$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/df67ec6f-2f7c-303a-ad0d-d725d40a22e0.roa File: df67ec6f-2f7c-303a-ad0d-d725d40a22e0.roa (raw, json) Hash identifier: Lzwg9dxhb5Ya5Rmnk+pvJTkm2RvWM1/QDWD5bdLIweg= Subject key identifier: A8:52:A3:85:12:F9:FE:EE:3C:16:83:68:0B:28:E9:1D:D6:55:9F:5D Certificate issuer: /CN=c857cadf-4120-46e1-8a77-61ed14f8dbc9 Certificate serial: 010D0C9F4328584F2C8EFF94518C0859BACE1E40 Authority key identifier: FB:6E:81:0E:25:AB:93:AF:83:03:2C:44:28:84:70:32:89:84:AD:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/df67ec6f-2f7c-303a-ad0d-d725d40a22e0.roa Signing time: Mon 14 Sep 2026 16:39:08 +0000 ROA not before: Mon 14 Sep 2026 16:39:08 +0000 ROA not after: Sun 13 Dec 2026 17:39:08 +0000 asID: 216435 IP address blocks: 169.128.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/c857cadf-4120-46e1-8a77-61ed14f8dbc9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/c857cadf-4120-46e1-8a77-61ed14f8dbc9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2c:8e:ff:94:51:8c:08:59:ba:ce:1e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c857cadf-4120-46e1-8a77-61ed14f8dbc9 Validity Not Before: Sep 14 16:39:08 2026 GMT Not After : Dec 13 17:39:08 2026 GMT Subject: CN=59d92f21-f90d-424f-921c-8e29fd254b74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:85:2a:77:9f:f2:f9:41:7a:85:7b:67:7d:07: 4b:b9:04:3c:a3:fd:42:66:1c:73:aa:17:00:15:7b: 7b:9c:42:7c:9c:e6:6e:21:8b:3d:27:5b:e2:17:9c: 22:8f:3c:6e:c5:a5:ad:52:4b:0f:f1:11:47:b9:49: 58:df:c8:94:0d:97:89:27:d4:0a:3d:28:7f:d9:4a: ad:23:66:d9:40:66:01:63:5a:12:47:a7:d2:8e:58: 81:59:74:cd:e1:36:75:0d:1e:5c:cd:08:0a:4f:54: 43:ef:c0:f5:8d:27:fc:71:f8:53:9e:18:ce:60:fb: 4b:88:4d:d4:13:c7:bf:03:8c:57:88:3c:4d:5b:a5: c1:b8:10:3f:f8:2d:1a:3b:55:56:9e:2e:ff:48:36: 7f:c2:0f:da:a9:71:11:0d:fd:08:4f:c5:b2:43:8e: 7f:61:91:ea:1f:c2:a8:64:1a:02:1c:a2:44:ea:0d: 7b:ab:97:a8:ba:52:37:12:d8:95:3c:af:94:17:4f: 77:87:0d:b4:33:04:d1:8e:6a:23:2e:9d:c0:85:3f: 33:0b:5e:8d:f2:63:cf:ce:0b:5c:3d:79:93:4d:7d: a2:1f:79:1c:ef:e7:5f:25:c0:f6:c0:b7:83:8b:83: b3:37:82:98:e9:85:d3:78:e5:9b:07:71:44:b6:a0: c2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:52:A3:85:12:F9:FE:EE:3C:16:83:68:0B:28:E9:1D:D6:55:9F:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/df67ec6f-2f7c-303a-ad0d-d725d40a22e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/c857cadf-4120-46e1-8a77-61ed14f8dbc9.crl X509v3 Authority Key Identifier: keyid:FB:6E:81:0E:25:AB:93:AF:83:03:2C:44:28:84:70:32:89:84:AD:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9.cer sbgp-ipAddrBlock: critical IPv4: 169.128.