$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/e1584d3b-d3ad-3f87-a017-3443a362c5be.roa File: e1584d3b-d3ad-3f87-a017-3443a362c5be.roa (raw, json) Hash identifier: cL2b8mbQzuZrrPJI+/hgL0pqZM5qTVwU2G1a5STygdo= Subject key identifier: 16:3C:0C:C9:05:29:D1:7F:0F:69:8B:03:84:CB:9A:8E:84:7A:71:37 Certificate issuer: /CN=9b2dd4d6-06da-4602-9071-aee92968f31a Certificate serial: 010D0C9F4328584F0D6CFDFCD0CD74ABBCA71980 Authority key identifier: 86:DB:48:E7:9B:A5:A8:A6:88:5A:54:D5:60:13:CD:82:74:72:89:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/e1584d3b-d3ad-3f87-a017-3443a362c5be.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 154132 IP address blocks: 169.128.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/9b2dd4d6-06da-4602-9071-aee92968f31a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/9b2dd4d6-06da-4602-9071-aee92968f31a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:fd:fc:d0:cd:74:ab:bc:a7:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b2dd4d6-06da-4602-9071-aee92968f31a Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=3a4a7856-7981-40bf-ab65-e9abf2b33040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:85:49:6f:f8:84:75:3a:e7:81:e4:03:17:bf: d7:22:93:c4:46:1b:9e:2f:4b:eb:8a:5c:cf:34:1c: 6d:11:67:eb:7c:11:e0:b8:36:3a:a0:38:05:88:57: 67:12:3d:9a:ae:a5:ba:e0:ca:89:17:9b:42:5e:0f: 82:58:c0:f9:41:d2:4b:f6:ef:ac:7b:7f:52:70:0e: fd:ac:f1:ef:01:5a:cd:b7:9d:f0:70:ba:51:9e:f7: 24:cf:5d:51:60:01:7f:d8:88:6e:fa:d3:5a:c0:b8: 58:31:79:a8:15:b6:81:ef:4f:b0:d0:af:4d:35:ef: 0e:51:ae:83:c3:43:8a:88:00:b3:19:38:d0:bd:80: 8f:82:e2:49:6c:a9:46:ac:9f:94:1b:6f:49:d4:95: eb:9d:63:5b:92:d5:c2:7d:ca:c9:37:2c:ae:c2:79: ed:65:8e:f9:7a:09:e7:00:e4:a5:49:2c:69:0d:a0: e1:5f:23:01:e6:f8:22:68:5b:ab:f0:df:75:1b:6e: ff:9c:33:41:48:bc:0f:16:ad:ba:3c:42:c0:7c:f8: b4:5e:bd:3f:e1:94:02:9a:61:50:fc:a3:84:39:31: 4c:3a:10:ab:88:e3:eb:a0:d8:25:1e:9f:69:9a:31: 21:53:98:bd:c4:fe:e6:ca:0b:52:1f:40:bc:4b:dd: 71:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:3C:0C:C9:05:29:D1:7F:0F:69:8B:03:84:CB:9A:8E:84:7A:71:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/e1584d3b-d3ad-3f87-a017-3443a362c5be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/9b2dd4d6-06da-4602-9071-aee92968f31a.crl X509v3 Authority Key Identifier: keyid:86:DB:48:E7:9B:A5:A8:A6:88:5A:54:D5:60:13:CD:82:74:72:89:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a.cer sbgp-ipAddrBlock: critical IPv4: 169.128.