$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/71ce8117-1c5d-3db0-a40c-6a5df3258a72.roa File: 71ce8117-1c5d-3db0-a40c-6a5df3258a72.roa (raw, json) Hash identifier: 34i0cpBk2nBok3oRhVrI0zWC4o5vHsoMTGUbcNhDpXY= Subject key identifier: 02:28:19:A2:B3:6F:A4:00:01:18:55:8A:C5:FC:D5:1C:32:6F:AE:A1 Certificate issuer: /CN=9e56bd91-cc8d-4a73-9597-17ab940b26dc Certificate serial: 010D0C9F4328584F0AA22116B52219F985E3B7E0 Authority key identifier: 8A:8D:80:97:0E:93:D1:8E:66:2B:7B:46:B0:2E:E2:40:45:6C:88:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/71ce8117-1c5d-3db0-a40c-6a5df3258a72.roa Signing time: Wed 02 Sep 2026 13:00:12 +0000 ROA not before: Wed 02 Sep 2026 13:00:12 +0000 ROA not after: Tue 01 Dec 2026 14:00:12 +0000 asID: 8796 IP address blocks: 169.128.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/9e56bd91-cc8d-4a73-9597-17ab940b26dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/9e56bd91-cc8d-4a73-9597-17ab940b26dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:a2:21:16:b5:22:19:f9:85:e3:b7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e56bd91-cc8d-4a73-9597-17ab940b26dc Validity Not Before: Sep 2 13:00:12 2026 GMT Not After : Dec 1 14:00:12 2026 GMT Subject: CN=d24053aa-cfab-459b-9301-19ff0732aeb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b5:c9:a6:d6:74:85:d7:32:af:55:fa:be:a9: 79:ec:db:9c:d5:b7:84:4c:89:33:b2:31:c4:41:a2: a2:d2:44:d8:5e:da:66:56:c0:ba:35:c1:3b:79:4b: fc:55:8d:7c:71:20:f5:25:c5:5a:e6:b0:f6:fb:1d: fa:cb:ae:1c:ac:83:14:7c:11:d0:00:5a:87:43:98: 85:3d:83:7f:0d:87:95:54:1a:06:3d:6e:12:83:8e: ec:35:66:28:80:98:c6:70:0a:ed:28:ed:d2:8e:ec: 80:8a:d8:cb:d8:27:db:45:d5:9c:6b:70:9f:6d:fd: f7:7e:1a:af:ee:9e:13:ac:db:37:b4:09:75:e1:ca: 26:8c:da:b3:e8:0a:9e:c9:8f:8f:d4:02:fd:ff:aa: 61:b2:0a:1e:81:76:76:5a:e7:0f:d1:80:00:f2:5f: 6a:45:9e:cf:51:07:8f:15:36:60:31:65:8b:90:38: d0:18:4b:c1:f1:2f:ce:65:9e:b4:ff:14:75:53:83: be:6d:51:ee:7a:a9:39:72:26:16:1b:84:3a:70:e4: 9e:7c:4a:71:42:bd:9c:90:f0:9e:dd:26:dd:17:df: d2:58:2f:97:a8:10:6d:a7:6f:03:29:78:3c:bf:00: f1:fb:39:30:4e:4a:38:38:45:20:77:be:e5:bb:9d: 67:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:28:19:A2:B3:6F:A4:00:01:18:55:8A:C5:FC:D5:1C:32:6F:AE:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/71ce8117-1c5d-3db0-a40c-6a5df3258a72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/9e56bd91-cc8d-4a73-9597-17ab940b26dc.crl X509v3 Authority Key Identifier: keyid:8A:8D:80:97:0E:93:D1:8E:66:2B:7B:46:B0:2E:E2:40:45:6C:88:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc.cer sbgp-ipAddrBlock: critical IPv4: 169.128.