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:41:b1:74:c9:76:9a:37:4e:52:32:5e:40:12:be:cb:a8:63: 6d:cd:77:18:c3:28:43:c8:2e:6d:65:29:bf:3a:16:1d:dc:7a: fe:d1:a8:2f:40:e7:1b:8e:db:fd:60:87:8d:4a:ab:08:73:d2: 29:a2:c0:6d:bd:0f:93:61:e7:b3:be:a7:97:b5:ef:ae:66:29: 38:34:a2:55:b6:eb:52:16:fa:63:85:39:e2:05:68:91:dc:e5: d2:7a:a9:aa:4c:6f:41:84:e2:5f:4d:ff:ce:4a:86:78:ac:eb: f9:a1:1e:8e:61:12:c5:11:72:35:47:ee:8a:e4:ca:34:08:63: c3:3d:b3:21:bf:94:9e:fe:c1:36:cd:41:fa:22:f6:9c:59:30: 9f:9a:3c:71:ff:3a:e5:45:94:a4:e9:bc:56:c7:a0:4b:34:3b: e9:f9:d2:27:b2:b9:db:7d:26:ee:a7:e4:6a:55:10:c7:c8:cc: 25:d3:59:04:2c:83:66:56:e3:6d:62:32:f5:f5:ab:47:1c:76: 63:3c:0f:fb:2e:45:37:13:e0:85:96:08:95:1b:d3:0b:28:20: 6c:83:48:f1:69:89:42:91:97:39:fb:f0:ef:fc:54:b0:57:e5: aa:21:88:c3:00:06:e7:0f:9f:55:ec:52:e7:71:a9:6e:11:14: a3:fc:f6:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8sjv+UUYwIWbrOHkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1N2NhZGYtNDEyMC00NmUxLThhNzctNjFlZDE0Zjhk YmM5MB4XDTI2MDkxNDE2MzkwOFoXDTI2MTIxMzE3MzkwOFowLzEtMCsGA1UEAxMk NTlkOTJmMjEtZjkwZC00MjRmLTkyMWMtOGUyOWZkMjU0Yjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYUqd5/y+UF6hXtnfQdLuQQ8o/1CZhxzqhcA FXt7nEJ8nOZuIYs9J1viF5wijzxuxaWtUksP8RFHuUlY38iUDZeJJ9QKPSh/2Uqt I2bZQGYBY1oSR6fSjliBWXTN4TZ1DR5czQgKT1RD78D1jSf8cfhTnhjOYPtLiE3U E8e/A4xXiDxNW6XBuBA/+C0aO1VWni7/SDZ/wg/aqXERDf0IT8WyQ45/YZHqH8Ko ZBoCHKJE6g17q5eoulI3EtiVPK+UF093hw20MwTRjmojLp3AhT8zC16N8mPPzgtc PXmTTX2iH3kc7+dfJcD2wLeDi4OzN4KY6YXTeOWbB3FEtqDCRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhSo4US+f7uPBaDaAso6R3WVZ9dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jODU3 Y2FkZi00MTIwLTQ2ZTEtOGE3Ny02MWVkMTRmOGRiYzkvZGY2N2VjNmYtMmY3Yy0z MDNhLWFkMGQtZDcyNWQ0MGEyMmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzg1N2NhZGYtNDEyMC00NmUxLThh NzctNjFlZDE0ZjhkYmM5L2M4NTdjYWRmLTQxMjAtNDZlMS04YTc3LTYxZWQxNGY4 ZGJjOS5jcmwwHwYDVR0jBBgwFoAU+26BDiWrk6+DAyxEKIRwMomEra0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jODU3Y2FkZi00MTIwLTQ2ZTEtOGE3Ny02MWVk MTRmOGRiYzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqYCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNBsXTJdpo3TlIyXkASvsuoY23NdxjDKEPILm1lKb86Fh3cev7RqC9A 5xuO2/1gh41Kqwhz0imiwG29D5Nh57O+p5e1765mKTg0olW261IW+mOFOeIFaJHc 5dJ6qapMb0GE4l9N/85Khnis6/mhHo5hEsURcjVH7orkyjQIY8M9syG/lJ7+wTbN Qfoi9pxZMJ+aPHH/OuVFlKTpvFbHoEs0O+n50ieyudt9Ju6n5GpVEMfIzCXTWQQs g2ZW421iMvX1q0ccdmM8D/suRTcT4IWWCJUb0wsoIGyDSPFpiUKRlzn78O/8VLBX 5aohiMMABucPn1XsUudxqW4RFKP89ns= -----END CERTIFICATE-----Generated at Mon Sep 21 18:08:47 2026 by rpki-client