$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/dc68da6e-f289-38e0-b21e-79cceebd9565.roa File: dc68da6e-f289-38e0-b21e-79cceebd9565.roa (raw, json) Hash identifier: fvbdVbeXY3Tm5eOsIF19UYxcxY+3ZhWgbuWXl8k7g7k= Subject key identifier: 55:0B:AF:C1:FE:55:D0:01:0A:D2:49:64:41:40:93:E6:25:30:9E:6E Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584EAB5DFEA18F4DA19A331CD2F0 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/dc68da6e-f289-38e0-b21e-79cceebd9565.roa Signing time: Thu 30 Jul 2026 10:01:08 +0000 ROA not before: Thu 30 Jul 2026 10:01:08 +0000 ROA not after: Wed 28 Oct 2026 10:01:08 +0000 asID: 7270 IP address blocks: 169.132.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ab:5d:fe:a1:8f:4d:a1:9a:33:1c:d2:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Jul 30 10:01:08 2026 GMT Not After : Oct 28 10:01:08 2026 GMT Subject: CN=2f96e5d3-e9f0-4ab8-9b92-f063265ef247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:76:57:e3:77:da:33:de:7d:dd:74:7a:6f:eb: 04:47:b7:07:2f:89:c6:5c:7c:34:30:2b:c4:03:26: 09:69:e4:a2:4d:46:0a:f8:6e:a3:68:e6:af:be:5f: d9:af:54:12:b1:ab:21:bf:80:15:b2:6b:16:c4:fb: 6e:e0:17:03:5e:72:06:ee:5f:a3:a4:e3:14:2b:5a: 78:f7:ba:34:09:aa:e5:05:1b:e0:9a:b1:0d:ba:06: 31:92:73:ce:7d:78:d7:1c:ce:bc:dd:d3:a8:88:52: d4:5a:41:e9:44:21:db:fb:93:d7:06:d6:2b:d1:90: 61:7d:e8:75:43:28:ef:36:f4:19:a2:81:b8:4d:c7: a2:3f:d5:3e:4b:5e:32:63:97:bd:46:81:f8:f6:9d: af:3e:64:3c:5e:dc:5b:d9:86:a6:93:fc:be:71:06: d4:0a:65:0c:d9:72:48:be:60:4a:14:0c:38:6c:3f: 57:5f:14:ce:78:f6:a2:18:77:af:13:70:c3:57:c8: 41:0f:42:25:32:f6:d5:64:7a:c9:a9:d5:52:7c:30: 1d:ea:65:33:b1:d4:8d:70:c5:14:c1:99:c3:e5:76: a5:f9:97:34:72:51:dc:bc:27:3d:58:44:df:d8:be: 74:e6:22:60:03:1f:eb:30:f5:1b:b7:41:0d:e0:1e: db:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:0B:AF:C1:FE:55:D0:01:0A:D2:49:64:41:40:93:E6:25:30:9E:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/dc68da6e-f289-38e0-b21e-79cceebd9565.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 169.132.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:50:18:2b:2e:2b:51:77:95:f3:4f:bd:90:81:50:69:da:36: d0:12:43:05:56:a6:99:21:cf:43:f7:18:bc:59:a7:ec:01:48: 62:3e:a2:9d:b0:24:3b:97:b0:dd:3f:26:bd:c6:07:9a:53:eb: 14:f9:ba:76:37:8d:20:ac:1e:f3:37:d6:26:b5:5b:41:d7:b5: ad:fb:cc:b4:34:30:7b:3c:00:b2:4b:82:04:49:68:99:55:f5: d0:ab:4f:2f:94:52:92:f8:a7:63:b9:30:58:0d:58:ea:aa:b9: 8d:35:a4:ec:83:18:89:85:25:45:65:a2:7d:c4:81:d3:b7:1e: 52:5a:ab:0a:59:45:82:b8:b3:a9:30:41:6f:38:46:44:8e:fb: 23:9f:c2:3d:c7:0a:32:23:49:0d:34:c8:f4:29:2d:35:e5:57: 5a:44:b4:fe:cc:63:60:27:4f:7f:dd:a6:64:cd:af:d1:80:3f: 1c:4c:f8:95:58:e2:30:01:8d:dc:5c:8a:5a:9b:3e:77:c2:ec: 7e:9a:88:47:7d:77:2d:17:99:f5:35:99:c3:72:4b:fe:0f:54: a4:3a:37:06:40:cf:74:86:87:2a:fe:ce:ac:bd:64:40:0e:c2: 72:19:db:8c:54:91:79:fe:7a:bb:1e:aa:a8:87:48:e5:9c:7f: 92:49:df:f1 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6rXf6hj02hmjMc0vAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI2MDczMDEwMDEwOFoXDTI2MTAyODEwMDEwOFowLzEtMCsGA1UEAxMk MmY5NmU1ZDMtZTlmMC00YWI4LTliOTItZjA2MzI2NWVmMjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63ZX43faM9593XR6b+sER7cHL4nGXHw0MCvE AyYJaeSiTUYK+G6jaOavvl/Zr1QSsashv4AVsmsWxPtu4BcDXnIG7l+jpOMUK1p4 97o0CarlBRvgmrENugYxknPOfXjXHM683dOoiFLUWkHpRCHb+5PXBtYr0ZBhfeh1 QyjvNvQZooG4TceiP9U+S14yY5e9RoH49p2vPmQ8Xtxb2Yamk/y+cQbUCmUM2XJI vmBKFAw4bD9XXxTOePaiGHevE3DDV8hBD0IlMvbVZHrJqdVSfDAd6mUzsdSNcMUU wZnD5Xal+Zc0clHcvCc9WETf2L505iJgAx/rMPUbt0EN4B7bIQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFULr8H+VdABCtJJZEFAk+YlMJ5uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvZGM2OGRhNmUtZjI4OS0z OGUwLWIyMWUtNzljY2VlYmQ5NTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqYQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAO1AYKy4rUXeV80+9kIFQado20BJDBVammSHPQ/cYvFmn7AFIYj6inbAk O5ew3T8mvcYHmlPrFPm6djeNIKwe8zfWJrVbQde1rfvMtDQwezwAskuCBElomVX1 0KtPL5RSkvinY7kwWA1Y6qq5jTWk7IMYiYUlRWWifcSB07ceUlqrCllFgrizqTBB bzhGRI77I5/CPccKMiNJDTTI9CktNeVXWkS0/sxjYCdPf92mZM2v0YA/HEz4lVji MAGN3FyKWps+d8LsfpqIR313LReZ9TWZw3JL/g9UpDo3BkDPdIaHKv7OrL1kQA7C chnbjFSRef56ux6qqIdI5Zx/kknf8Q== -----END CERTIFICATE-----Generated at Sat Sep 5 06:49:52 2026 by rpki-client