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:61:9e:1e:42:3e:8d:88:91:95:04:e1:10:69:bd:ed:20:4c: 09:f4:bd:17:d9:d4:13:b2:82:c4:0b:71:1b:cd:d6:98:43:1c: af:03:c9:d5:a7:ed:05:6d:a0:b7:b9:3e:3a:7c:3a:8f:50:79: 67:67:f9:67:0e:2a:e8:fe:47:09:b1:9d:b4:4e:dc:86:37:4d: 62:34:85:b6:f8:45:f3:67:b6:c5:12:ea:ea:6f:63:b0:b4:c9: 43:c0:39:a0:a9:1b:3f:ec:3b:61:46:1a:f0:88:b6:bb:5b:6d: 01:8d:59:9d:dd:a8:7d:63:ef:9d:07:d1:ce:40:b4:27:fc:f5: 96:dd:4a:1c:91:72:e0:2f:86:85:69:fb:ea:3f:69:13:f0:a5: 3d:92:4f:16:f3:08:ab:f8:55:64:65:b6:88:19:e3:5b:ca:25: 5d:58:4b:87:c9:bf:a9:d3:cf:4e:bd:d6:64:68:57:5f:e3:39: 9c:84:8f:e6:3a:27:ae:2c:9a:a1:98:22:f5:40:23:c0:b0:9c: b4:15:15:aa:b5:fe:7d:18:e5:d6:22:3b:7c:09:e5:fd:b8:9c: 16:fb:23:89:20:a6:86:57:68:9a:d1:62:34:91:70:33:72:b3: 00:a5:1a:00:9b:d4:bc:af:b5:c7:39:ef:f0:09:37:30:fa:94: 60:c4:9f:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8KoiEWtSIZ+YXjt+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWU1NmJkOTEtY2M4ZC00YTczLTk1OTctMTdhYjk0MGIy NmRjMB4XDTI2MDkwMjEzMDAxMloXDTI2MTIwMTE0MDAxMlowLzEtMCsGA1UEAxMk ZDI0MDUzYWEtY2ZhYi00NTliLTkzMDEtMTlmZjA3MzJhZWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbXJptZ0hdcyr1X6vql57Nuc1beETIkzsjHE QaKi0kTYXtpmVsC6NcE7eUv8VY18cSD1JcVa5rD2+x36y64crIMUfBHQAFqHQ5iF PYN/DYeVVBoGPW4Sg47sNWYogJjGcArtKO3SjuyAitjL2CfbRdWca3Cfbf33fhqv 7p4TrNs3tAl14comjNqz6AqeyY+P1AL9/6phsgoegXZ2WucP0YAA8l9qRZ7PUQeP FTZgMWWLkDjQGEvB8S/OZZ60/xR1U4O+bVHueqk5ciYWG4Q6cOSefEpxQr2ckPCe 3SbdF9/SWC+XqBBtp28DKXg8vwDx+zkwTko4OEUgd77lu51n4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIoGaKzb6QAARhVisX81Rwyb66hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85ZTU2 YmQ5MS1jYzhkLTRhNzMtOTU5Ny0xN2FiOTQwYjI2ZGMvNzFjZTgxMTctMWM1ZC0z ZGIwLWE0MGMtNmE1ZGYzMjU4YTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWU1NmJkOTEtY2M4ZC00YTczLTk1 OTctMTdhYjk0MGIyNmRjLzllNTZiZDkxLWNjOGQtNGE3My05NTk3LTE3YWI5NDBi MjZkYy5jcmwwHwYDVR0jBBgwFoAUio2Alw6T0Y5mK3tGsC7iQEVsiO4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85ZTU2YmQ5MS1jYzhkLTRhNzMtOTU5Ny0xN2Fi OTQwYjI2ZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqYA0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRhnh5CPo2IkZUE4RBpve0gTAn0vRfZ1BOygsQLcRvN1phDHK8DydWn 7QVtoLe5Pjp8Oo9QeWdn+WcOKuj+RwmxnbRO3IY3TWI0hbb4RfNntsUS6upvY7C0 yUPAOaCpGz/sO2FGGvCItrtbbQGNWZ3dqH1j750H0c5AtCf89ZbdShyRcuAvhoVp ++o/aRPwpT2STxbzCKv4VWRltogZ41vKJV1YS4fJv6nTz0691mRoV1/jOZyEj+Y6 J64smqGYIvVAI8CwnLQVFaq1/n0Y5dYiO3wJ5f24nBb7I4kgpoZXaJrRYjSRcDNy swClGgCb1Lyvtcc57/AJNzD6lGDEn0w= -----END CERTIFICATE-----Generated at Fri Sep 4 23:09:31 2026 by rpki-client