$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39cc3add-0660-4c1d-a230-c78f7b4b3105/ff08130a-60bd-370f-9c41-0c5923a1b9cb.roa File: ff08130a-60bd-370f-9c41-0c5923a1b9cb.roa (raw, json) Hash identifier: 0nCVZrEvsFNWNwij9181CuyDxjY49Wi9fE6Iay+cuYY= Subject key identifier: 20:F7:69:F3:94:52:79:CA:C8:99:75:D7:81:F7:9E:75:E9:9A:9C:2D Certificate issuer: /CN=39cc3add-0660-4c1d-a230-c78f7b4b3105 Certificate serial: 010D0C9F4328584EFCACBF72134952EF0015C300 Authority key identifier: AA:F7:8E:82:F3:94:3C:FF:D3:C2:88:CA:9B:67:D7:36:2A:08:62:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39cc3add-0660-4c1d-a230-c78f7b4b3105.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39cc3add-0660-4c1d-a230-c78f7b4b3105/ff08130a-60bd-370f-9c41-0c5923a1b9cb.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 44356 IP address blocks: 172.110.88.0/22 maxlen: 24 2606:3e80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39cc3add-0660-4c1d-a230-c78f7b4b3105/39cc3add-0660-4c1d-a230-c78f7b4b3105.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39cc3add-0660-4c1d-a230-c78f7b4b3105/39cc3add-0660-4c1d-a230-c78f7b4b3105.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39cc3add-0660-4c1d-a230-c78f7b4b3105.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:bf:72:13:49:52:ef:00:15:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39cc3add-0660-4c1d-a230-c78f7b4b3105 Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=570b597c-0498-4cb1-ab60-2a8306fcd6dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:88:3c:75:5d:6b:2c:4c:fa:b9:e5:01:2f:dd: c7:e6:8f:80:66:5f:3e:16:f1:ca:bb:b1:74:ef:a9: 87:a4:da:5c:93:6a:46:4f:57:31:34:ea:f8:d1:16: 77:07:4c:d5:52:b0:1b:46:81:1b:2c:2d:b9:56:7c: 80:6b:22:1c:b9:95:34:90:00:b8:eb:67:1a:84:3d: e8:c9:cd:90:b7:42:36:24:54:97:c6:3b:35:4f:73: d1:c9:ad:00:61:8d:9f:c9:0b:af:01:48:92:0d:46: 69:16:a1:fa:f5:f9:3d:4b:e2:4b:7d:4e:6c:86:c7: 26:06:74:f2:bc:c8:b3:05:57:b3:37:b2:f3:52:50: 93:f5:54:5a:2d:0b:4b:54:71:0d:78:5d:c9:e3:6c: b4:2c:62:c1:9a:9b:13:39:64:b2:74:13:05:b4:11: 1a:be:a7:64:f0:d4:3b:4a:f1:54:cb:04:3d:8b:7a: 0a:82:20:fe:93:14:c0:65:e0:0b:c0:2f:53:c6:b9: 78:37:60:e3:f1:8a:ce:a5:23:c5:1d:db:bf:71:f3: b9:84:97:ee:68:4d:20:97:15:20:9e:70:b1:00:60: d3:97:c1:2d:91:4a:9b:53:38:8c:96:13:bb:52:16: 27:8a:4a:45:e0:a9:ed:d3:6a:ae:82:05:65:55:9d: f1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F7:69:F3:94:52:79:CA:C8:99:75:D7:81:F7:9E:75:E9:9A:9C:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39cc3add-0660-4c1d-a230-c78f7b4b3105/ff08130a-60bd-370f-9c41-0c5923a1b9cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39cc3add-0660-4c1d-a230-c78f7b4b3105/39cc3add-0660-4c1d-a230-c78f7b4b3105.crl X509v3 Authority Key Identifier: