$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8faa25dd-2ba9-4d53-af3d-8717d35fed4a/59e49280-c8a6-3731-a312-a32579b1155d.roa File: 59e49280-c8a6-3731-a312-a32579b1155d.roa (raw, json) Hash identifier: dl1ecTZ9HOBtyWCWLjfaoG31CYnxTel6y8hi0FD9Hgk= Subject key identifier: 70:E7:B3:15:3E:D5:F3:87:AA:F7:57:47:2E:0E:BA:D1:91:EF:ED:72 Certificate issuer: /CN=8faa25dd-2ba9-4d53-af3d-8717d35fed4a Certificate serial: 010D0C9F4328584EB8B8C45FF78513F0CE434080 Authority key identifier: 58:99:27:19:76:18:DC:03:54:15:C3:88:3C:2F:AE:E1:71:0A:0C:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8faa25dd-2ba9-4d53-af3d-8717d35fed4a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8faa25dd-2ba9-4d53-af3d-8717d35fed4a/59e49280-c8a6-3731-a312-a32579b1155d.roa Signing time: Tue 04 Aug 2026 04:49:32 +0000 ROA not before: Tue 04 Aug 2026 04:49:32 +0000 ROA not after: Sun 01 Nov 2026 20:15:09 +0000 asID: 53366 IP address blocks: 169.128.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8faa25dd-2ba9-4d53-af3d-8717d35fed4a/8faa25dd-2ba9-4d53-af3d-8717d35fed4a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8faa25dd-2ba9-4d53-af3d-8717d35fed4a/8faa25dd-2ba9-4d53-af3d-8717d35fed4a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8faa25dd-2ba9-4d53-af3d-8717d35fed4a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b8:b8:c4:5f:f7:85:13:f0:ce:43:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8faa25dd-2ba9-4d53-af3d-8717d35fed4a Validity Not Before: Aug 4 04:49:32 2026 GMT Not After : Nov 1 20:15:09 2026 GMT Subject: CN=6b6eb05a-73f4-4a06-838d-f10c8fdf99ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8f:c0:53:fc:1c:8d:6d:eb:be:d4:a6:2b:fe: 0b:c6:49:fd:d9:00:73:70:8d:fb:af:63:85:7c:13: ef:a2:3f:f2:f3:ce:32:c3:fc:e3:d4:36:01:ec:f5: eb:1c:03:f3:58:33:86:da:ab:1d:65:ac:50:86:24: 18:b5:fa:0e:fb:73:1c:ce:9b:c7:b6:c3:61:8b:ef: d4:99:81:39:db:d7:38:1d:11:28:6b:2a:7b:60:52: 28:c8:ef:5d:43:f0:58:ea:4a:e3:a7:13:b2:b1:17: b8:c6:76:27:0d:bf:83:44:45:c3:ad:ca:13:6b:f7: da:12:cf:50:13:6d:98:c1:d1:c9:93:e2:c1:aa:b2: f0:66:e8:c5:a3:4d:70:32:ee:9a:27:97:ce:2b:9a: e6:41:2f:cd:13:7e:2a:fa:4f:76:df:65:55:58:e7: 28:15:45:59:c3:93:1f:f1:c9:c4:26:cb:0a:ed:8b: 33:53:f7:d9:2e:ad:fd:03:6e:59:5a:99:c3:49:09: e4:13:5d:d0:4e:00:61:81:73:01:d3:7b:74:c6:9d: 6a:e4:13:23:02:b8:cb:59:7c:a4:67:e5:b7:03:89: 5c:c5:50:46:f8:44:44:be:f9:3d:53:ff:77:6e:bd: 76:27:69:10:c1:b4:2a:8f:6e:64:93:3a:ec:52:7f: c9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E7:B3:15:3E:D5:F3:87:AA:F7:57:47:2E:0E:BA:D1:91:EF:ED:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8faa25dd-2ba9-4d53-af3d-8717d35fed4a/59e49280-c8a6-3731-a312-a32579b1155d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8faa25dd-2ba9-4d53-af3d-8717d35fed4a/8faa25dd-2ba9-4d53-af3d-8717d35fed4a.crl X509v3 Authority Key Identifier: keyid:58:99:27:19:76:18:DC:03:54:15:C3:88:3C:2F:AE:E1:71:0A:0C:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8faa25dd-2ba9-4d53-af3d-8717d35fed4a.cer sbgp-ipAddrBlock: critical IPv4: 169.128.