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:f1:33:11:fe:18:c6:29:4b:1c:8d:18:58:53:6a:6c:e8:ca: b8:5f:31:77:e2:b2:4d:f5:cd:82:14:df:3c:7a:16:30:12:fb: 44:00:47:9b:4a:72:e4:0c:d8:35:59:55:01:16:1e:90:d2:53: ce:03:84:04:2a:e5:37:4d:7c:ab:df:7f:55:a3:87:bf:e4:4f: 88:2c:c6:71:53:b4:86:54:7d:d6:b4:34:69:50:d5:28:71:91: 2d:f4:da:3a:13:3b:e8:94:c3:0e:26:46:b4:e4:6c:c2:3e:97: ee:69:dd:18:61:4e:db:cd:22:0b:32:e8:7d:12:d8:20:59:1b: cf:bc:39:32:0d:75:97:07:80:b5:17:df:d0:24:d2:6b:e9:cb: fc:19:94:dd:46:d1:9a:8c:5b:03:f3:25:73:54:37:91:1d:6c: 21:ca:75:f0:05:0e:fa:69:18:97:e5:b2:1a:dc:dd:8b:3f:dc: 54:3d:0a:32:4d:6d:14:9a:04:cf:2f:e7:de:9f:a7:21:05:94: 59:49:0c:8c:ba:ca:80:71:25:4b:33:f4:12:d5:61:ed:a9:58: ef:84:22:07:b7:c4:36:ff:5d:b8:e5:89:71:81:c5:a0:ca:19: b0:a9:a7:1d:85:78:f7:bf:3e:43:a8:55:c8:3e:f4:df:a5:05: 4f:6e:7e:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbP380M10q7ynGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWIyZGQ0ZDYtMDZkYS00NjAyLTkwNzEtYWVlOTI5Njhm MzFhMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk M2E0YTc4NTYtNzk4MS00MGJmLWFiNjUtZTlhYmYyYjMzMDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oVJb/iEdTrngeQDF7/XIpPERhueL0vrilzP NBxtEWfrfBHguDY6oDgFiFdnEj2arqW64MqJF5tCXg+CWMD5QdJL9u+se39ScA79 rPHvAVrNt53wcLpRnvckz11RYAF/2Ihu+tNawLhYMXmoFbaB70+w0K9NNe8OUa6D w0OKiACzGTjQvYCPguJJbKlGrJ+UG29J1JXrnWNbktXCfcrJNyyuwnntZY75egnn AOSlSSxpDaDhXyMB5vgiaFur8N91G27/nDNBSLwPFq26PELAfPi0Xr0/4ZQCmmFQ /KOEOTFMOhCriOProNglHp9pmjEhU5i9xP7mygtSH0C8S91xRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBY8DMkFKdF/D2mLA4TLmo6EenE3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85YjJk ZDRkNi0wNmRhLTQ2MDItOTA3MS1hZWU5Mjk2OGYzMWEvZTE1ODRkM2ItZDNhZC0z Zjg3LWEwMTctMzQ0M2EzNjJjNWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWIyZGQ0ZDYtMDZkYS00NjAyLTkw NzEtYWVlOTI5NjhmMzFhLzliMmRkNGQ2LTA2ZGEtNDYwMi05MDcxLWFlZTkyOTY4 ZjMxYS5jcmwwHwYDVR0jBBgwFoAUhttI55ulqKaIWlTVYBPNgnRyiYowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85YjJkZDRkNi0wNmRhLTQ2MDItOTA3MS1hZWU5 Mjk2OGYzMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqYCKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbxMxH+GMYpSxyNGFhTamzoyrhfMXfisk31zYIU3zx6FjAS+0QAR5tK cuQM2DVZVQEWHpDSU84DhAQq5TdNfKvff1Wjh7/kT4gsxnFTtIZUfda0NGlQ1Shx kS302joTO+iUww4mRrTkbMI+l+5p3RhhTtvNIgsy6H0S2CBZG8+8OTINdZcHgLUX 39Ak0mvpy/wZlN1G0ZqMWwPzJXNUN5EdbCHKdfAFDvppGJflshrc3Ys/3FQ9CjJN bRSaBM8v596fpyEFlFlJDIy6yoBxJUsz9BLVYe2pWO+EIge3xDb/XbjliXGBxaDK GbCppx2FePe/PkOoVcg+9N+lBU9ufqU= -----END CERTIFICATE-----Generated at Tue Sep 22 13:33:33 2026 by rpki-client