$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/10192187-defa-3548-b6c6-237adcf28f84.roa File: 10192187-defa-3548-b6c6-237adcf28f84.roa (raw, json) Hash identifier: e+oQZVH2NGJtmqRzWqH5HBBrGGupsficYTXjpeq7/Z0= Subject key identifier: 1A:D8:B7:3E:26:3F:A7:31:D7:16:7F:42:55:C7:A0:FC:AE:06:20:B7 Certificate issuer: /CN=b8a29c46-e0f1-4edc-988a-9420affbc339 Certificate serial: 010D0C9F4328584EB2B1AC042F0E88C582E9EC00 Authority key identifier: AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/10192187-defa-3548-b6c6-237adcf28f84.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 205627 IP address blocks: 170.2.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:ac:04:2f:0e:88:c5:82:e9:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8a29c46-e0f1-4edc-988a-9420affbc339 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=117a3f91-2a65-4b6e-9909-847cb78e6676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cf:20:30:45:2d:a2:d2:1f:4b:71:67:87:28: 1e:a9:0d:b7:10:44:b5:68:22:73:44:0f:d5:ac:77: cc:13:c5:dd:18:53:fb:f2:77:4e:79:61:8f:95:6d: 05:ce:1b:88:0e:61:61:75:47:f4:bd:45:44:c1:e8: 8f:6e:4c:d0:38:5d:b8:0f:9c:aa:8e:4a:b3:dd:c0: 6b:8b:87:fb:fb:95:b1:c2:6a:de:47:56:95:89:dc: 8b:d5:a3:32:ca:ab:bc:51:e1:65:d6:ec:2f:76:0b: b0:1c:c3:49:f3:65:92:84:30:ca:41:9b:c4:0a:99: 99:ae:b7:64:4d:1b:a5:ce:86:61:16:18:5f:60:0e: 31:a6:82:ee:d3:08:bc:73:a7:82:ed:a8:08:fa:29: 9d:10:b9:1d:13:da:d0:72:eb:71:e4:d7:0d:db:f1: 90:56:8d:53:ae:f7:b4:83:24:31:51:51:25:e6:cf: 20:5b:ab:f6:d8:e8:c5:be:b6:42:eb:cf:a3:8a:ca: bf:d6:b8:6b:b8:d5:0b:26:2a:39:32:1c:a7:b0:de: 07:d8:cb:24:c6:11:a8:4c:9b:57:a0:a9:9c:12:c2: 76:64:18:dc:c7:dd:1e:27:0e:57:0a:06:05:c0:d1: e7:04:12:42:0d:9d:4a:d4:6b:8a:c9:80:05:d3:f3: f0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:D8:B7:3E:26:3F:A7:31:D7:16:7F:42:55:C7:A0:FC:AE:06:20:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/10192187-defa-3548-b6c6-237adcf28f84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl X509v3 Authority Key Identifier: keyid:AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer sbgp-ipAddrBlock: critical IPv4: 170.2.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:0f:1f:5f:c9:42:1f:78:cb:8f:36:72:fa:aa:d6:7d:01:18: c2:d8:28:24:3d:9e:f0:0a:82:54:87:fd:89:ff:ad:46:76:81: c4:68:c0:0b:35:56:30:fb:d2:8a:7a:6d:7d:54:b5:89:9b:c1: e1:a4:33:94:2b:e1:ec:eb:9d:93:2a:3c:6c:13:49:fd:9d:00: 8c:a0:ef:2c:29:50:de:c8:b2:cd:dd:ff:05:63:9d:48:95:1a: ff:77:55:3b:83:01:16:d1:8d:b6:fd:2d:40:e0:75:ff:cd:08: c7:18:77:11:af:45:00:bd:fe:b2:4e:1b:3f:2c:b1:7d:7f:71: 87:6f:be:df:90:f9:38:e6:22:f8:69:e8:cf:88:98:26:2a:e8: cf:8a:7d:f3:a7:15:61:88:e0:f9:84:3a:0c:c9:9c:3d:c8:0f: 55:74:9e:70:08:ed:94:6a:10:b0:11:36:be:24:d7:44:71:94: bc:d9:b4:dd:2b:7b:5b:b6:80:65:c8:c1:f1:83:cb:cc:38:f4: 72:ba:7f:e4:40:cb:80:29:b0:ef:b5:21:c0:9a:3a:3d:01:18: 1e:0f:8f:f9:8b:37:6a:99:d1:0f:92:7b:49:48:5d:24:93:92: 15:0d:ee:6a:00:cd:68:72:f6:da:e1:9f:3f:90:15:17:6e:74: 97:3b:bb:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysawELw6IxYLp7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhhMjljNDYtZTBmMS00ZWRjLTk4OGEtOTQyMGFmZmJj MzM5MB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk MTE3YTNmOTEtMmE2NS00YjZlLTk5MDktODQ3Y2I3OGU2Njc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM8gMEUtotIfS3FnhygeqQ23EES1aCJzRA/V rHfME8XdGFP78ndOeWGPlW0FzhuIDmFhdUf0vUVEweiPbkzQOF24D5yqjkqz3cBr i4f7+5WxwmreR1aVidyL1aMyyqu8UeFl1uwvdguwHMNJ82WShDDKQZvECpmZrrdk TRulzoZhFhhfYA4xpoLu0wi8c6eC7agI+imdELkdE9rQcutx5NcN2/GQVo1Trve0 gyQxUVEl5s8gW6v22OjFvrZC68+jisq/1rhruNULJio5MhynsN4H2MskxhGoTJtX oKmcEsJ2ZBjcx90eJw5XCgYFwNHnBBJCDZ1K1GuKyYAF0/PwDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrYtz4mP6cx1xZ/QlXHoPyuBiC3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iOGEy OWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIwYWZmYmMzMzkvMTAxOTIxODctZGVmYS0z NTQ4LWI2YzYtMjM3YWRjZjI4Zjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjhhMjljNDYtZTBmMS00ZWRjLTk4 OGEtOTQyMGFmZmJjMzM5L2I4YTI5YzQ2LWUwZjEtNGVkYy05ODhhLTk0MjBhZmZi YzMzOS5jcmwwHwYDVR0jBBgwFoAUrluRChr3agr5yGG6uSyArkHgeRQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iOGEyOWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIw YWZmYmMzMzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqgKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgPH1/JQh94y482cvqq1n0BGMLYKCQ9nvAKglSH/Yn/rUZ2gcRowAs1 VjD70op6bX1UtYmbweGkM5Qr4ezrnZMqPGwTSf2dAIyg7ywpUN7Iss3d/wVjnUiV Gv93VTuDARbRjbb9LUDgdf/NCMcYdxGvRQC9/rJOGz8ssX1/cYdvvt+Q+TjmIvhp 6M+ImCYq6M+KffOnFWGI4PmEOgzJnD3ID1V0nnAI7ZRqELARNr4k10RxlLzZtN0r e1u2gGXIwfGDy8w49HK6f+RAy4ApsO+1IcCaOj0BGB4Pj/mLN2qZ0Q+Se0lIXSST khUN7moAzWhy9trhnz+QFRdudJc7uwc= -----END CERTIFICATE-----Generated at Fri Sep 11 03:34:36 2026 by rpki-client