$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/502a84b6-0db9-3e4f-93a6-56e3570e4f31.roa File: 502a84b6-0db9-3e4f-93a6-56e3570e4f31.roa (raw, json) Hash identifier: z+cDTCoBYO6fHvywRvB8e2wOdpmnVZFknCTFZBlDnEk= Subject key identifier: 94:5F:8C:76:EB:81:53:F5:7C:8D:B6:CB:07:50:10:8A:C2:14:77:EA Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F4328584F2F12173017D4F4C5710B76C0 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/502a84b6-0db9-3e4f-93a6-56e3570e4f31.roa Signing time: Tue 15 Sep 2026 14:14:54 +0000 ROA not before: Tue 15 Sep 2026 14:14:54 +0000 ROA not after: Mon 14 Dec 2026 15:14:54 +0000 asID: 3561 IP address blocks: 130.254.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2f:12:17:30:17:d4:f4:c5:71:0b:76:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Sep 15 14:14:54 2026 GMT Not After : Dec 14 15:14:54 2026 GMT Subject: CN=f619b93a-a54c-43de-8c52-0bc5f0e14102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a5:cf:03:88:13:d5:6a:2c:0c:2d:a1:e5:d2: 27:cb:99:4f:30:b3:a7:4f:c2:47:13:26:d9:13:1b: 2e:1c:80:2b:dc:2a:6d:3b:69:32:79:f2:bf:97:72: 7d:5a:59:82:b1:60:70:c1:cc:6f:13:e1:a3:a4:fa: 79:c4:e0:fe:21:3d:61:71:b6:38:17:ae:f6:65:ba: f3:1f:cd:82:98:9c:59:4e:be:57:be:cd:55:09:c7: f9:89:4c:54:80:eb:6c:c1:0f:2c:42:d0:fd:af:f0: a9:bd:20:f4:66:79:c0:7a:de:84:5e:59:b6:c2:c9: a7:fb:78:a2:4c:62:5c:4a:60:43:9e:4a:7f:53:11: 66:ad:dd:41:87:ed:91:cf:59:b9:b8:71:8b:a1:dd: de:81:be:a0:13:5d:e2:18:f8:f3:9f:fc:e6:d3:90: 6f:8e:65:f3:2b:5b:fd:91:79:4c:ac:1b:74:b4:49: d3:81:dd:6f:b0:52:8d:b2:a2:5c:ca:8e:d6:1e:11: 46:cb:bb:54:18:76:da:dc:18:65:bc:64:49:23:bb: b8:59:89:b1:fc:0f:37:59:14:a2:9a:64:90:c4:b4: ba:4f:35:4b:75:b9:b2:66:69:a8:d0:cb:f2:5c:8f: 46:05:b7:e6:7c:ec:30:f6:01:57:e9:cc:a3:ed:20: e2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:5F:8C:76:EB:81:53:F5:7C:8D:B6:CB:07:50:10:8A:C2:14:77:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/502a84b6-0db9-3e4f-93a6-56e3570e4f31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 130.254.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:79:fc:bd:4d:2f:70:9f:25:f7:1e:63:99:34:e1:2d:df:c7: b6:da:fe:62:6a:13:07:81:08:d3:61:a6:5a:4e:c7:7b:df:15: 7d:d3:39:02:28:f4:49:64:e2:25:c9:aa:1a:99:f0:6d:d3:c1: 3b:18:4c:53:08:7b:b4:90:2e:e1:80:f5:b4:e9:01:de:6c:c7: 7f:b8:4e:27:a7:17:10:0d:74:23:a3:25:e0:bf:a0:d5:72:bf: 0d:13:14:51:2e:21:73:3f:22:1f:f4:7c:13:52:26:b3:85:ba: df:31:35:47:07:59:81:35:1b:18:71:f3:7f:df:b0:5c:57:f3: 43:14:64:71:d0:63:a7:98:22:bb:59:8d:c9:11:98:fb:bd:18: 1b:73:fc:86:9f:8b:fc:18:84:8c:da:21:5d:26:51:1b:0c:4c: 1b:7c:0b:14:ce:2c:b0:93:25:16:bf:6d:57:84:3e:7b:c1:06: 02:46:1a:9b:2f:33:24:da:24:47:03:7f:36:45:b4:1b:c2:a5: ca:88:f4:b5:e4:57:2a:ad:ef:6d:73:ca:64:55:6f:b4:73:3c: 4d:8f:f0:73:bd:6a:fe:f7:fb:46:18:a0:ee:43:88:9c:d5:60: 01:92:e3:0b:f4:77:15:2a:a3:ab:9c:1c:ec:9d:c9:7d:5a:d8: 20:45:d5:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8vEhcwF9T0xXELdsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI2MDkxNTE0MTQ1NFoXDTI2MTIxNDE1MTQ1NFowLzEtMCsGA1UEAxMk ZjYxOWI5M2EtYTU0Yy00M2RlLThjNTItMGJjNWYwZTE0MTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqXPA4gT1WosDC2h5dIny5lPMLOnT8JHEybZ ExsuHIAr3CptO2kyefK/l3J9WlmCsWBwwcxvE+GjpPp5xOD+IT1hcbY4F672Zbrz H82CmJxZTr5Xvs1VCcf5iUxUgOtswQ8sQtD9r/CpvSD0ZnnAet6EXlm2wsmn+3ii TGJcSmBDnkp/UxFmrd1Bh+2Rz1m5uHGLod3egb6gE13iGPjzn/zm05BvjmXzK1v9 kXlMrBt0tEnTgd1vsFKNsqJcyo7WHhFGy7tUGHba3BhlvGRJI7u4WYmx/A83WRSi mmSQxLS6TzVLdbmyZmmo0MvyXI9GBbfmfOww9gFX6cyj7SDizQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRfjHbrgVP1fI22ywdQEIrCFHfqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvNTAyYTg0YjYtMGRiOS0z ZTRmLTkzYTYtNTZlMzU3MGU0ZjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgv4kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEN5/L1NL3CfJfceY5k04S3fx7ba/mJqEweBCNNhplpOx3vfFX3TOQIo 9Elk4iXJqhqZ8G3TwTsYTFMIe7SQLuGA9bTpAd5sx3+4TienFxANdCOjJeC/oNVy vw0TFFEuIXM/Ih/0fBNSJrOFut8xNUcHWYE1Gxhx83/fsFxX80MUZHHQY6eYIrtZ jckRmPu9GBtz/Iafi/wYhIzaIV0mURsMTBt8CxTOLLCTJRa/bVeEPnvBBgJGGpsv MyTaJEcDfzZFtBvCpcqI9LXkVyqt721zymRVb7RzPE2P8HO9av73+0YYoO5DiJzV YAGS4wv0dxUqo6ucHOydyX1a2CBF1Z4= -----END CERTIFICATE-----Generated at Sat Sep 19 12:04:45 2026 by rpki-client