$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaba9944-aefa-4b3b-b8aa-19fe7bdf295b/4747c1fb-9de7-3421-894c-5135a55b7418.roa File: 4747c1fb-9de7-3421-894c-5135a55b7418.roa (raw, json) Hash identifier: kMhGK7Af/LhgFzzl5HSv8fQgYl2KGX2WWAn1j3g3WQ0= Subject key identifier: 50:54:67:AB:0E:C2:0C:98:AD:1E:90:F8:53:2F:78:5B:A4:85:CF:B7 Certificate issuer: /CN=aaba9944-aefa-4b3b-b8aa-19fe7bdf295b Certificate serial: 010D0C9F4328584EE38C95CA806C5DAE77352B40 Authority key identifier: CD:3F:C8:11:7E:D4:66:E1:34:D4:55:6F:D2:7C:64:D8:21:82:5C:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaba9944-aefa-4b3b-b8aa-19fe7bdf295b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaba9944-aefa-4b3b-b8aa-19fe7bdf295b/4747c1fb-9de7-3421-894c-5135a55b7418.roa Signing time: Wed 19 Aug 2026 13:00:11 +0000 ROA not before: Wed 19 Aug 2026 13:00:11 +0000 ROA not after: Tue 17 Nov 2026 14:00:11 +0000 asID: 20080 IP address blocks: 170.39.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaba9944-aefa-4b3b-b8aa-19fe7bdf295b/aaba9944-aefa-4b3b-b8aa-19fe7bdf295b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaba9944-aefa-4b3b-b8aa-19fe7bdf295b/aaba9944-aefa-4b3b-b8aa-19fe7bdf295b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaba9944-aefa-4b3b-b8aa-19fe7bdf295b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:8c:95:ca:80:6c:5d:ae:77:35:2b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaba9944-aefa-4b3b-b8aa-19fe7bdf295b Validity Not Before: Aug 19 13:00:11 2026 GMT Not After : Nov 17 14:00:11 2026 GMT Subject: CN=ac2b8775-8376-4c7a-945a-207526af9e2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7b:65:ff:23:6f:34:b7:58:5e:c8:18:9b:2e: a4:2b:14:9d:dd:ea:3d:da:f8:57:24:0c:30:8c:14: 86:0e:a8:01:89:72:3b:87:bc:a4:3c:4f:3e:b5:49: 92:69:1f:5c:c3:0c:27:14:7b:57:fb:e5:58:8d:3f: fc:85:70:a1:ad:fc:6d:dc:33:df:5d:f5:9b:9d:a6: 3b:cc:c1:30:8b:34:86:74:ad:c6:9f:a5:3d:3a:1f: 44:95:d2:b2:d6:8e:12:fc:46:d0:ed:5c:b7:9e:f2: 97:c6:6a:a7:aa:4a:de:76:d0:41:bd:3f:17:3e:1b: 13:cd:ed:b3:c1:46:68:7b:54:85:a4:04:91:0c:13: 4a:80:c2:95:a1:16:c0:7e:3a:86:e2:3e:c8:50:12: 33:7a:bc:6b:5b:3a:44:6a:72:c5:b4:14:a7:49:b6: 10:78:67:d9:79:75:a3:a1:ec:e1:9d:d3:af:2c:05: f6:b1:7a:9d:25:2c:1c:ca:50:58:4e:eb:af:bb:17: ef:c0:e0:64:ae:40:73:5a:d1:f9:bb:90:4f:bc:4f: 8e:ba:e4:47:15:92:bd:2f:d6:64:a8:3e:f5:5c:98: af:4f:0b:45:4a:90:9b:18:86:19:d2:03:18:72:8a: 41:fa:46:1d:4d:28:74:bc:83:20:67:a1:4d:87:9e: ec:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:54:67:AB:0E:C2:0C:98:AD:1E:90:F8:53:2F:78:5B:A4:85:CF:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaba9944-aefa-4b3b-b8aa-19fe7bdf295b/4747c1fb-9de7-3421-894c-5135a55b7418.