$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e9f5b98-5d6e-4ed7-8d23-d046ae67e737/a4fe3294-b315-3c09-9ac1-5a2c1e696dac.roa File: a4fe3294-b315-3c09-9ac1-5a2c1e696dac.roa (raw, json) Hash identifier: Ze8hOfBAU5B647SdXNvmlKVSP/M5l/66U3VHbHbE7kw= Subject key identifier: 40:3A:79:3A:B3:B2:2C:6A:89:4A:87:23:CC:96:DD:84:1B:F7:D1:2A Certificate issuer: /CN=9e9f5b98-5d6e-4ed7-8d23-d046ae67e737 Certificate serial: 010D0C9F4328584F3E4809EA240DBC6648F56780 Authority key identifier: 41:63:70:E7:5E:2D:C2:88:E5:99:3B:00:04:12:AA:05:B7:54:D6:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e9f5b98-5d6e-4ed7-8d23-d046ae67e737.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e9f5b98-5d6e-4ed7-8d23-d046ae67e737/a4fe3294-b315-3c09-9ac1-5a2c1e696dac.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 399138 IP address blocks: 169.128.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e9f5b98-5d6e-4ed7-8d23-d046ae67e737/9e9f5b98-5d6e-4ed7-8d23-d046ae67e737.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e9f5b98-5d6e-4ed7-8d23-d046ae67e737/9e9f5b98-5d6e-4ed7-8d23-d046ae67e737.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e9f5b98-5d6e-4ed7-8d23-d046ae67e737.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:48:09:ea:24:0d:bc:66:48:f5:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e9f5b98-5d6e-4ed7-8d23-d046ae67e737 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=703ed49a-df0b-4c53-9e02-e4f4f9a33b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:69:a1:86:81:22:b1:05:05:8a:d4:38:85:ee: 5b:43:74:ca:e3:73:c3:5b:69:2a:d2:16:cc:c0:44: fd:80:a0:4b:ef:32:ee:1f:4d:dc:5b:55:ea:d5:6e: bb:b8:bd:0b:78:9a:b0:2d:bf:b8:25:0b:85:a8:85: 50:7e:fc:39:dc:5f:89:1e:09:09:cf:5a:f8:1a:b9: 96:50:2a:99:78:bb:8d:6e:b5:03:86:f1:18:ae:11: c5:8f:6a:e2:f4:20:70:10:8c:2d:68:90:b3:7b:76: d6:a7:d4:3d:8c:1a:c8:10:26:2d:e4:c6:9c:05:a5: b2:55:a9:4d:03:7f:79:51:c4:88:66:7a:98:cd:8f: fe:20:93:99:e2:3a:80:27:b8:18:cd:08:da:cc:21: cf:10:50:5c:dd:4a:ce:ef:6a:0e:bd:fa:10:d3:01: 4f:4b:18:dc:b0:7a:b7:ee:59:fa:25:eb:f1:c9:2a: 7a:24:98:d9:29:55:09:67:37:e8:31:21:47:dd:30: 1c:aa:ef:cc:83:56:dc:a5:2b:14:70:68:0d:c9:e3: b3:87:72:fc:a1:ee:da:eb:4a:bd:fa:5c:c5:fd:11: 0c:c4:af:e1:dc:c1:ec:9f:c0:3c:fc:5e:79:46:55: e6:c3:87:e4:2a:fd:1b:2d:4c:63:5e:42:31:37:e5: 74:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:3A:79:3A:B3:B2:2C:6A:89:4A:87:23:CC:96:DD:84:1B:F7:D1:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e9f5b98-5d6e-4ed7-8d23-d046ae67e737/a4fe3294-b315-3c09-9ac1-5a2c1e696dac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e9f5b98-5d6e-4ed7-8d23-d046ae67e737/9e9f5b98-5d6e-4ed7-8d23-d046ae67e737.crl X509v3 Authority Key Identifier: keyid:41:63:70:E7:5E:2D:C2:88:E5:99:3B:00:04:12:AA:05:B7:54:D6:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e9f5b98-5d6e-4ed7-8d23-d046ae67e737.cer sbgp-ipAddrBlock: critical IPv4: 169.128.