$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/c28e437b-5db3-3c9e-9faa-921daf22c201.roa File: c28e437b-5db3-3c9e-9faa-921daf22c201.roa (raw, json) Hash identifier: t6/CCq1AHzw9kI6lcTHifmH2+lvkARPLhJHzeuH9/oc= Subject key identifier: E9:16:C0:14:B6:30:63:E3:9F:AD:B2:5A:3A:B1:9F:0E:14:3C:BE:C2 Certificate issuer: /CN=1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5 Certificate serial: 010D0C9F4328584F5FE6E23C4B2A579928324600 Authority key identifier: FD:1A:FA:71:5D:03:6D:80:2D:27:0C:15:6D:C3:4E:5B:BB:8F:96:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/c28e437b-5db3-3c9e-9faa-921daf22c201.roa Signing time: Sat 03 Oct 2026 02:02:27 +0000 ROA not before: Sat 03 Oct 2026 02:02:27 +0000 ROA not after: Fri 01 Jan 2027 03:02:27 +0000 asID: 14299 IP address blocks: 170.146.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5f:e6:e2:3c:4b:2a:57:99:28:32:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5 Validity Not Before: Oct 3 02:02:27 2026 GMT Not After : Jan 1 03:02:27 2027 GMT Subject: CN=b5746d58-c0ec-49d4-999c-cf41581713c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f2:1c:63:93:80:19:4c:99:74:7e:40:30:30: 3e:25:be:18:46:0e:82:44:24:e9:d1:e2:f2:c7:ac: 65:4b:06:b5:e1:30:87:30:1a:d8:7e:5b:54:06:e3: 77:c0:58:f3:5e:ee:96:1d:76:14:e8:7f:46:69:21: 39:b2:4a:99:55:97:eb:de:b1:b2:2a:50:6d:06:c2: 62:a4:5c:14:18:60:fe:2e:82:5e:92:10:c4:33:18: ab:ef:a1:2c:90:5c:89:3c:3b:aa:48:11:fe:02:bf: 55:bf:be:86:3c:08:b5:f6:eb:7e:33:38:5e:22:c9: 4d:1f:78:c0:62:64:02:8e:e8:3a:2c:3c:2e:43:d9: 81:39:fc:05:8c:9c:ed:6a:a9:c2:09:1a:c1:8e:e7: fd:a9:18:4f:7a:12:2d:16:11:b1:0c:5d:cd:72:2b: ad:d5:71:82:01:b2:75:42:8e:75:1f:ed:e8:80:60: 5e:99:d5:67:4b:d2:be:e2:ee:41:cd:3f:1f:69:3b: eb:fb:22:0c:dd:98:58:42:5a:1a:b5:4b:47:fd:01: dc:82:68:28:f2:b9:57:10:27:b7:85:67:c1:e4:bd: ad:2a:f2:1d:fb:bc:c6:8f:c9:10:8b:e9:ed:4c:7c: b6:a5:a6:24:f0:c9:34:ce:44:2b:81:2c:33:21:d0: b9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:16:C0:14:B6:30:63:E3:9F:AD:B2:5A:3A:B1:9F:0E:14:3C:BE:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/c28e437b-5db3-3c9e-9faa-921daf22c201.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.crl X509v3 Authority Key Identifier: keyid:FD:1A:FA:71:5D:03:6D:80:2D:27:0C:15:6D:C3:4E:5B:BB:8F:96:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer sbgp-ipAddrBlock: critical IPv4: 170.146.