$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/3c6d55a4-b94f-3c8d-a908-bbe1c7777ef8.roa File: 3c6d55a4-b94f-3c8d-a908-bbe1c7777ef8.roa (raw, json) Hash identifier: 3zdwZLgc1w/YxrA4AYGu1KUFEZlDf41oNB6pXSZFJSo= Subject key identifier: FC:F4:5D:F5:13:89:AB:1D:F6:D6:CB:7E:C8:CF:BD:04:53:13:3E:79 Certificate issuer: /CN=9e56bd91-cc8d-4a73-9597-17ab940b26dc Certificate serial: 010D0C9F4328584F722A1DFBDA7A5E351777AB80 Authority key identifier: 8A:8D:80:97:0E:93:D1:8E:66:2B:7B:46:B0:2E:E2:40:45:6C:88:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/3c6d55a4-b94f-3c8d-a908-bbe1c7777ef8.roa Signing time: Fri 09 Oct 2026 15:02:28 +0000 ROA not before: Fri 09 Oct 2026 15:02:28 +0000 ROA not after: Tue 01 Dec 2026 14:00:12 +0000 asID: 400618 IP address blocks: 169.128.52.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/9e56bd91-cc8d-4a73-9597-17ab940b26dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/9e56bd91-cc8d-4a73-9597-17ab940b26dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:72:2a:1d:fb:da:7a:5e:35:17:77:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e56bd91-cc8d-4a73-9597-17ab940b26dc Validity Not Before: Oct 9 15:02:28 2026 GMT Not After : Dec 1 14:00:12 2026 GMT Subject: CN=38c0c969-b2d8-4b18-98fc-937d22fc3f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:16:8b:6c:1c:95:6b:94:c8:dc:88:53:a4:4a: 51:b8:5c:e9:40:4b:ac:25:9d:3a:ef:1c:e2:82:34: ec:55:57:69:82:52:e2:1f:ed:1b:3f:66:a9:cc:b5: cb:16:c4:26:8d:6f:98:8c:b3:8c:83:3b:fe:c2:11: d0:9c:80:23:e9:73:71:75:21:d1:4a:41:d0:c1:1b: b8:4a:5b:4e:8b:87:7c:3b:c5:db:6a:bc:a3:50:c7: 40:de:a1:88:39:39:f0:28:db:db:ec:20:e4:26:c3: 63:90:ed:49:87:e9:8d:25:d7:01:d9:ea:0d:98:81: a2:84:34:ab:0e:c1:6a:e4:32:70:a9:46:44:81:46: 08:67:fc:c4:71:ea:30:55:e4:4b:56:eb:40:0d:59: 58:d2:87:cb:a4:ac:f7:3b:25:cf:5f:77:db:b0:7d: 14:01:a7:30:24:8b:9f:93:21:9c:79:83:03:34:68: 6f:d3:db:80:19:61:18:95:24:45:16:0f:0e:6a:b1: 52:a3:93:d9:9e:67:5b:6d:f5:17:31:fb:a9:c5:3a: c4:ee:ba:f3:00:3d:e0:19:71:26:75:bb:8b:b1:f8: 3f:fe:78:0c:9d:62:22:44:2d:91:0f:d3:cc:2c:03: ad:60:3d:6d:27:c8:2d:df:f0:7d:75:96:59:86:2f: 09:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F4:5D:F5:13:89:AB:1D:F6:D6:CB:7E:C8:CF:BD:04:53:13:3E:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/3c6d55a4-b94f-3c8d-a908-bbe1c7777ef8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/9e56bd91-cc8d-4a73-9597-17ab940b26dc.crl X509v3 Authority Key Identifier: keyid:8A:8D:80:97:0E:93:D1:8E:66:2B:7B:46:B0:2E:E2:40:45:6C:88:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc.cer sbgp-ipAddrBlock: critical IPv4: 169.128.