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:1f:94:de:ee:6f:9e:bf:b7:6f:68:9e:7f:d0:ae:1e:28:a5: ca:55:8a:22:b0:7a:64:4b:46:8e:49:a1:84:0f:37:79:ef:f7: eb:06:66:df:aa:03:05:81:62:9d:7e:ce:e6:63:6b:0c:13:a5: c1:dc:e6:ce:73:6e:05:70:86:3a:90:6d:30:f6:43:9a:47:5b: b3:d8:c0:6d:c5:d5:3b:8f:4d:4b:90:87:3a:15:18:ce:43:26: 30:30:e9:0b:48:84:c7:b2:0c:71:5c:93:8e:d1:73:db:06:34: 51:39:05:fe:9c:2e:25:d5:c2:66:93:3c:db:34:fb:c2:d2:38: 74:2a:5c:24:a9:6c:da:93:c0:7c:dc:ea:5f:d1:84:6f:20:18: 5f:a4:9d:5f:7d:87:18:d1:b4:3b:9e:73:00:55:06:3b:d8:e6: cc:68:b6:61:7c:f6:71:9b:e6:c4:96:a8:4d:a5:cc:d5:ea:1e: 23:72:50:31:98:23:14:4b:4b:8d:a4:b2:a8:65:17:d9:34:28: a7:94:53:0e:8d:74:f2:ee:3d:e1:ec:80:ad:f0:b9:df:d7:3e: 0e:69:c4:00:9f:16:3c:0b:cf:b9:41:dd:38:f2:2c:07:a1:da: 52:45:b8:4c:0b:db:75:b2:ba:de:69:32:7d:43:57:9d:92:f1: 76:55:27:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+SAnqJA28Zkj1Z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWU5ZjViOTgtNWQ2ZS00ZWQ3LThkMjMtZDA0NmFlNjdl NzM3MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk NzAzZWQ0OWEtZGYwYi00YzUzLTllMDItZTRmNGY5YTMzYjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWmhhoEisQUFitQ4he5bQ3TK43PDW2kq0hbM wET9gKBL7zLuH03cW1Xq1W67uL0LeJqwLb+4JQuFqIVQfvw53F+JHgkJz1r4GrmW UCqZeLuNbrUDhvEYrhHFj2ri9CBwEIwtaJCze3bWp9Q9jBrIECYt5MacBaWyValN A395UcSIZnqYzY/+IJOZ4jqAJ7gYzQjazCHPEFBc3UrO72oOvfoQ0wFPSxjcsHq3 7ln6JevxySp6JJjZKVUJZzfoMSFH3TAcqu/Mg1bcpSsUcGgNyeOzh3L8oe7a60q9 +lzF/REMxK/h3MHsn8A8/F55RlXmw4fkKv0bLUxjXkIxN+V0jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEA6eTqzsixqiUqHI8yW3YQb99EqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi85ZTlm NWI5OC01ZDZlLTRlZDctOGQyMy1kMDQ2YWU2N2U3MzcvYTRmZTMyOTQtYjMxNS0z YzA5LTlhYzEtNWEyYzFlNjk2ZGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOWU5ZjViOTgtNWQ2ZS00ZWQ3LThk MjMtZDA0NmFlNjdlNzM3LzllOWY1Yjk4LTVkNmUtNGVkNy04ZDIzLWQwNDZhZTY3 ZTczNy5jcmwwHwYDVR0jBBgwFoAUQWNw514twojlmTsABBKqBbdU1q4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi85ZTlmNWI5OC01ZDZlLTRlZDctOGQyMy1kMDQ2 YWU2N2U3MzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqYAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcflN7ub56/t29onn/Qrh4opcpViiKwemRLRo5JoYQPN3nv9+sGZt+q AwWBYp1+zuZjawwTpcHc5s5zbgVwhjqQbTD2Q5pHW7PYwG3F1TuPTUuQhzoVGM5D JjAw6QtIhMeyDHFck47Rc9sGNFE5Bf6cLiXVwmaTPNs0+8LSOHQqXCSpbNqTwHzc 6l/RhG8gGF+knV99hxjRtDuecwBVBjvY5sxotmF89nGb5sSWqE2lzNXqHiNyUDGY IxRLS42ksqhlF9k0KKeUUw6NdPLuPeHsgK3wud/XPg5pxACfFjwLz7lB3TjyLAeh 2lJFuEwL23Wyut5pMn1DV52S8XZVJ88= -----END CERTIFICATE-----Generated at Tue Sep 22 18:47:36 2026 by rpki-client