$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/71d22b26-6e46-458c-b6d0-1e48cd99cbb1/00423378-b1ae-3544-8668-793f5c980d7f.roa File: 00423378-b1ae-3544-8668-793f5c980d7f.roa (raw, json) Hash identifier: U1p7ByFxD31Nky9RMNrnbxzDRTwnXziTz8XekC+9RTY= Subject key identifier: 0F:36:B0:B7:49:CA:04:6E:44:08:F0:58:BC:F6:25:1C:0A:68:FD:EF Certificate issuer: /CN=71d22b26-6e46-458c-b6d0-1e48cd99cbb1 Certificate serial: 010D0C9F4328584F14678A7E9BDFBCF8640D2FE0 Authority key identifier: A8:F6:32:3C:34:47:29:3B:98:E2:8F:01:2A:3E:18:F5:76:B4:11:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/71d22b26-6e46-458c-b6d0-1e48cd99cbb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/71d22b26-6e46-458c-b6d0-1e48cd99cbb1/00423378-b1ae-3544-8668-793f5c980d7f.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 39991 IP address blocks: 169.128.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/71d22b26-6e46-458c-b6d0-1e48cd99cbb1/71d22b26-6e46-458c-b6d0-1e48cd99cbb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/71d22b26-6e46-458c-b6d0-1e48cd99cbb1/71d22b26-6e46-458c-b6d0-1e48cd99cbb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/71d22b26-6e46-458c-b6d0-1e48cd99cbb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:8a:7e:9b:df:bc:f8:64:0d:2f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71d22b26-6e46-458c-b6d0-1e48cd99cbb1 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=114adbfc-9780-464f-b4d7-5c0ff544b035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:13:c5:3c:ae:6d:ec:56:da:0f:b1:b0:18:35: 72:99:b3:2f:27:07:35:8c:1d:dc:94:17:28:e5:cc: 70:98:f6:02:c2:61:be:5d:c3:db:b7:d3:3d:ea:c4: 12:5e:df:08:79:ae:92:f1:ef:4f:42:30:69:19:9a: 8b:83:36:56:5e:55:88:ec:37:1a:b1:ee:8d:5d:09: 1b:ed:e3:be:1f:4f:b9:0c:1a:56:a8:bb:62:8f:f9: d8:26:e1:99:54:46:f8:98:86:d2:66:84:e0:e7:67: 98:11:aa:00:d5:06:3b:ee:81:45:45:9d:c4:d6:8f: 77:35:76:ba:70:c3:07:be:9e:70:9e:14:bd:f3:76: 07:f8:bc:58:8a:6d:f4:d4:dc:21:d3:85:72:9b:dc: ae:0d:78:f8:cd:e2:04:74:e8:fe:ab:47:6b:c6:f7: c1:40:15:f9:23:8b:5c:d9:10:a9:66:ce:41:1b:78: de:29:1b:f3:6a:d5:e9:a3:45:e1:1f:f8:39:8f:f8: 38:a5:7b:48:14:e0:a2:f6:46:f9:2f:f2:48:c0:b1: ff:ac:00:86:32:3f:f7:e2:e6:0f:17:d7:0b:8e:26: 19:79:1b:8f:a1:cc:19:ca:2b:d7:e7:b7:34:c6:0e: 2b:74:ea:16:78:1d:a8:37:6f:24:1d:96:fb:5b:78: 59:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:36:B0:B7:49:CA:04:6E:44:08:F0:58:BC:F6:25:1C:0A:68:FD:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/71d22b26-6e46-458c-b6d0-1e48cd99cbb1/00423378-b1ae-3544-8668-793f5c980d7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/71d22b26-6e46-458c-b6d0-1e48cd99cbb1/71d22b26-6e46-458c-b6d0-1e48cd99cbb1.crl X509v3 Authority Key Identifier: keyid:A8:F6:32:3C:34:47:29:3B:98:E2:8F:01:2A:3E:18:F5:76:B4:11:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/71d22b26-6e46-458c-b6d0-1e48cd99cbb1.cer sbgp-ipAddrBlock: critical IPv4: 169.128.