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaba9944-aefa-4b3b-b8aa-19fe7bdf295b/aaba9944-aefa-4b3b-b8aa-19fe7bdf295b.crl X509v3 Authority Key Identifier: keyid:CD:3F:C8:11:7E:D4:66:E1:34:D4:55:6F:D2:7C:64:D8:21:82:5C:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaba9944-aefa-4b3b-b8aa-19fe7bdf295b.cer sbgp-ipAddrBlock: critical IPv4: 170.39.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:03:18:2f:5b:05:02:e5:98:5f:05:6d:9e:d1:f5:40:33:84: c5:15:72:b9:74:92:0e:c1:e2:33:5f:0a:08:7a:d3:54:9e:89: d3:e0:a5:12:b4:42:49:cf:d6:c2:d0:12:53:2e:95:3c:54:24: c4:66:c8:dd:15:bf:d0:96:f0:c4:27:45:e6:28:c9:b0:a4:bb: bf:16:95:25:76:dc:bb:4f:4d:47:e4:22:29:f5:9c:6f:2f:ff: 5a:2a:1d:a1:a9:30:dc:d4:5a:aa:5c:29:29:9d:9a:24:56:c1: 91:6f:1d:44:40:09:25:63:b5:f9:13:b1:33:df:a6:db:ca:34: c6:38:20:5d:f6:19:b6:2a:43:36:ba:e5:c2:c5:91:7b:22:ff: 7d:3c:2d:25:86:56:64:25:3f:77:a6:28:43:e4:46:51:66:7c: 33:33:c2:ea:81:fc:74:78:c1:6b:45:7a:45:e4:3c:22:14:a7: 07:53:c9:fa:18:9e:60:cb:c0:c1:92:1e:29:c6:5b:7d:ae:80: ff:05:d3:fd:4f:fa:a6:83:5f:51:7a:40:ef:89:0a:08:7e:14: 39:00:84:e6:cf:19:9e:bd:b4:21:5e:5d:cc:2a:d0:29:13:b4: 72:ae:80:39:5f:05:31:70:c6:df:cc:92:ca:9c:a5:ae:b2:e2: 51:9e:ad:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjJXKgGxdrnc1K0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFiYTk5NDQtYWVmYS00YjNiLWI4YWEtMTlmZTdiZGYy OTViMB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk YWMyYjg3NzUtODM3Ni00YzdhLTk0NWEtMjA3NTI2YWY5ZTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnntl/yNvNLdYXsgYmy6kKxSd3eo92vhXJAww jBSGDqgBiXI7h7ykPE8+tUmSaR9cwwwnFHtX++VYjT/8hXChrfxt3DPfXfWbnaY7 zMEwizSGdK3Gn6U9Oh9EldKy1o4S/EbQ7Vy3nvKXxmqnqkredtBBvT8XPhsTze2z wUZoe1SFpASRDBNKgMKVoRbAfjqG4j7IUBIzerxrWzpEanLFtBSnSbYQeGfZeXWj oezhndOvLAX2sXqdJSwcylBYTuuvuxfvwOBkrkBzWtH5u5BPvE+OuuRHFZK9L9Zk qD71XJivTwtFSpCbGIYZ0gMYcopB+kYdTSh0vIMgZ6FNh57sUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBUZ6sOwgyYrR6Q+FMveFukhc+3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWJh OTk0NC1hZWZhLTRiM2ItYjhhYS0xOWZlN2JkZjI5NWIvNDc0N2MxZmItOWRlNy0z NDIxLTg5NGMtNTEzNWE1NWI3NDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFiYTk5NDQtYWVmYS00YjNiLWI4 YWEtMTlmZTdiZGYyOTViL2FhYmE5OTQ0LWFlZmEtNGIzYi1iOGFhLTE5ZmU3YmRm Mjk1Yi5jcmwwHwYDVR0jBBgwFoAUzT/IEX7UZuE01FVv0nxk2CGCXJkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWJhOTk0NC1hZWZhLTRiM2ItYjhhYS0xOWZl N2JkZjI5NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqicIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgDGC9bBQLlmF8FbZ7R9UAzhMUVcrl0kg7B4jNfCgh601SeidPgpRK0 QknP1sLQElMulTxUJMRmyN0Vv9CW8MQnReYoybCku78WlSV23LtPTUfkIin1nG8v /1oqHaGpMNzUWqpcKSmdmiRWwZFvHURACSVjtfkTsTPfptvKNMY4IF32GbYqQza6 5cLFkXsi/308LSWGVmQlP3emKEPkRlFmfDMzwuqB/HR4wWtFekXkPCIUpwdTyfoY nmDLwMGSHinGW32ugP8F0/1P+qaDX1F6QO+JCgh+FDkAhObPGZ69tCFeXcwq0CkT tHKugDlfBTFwxt/Mksqcpa6y4lGerYQ= -----END CERTIFICATE-----Generated at Sat Aug 22 18:40:13 2026 by rpki-client