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:6e:73:2d:34:88:2a:9f:e3:4f:d7:93:c4:a1:e8:6d:cf:f2: 8a:31:c2:d7:bd:0c:b3:13:d4:7c:3b:7d:14:4c:c9:b5:7a:0f: c2:75:41:71:22:77:27:de:21:dc:d7:03:ad:fc:1e:a6:c1:7f: ac:d5:37:ad:23:b6:c8:7e:a1:68:4c:9a:04:63:5c:8e:89:af: c7:ed:22:c3:9c:42:fa:b5:07:5c:4e:54:40:35:d4:55:f3:c8: 0a:e4:27:87:69:0b:0c:dc:78:a1:48:91:6a:c6:a0:58:e0:dc: a8:20:f3:27:06:11:71:9f:9b:9f:fd:76:39:95:02:e8:fa:36: f7:64:af:eb:13:31:97:94:2b:91:a4:1a:2a:15:b1:80:d1:6b: 4d:08:03:ec:73:c9:f5:34:1b:ad:76:67:1c:2e:92:35:96:e2: 5f:dd:1f:0a:22:c8:9e:f5:29:dc:a2:94:8a:69:4b:6a:6e:45: 9d:78:0b:52:d9:18:81:79:6e:85:6a:ca:e8:ba:b2:cc:04:f2: e1:ea:4b:6d:a1:81:8b:78:8a:bc:cf:32:0a:d3:38:6c:61:7a: 18:00:69:e7:7d:bc:b1:02:a4:84:a1:c1:c2:46:b9:5a:f8:55: fa:f3:aa:c0:1e:2f:fe:50:c7:7b:75:f5:30:46:e6:17:8c:8b: 28:30:a6:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9yKh372npeNRd3q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWU1NmJkOTEtY2M4ZC00YTczLTk1OTctMTdhYjk0MGIy NmRjMB4XDTI2MTAwOTE1MDIyOFoXDTI2MTIwMTE0MDAxMlowLzEtMCsGA1UEAxMk MzhjMGM5NjktYjJkOC00YjE4LTk4ZmMtOTM3ZDIyZmMzZjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBaLbByVa5TI3IhTpEpRuFzpQEusJZ067xzi gjTsVVdpglLiH+0bP2apzLXLFsQmjW+YjLOMgzv+whHQnIAj6XNxdSHRSkHQwRu4 SltOi4d8O8XbaryjUMdA3qGIOTnwKNvb7CDkJsNjkO1Jh+mNJdcB2eoNmIGihDSr DsFq5DJwqUZEgUYIZ/zEceowVeRLVutADVlY0ofLpKz3OyXPX3fbsH0UAacwJIuf kyGceYMDNGhv09uAGWEYlSRFFg8OarFSo5PZnmdbbfUXMfupxTrE7rrzAD3gGXEm dbuLsfg//ngMnWIiRC2RD9PMLAOtYD1tJ8gt3/B9dZZZhi8JvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPz0XfUTiasd9tbLfsjPvQRTEz55MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85ZTU2 YmQ5MS1jYzhkLTRhNzMtOTU5Ny0xN2FiOTQwYjI2ZGMvM2M2ZDU1YTQtYjk0Zi0z YzhkLWE5MDgtYmJlMWM3Nzc3ZWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWU1NmJkOTEtY2M4ZC00YTczLTk1 OTctMTdhYjk0MGIyNmRjLzllNTZiZDkxLWNjOGQtNGE3My05NTk3LTE3YWI5NDBi MjZkYy5jcmwwHwYDVR0jBBgwFoAUio2Alw6T0Y5mK3tGsC7iQEVsiO4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85ZTU2YmQ5MS1jYzhkLTRhNzMtOTU5Ny0xN2Fi OTQwYjI2ZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqYA0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1ucy00iCqf40/Xk8Sh6G3P8ooxwte9DLMT1Hw7fRRMybV6D8J1QXEi dyfeIdzXA638HqbBf6zVN60jtsh+oWhMmgRjXI6Jr8ftIsOcQvq1B1xOVEA11FXz yArkJ4dpCwzceKFIkWrGoFjg3Kgg8ycGEXGfm5/9djmVAuj6Nvdkr+sTMZeUK5Gk GioVsYDRa00IA+xzyfU0G612ZxwukjWW4l/dHwoiyJ71KdyilIppS2puRZ14C1LZ GIF5boVqyui6sswE8uHqS22hgYt4irzPMgrTOGxhehgAaed9vLECpIShwcJGuVr4 VfrzqsAeL/5Qx3t19TBG5heMiygwpkY= -----END CERTIFICATE-----Generated at Tue Oct 27 22:39:18 2026 by rpki-client