$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/b8c31441-1168-35bf-96e1-973dafd3104e.roa File: b8c31441-1168-35bf-96e1-973dafd3104e.roa (raw, json) Hash identifier: jZJYsAkaRFgge8dVNKGJTHmlX5SNh2CSzpnl1Mv5skU= Subject key identifier: 8E:0F:6B:D1:74:A2:1B:33:1D:AB:A9:5E:36:11:F4:10:8B:59:3F:AE Certificate issuer: /CN=54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb Certificate serial: 010D0C9F4328584EFE123343E01C02851056B620 Authority key identifier: 53:65:50:E9:F8:19:F1:12:15:D9:A6:AC:59:7E:1F:43:51:66:D8:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/b8c31441-1168-35bf-96e1-973dafd3104e.roa Signing time: Sat 29 Aug 2026 01:00:12 +0000 ROA not before: Sat 29 Aug 2026 01:00:12 +0000 ROA not after: Fri 27 Nov 2026 02:00:12 +0000 asID: 22296 IP address blocks: 169.128.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:12:33:43:e0:1c:02:85:10:56:b6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb Validity Not Before: Aug 29 01:00:12 2026 GMT Not After : Nov 27 02:00:12 2026 GMT Subject: CN=38dfa339-4a9c-4c66-b0b0-103e1fcde8fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a1:27:0a:fa:15:83:32:ab:db:a5:16:99:dd: 01:9f:fc:ce:10:93:e3:56:49:b8:d4:c5:c3:b5:e5: 3e:60:76:d0:0e:23:fb:56:f7:17:97:de:5a:e8:f7: 2e:04:a6:00:82:2f:3c:41:ec:3e:31:28:1e:95:65: 0e:f3:be:bd:1f:22:cc:fa:68:f3:cc:d8:54:2e:fe: f4:31:15:06:3d:5d:d3:6f:e1:bb:31:f3:bf:73:d2: 77:b5:f3:21:4d:b8:dc:e7:72:97:46:8d:cd:1a:5f: 71:b5:8f:56:d5:78:ea:a0:fa:f2:be:8e:37:ee:39: 2f:3a:d1:d3:ec:65:56:62:78:99:bb:af:16:3d:e3: fd:01:aa:4a:fc:21:8b:00:67:d7:f6:bb:20:4a:00: 2f:a2:66:4f:4b:96:f5:4c:ab:57:22:16:84:d9:50: e1:fe:4d:df:09:50:76:b8:84:5f:ab:fc:2a:fb:09: 15:61:6a:19:ea:e2:d8:ce:e5:cf:5c:a9:3e:62:3d: 78:dc:28:e6:d7:60:97:06:84:23:77:cc:3b:07:62: 55:fe:cc:27:28:b0:81:84:f9:47:2a:77:7c:03:e3: f4:9f:4d:7b:d0:79:4e:71:6a:22:f5:ff:12:dd:35: 59:81:06:31:8a:7b:fb:b9:78:34:a8:5e:61:db:93: 53:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:0F:6B:D1:74:A2:1B:33:1D:AB:A9:5E:36:11:F4:10:8B:59:3F:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/b8c31441-1168-35bf-96e1-973dafd3104e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.crl X509v3 Authority Key Identifier: keyid:53:65:50:E9:F8:19:F1:12:15:D9:A6:AC:59:7E:1F:43:51:66:D8:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer sbgp-ipAddrBlock: critical IPv4: 169.128.