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:62:b4:65:5d:a2:b7:b6:64:d1:79:3b:a8:4d:cc:97:42:15: 57:49:73:41:86:2f:ef:7b:c4:35:3f:09:af:04:94:37:c4:c0: 12:65:b4:c2:c7:84:16:fe:7e:3a:30:6a:5d:40:1b:37:e5:39: 58:be:ba:8f:f5:ea:6a:9d:95:bf:b6:2e:4f:59:73:1e:be:6a: ab:84:8b:44:a2:33:5b:f8:7b:e4:5d:be:5d:5e:fb:7d:b0:64: da:99:15:04:3e:03:11:60:1c:c0:ed:a0:07:31:c0:38:18:eb: a1:69:bb:12:53:c6:4d:6d:87:af:21:9b:99:4a:b6:e8:c7:c1: 35:04:9a:c8:49:13:d2:4d:2c:38:e5:47:d3:72:47:5b:12:3e: 44:af:5d:41:8a:44:b9:4c:bc:a4:51:a4:48:b6:40:2b:a4:28: 37:03:05:e6:3e:af:28:2b:4a:09:10:cd:d7:51:62:9b:1e:33: 98:19:65:19:f8:71:b3:f6:20:90:26:87:c8:5e:09:2c:73:d0: 52:19:7a:5a:f6:72:9e:93:a9:8b:b3:0c:9a:6c:ba:ea:d1:4c: 02:06:62:0a:5e:57:f7:46:55:c9:54:03:8a:84:48:1d:54:ab: b9:f8:2e:a1:73:0f:39:f5:95:ec:6f:ea:ae:01:de:62:53:0d: bb:f7:2e:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9f5uI8SypXmSgyRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM0YjIwNjEtZDJjNy00OGYwLThlZTktNWZmMGM0ZTM1 OWI1MB4XDTI2MTAwMzAyMDIyN1oXDTI3MDEwMTAzMDIyN1owLzEtMCsGA1UEAxMk YjU3NDZkNTgtYzBlYy00OWQ0LTk5OWMtY2Y0MTU4MTcxM2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfIcY5OAGUyZdH5AMDA+Jb4YRg6CRCTp0eLy x6xlSwa14TCHMBrYfltUBuN3wFjzXu6WHXYU6H9GaSE5skqZVZfr3rGyKlBtBsJi pFwUGGD+LoJekhDEMxir76EskFyJPDuqSBH+Ar9Vv76GPAi19ut+MzheIslNH3jA YmQCjug6LDwuQ9mBOfwFjJztaqnCCRrBjuf9qRhPehItFhGxDF3Nciut1XGCAbJ1 Qo51H+3ogGBemdVnS9K+4u5BzT8faTvr+yIM3ZhYQloatUtH/QHcgmgo8rlXECe3 hWfB5L2tKvId+7zGj8kQi+ntTHy2paYk8Mk0zkQrgSwzIdC5JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkWwBS2MGPjn62yWjqxnw4UPL7CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8xYzRi MjA2MS1kMmM3LTQ4ZjAtOGVlOS01ZmYwYzRlMzU5YjUvYzI4ZTQzN2ItNWRiMy0z YzllLTlmYWEtOTIxZGFmMjJjMjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMWM0YjIwNjEtZDJjNy00OGYwLThl ZTktNWZmMGM0ZTM1OWI1LzFjNGIyMDYxLWQyYzctNDhmMC04ZWU5LTVmZjBjNGUz NTliNS5jcmwwHwYDVR0jBBgwFoAU/Rr6cV0DbYAtJwwVbcNOW7uPlmYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8xYzRiMjA2MS1kMmM3LTQ4ZjAtOGVlOS01ZmYw YzRlMzU5YjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqpKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANitGVdore2ZNF5O6hNzJdCFVdJc0GGL+97xDU/Ca8ElDfEwBJltMLH hBb+fjowal1AGzflOVi+uo/16mqdlb+2Lk9Zcx6+aquEi0SiM1v4e+Rdvl1e+32w ZNqZFQQ+AxFgHMDtoAcxwDgY66FpuxJTxk1th68hm5lKtujHwTUEmshJE9JNLDjl R9NyR1sSPkSvXUGKRLlMvKRRpEi2QCukKDcDBeY+rygrSgkQzddRYpseM5gZZRn4 cbP2IJAmh8heCSxz0FIZelr2cp6TqYuzDJpsuurRTAIGYgpeV/dGVclUA4qESB1U q7n4LqFzDzn1lexv6q4B3mJTDbv3Lok= -----END CERTIFICATE-----Generated at Wed Oct 14 20:22:56 2026 by rpki-client