$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/c86aad18-056e-3fa7-b8fc-e059e89eb580.roa File: c86aad18-056e-3fa7-b8fc-e059e89eb580.roa (raw, json) Hash identifier: h4+np0kAiHTBVsHnLZhONQt0gMyXm+6JcT6ahXe6La8= Subject key identifier: 2A:4F:F1:37:A4:AE:3B:27:78:B2:EC:C5:4D:92:6C:96:22:F8:A7:F3 Certificate issuer: /CN=9e56bd91-cc8d-4a73-9597-17ab940b26dc Certificate serial: 010D0C9F4328584F0AA22129AF2F5AB2D1CEA340 Authority key identifier: 8A:8D:80:97:0E:93:D1:8E:66:2B:7B:46:B0:2E:E2:40:45:6C:88:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/c86aad18-056e-3fa7-b8fc-e059e89eb580.roa Signing time: Wed 02 Sep 2026 13:00:12 +0000 ROA not before: Wed 02 Sep 2026 13:00:12 +0000 ROA not after: Tue 01 Dec 2026 14:00:12 +0000 asID: 395886 IP address blocks: 169.128.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/9e56bd91-cc8d-4a73-9597-17ab940b26dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/9e56bd91-cc8d-4a73-9597-17ab940b26dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:a2:21:29:af:2f:5a:b2:d1:ce:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e56bd91-cc8d-4a73-9597-17ab940b26dc Validity Not Before: Sep 2 13:00:12 2026 GMT Not After : Dec 1 14:00:12 2026 GMT Subject: CN=88e2b679-b260-41e7-a81c-d5ada89a3bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:02:da:53:23:71:24:bd:ac:8c:e0:c9:6e:31: 49:bf:a0:4a:8c:88:a0:51:9f:7c:85:13:67:1d:b0: b8:a6:91:0a:05:0d:9f:46:41:5a:d0:c2:e0:e7:24: 50:10:57:8e:e6:d0:d0:33:ce:87:9b:df:62:ec:42: d0:70:28:40:2e:10:df:e9:5d:f8:31:d4:89:02:1d: 1c:25:f2:8d:a0:b7:27:93:97:22:da:c8:e5:d5:91: 77:8a:c9:d7:9a:21:73:2e:01:df:06:f3:49:b1:78: 04:61:3e:2c:01:49:92:f4:b2:c8:4a:19:f5:24:a2: 2a:25:48:cd:79:ca:e5:22:bc:42:ba:9a:0f:70:53: 34:cb:63:32:1c:eb:35:8d:3c:b0:bc:3f:83:cc:a5: 7c:74:fb:07:92:7d:50:f8:ce:f7:1d:f2:8b:4b:a0: db:87:b8:22:8f:d6:81:e5:6b:65:44:54:4f:91:e0: e3:2c:15:ff:66:11:1c:fd:71:ad:fe:0e:36:c0:b9: dc:2a:be:38:2a:96:ce:fe:8f:78:aa:f4:31:2f:4c: 26:fb:30:4c:14:a0:f0:0f:21:14:8a:1c:0a:76:af: 48:e3:1d:31:ed:48:74:99:65:a3:62:36:41:e2:eb: df:db:9c:a9:63:8f:ea:61:d5:ff:34:a8:a1:44:0b: f7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4F:F1:37:A4:AE:3B:27:78:B2:EC:C5:4D:92:6C:96:22:F8:A7:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/c86aad18-056e-3fa7-b8fc-e059e89eb580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/9e56bd91-cc8d-4a73-9597-17ab940b26dc.crl X509v3 Authority Key Identifier: keyid:8A:8D:80:97:0E:93:D1:8E:66:2B:7B:46:B0:2E:E2:40:45:6C:88:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc.cer sbgp-ipAddrBlock: critical IPv4: 169.128.