$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b0f68432-4129-4f63-bf12-b02f289ecdb4/087cb5dd-1559-38a7-9737-a87ad5a28d4d.roa File: 087cb5dd-1559-38a7-9737-a87ad5a28d4d.roa (raw, json) Hash identifier: 3OiMk/OioWSeNvRn93e8hNOuT7vR5PeNYJSpAN8QstU= Subject key identifier: E0:4F:71:88:28:F9:00:1D:B6:18:F9:44:8F:F5:CC:5A:BC:B6:58:08 Certificate issuer: /CN=b0f68432-4129-4f63-bf12-b02f289ecdb4 Certificate serial: 010D0C9F4328584F3A17C3D76AE4B3337AA14400 Authority key identifier: 6E:20:C6:AD:40:26:EB:EA:43:BF:F4:C7:C8:CF:59:66:38:6D:93:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b0f68432-4129-4f63-bf12-b02f289ecdb4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b0f68432-4129-4f63-bf12-b02f289ecdb4/087cb5dd-1559-38a7-9737-a87ad5a28d4d.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 138997 IP address blocks: 169.128.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b0f68432-4129-4f63-bf12-b02f289ecdb4/b0f68432-4129-4f63-bf12-b02f289ecdb4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b0f68432-4129-4f63-bf12-b02f289ecdb4/b0f68432-4129-4f63-bf12-b02f289ecdb4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b0f68432-4129-4f63-bf12-b02f289ecdb4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:c3:d7:6a:e4:b3:33:7a:a1:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0f68432-4129-4f63-bf12-b02f289ecdb4 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=ffe7848c-11c4-48c7-ba4c-7e688dc2e0ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:87:8f:02:14:a2:d9:85:8c:33:fc:57:95:4a: 13:94:d5:68:60:64:55:6f:d9:ea:7d:77:0f:13:87: ef:d6:45:ed:8c:05:3b:4f:7a:8b:f2:b7:16:27:b5: 4a:10:62:16:74:82:68:e6:ab:d1:89:9b:71:b4:c0: 83:2b:9b:54:c5:f3:b0:15:44:c7:53:26:85:ed:93: 47:0f:79:3b:4f:a4:5d:66:30:a4:98:0d:d6:77:6e: 7e:0c:f8:0a:9a:d7:22:36:f9:df:83:c2:52:ad:96: 04:8b:42:26:b2:44:74:f8:0a:b3:bf:f5:00:e7:25: 1f:4a:50:f0:b0:94:68:a1:ec:78:38:82:a9:23:15: c0:67:5a:ac:24:b7:39:cc:27:07:59:93:25:ca:67: ff:b8:57:29:6a:24:3b:b5:2d:27:95:dc:2e:3b:e0: dd:76:ae:73:3e:35:14:33:92:76:32:64:e7:0e:81: 93:63:96:77:48:f7:49:9d:36:19:65:3b:e9:a1:96: 1b:54:c3:0b:a0:a9:bf:00:dc:fe:33:a3:2d:9b:b1: 76:08:a3:76:15:5d:25:eb:b2:96:c3:1a:c1:f7:40: c8:86:fa:27:30:b1:8d:c2:e3:e0:42:47:7f:fc:bc: 99:b6:cf:c3:65:dd:5f:e5:ea:0d:dc:d7:54:14:7d: ea:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:4F:71:88:28:F9:00:1D:B6:18:F9:44:8F:F5:CC:5A:BC:B6:58:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b0f68432-4129-4f63-bf12-b02f289ecdb4/087cb5dd-1559-38a7-9737-a87ad5a28d4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b0f68432-4129-4f63-bf12-b02f289ecdb4/b0f68432-4129-4f63-bf12-b02f289ecdb4.crl X509v3 Authority Key Identifier: keyid:6E:20:C6:AD:40:26:EB:EA:43:BF:F4:C7:C8:CF:59:66:38:6D:93:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b0f68432-4129-4f63-bf12-b02f289ecdb4.cer sbgp-ipAddrBlock: critical IPv4: 169.128.