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:66:88:1a:f5:4b:56:0f:7c:3a:bf:89:36:ab:ad:e4:47:0e: e5:9b:cd:18:21:07:22:55:c7:49:03:2c:f0:1d:00:1a:01:24: cb:22:0f:72:c3:78:46:a0:cf:17:db:4e:dc:c9:bc:97:aa:09: 1c:1e:16:83:53:a2:da:50:28:59:c3:f4:02:c4:52:fb:ec:c5: 56:a8:58:5b:d6:93:5e:e9:9a:47:fe:e1:be:3a:16:92:b9:cb: 1d:4e:7e:9a:16:83:a8:b8:47:7e:43:46:17:55:b9:e3:ef:99: 7e:7f:e3:d9:86:25:ea:58:7c:5c:8f:07:46:44:22:97:a3:db: 2a:ed:0b:80:bc:87:bc:88:05:77:62:3a:18:76:a1:f6:bf:4e: 55:0b:69:bf:70:65:f7:4b:a7:4a:b3:ee:b9:31:3f:ed:ae:b9: 3b:f1:4e:e0:84:66:b3:ed:e3:6d:25:a3:25:85:dd:d3:39:78: 32:ee:84:04:15:a6:0e:fe:65:90:03:46:67:b4:dc:d0:c9:0d: 5d:c0:55:67:2f:ab:58:10:01:ea:c3:d6:83:0c:58:df:a9:e1: 9b:3d:b5:0d:c9:79:b4:12:b8:af:14:29:84:d5:91:1d:60:15: f2:22:3f:2f:66:3a:0a:dc:76:0d:04:2d:4a:f1:c0:b3:19:95: c5:ab:54:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE64uMRf94UT8M5DQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGZhYTI1ZGQtMmJhOS00ZDUzLWFmM2QtODcxN2QzNWZl ZDRhMB4XDTI2MDgwNDA0NDkzMloXDTI2MTEwMTIwMTUwOVowLzEtMCsGA1UEAxMk NmI2ZWIwNWEtNzNmNC00YTA2LTgzOGQtZjEwYzhmZGY5OWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmo/AU/wcjW3rvtSmK/4Lxkn92QBzcI37r2OF fBPvoj/y884yw/zj1DYB7PXrHAPzWDOG2qsdZaxQhiQYtfoO+3MczpvHtsNhi+/U mYE529c4HREoayp7YFIoyO9dQ/BY6krjpxOysRe4xnYnDb+DREXDrcoTa/faEs9Q E22YwdHJk+LBqrLwZujFo01wMu6aJ5fOK5rmQS/NE34q+k9232VVWOcoFUVZw5Mf 8cnEJssK7YszU/fZLq39A25ZWpnDSQnkE13QTgBhgXMB03t0xp1q5BMjArjLWXyk Z+W3A4lcxVBG+EREvvk9U/93br12J2kQwbQqj25kkzrsUn/J1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDnsxU+1fOHqvdXRy4OutGR7+1yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi84ZmFh MjVkZC0yYmE5LTRkNTMtYWYzZC04NzE3ZDM1ZmVkNGEvNTllNDkyODAtYzhhNi0z NzMxLWEzMTItYTMyNTc5YjExNTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvOGZhYTI1ZGQtMmJhOS00ZDUzLWFm M2QtODcxN2QzNWZlZDRhLzhmYWEyNWRkLTJiYTktNGQ1My1hZjNkLTg3MTdkMzVm ZWQ0YS5jcmwwHwYDVR0jBBgwFoAUWJknGXYY3ANUFcOIPC+u4XEKDF8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi84ZmFhMjVkZC0yYmE5LTRkNTMtYWYzZC04NzE3 ZDM1ZmVkNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqYAUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9miBr1S1YPfDq/iTarreRHDuWbzRghByJVx0kDLPAdABoBJMsiD3LD eEagzxfbTtzJvJeqCRweFoNTotpQKFnD9ALEUvvsxVaoWFvWk17pmkf+4b46FpK5 yx1OfpoWg6i4R35DRhdVuePvmX5/49mGJepYfFyPB0ZEIpej2yrtC4C8h7yIBXdi Ohh2ofa/TlULab9wZfdLp0qz7rkxP+2uuTvxTuCEZrPt420loyWF3dM5eDLuhAQV pg7+ZZADRme03NDJDV3AVWcvq1gQAerD1oMMWN+p4Zs9tQ3JebQSuK8UKYTVkR1g FfIiPy9mOgrcdg0ELUrxwLMZlcWrVEc= -----END CERTIFICATE-----Generated at Wed Aug 26 18:14:37 2026 by rpki-client