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:1d:e0:62:b6:f0:1b:22:86:ee:03:7e:35:26:38:16:c0:2a: 06:23:1b:94:8a:28:93:10:75:d7:9e:b1:d8:4a:1c:8d:08:27: 90:3e:b8:8c:ee:33:48:e2:55:f8:3b:21:e4:fb:c9:9f:a5:b8: a1:ec:b4:a3:f7:4c:17:b6:e9:03:f6:ec:c7:66:a3:80:a1:0a: f1:c0:3f:90:33:8c:31:88:8a:14:be:37:a6:84:d0:c3:eb:7a: 2a:92:4a:c1:2a:0f:b7:67:c7:bf:87:2a:e1:31:aa:fe:0a:47: 96:d9:1e:45:ee:77:b0:3a:d0:d3:f1:32:44:bc:26:11:10:68: 13:0a:78:09:d4:0f:cc:de:6a:8e:e1:89:ff:94:26:94:b7:eb: 5d:c4:de:d5:68:99:51:cf:99:5c:96:73:ef:5d:de:05:63:9f: da:f4:26:88:cf:45:d0:20:0b:96:3d:71:6b:2a:8f:d0:5f:9b: 88:aa:65:4c:23:6c:bb:46:20:15:5a:f5:fb:f5:4f:93:d7:6c: 22:c3:b4:ea:e1:4f:4a:cf:7d:d0:41:3c:33:8b:cd:7f:43:81: 45:48:e8:e4:5d:f6:2d:31:e3:4a:fc:79:28:d9:7b:be:37:f7: 40:9e:10:80:97:bb:e0:e8:b7:bd:44:3a:ea:8d:86:2a:6d:b3: 1b:e7:20:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ4p+m9+8+GQNL+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFkMjJiMjYtNmU0Ni00NThjLWI2ZDAtMWU0OGNkOTlj YmIxMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk MTE0YWRiZmMtOTc4MC00NjRmLWI0ZDctNWMwZmY1NDRiMDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxPFPK5t7FbaD7GwGDVymbMvJwc1jB3clBco 5cxwmPYCwmG+XcPbt9M96sQSXt8Iea6S8e9PQjBpGZqLgzZWXlWI7Dcase6NXQkb 7eO+H0+5DBpWqLtij/nYJuGZVEb4mIbSZoTg52eYEaoA1QY77oFFRZ3E1o93NXa6 cMMHvp5wnhS983YH+LxYim301Nwh04Vym9yuDXj4zeIEdOj+q0drxvfBQBX5I4tc 2RCpZs5BG3jeKRvzatXpo0XhH/g5j/g4pXtIFOCi9kb5L/JIwLH/rACGMj/34uYP F9cLjiYZeRuPocwZyivX57c0xg4rdOoWeB2oN28kHZb7W3hZvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA82sLdJygRuRAjwWLz2JRwKaP3vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83MWQy MmIyNi02ZTQ2LTQ1OGMtYjZkMC0xZTQ4Y2Q5OWNiYjEvMDA0MjMzNzgtYjFhZS0z NTQ0LTg2NjgtNzkzZjVjOTgwZDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNzFkMjJiMjYtNmU0Ni00NThjLWI2 ZDAtMWU0OGNkOTljYmIxLzcxZDIyYjI2LTZlNDYtNDU4Yy1iNmQwLTFlNDhjZDk5 Y2JiMS5jcmwwHwYDVR0jBBgwFoAUqPYyPDRHKTuY4o8BKj4Y9Xa0EVEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC83MWQyMmIyNi02ZTQ2LTQ1OGMtYjZkMC0xZTQ4 Y2Q5OWNiYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqYCkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUd4GK28Bsihu4DfjUmOBbAKgYjG5SKKJMQddeesdhKHI0IJ5A+uIzu M0jiVfg7IeT7yZ+luKHstKP3TBe26QP27Mdmo4ChCvHAP5AzjDGIihS+N6aE0MPr eiqSSsEqD7dnx7+HKuExqv4KR5bZHkXud7A60NPxMkS8JhEQaBMKeAnUD8zeao7h if+UJpS3613E3tVomVHPmVyWc+9d3gVjn9r0JojPRdAgC5Y9cWsqj9Bfm4iqZUwj bLtGIBVa9fv1T5PXbCLDtOrhT0rPfdBBPDOLzX9DgUVI6ORd9i0x40r8eSjZe743 90CeEICXu+Dot71EOuqNhiptsxvnIAA= -----END CERTIFICATE-----Generated at Sun Sep 20 15:05:19 2026 by rpki-client