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:db:a8:c2:5e:ba:38:ce:57:7e:42:12:05:7e:ac:b9:28:68: cf:58:5c:84:d9:cd:b7:bd:de:25:16:d0:46:6b:e8:0d:ab:8d: 80:d9:92:d4:90:4a:5b:07:ad:40:10:47:bf:33:df:a0:b7:3d: 48:c9:67:3f:da:79:21:92:29:8d:c3:7e:a6:34:3f:a1:b4:3c: 28:8c:3d:14:82:f3:87:1a:48:7d:94:ae:d5:23:85:d4:87:92: 28:82:7c:95:db:e1:bf:85:80:1f:0f:d9:48:57:5d:36:7e:88: be:8e:9c:38:c6:1e:78:5f:80:e7:29:f7:e4:3b:ad:d4:5d:51: f7:88:31:92:77:65:3e:dd:35:8e:5e:56:d2:ba:24:45:bf:2a: 0f:0b:c4:1d:71:97:4c:b8:f3:1e:d0:f6:b5:8a:2a:0f:be:60: 53:f4:0d:88:b0:d3:eb:e6:60:45:49:65:98:11:87:93:44:d2: f4:b3:3b:80:00:f2:d9:17:64:0b:4b:c6:a2:78:8a:ec:3c:a7: 46:b6:22:fb:07:a6:8c:c0:e1:28:71:5c:7d:20:85:55:18:f7: 6d:ed:f8:cf:95:2d:cd:f8:24:1f:31:dc:77:e0:39:ed:de:07: 0d:ac:1a:06:11:83:3c:16:5e:6f:89:71:e6:a8:13:a5:9e:80: 57:d5:bf:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F8PXauSzM3qhRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBmNjg0MzItNDEyOS00ZjYzLWJmMTItYjAyZjI4OWVj ZGI0MB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk ZmZlNzg0OGMtMTFjNC00OGM3LWJhNGMtN2U2ODhkYzJlMGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4ePAhSi2YWMM/xXlUoTlNVoYGRVb9nqfXcP E4fv1kXtjAU7T3qL8rcWJ7VKEGIWdIJo5qvRiZtxtMCDK5tUxfOwFUTHUyaF7ZNH D3k7T6RdZjCkmA3Wd25+DPgKmtciNvnfg8JSrZYEi0ImskR0+Aqzv/UA5yUfSlDw sJRooex4OIKpIxXAZ1qsJLc5zCcHWZMlymf/uFcpaiQ7tS0nldwuO+Dddq5zPjUU M5J2MmTnDoGTY5Z3SPdJnTYZZTvpoZYbVMMLoKm/ANz+M6Mtm7F2CKN2FV0l67KW wxrB90DIhvonMLGNwuPgQkd//LyZts/DZd1f5eoN3NdUFH3qnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBPcYgo+QAdthj5RI/1zFq8tlgIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iMGY2 ODQzMi00MTI5LTRmNjMtYmYxMi1iMDJmMjg5ZWNkYjQvMDg3Y2I1ZGQtMTU1OS0z OGE3LTk3MzctYTg3YWQ1YTI4ZDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYjBmNjg0MzItNDEyOS00ZjYzLWJm MTItYjAyZjI4OWVjZGI0L2IwZjY4NDMyLTQxMjktNGY2My1iZjEyLWIwMmYyODll Y2RiNC5jcmwwHwYDVR0jBBgwFoAUbiDGrUAm6+pDv/THyM9ZZjhtk8MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iMGY2ODQzMi00MTI5LTRmNjMtYmYxMi1iMDJm Mjg5ZWNkYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqYBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTbqMJeujjOV35CEgV+rLkoaM9YXITZzbe93iUW0EZr6A2rjYDZktSQ SlsHrUAQR78z36C3PUjJZz/aeSGSKY3DfqY0P6G0PCiMPRSC84caSH2UrtUjhdSH kiiCfJXb4b+FgB8P2UhXXTZ+iL6OnDjGHnhfgOcp9+Q7rdRdUfeIMZJ3ZT7dNY5e VtK6JEW/Kg8LxB1xl0y48x7Q9rWKKg++YFP0DYiw0+vmYEVJZZgRh5NE0vSzO4AA 8tkXZAtLxqJ4iuw8p0a2IvsHpozA4ShxXH0ghVUY923t+M+VLc34JB8x3HfgOe3e Bw2sGgYRgzwWXm+JceaoE6WegFfVv7Q= -----END CERTIFICATE-----Generated at Tue Sep 22 09:11:07 2026 by rpki-client