$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2c9902ef-6d33-3e34-ae3f-43b7a02c1a09.roa File: 2c9902ef-6d33-3e34-ae3f-43b7a02c1a09.roa (raw, json) Hash identifier: GAQgQTJPI3xP2F24iEYX8n5wePSZXiJGXD/BeGpQsHc= Subject key identifier: 74:07:68:42:BA:68:0D:72:BE:A2:7A:15:5B:B1:1E:02:56:31:58:26 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584FB3A67F5D753D380E20D2BB00 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2c9902ef-6d33-3e34-ae3f-43b7a02c1a09.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 16509 IP address blocks: 170.85.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a6:7f:5d:75:3d:38:0e:20:d2:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=be72f89f-8887-4f6c-99e7-f203dd15b1fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:30:a1:98:cd:6a:a7:13:d6:97:fa:e5:fa:9a: f4:8e:32:64:4c:53:20:c3:92:23:67:c8:2d:d1:47: 5c:46:6f:20:0c:2c:62:6f:d8:f4:42:92:bb:54:94: b5:3c:60:54:84:be:03:3a:6d:59:5a:ef:a1:fa:7c: 4f:6e:0c:f8:4e:bc:15:d2:33:64:e1:12:23:dd:3e: 94:aa:e1:0c:3e:97:7f:ed:08:22:6a:3f:8d:17:47: a2:e8:c2:03:b9:6e:c6:71:b5:db:7a:89:94:fb:2c: a0:db:31:90:c5:db:cf:da:ac:ea:1e:0b:5a:82:fa: 3f:30:65:ee:01:7b:01:fa:9a:0d:c5:4e:83:df:7e: af:ee:77:1a:77:f6:37:bc:60:a0:38:62:20:ba:af: 6f:ae:28:3f:13:65:b3:27:b7:d6:48:4e:3a:2d:82: 83:27:53:5f:ad:35:91:e6:cb:d7:2c:b9:3f:2f:00: 5c:c1:42:fc:f3:58:70:46:3b:77:fe:2a:dc:74:5e: ce:ce:01:59:b5:89:ae:c4:69:ec:7c:34:8e:48:a5: c3:87:2d:dd:8c:9f:4c:aa:3b:ef:16:56:e9:70:3e: 1a:42:08:8e:9f:81:80:cd:e2:50:85:3b:83:73:85: 88:66:ad:be:d2:71:29:42:69:7e:91:07:f0:27:ae: 6d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:07:68:42:BA:68:0D:72:BE:A2:7A:15:5B:B1:1E:02:56:31:58:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2c9902ef-6d33-3e34-ae3f-43b7a02c1a09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:3a:77:b1:cb:46:22:aa:ef:75:98:d7:9f:c5:f3:e3:5f:b4: 63:83:e3:b1:13:4d:19:7c:c1:24:10:27:65:19:46:22:5d:eb: 59:1a:3a:5c:65:53:f7:76:59:f8:7e:22:58:9a:76:5b:e8:96: 8c:92:b1:a7:ff:2e:1c:1f:78:e0:08:b3:60:6b:60:c9:0b:e2: 5b:6b:6f:e8:ea:e5:e5:8a:b8:e1:1e:e1:26:94:94:7d:95:5f: 7e:76:d1:7c:11:f3:5d:f5:a8:d7:81:8b:21:72:e7:4d:01:ad: 7f:f6:91:6f:db:53:26:b2:2d:43:47:6b:62:98:0e:87:61:a1: c0:ab:7e:01:0c:83:23:58:f0:c8:6b:33:31:19:fd:c6:13:a9: 6e:6e:37:ef:3e:be:6b:f4:2c:9a:4a:9b:1f:c4:17:e3:34:a2: e5:fa:7f:3d:f3:17:3e:95:30:ee:d2:7c:6f:07:d8:9e:33:81: 82:63:5a:d9:e8:eb:b0:a1:90:ed:33:d0:ef:1b:0c:fd:31:ab: 0d:bd:b8:df:26:0b:cc:4f:ea:4f:85:bd:9d:ea:eb:87:db:5e: 9b:9c:cb:75:13:83:fe:1c:a5:f9:13:db:36:78:05:f9:c6:89: d3:06:a7:35:ed:3a:12:59:8b:89:e9:7b:06:26:40:e8:3d:18: c9:99:e5:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+zpn9ddT04DiDSuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk YmU3MmY4OWYtODg4Ny00ZjZjLTk5ZTctZjIwM2RkMTViMWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizChmM1qpxPWl/rl+pr0jjJkTFMgw5IjZ8gt 0UdcRm8gDCxib9j0QpK7VJS1PGBUhL4DOm1ZWu+h+nxPbgz4TrwV0jNk4RIj3T6U quEMPpd/7Qgiaj+NF0ei6MIDuW7GcbXbeomU+yyg2zGQxdvP2qzqHgtagvo/MGXu AXsB+poNxU6D336v7ncad/Y3vGCgOGIguq9vrig/E2WzJ7fWSE46LYKDJ1NfrTWR 5svXLLk/LwBcwUL881hwRjt3/ircdF7OzgFZtYmuxGnsfDSOSKXDhy3djJ9Mqjvv FlbpcD4aQgiOn4GAzeJQhTuDc4WIZq2+0nEpQml+kQfwJ65tFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQHaEK6aA1yvqJ6FVuxHgJWMVgmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMmM5OTAyZWYtNmQzMy0z ZTM0LWFlM2YtNDNiN2EwMmMxYTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlU1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAME6d7HLRiKq73WY15/F8+NftGOD47ETTRl8wSQQJ2UZRiJd61kaOlxl U/d2Wfh+IliadlvoloySsaf/LhwfeOAIs2BrYMkL4ltrb+jq5eWKuOEe4SaUlH2V X3520XwR8131qNeBiyFy500BrX/2kW/bUyayLUNHa2KYDodhocCrfgEMgyNY8Mhr MzEZ/cYTqW5uN+8+vmv0LJpKmx/EF+M0ouX6fz3zFz6VMO7SfG8H2J4zgYJjWtno 67ChkO0z0O8bDP0xqw29uN8mC8xP6k+FvZ3q64fbXpucy3UTg/4cpfkT2zZ4BfnG idMGpzXtOhJZi4npewYmQOg9GMmZ5cg= -----END CERTIFICATE-----Generated at Wed Nov 4 20:38:20 2026 by rpki-client