$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2a23f374-b646-3220-aee7-71cda2583630.roa File: 2a23f374-b646-3220-aee7-71cda2583630.roa (raw, json) Hash identifier: elMHAqlLb4nnclEvfqSyZIL1AE086ceyqDuMTV5qry8= Subject key identifier: 5D:C1:74:64:7B:78:27:7E:A8:6D:41:F8:E6:76:12:5A:05:34:9C:EF Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584F7FE2E9C8CA56184335E06FF0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2a23f374-b646-3220-aee7-71cda2583630.roa Signing time: Wed 14 Oct 2026 13:00:12 +0000 ROA not before: Wed 14 Oct 2026 13:00:12 +0000 ROA not after: Tue 12 Jan 2027 14:00:12 +0000 asID: 22616 IP address blocks: 170.85.228.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:e2:e9:c8:ca:56:18:43:35:e0:6f:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 14 13:00:12 2026 GMT Not After : Jan 12 14:00:12 2027 GMT Subject: CN=c6aa8be4-27ca-4799-bf30-2ec100725107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:60:f9:25:fc:f0:99:ff:77:97:5e:c9:8f:89: 6b:d6:70:a9:c1:7d:ba:78:49:8c:86:48:74:37:e0: 00:e3:a6:1f:43:e5:3b:25:ae:c8:a2:b0:66:c9:50: 91:33:16:05:77:8e:4a:e5:d2:4c:ef:ee:b9:8f:a4: b8:61:83:33:47:b9:a0:a7:33:2d:bc:a1:2d:5a:f9: ab:ac:ea:a7:5b:2c:8a:ea:7e:87:ec:47:9e:75:b4: 4e:28:ec:da:d6:78:96:46:d2:a9:ea:46:a3:51:f8: 8d:9f:3e:bf:77:59:00:b5:3d:1f:d7:62:3a:63:c4: e6:c6:7d:83:e4:25:f8:75:aa:fa:d7:2e:05:2d:fb: 9e:2d:f8:af:56:54:74:f7:05:08:a3:56:67:93:68: 2e:f9:39:d8:28:ed:fa:82:cb:4c:94:ee:28:df:02: 05:66:e5:03:98:b2:d0:85:3a:97:31:f5:e3:7b:2d: 83:b1:55:1a:38:01:bf:e5:05:ce:94:45:2d:2b:7d: 80:68:24:8d:f2:50:97:bc:a6:fb:85:a7:75:49:a3: 2c:04:db:62:75:20:6a:07:b9:13:1f:ad:45:59:25: 22:d1:22:78:b5:0c:58:c3:22:da:c2:c9:9e:a3:49: 27:09:06:2b:98:67:ed:7a:98:b2:a2:df:12:06:e4: d8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C1:74:64:7B:78:27:7E:A8:6D:41:F8:E6:76:12:5A:05:34:9C:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2a23f374-b646-3220-aee7-71cda2583630.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:9a:2c:30:e6:0c:35:67:ec:5a:1d:5c:78:77:7c:c9:ae:18: 72:c3:84:9a:17:fa:f8:ff:7d:37:93:60:24:e0:cf:eb:18:72: 3c:87:1f:93:80:3e:ad:e9:ff:e8:73:ae:d7:88:ec:8e:d2:ee: fa:9f:e0:e7:19:fa:d9:fc:3a:87:1b:a3:17:3b:b2:a8:dd:f0: 67:87:4d:e2:63:78:ae:7b:9d:8a:c2:47:84:7f:d2:55:07:1a: 56:84:d5:f8:ef:e7:fe:83:41:63:44:06:d8:99:d6:a1:eb:d6: 25:4e:dd:39:fb:97:f2:14:50:bb:b2:3d:9f:41:62:34:9d:c9: 66:af:22:21:bc:2d:88:25:78:fc:c1:87:ef:59:20:f0:ff:fb: 74:82:10:8e:8a:5b:c1:10:0f:24:a2:d5:2a:cf:b5:7c:de:8e: 0b:5e:6a:6f:10:5c:14:4d:1c:a3:1a:ba:89:9a:ad:74:a9:3d: 79:a5:aa:16:c4:2e:18:28:c0:3f:91:91:cb:9a:fa:a4:cb:c0: f1:4d:a7:cd:5e:97:b7:b0:1c:f8:1f:05:ef:d0:10:1a:b9:c6: ed:62:af:18:f9:22:94:e1:5c:28:d7:f8:a9:ab:fc:53:9a:bc: 63:6c:a4:43:f6:b3:22:8d:0a:03:93:c5:9b:52:f1:f5:40:1c: a3:09:e2:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/4unIylYYQzXgb/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MTAxNDEzMDAxMloXDTI3MDExMjE0MDAxMlowLzEtMCsGA1UEAxMk YzZhYThiZTQtMjdjYS00Nzk5LWJmMzAtMmVjMTAwNzI1MTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2D5Jfzwmf93l17Jj4lr1nCpwX26eEmMhkh0 N+AA46YfQ+U7Ja7IorBmyVCRMxYFd45K5dJM7+65j6S4YYMzR7mgpzMtvKEtWvmr rOqnWyyK6n6H7EeedbROKOza1niWRtKp6kajUfiNnz6/d1kAtT0f12I6Y8Tmxn2D 5CX4dar61y4FLfueLfivVlR09wUIo1Znk2gu+TnYKO36gstMlO4o3wIFZuUDmLLQ hTqXMfXjey2DsVUaOAG/5QXOlEUtK32AaCSN8lCXvKb7had1SaMsBNtidSBqB7kT H61FWSUi0SJ4tQxYwyLawsmeo0knCQYrmGftepiyot8SBuTYyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3BdGR7eCd+qG1B+OZ2EloFNJzvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMmEyM2YzNzQtYjY0Ni0z MjIwLWFlZTctNzFjZGEyNTgzNjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlXkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6aLDDmDDVn7FodXHh3fMmuGHLDhJoX+vj/fTeTYCTgz+sYcjyHH5OA Pq3p/+hzrteI7I7S7vqf4OcZ+tn8Oocboxc7sqjd8GeHTeJjeK57nYrCR4R/0lUH GlaE1fjv5/6DQWNEBtiZ1qHr1iVO3Tn7l/IUULuyPZ9BYjSdyWavIiG8LYglePzB h+9ZIPD/+3SCEI6KW8EQDySi1SrPtXzejgteam8QXBRNHKMauomarXSpPXmlqhbE LhgowD+Rkcua+qTLwPFNp81el7ewHPgfBe/QEBq5xu1irxj5IpThXCjX+Kmr/FOa vGNspEP2syKNCgOTxZtS8fVAHKMJ4ik= -----END CERTIFICATE-----Generated at Sun Nov 1 14:50:17 2026 by rpki-client