$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/3997bd68-ffbf-30cf-970e-705ce53c54c9.roa File: 3997bd68-ffbf-30cf-970e-705ce53c54c9.roa (raw, json) Hash identifier: uzpN7mvdkS13g/BED8tdp6rU5Yzz20/xZ/DJMSa7qos= Subject key identifier: DE:7C:88:8B:9D:6D:0A:42:46:F6:F6:69:7A:82:43:39:97:46:97:BD Certificate issuer: /CN=9b2dd4d6-06da-4602-9071-aee92968f31a Certificate serial: 010D0C9F4328584EA9E9BE2E73EBF44F081A9B00 Authority key identifier: 86:DB:48:E7:9B:A5:A8:A6:88:5A:54:D5:60:13:CD:82:74:72:89:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/3997bd68-ffbf-30cf-970e-705ce53c54c9.roa Signing time: Wed 29 Jul 2026 21:31:05 +0000 ROA not before: Wed 29 Jul 2026 21:31:05 +0000 ROA not after: Tue 27 Oct 2026 21:31:05 +0000 asID: 402839 IP address blocks: 169.128.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/9b2dd4d6-06da-4602-9071-aee92968f31a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/9b2dd4d6-06da-4602-9071-aee92968f31a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Aug 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a9:e9:be:2e:73:eb:f4:4f:08:1a:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b2dd4d6-06da-4602-9071-aee92968f31a Validity Not Before: Jul 29 21:31:05 2026 GMT Not After : Oct 27 21:31:05 2026 GMT Subject: CN=de907f42-bfd2-417e-b1f3-ee2d1092acfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:50:73:60:bb:4b:ab:15:ff:2b:00:66:ef:e0: 33:f7:9f:22:48:2f:5e:21:46:fc:85:14:8f:0a:37: 11:31:c6:83:e6:a6:f5:99:a2:0c:1a:fb:01:c8:90: a3:02:2d:a6:e1:cb:e4:b3:3b:00:e6:8c:97:fd:d0: 6d:e6:98:2b:40:20:a5:e8:48:ed:39:24:df:dc:bf: 4f:a1:14:28:23:e0:5b:fd:a9:ac:0e:ff:a8:b5:75: fc:c6:ee:a1:f4:dd:d3:1b:f1:de:b3:67:cd:20:15: 30:c5:1d:3c:c1:92:bd:07:7b:d9:20:51:7b:ad:49: 51:22:87:59:5f:0a:f0:30:4b:f9:3d:ef:55:ec:54: 55:44:3a:02:a2:d9:97:77:7b:f2:d6:93:63:f1:e7: b1:d4:e4:ea:38:95:c0:fd:15:e7:0d:50:bd:fd:91: d6:62:1b:2e:fe:7d:90:4f:24:5f:ec:ed:e3:0e:45: 53:74:a6:a7:75:d9:82:40:d8:e6:06:84:af:91:52: 32:f3:7c:00:43:53:37:42:27:9c:75:d2:d9:d9:99: 41:4b:36:51:4d:18:b8:da:44:9d:7c:60:33:d5:41: 8e:7e:69:67:69:2b:09:7f:e1:72:d6:b7:af:69:73: fd:1c:c3:e2:13:61:44:22:54:b4:c3:a4:64:c4:b1: 1f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:7C:88:8B:9D:6D:0A:42:46:F6:F6:69:7A:82:43:39:97:46:97:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/3997bd68-ffbf-30cf-970e-705ce53c54c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/9b2dd4d6-06da-4602-9071-aee92968f31a.crl X509v3 Authority Key Identifier: keyid:86:DB:48:E7:9B:A5:A8:A6:88:5A:54:D5:60:13:CD:82:74:72:89:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a.cer sbgp-ipAddrBlock: critical IPv4: 169.128.