keyid:AA:F7:8E:82:F3:94:3C:FF:D3:C2:88:CA:9B:67:D7:36:2A:08:62:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39cc3add-0660-4c1d-a230-c78f7b4b3105.cer sbgp-ipAddrBlock: critical IPv4: 172.110.88.0/22 IPv6: 2606:3e80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:cf:0f:1a:f5:5e:09:08:2c:d1:6d:14:0a:d9:75:78:f5:ab: 28:fd:24:32:75:ce:e4:ab:14:6e:c1:05:f1:06:c9:89:04:8b: 32:33:7c:e1:37:9d:85:8c:7c:23:9f:fa:11:dc:78:a2:fd:d3: 42:44:61:44:b2:92:03:14:b6:58:9b:28:e4:dc:88:f0:ee:84: 7d:3a:f8:b8:f8:a8:ca:fb:43:a6:de:c6:8d:4f:b8:ea:2a:7c: 7d:e8:16:6c:52:68:3c:e9:4c:a3:1a:bd:82:d5:7f:13:f9:ca: aa:86:52:24:53:a8:47:fa:37:15:1e:8b:ad:5a:99:68:c9:17: 6c:d7:45:ee:d9:ca:e3:2c:f3:77:24:bf:bd:5a:19:54:2d:c2: f0:9c:e8:22:30:d7:81:bc:5d:3b:64:8a:d4:04:64:ee:2a:7c: 8c:9f:28:a9:88:ad:1b:fc:86:bf:b2:fb:71:32:1e:3b:85:68: 24:d2:b0:cb:a1:f1:96:7d:82:36:cf:58:55:e9:7f:a6:10:1e: dc:f6:32:e8:40:05:1c:ff:0f:cb:cb:a1:21:04:c2:9c:48:4d: c0:de:c4:60:be:15:23:cd:f5:6b:0f:88:e8:e7:e9:2e:15:81: bb:35:18:0d:ca:16:db:3a:de:e0:49:9d:77:7f:46:91:74:ea: 73:20:cf:6f -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE78rL9yE0lS7wAVwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzljYzNhZGQtMDY2MC00YzFkLWEyMzAtYzc4ZjdiNGIz MTA1MB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk NTcwYjU5N2MtMDQ5OC00Y2IxLWFiNjAtMmE4MzA2ZmNkNmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApog8dV1rLEz6ueUBL93H5o+AZl8+FvHKu7F0 76mHpNpck2pGT1cxNOr40RZ3B0zVUrAbRoEbLC25VnyAayIcuZU0kAC462cahD3o yc2Qt0I2JFSXxjs1T3PRya0AYY2fyQuvAUiSDUZpFqH69fk9S+JLfU5shscmBnTy vMizBVezN7LzUlCT9VRaLQtLVHENeF3J42y0LGLBmpsTOWSydBMFtBEavqdk8NQ7 SvFUywQ9i3oKgiD+kxTAZeALwC9Txrl4N2Dj8YrOpSPFHdu/cfO5hJfuaE0glxUg nnCxAGDTl8EtkUqbUziMlhO7UhYnikpF4Knt02quggVlVZ3x0QIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFCD3afOUUnnKyJl114H3nnXpmpwtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOWNj M2FkZC0wNjYwLTRjMWQtYTIzMC1jNzhmN2I0YjMxMDUvZmYwODEzMGEtNjBiZC0z NzBmLTljNDEtMGM1OTIzYTFiOWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzljYzNhZGQtMDY2MC00YzFkLWEy MzAtYzc4ZjdiNGIzMTA1LzM5Y2MzYWRkLTA2NjAtNGMxZC1hMjMwLWM3OGY3YjRi MzEwNS5jcmwwHwYDVR0jBBgwFoAUqveOgvOUPP/TwojKm2fXNioIYlowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOWNjM2FkZC0wNjYwLTRjMWQtYTIzMC1jNzhm N2I0YjMxMDUuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCrG5YMA0E AgACMAcDBQAmBj6AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAFDPDxr1XgkILNFtFArZdXj1qyj9JDJ1zuSr FG7BBfEGyYkEizIzfOE3nYWMfCOf+hHceKL900JEYUSykgMUtlibKOTciPDuhH06 +Lj4qMr7Q6bexo1PuOoqfH3oFmxSaDzpTKMavYLVfxP5yqqGUiRTqEf6NxUei61a mWjJF2zXRe7ZyuMs83ckv71aGVQtwvCc6CIw14G8XTtkitQEZO4qfIyfKKmIrRv8 hr+y+3EyHjuFaCTSsMuh8ZZ9gjbPWFXpf6YQHtz2MuhABRz/D8vLoSEEwpxITcDe xGC+FSPN9WsPiOjn6S4Vgbs1GA3KFts63uBJnXd/RpF06nMgz28= -----END CERTIFICATE-----Generated at Mon Sep 28 10:56:24 2026 by rpki-client