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:66:09:27:46:26:d5:39:b9:5c:ac:2a:2e:65:8d:26:f4:50: 47:d9:f0:25:44:0d:09:79:67:ee:17:c0:8b:ef:dd:30:79:b6: df:bc:11:a7:f2:5b:92:2d:de:18:97:fd:a4:60:18:00:bd:8b: 2e:78:3a:71:f8:7c:8c:d1:c3:29:89:6a:71:d9:79:12:3e:3c: c8:d1:26:33:12:8e:c3:62:ff:78:fa:af:ea:68:34:30:25:78: 75:ec:43:02:27:6b:af:33:f3:e0:a1:86:9e:93:08:88:22:f8: 39:2f:04:df:fd:84:ec:15:39:a4:7e:46:34:c2:e8:f6:b2:cb: 4d:24:68:dd:70:5d:7a:12:2c:8f:53:3f:ce:07:bd:0e:f8:bf: d3:0b:e1:14:fd:ab:34:9d:ce:39:2e:e3:05:ee:f1:7e:71:5c: 9a:4d:3b:a3:9b:52:e9:ca:90:56:84:12:44:18:bd:7b:0d:8f: b7:f4:df:2f:14:37:3f:79:4b:43:b9:db:0b:b0:2d:3d:8d:17: b1:31:e1:62:fa:1f:a1:94:d3:81:6f:32:73:f6:16:da:a6:e0: e9:c2:15:a0:e4:6d:1b:19:c1:f3:ae:1c:ff:be:49:32:c6:29: a2:4b:fa:bf:ac:e9:61:a5:32:1a:c5:14:89:00:60:3d:3f:62: ca:8c:68:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7+EjND4BwChRBWtiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQyOTNjZDItMWQ4Yy00M2YyLTkwYjgtYzdmZDhiMWMy ZWZiMB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk MzhkZmEzMzktNGE5Yy00YzY2LWIwYjAtMTAzZTFmY2RlOGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKEnCvoVgzKr26UWmd0Bn/zOEJPjVkm41MXD teU+YHbQDiP7VvcXl95a6PcuBKYAgi88Qew+MSgelWUO8769HyLM+mjzzNhULv70 MRUGPV3Tb+G7MfO/c9J3tfMhTbjc53KXRo3NGl9xtY9W1XjqoPryvo437jkvOtHT 7GVWYniZu68WPeP9AapK/CGLAGfX9rsgSgAvomZPS5b1TKtXIhaE2VDh/k3fCVB2 uIRfq/wq+wkVYWoZ6uLYzuXPXKk+Yj143Cjm12CXBoQjd8w7B2JV/swnKLCBhPlH Knd8A+P0n0170HlOcWoi9f8S3TVZgQYxinv7uXg0qF5h25NTUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4Pa9F0ohszHaupXjYR9BCLWT+uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81NDI5 M2NkMi0xZDhjLTQzZjItOTBiOC1jN2ZkOGIxYzJlZmIvYjhjMzE0NDEtMTE2OC0z NWJmLTk2ZTEtOTczZGFmZDMxMDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTQyOTNjZDItMWQ4Yy00M2YyLTkw YjgtYzdmZDhiMWMyZWZiLzU0MjkzY2QyLTFkOGMtNDNmMi05MGI4LWM3ZmQ4YjFj MmVmYi5jcmwwHwYDVR0jBBgwFoAUU2VQ6fgZ8RIV2aasWX4fQ1Fm2MwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81NDI5M2NkMi0xZDhjLTQzZjItOTBiOC1jN2Zk OGIxYzJlZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqYDoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZmCSdGJtU5uVysKi5ljSb0UEfZ8CVEDQl5Z+4XwIvv3TB5tt+8Eafy W5It3hiX/aRgGAC9iy54OnH4fIzRwymJanHZeRI+PMjRJjMSjsNi/3j6r+poNDAl eHXsQwIna68z8+Chhp6TCIgi+DkvBN/9hOwVOaR+RjTC6Payy00kaN1wXXoSLI9T P84HvQ74v9ML4RT9qzSdzjku4wXu8X5xXJpNO6ObUunKkFaEEkQYvXsNj7f03y8U Nz95S0O52wuwLT2NF7Ex4WL6H6GU04FvMnP2Ftqm4OnCFaDkbRsZwfOuHP++STLG KaJL+r+s6WGlMhrFFIkAYD0/YsqMaKs= -----END CERTIFICATE-----Generated at Sat Sep 5 08:40:42 2026 by rpki-client