$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/3c6d55a4-b94f-3c8d-a908-bbe1c7777ef8.roa File: 3c6d55a4-b94f-3c8d-a908-bbe1c7777ef8.roa (raw, json) Hash identifier: I4FVuDF0mWc7TQNtYbXU9Ux4YDafN4Hkwlc5oy2idZ4= Subject key identifier: 61:70:5F:31:5D:69:47:B7:61:4B:C7:52:83:98:B5:DC:06:09:48:69 Certificate issuer: /CN=9e56bd91-cc8d-4a73-9597-17ab940b26dc Certificate serial: 010D0C9F4328584F0AA2214E04004317A10AA4C0 Authority key identifier: 8A:8D:80:97:0E:93:D1:8E:66:2B:7B:46:B0:2E:E2:40:45:6C:88:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/3c6d55a4-b94f-3c8d-a908-bbe1c7777ef8.roa Signing time: Wed 02 Sep 2026 13:00:12 +0000 ROA not before: Wed 02 Sep 2026 13:00:12 +0000 ROA not after: Tue 01 Dec 2026 14:00:12 +0000 asID: 400618 IP address blocks: 169.128.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/9e56bd91-cc8d-4a73-9597-17ab940b26dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/9e56bd91-cc8d-4a73-9597-17ab940b26dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:a2:21:4e:04:00:43:17:a1:0a:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e56bd91-cc8d-4a73-9597-17ab940b26dc Validity Not Before: Sep 2 13:00:12 2026 GMT Not After : Dec 1 14:00:12 2026 GMT Subject: CN=4c80c209-96de-4c5e-a193-4be2eb449c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8f:36:b6:c0:3a:60:b8:f7:33:cc:5f:f5:84: e1:27:bc:e9:2d:0c:3e:78:7f:24:0c:34:02:2a:b8: b3:f6:1c:e7:e3:cc:c5:0d:ee:b5:c5:e7:40:2e:25: 48:48:91:64:ec:c2:cd:8c:0c:f6:e6:14:cc:17:8e: c7:6e:98:1a:b2:2a:09:60:d3:85:c1:be:d0:59:25: 1f:4b:ba:45:4b:30:81:f7:2f:13:85:e3:f4:24:0a: 94:bb:66:95:ac:ce:d8:de:a6:25:0b:b3:0f:17:77: 94:a8:1c:32:b7:24:04:6a:5b:60:93:23:0c:e3:fd: 5b:9c:a8:b8:e9:4d:8e:52:44:a2:5c:5a:0d:6d:0b: 18:54:bb:36:ff:e0:fe:b7:85:6f:9a:f5:b3:3a:14: b3:29:5a:4e:2d:08:be:ec:b7:d5:a7:58:58:aa:04: 77:34:13:45:ed:73:0d:5a:91:29:52:93:fa:21:3b: a9:d5:10:68:77:34:1d:01:f1:42:37:0a:2c:bf:bc: 13:7a:61:c6:bc:a6:dd:6e:c0:de:82:d3:11:dc:c0: b5:34:93:a2:99:d8:78:ec:b0:e5:f5:17:30:61:27: 7f:9a:f1:5e:8b:fc:e9:88:78:54:16:bc:f3:8a:e8: bc:85:06:bd:f4:00:8c:8e:73:71:e0:02:c0:d6:7f: 21:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:70:5F:31:5D:69:47:B7:61:4B:C7:52:83:98:B5:DC:06:09:48:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/3c6d55a4-b94f-3c8d-a908-bbe1c7777ef8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/9e56bd91-cc8d-4a73-9597-17ab940b26dc.crl X509v3 Authority Key Identifier: keyid:8A:8D:80:97:0E:93:D1:8E:66:2B:7B:46:B0:2E:E2:40:45:6C:88:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc.cer sbgp-ipAddrBlock: critical IPv4: 169.128.