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:5a:13:8a:83:aa:54:5b:77:c0:02:2c:b4:cb:eb:b5:84:c3: 40:a5:78:5c:f0:9a:a3:73:78:c5:d2:81:33:5e:4d:e1:78:7c: 94:dc:e2:43:20:06:7c:4e:d1:75:53:9c:d9:50:9e:1f:f3:af: a8:66:99:7a:d7:a9:46:80:f3:b8:46:ca:27:a4:fc:e6:01:d7: 61:7b:68:df:9c:3f:fe:6a:1b:67:0e:32:66:fa:42:59:9b:56: c1:67:9e:c1:1c:18:e2:c5:54:f0:7a:4f:2a:0e:f9:fc:79:c1: 08:cf:80:93:18:f0:d5:6d:70:2b:4e:10:42:e6:6e:2d:2d:e9: 16:d5:0d:3a:2a:57:7f:77:97:93:32:f5:db:36:36:4a:22:f8: 7f:be:58:4d:c7:6d:76:ca:a3:a1:54:64:7d:0b:57:90:ee:f2: c2:7c:8d:54:fb:27:d8:ff:b2:27:0f:41:ac:8a:10:0c:5f:97: 7d:ed:ca:27:8c:95:f6:42:5a:39:de:75:a2:c9:01:64:36:45: b3:2a:ac:e5:cb:d1:fe:76:ed:b6:b2:e1:93:2a:df:27:43:b9: d1:d4:5a:0f:4a:09:19:77:1e:6b:5f:f3:67:fc:1d:8e:a4:fb: 62:09:f1:d4:16:b2:05:10:58:c5:91:f8:1a:61:f9:03:16:38: bf:3e:b7:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8KoiEpry9astHOo0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWU1NmJkOTEtY2M4ZC00YTczLTk1OTctMTdhYjk0MGIy NmRjMB4XDTI2MDkwMjEzMDAxMloXDTI2MTIwMTE0MDAxMlowLzEtMCsGA1UEAxMk ODhlMmI2NzktYjI2MC00MWU3LWE4MWMtZDVhZGE4OWEzYmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmALaUyNxJL2sjODJbjFJv6BKjIigUZ98hRNn HbC4ppEKBQ2fRkFa0MLg5yRQEFeO5tDQM86Hm99i7ELQcChALhDf6V34MdSJAh0c JfKNoLcnk5ci2sjl1ZF3isnXmiFzLgHfBvNJsXgEYT4sAUmS9LLIShn1JKIqJUjN ecrlIrxCupoPcFM0y2MyHOs1jTywvD+DzKV8dPsHkn1Q+M73HfKLS6Dbh7gij9aB 5WtlRFRPkeDjLBX/ZhEc/XGt/g42wLncKr44KpbO/o94qvQxL0wm+zBMFKDwDyEU ihwKdq9I4x0x7Uh0mWWjYjZB4uvf25ypY4/qYdX/NKihRAv3FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpP8TekrjsneLLsxU2SbJYi+KfzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85ZTU2 YmQ5MS1jYzhkLTRhNzMtOTU5Ny0xN2FiOTQwYjI2ZGMvYzg2YWFkMTgtMDU2ZS0z ZmE3LWI4ZmMtZTA1OWU4OWViNTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWU1NmJkOTEtY2M4ZC00YTczLTk1 OTctMTdhYjk0MGIyNmRjLzllNTZiZDkxLWNjOGQtNGE3My05NTk3LTE3YWI5NDBi MjZkYy5jcmwwHwYDVR0jBBgwFoAUio2Alw6T0Y5mK3tGsC7iQEVsiO4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85ZTU2YmQ5MS1jYzhkLTRhNzMtOTU5Ny0xN2Fi OTQwYjI2ZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqYA0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBaE4qDqlRbd8ACLLTL67WEw0CleFzwmqNzeMXSgTNeTeF4fJTc4kMg BnxO0XVTnNlQnh/zr6hmmXrXqUaA87hGyiek/OYB12F7aN+cP/5qG2cOMmb6Qlmb VsFnnsEcGOLFVPB6TyoO+fx5wQjPgJMY8NVtcCtOEELmbi0t6RbVDToqV393l5My 9ds2Nkoi+H++WE3HbXbKo6FUZH0LV5Du8sJ8jVT7J9j/sicPQayKEAxfl33tyieM lfZCWjnedaLJAWQ2RbMqrOXL0f527bay4ZMq3ydDudHUWg9KCRl3Hmtf82f8HY6k +2IJ8dQWsgUQWMWR+Bph+QMWOL8+t5U= -----END CERTIFICATE-----Generated at Sat Sep 5 05:19:12 2026 by rpki-client