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:7d:e4:d6:89:9c:64:5e:7f:2b:de:8c:42:17:05:1a:95:67: 0e:a0:97:6d:10:a8:6b:38:87:23:df:e1:d5:90:1c:e6:bb:38: 79:ba:ad:7d:7b:67:12:0c:1e:fc:3f:ec:e2:14:1f:16:8f:ca: 2a:46:08:44:d9:c2:a2:1e:3e:d5:1c:7f:fc:81:29:e5:77:da: 95:d7:7d:99:22:8b:07:a8:60:cc:1f:2e:4b:04:d1:06:8c:3e: f3:cc:1a:a6:3a:d7:34:63:16:a8:0f:6f:48:e5:b2:53:66:29: 9b:26:70:d4:7b:65:01:7e:01:f4:26:83:5a:f3:a7:95:cb:15: 63:e9:4c:72:32:7d:fb:8b:5f:b9:99:1a:20:b4:f5:3c:af:10: fb:17:6e:31:39:ce:9c:45:78:40:65:90:3b:4e:f6:ab:1f:0d: 17:e9:53:9c:50:be:03:e5:80:05:49:ed:11:ef:a6:ec:dd:f2: 29:99:21:a0:b7:41:c4:15:48:46:b0:e1:e7:9f:ca:6d:23:c3: 58:87:22:57:56:7d:28:5b:de:3e:f8:92:a4:a0:cc:83:8b:87: dc:24:9f:79:f3:74:f2:78:89:33:09:4c:a6:f0:36:a9:63:15: b2:b3:5e:d7:2a:c6:b5:77:44:90:4c:b5:82:4b:01:c5:f8:6b: 15:7a:61:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6p6b4uc+v0TwgamwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWIyZGQ0ZDYtMDZkYS00NjAyLTkwNzEtYWVlOTI5Njhm MzFhMB4XDTI2MDcyOTIxMzEwNVoXDTI2MTAyNzIxMzEwNVowLzEtMCsGA1UEAxMk ZGU5MDdmNDItYmZkMi00MTdlLWIxZjMtZWUyZDEwOTJhY2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1BzYLtLqxX/KwBm7+Az958iSC9eIUb8hRSP CjcRMcaD5qb1maIMGvsByJCjAi2m4cvkszsA5oyX/dBt5pgrQCCl6EjtOSTf3L9P oRQoI+Bb/amsDv+otXX8xu6h9N3TG/Hes2fNIBUwxR08wZK9B3vZIFF7rUlRIodZ XwrwMEv5Pe9V7FRVRDoCotmXd3vy1pNj8eex1OTqOJXA/RXnDVC9/ZHWYhsu/n2Q TyRf7O3jDkVTdKanddmCQNjmBoSvkVIy83wAQ1M3QiecddLZ2ZlBSzZRTRi42kSd fGAz1UGOfmlnaSsJf+Fy1revaXP9HMPiE2FEIlS0w6RkxLEfcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN58iIudbQpCRvb2aXqCQzmXRpe9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85YjJk ZDRkNi0wNmRhLTQ2MDItOTA3MS1hZWU5Mjk2OGYzMWEvMzk5N2JkNjgtZmZiZi0z MGNmLTk3MGUtNzA1Y2U1M2M1NGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWIyZGQ0ZDYtMDZkYS00NjAyLTkw NzEtYWVlOTI5NjhmMzFhLzliMmRkNGQ2LTA2ZGEtNDYwMi05MDcxLWFlZTkyOTY4 ZjMxYS5jcmwwHwYDVR0jBBgwFoAUhttI55ulqKaIWlTVYBPNgnRyiYowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85YjJkZDRkNi0wNmRhLTQ2MDItOTA3MS1hZWU5 Mjk2OGYzMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqYCLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACV95NaJnGRefyvejEIXBRqVZw6gl20QqGs4hyPf4dWQHOa7OHm6rX17 ZxIMHvw/7OIUHxaPyipGCETZwqIePtUcf/yBKeV32pXXfZkiiweoYMwfLksE0QaM PvPMGqY61zRjFqgPb0jlslNmKZsmcNR7ZQF+AfQmg1rzp5XLFWPpTHIyffuLX7mZ GiC09TyvEPsXbjE5zpxFeEBlkDtO9qsfDRfpU5xQvgPlgAVJ7RHvpuzd8imZIaC3 QcQVSEaw4eefym0jw1iHIldWfShb3j74kqSgzIOLh9wkn3nzdPJ4iTMJTKbwNqlj FbKzXtcqxrV3RJBMtYJLAcX4axV6YSQ= -----END CERTIFICATE-----Generated at Tue Aug 25 09:20:12 2026 by rpki-client