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:ef:5e:c9:f6:a1:a3:01:54:0a:23:0c:c6:53:87:c1:96:f0: 93:a2:b0:46:65:10:aa:c2:ad:fa:1b:1a:ab:34:ac:0d:f6:37: 96:38:9b:62:12:99:42:05:ad:56:f2:f0:e7:a6:61:cd:cc:03: 1f:56:bc:d6:24:29:47:93:fd:a8:ae:0c:8b:eb:00:61:de:e9: 4e:e8:ad:27:79:5c:1f:d5:bb:23:0a:63:43:85:fa:fc:99:77: df:fc:d4:7f:36:d6:36:fe:f0:c6:01:b0:89:5c:c6:ed:d6:97: 97:05:42:81:33:e7:2c:8d:59:2d:a7:9a:01:3b:76:d0:b0:1b: 12:23:35:df:34:30:bf:63:13:42:b2:bc:0f:ab:03:ca:50:0c: 8c:fd:49:c0:36:9a:fe:c3:44:89:87:d5:7b:1a:69:8b:eb:9b: 59:12:dd:eb:8a:8a:59:d9:40:e2:5e:87:09:c0:d6:70:04:a7: 08:98:c8:91:ac:8f:a5:88:8f:e1:24:a7:e1:f3:ec:92:bd:b0: b4:77:1e:6d:b7:4c:87:70:ff:d4:3d:37:22:26:01:f3:cd:0b: e3:eb:5d:8d:d0:57:08:25:e0:60:37:81:b9:f7:2d:42:79:a0: 53:96:b0:6c:29:62:3e:7e:04:2a:be:cf:d3:89:dc:fc:5b:34: b6:1f:a7:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8KoiFOBABDF6EKpMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWU1NmJkOTEtY2M4ZC00YTczLTk1OTctMTdhYjk0MGIy NmRjMB4XDTI2MDkwMjEzMDAxMloXDTI2MTIwMTE0MDAxMlowLzEtMCsGA1UEAxMk NGM4MGMyMDktOTZkZS00YzVlLWExOTMtNGJlMmViNDQ5YzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY82tsA6YLj3M8xf9YThJ7zpLQw+eH8kDDQC Kriz9hzn48zFDe61xedALiVISJFk7MLNjAz25hTMF47HbpgasioJYNOFwb7QWSUf S7pFSzCB9y8TheP0JAqUu2aVrM7Y3qYlC7MPF3eUqBwytyQEaltgkyMM4/1bnKi4 6U2OUkSiXFoNbQsYVLs2/+D+t4VvmvWzOhSzKVpOLQi+7LfVp1hYqgR3NBNF7XMN WpEpUpP6ITup1RBodzQdAfFCNwosv7wTemHGvKbdbsDegtMR3MC1NJOimdh47LDl 9RcwYSd/mvFei/zpiHhUFrzziui8hQa99ACMjnNx4ALA1n8h0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFwXzFdaUe3YUvHUoOYtdwGCUhpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85ZTU2 YmQ5MS1jYzhkLTRhNzMtOTU5Ny0xN2FiOTQwYjI2ZGMvM2M2ZDU1YTQtYjk0Zi0z YzhkLWE5MDgtYmJlMWM3Nzc3ZWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWU1NmJkOTEtY2M4ZC00YTczLTk1 OTctMTdhYjk0MGIyNmRjLzllNTZiZDkxLWNjOGQtNGE3My05NTk3LTE3YWI5NDBi MjZkYy5jcmwwHwYDVR0jBBgwFoAUio2Alw6T0Y5mK3tGsC7iQEVsiO4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85ZTU2YmQ5MS1jYzhkLTRhNzMtOTU5Ny0xN2Fi OTQwYjI2ZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqYA0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7vXsn2oaMBVAojDMZTh8GW8JOisEZlEKrCrfobGqs0rA32N5Y4m2IS mUIFrVby8OemYc3MAx9WvNYkKUeT/aiuDIvrAGHe6U7orSd5XB/VuyMKY0OF+vyZ d9/81H821jb+8MYBsIlcxu3Wl5cFQoEz5yyNWS2nmgE7dtCwGxIjNd80ML9jE0Ky vA+rA8pQDIz9ScA2mv7DRImH1XsaaYvrm1kS3euKilnZQOJehwnA1nAEpwiYyJGs j6WIj+Ekp+Hz7JK9sLR3Hm23TIdw/9Q9NyImAfPNC+PrXY3QVwgl4GA3gbn3LUJ5 oFOWsGwpYj5+BCq+z9OJ3PxbNLYfp84= -----END CERTIFICATE-----Generated at Sat Sep 5 04:56:13 2026 by rpki-client