$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a33a8548-3254-4c75-b176-b888068a1694/8a87058d-ad35-3d73-b833-6733db637470.roa File: 8a87058d-ad35-3d73-b833-6733db637470.roa (raw, json) Hash identifier: MPEK9ojuUbXcFsVv9D1h5KQRoVPYfYkw2jzS3DOWyO0= Subject key identifier: 11:48:0A:0D:D0:E3:61:C1:66:5F:9A:B8:D8:94:DC:D9:1D:47:0D:34 Certificate issuer: /CN=a33a8548-3254-4c75-b176-b888068a1694 Certificate serial: 010D0C9F4328584EFEB6082A424232C86CD6CCC0 Authority key identifier: 12:A7:CD:E9:E8:60:3D:5C:D8:93:A1:D2:11:87:85:CD:A1:30:AC:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a33a8548-3254-4c75-b176-b888068a1694.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a33a8548-3254-4c75-b176-b888068a1694/8a87058d-ad35-3d73-b833-6733db637470.roa Signing time: Sat 29 Aug 2026 06:30:36 +0000 ROA not before: Sat 29 Aug 2026 06:30:36 +0000 ROA not after: Fri 27 Nov 2026 07:30:36 +0000 asID: 31898 IP address blocks: 169.128.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a33a8548-3254-4c75-b176-b888068a1694/a33a8548-3254-4c75-b176-b888068a1694.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a33a8548-3254-4c75-b176-b888068a1694/a33a8548-3254-4c75-b176-b888068a1694.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a33a8548-3254-4c75-b176-b888068a1694.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:b6:08:2a:42:42:32:c8:6c:d6:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a33a8548-3254-4c75-b176-b888068a1694 Validity Not Before: Aug 29 06:30:36 2026 GMT Not After : Nov 27 07:30:36 2026 GMT Subject: CN=4d35b984-430e-48ea-a0a9-8d1705f652cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:74:28:9b:9b:d7:d8:8c:f9:99:5d:bd:ad:34: 8c:11:c0:d0:b9:11:f4:4e:4a:0d:ff:79:96:5a:ab: 30:41:79:cf:2b:8f:4f:f5:92:75:28:94:55:38:8b: 55:34:c5:35:02:b4:3b:4d:15:c4:4b:48:ce:f1:99: 5d:84:62:22:46:49:fc:12:0d:a2:d5:0c:23:e9:af: 95:1b:b4:f1:a7:d5:52:68:b6:e8:05:6c:6e:93:4c: dd:d4:a1:67:1e:f9:0f:44:4f:6c:fd:ba:e4:93:c3: c7:5c:e0:79:b5:18:a7:76:f3:ad:7d:b3:2e:0c:2e: f2:ce:d4:db:6f:85:ac:7b:25:75:7b:77:77:bf:3d: db:c9:4d:9d:48:b0:dc:e9:4c:6f:6a:98:c2:34:85: a4:a2:81:fe:a1:49:53:08:0e:3a:52:35:31:ee:ed: 2a:f9:a4:e0:2b:6e:57:af:4e:f8:a2:7d:62:9b:29: b3:28:d7:38:9c:43:51:93:fe:18:a6:69:ad:26:7d: a8:c9:3d:ab:65:77:26:31:27:53:1d:42:ce:a5:e4: 09:43:e6:be:5c:cc:94:2b:46:c4:eb:f6:dd:1b:fd: 29:f6:e6:55:41:96:d1:60:c3:39:a8:30:e1:cb:36: 45:f1:91:fa:9a:3f:db:1e:50:fd:11:79:a2:37:86: c4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:48:0A:0D:D0:E3:61:C1:66:5F:9A:B8:D8:94:DC:D9:1D:47:0D:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a33a8548-3254-4c75-b176-b888068a1694/8a87058d-ad35-3d73-b833-6733db637470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a33a8548-3254-4c75-b176-b888068a1694/a33a8548-3254-4c75-b176-b888068a1694.crl X509v3 Authority Key Identifier: keyid:12:A7:CD:E9:E8:60:3D:5C:D8:93:A1:D2:11:87:85:CD:A1:30:AC:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a33a8548-3254-4c75-b176-b888068a1694.cer sbgp-ipAddrBlock: critical IPv4: 169.128.