:c2:ca:7a:c4:85:3c:6f:ef: 50:85:b1:8c:1d:31:c1:b6:ef:79:6a:12:a7:e2:ff: 2d:a6:8c:27:c4:24:19:96:63:dd:6a:98:20:9a:da: 41:cb:3a:ac:29:2e:1e:8e:53:b6:3f:5c:eb:cd:ea: 28:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F1:0E:5C:0D:B9:5D:17:88:B3:CE:7C:6D:6B:D8:C9:D3:12:FA:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50/f6c66651-4b9b-3d1e-bfd0-379aa9bb9386.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50/a6e2845d-3d1c-4612-b11c-d852ceebfa50.crl X509v3 Authority Key Identifier: keyid:44:B8:D9:FC:45:E5:BB:CC:B1:A4:1C:76:06:E3:87:07:47:3D:94:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50.cer sbgp-ipAddrBlock: critical IPv4: 130.51.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:4a:8c:e5:7b:e9:7e:26:d9:cb:ea:d3:dd:4d:b1:ab:a3:7e: 72:16:d9:aa:72:e6:e3:cf:f9:6d:23:bf:f8:66:bc:60:d0:1d: b3:f1:52:dd:53:a6:a2:1a:b5:c4:d8:b6:1a:c9:3a:c1:88:e7: a2:1f:9a:ce:0b:93:38:9c:b3:5f:de:3a:92:35:54:cd:52:c8: 00:35:18:da:0a:fb:0a:fa:e7:6d:21:cc:ce:e1:a5:f7:4e:c3: 2e:03:40:3c:68:c0:54:06:f8:e0:40:fd:ef:04:1a:4f:fe:41: 07:d6:b5:8e:70:c6:95:03:d2:94:30:aa:00:a7:97:bf:38:ba: 76:6a:11:7a:45:7c:40:8b:5e:e0:62:f1:9c:f4:07:d7:10:39: 8b:8c:09:e3:df:66:48:71:03:5a:2d:11:f7:da:f1:28:c0:37: 2e:d5:59:d2:2c:25:ef:2e:57:e4:da:e1:75:c3:c2:67:f5:f8: 2d:80:4d:f6:57:34:be:03:49:90:4e:eb:3d:82:a6:06:43:68: 18:b2:5e:72:07:80:e9:a7:f7:bb:55:4b:59:86:2d:70:77:c9: 4c:dc:46:3a:70:69:68:63:81:a2:ef:bc:5f:ad:62:ea:00:56: bb:77:aa:2f:57:f0:79:e5:e6:8a:f5:1d:fb:d5:ea:2a:fe:28: f5:83:27:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7aXlwrN330EgvuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTZlMjg0NWQtM2QxYy00NjEyLWIxMWMtZDg1MmNlZWJm YTUwMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk MjBmMjI3ZmQtMjVjYy00MTczLWE5MDUtNDg4Yjg4NDFkNjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1FDMvE56MTuT5TohY1Rb5dAPf4qr3xNGFIJ 7zaNYZikxddNCPz0KDf2b23czHRPstgczEoN1sST1rQh+O2TxHmM7gfv4z9vfsna +LVOtjgtLrTgDeaOW7RXO7TCdLpJXQDLaoCtD0N8/tAsc3DUa4rPw7fVTKiK4sKt L/DU5r7Lmyn5zcEeZEZBuZTsUdNF6TIZZD3T+p6bTn80kLamjZGBpsaQFHYZFA/h EezZNV3W2Hzti9hwDJWucMh+UX3pTlEOY5+DY2WOwsp6xIU8b+9QhbGMHTHBtu95 ahKn4v8tpownxCQZlmPdapggmtpByzqsKS4ejlO2P1zrzeooIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzxDlwNuV0XiLPOfG1r2MnTEvr3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hNmUy ODQ1ZC0zZDFjLTQ2MTItYjExYy1kODUyY2VlYmZhNTAvZjZjNjY2NTEtNGI5Yi0z ZDFlLWJmZDAtMzc5YWE5YmI5Mzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYTZlMjg0NWQtM2QxYy00NjEyLWIx MWMtZDg1MmNlZWJmYTUwL2E2ZTI4NDVkLTNkMWMtNDYxMi1iMTFjLWQ4NTJjZWVi ZmE1MC5jcmwwHwYDVR0jBBgwFoAURLjZ/EXlu8yxpBx2BuOHB0c9lEMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hNmUyODQ1ZC0zZDFjLTQ2MTItYjExYy1kODUy Y2VlYmZhNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgjNAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5KjOV76X4m2cvq091NsaujfnIW2apy5uPP+W0jv/hmvGDQHbPxUt1T pqIatcTYthrJOsGI56Ifms4Lkzics1/eOpI1VM1SyAA1GNoK+wr6520hzM7hpfdO wy4DQDxowFQG+OBA/e8EGk/+QQfWtY5wxpUD0pQwqgCnl784unZqEXpFfECLXuBi 8Zz0B9cQOYuMCePfZkhxA1otEffa8SjANy7VWdIsJe8uV+Ta4XXDwmf1+C2ATfZX NL4DSZBO6z2CpgZDaBiyXnIHgOmn97tVS1mGLXB3yUzcRjpwaWhjgaLvvF+tYuoA Vrt3qi9X8Hnl5or1HfvV6ir+KPWDJ5o= -----END CERTIFICATE-----Generated at Sat Oct 31 23:54:34 2026 by rpki-client