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:83:98:be:e0:24:13:f4:95:e2:a3:1e:6d:a0:63:87:d6:24: b1:fc:48:7b:8d:64:e6:60:52:f7:71:b3:13:e9:c2:cc:e8:1a: dd:32:8c:a7:76:c6:cf:42:6b:af:2a:b4:4b:e8:ed:53:b0:46: 22:cc:f1:2f:07:f6:3a:a2:c6:ab:21:b6:4b:20:6f:03:b5:23: c2:e1:09:0f:0e:48:31:e8:5d:cd:c5:bb:94:79:f6:fe:20:f5: d5:30:5b:37:39:c1:63:9d:44:6c:79:37:e6:13:0d:80:28:44: 8d:d3:c7:46:21:49:2b:5f:8b:d2:93:ef:83:26:d6:2c:8c:33: 7d:71:72:6d:92:de:7c:53:06:83:10:d2:f8:09:39:61:3f:fb: 93:df:61:20:a6:d1:ec:37:d6:cf:36:c8:b6:b2:12:b6:f4:1a: fe:df:dc:67:a6:21:3e:83:d2:07:aa:c3:25:03:27:a3:ee:c6: a0:a1:1b:1f:c1:ba:31:de:8d:01:ec:ef:02:cc:de:6e:9e:00: 08:f6:50:ce:38:1a:7f:b7:3f:cf:05:8a:c7:9e:06:a3:d0:7d: 9d:10:61:53:8d:5a:4a:7b:85:48:ba:cd:e8:2e:1b:15:7f:d1: 0f:ef:d4:1a:c2:6f:85:2f:bd:72:36:74:0b:5c:6a:5a:b6:07: f0:2f:57:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7+tggqQkIyyGzWzMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMzYTg1NDgtMzI1NC00Yzc1LWIxNzYtYjg4ODA2OGEx Njk0MB4XDTI2MDgyOTA2MzAzNloXDTI2MTEyNzA3MzAzNlowLzEtMCsGA1UEAxMk NGQzNWI5ODQtNDMwZS00OGVhLWEwYTktOGQxNzA1ZjY1MmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3Qom5vX2Iz5mV29rTSMEcDQuRH0TkoN/3mW WqswQXnPK49P9ZJ1KJRVOItVNMU1ArQ7TRXES0jO8ZldhGIiRkn8Eg2i1Qwj6a+V G7Txp9VSaLboBWxuk0zd1KFnHvkPRE9s/brkk8PHXOB5tRindvOtfbMuDC7yztTb b4WseyV1e3d3vz3byU2dSLDc6UxvapjCNIWkooH+oUlTCA46UjUx7u0q+aTgK25X r074on1imymzKNc4nENRk/4YpmmtJn2oyT2rZXcmMSdTHULOpeQJQ+a+XMyUK0bE 6/bdG/0p9uZVQZbRYMM5qDDhyzZF8ZH6mj/bHlD9EXmiN4bEzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFICg3Q42HBZl+auNiU3NkdRw00MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9hMzNh ODU0OC0zMjU0LTRjNzUtYjE3Ni1iODg4MDY4YTE2OTQvOGE4NzA1OGQtYWQzNS0z ZDczLWI4MzMtNjczM2RiNjM3NDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvYTMzYTg1NDgtMzI1NC00Yzc1LWIx NzYtYjg4ODA2OGExNjk0L2EzM2E4NTQ4LTMyNTQtNGM3NS1iMTc2LWI4ODgwNjhh MTY5NC5jcmwwHwYDVR0jBBgwFoAUEqfN6ehgPVzYk6HSEYeFzaEwrBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9hMzNhODU0OC0zMjU0LTRjNzUtYjE3Ni1iODg4 MDY4YTE2OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqYB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEODmL7gJBP0leKjHm2gY4fWJLH8SHuNZOZgUvdxsxPpwszoGt0yjKd2 xs9Ca68qtEvo7VOwRiLM8S8H9jqixqshtksgbwO1I8LhCQ8OSDHoXc3Fu5R59v4g 9dUwWzc5wWOdRGx5N+YTDYAoRI3Tx0YhSStfi9KT74Mm1iyMM31xcm2S3nxTBoMQ 0vgJOWE/+5PfYSCm0ew31s82yLayErb0Gv7f3GemIT6D0geqwyUDJ6PuxqChGx/B ujHejQHs7wLM3m6eAAj2UM44Gn+3P88FiseeBqPQfZ0QYVONWkp7hUi6zeguGxV/ 0Q/v1BrCb4UvvXI2dAtcalq2B/AvV0A= -----END CERTIFICATE-----Generated at Tue Sep 22 16:59:54 2026 by rpki-client