$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2d7ca8ae-c0c6-3448-94ad-4da4584ef5c4.roa File: 2d7ca8ae-c0c6-3448-94ad-4da4584ef5c4.roa (raw, json) Hash identifier: pqQxiHqFMGDirkc7/w21Uq72z86jBJZKiiv92eFc+38= Subject key identifier: 69:B7:7E:22:08:40:6B:F7:90:15:FB:9E:F3:D1:37:7A:3A:FD:CF:E5 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584F7FE2ECF1A3A3994901F4DE00 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2d7ca8ae-c0c6-3448-94ad-4da4584ef5c4.roa Signing time: Wed 14 Oct 2026 13:00:12 +0000 ROA not before: Wed 14 Oct 2026 13:00:12 +0000 ROA not after: Tue 12 Jan 2027 14:00:12 +0000 asID: 22616 IP address blocks: 170.85.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:e2:ec:f1:a3:a3:99:49:01:f4:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 14 13:00:12 2026 GMT Not After : Jan 12 14:00:12 2027 GMT Subject: CN=8de8a249-3b5f-46e4-be9a-9eef4c1a5925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:15:3b:1c:c1:e4:3a:37:63:99:24:7f:29:15: 94:86:e5:e6:29:b1:cd:ef:5f:d2:f0:d0:7a:8b:a3: 68:bb:93:87:20:f5:1e:15:c7:f5:81:7e:6c:e5:f6: 75:35:a8:e9:cd:66:d4:1f:a8:85:ab:eb:b8:a4:06: 52:86:9b:c5:cf:86:af:a1:83:0d:89:62:9d:58:90: 8a:c9:d4:15:62:cc:1b:78:eb:1d:63:43:51:55:9b: 5a:f2:cc:b3:97:06:ea:1a:e9:b2:5e:8e:6f:8b:36: 2f:38:a8:d5:41:46:c8:4b:d8:4c:4e:4d:d4:27:c3: 1f:bd:3f:62:1a:0a:ec:35:82:8c:3b:be:47:56:5b: dd:fd:ec:12:fb:36:9e:35:ba:16:27:8d:2a:aa:e0: 1c:72:78:db:e4:4f:27:f9:43:a6:0a:f9:dd:ef:c3: 69:ef:42:8d:48:16:98:de:1f:80:67:ff:1b:e3:05: 34:3a:89:07:1d:fa:45:06:11:57:2d:54:4a:1e:bf: 80:30:2e:ab:30:c8:d7:fe:ce:b1:10:c2:23:e1:e4: 25:77:8c:45:88:ed:9d:69:3c:45:db:f2:9f:cf:d6: 15:29:ff:b7:b1:2b:ed:e8:d6:52:1e:d2:59:ba:78: 1e:f1:fd:24:a0:0d:54:95:56:ef:a0:74:0a:1e:1c: e8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B7:7E:22:08:40:6B:F7:90:15:FB:9E:F3:D1:37:7A:3A:FD:CF:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2d7ca8ae-c0c6-3448-94ad-4da4584ef5c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:0a:c3:01:74:64:53:fe:8c:91:e8:c7:15:cc:25:d4:ba:bc: d6:49:ac:16:07:1c:5b:85:52:e6:d1:36:d8:61:ce:4a:2c:fb: ac:61:af:39:3a:74:d3:1f:a1:66:38:aa:fb:c1:64:87:0b:bd: 14:76:0f:52:8e:07:41:72:99:1f:95:ca:8e:33:aa:6e:58:b9: 49:4e:7d:8b:f8:02:73:b6:8d:3a:b1:dc:8a:59:2e:60:46:8a: 24:cc:6c:31:9d:c6:d6:ca:72:52:51:e3:ee:4d:56:54:d3:dd: f7:9d:11:ab:79:47:19:83:7c:7f:21:d1:f6:e9:a4:16:df:cd: 57:c5:c1:dc:49:02:c9:29:a8:56:36:2b:5f:92:63:fe:d6:29: 08:fe:5a:ad:20:1d:d7:1c:9e:a4:9c:4e:ea:6c:6f:32:d6:02: 40:16:4b:a7:83:a8:a9:7c:f7:4f:ff:91:23:44:e6:b1:f9:93: 9d:3c:9b:58:50:5e:eb:3d:13:41:7b:81:4c:15:fc:79:cf:f3: a9:02:b6:a9:30:ea:bf:cb:ce:07:12:29:11:3f:b8:24:e7:1b: ef:a2:de:4b:93:6a:eb:1a:28:b1:50:9e:c3:6f:ba:82:0b:b6: 4c:d5:39:2c:90:56:42:78:fa:93:34:39:cf:ea:6f:09:7b:75: c6:6e:c3:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/4uzxo6OZSQH03gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MTAxNDEzMDAxMloXDTI3MDExMjE0MDAxMlowLzEtMCsGA1UEAxMk OGRlOGEyNDktM2I1Zi00NmU0LWJlOWEtOWVlZjRjMWE1OTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRU7HMHkOjdjmSR/KRWUhuXmKbHN71/S8NB6 i6Nou5OHIPUeFcf1gX5s5fZ1NajpzWbUH6iFq+u4pAZShpvFz4avoYMNiWKdWJCK ydQVYswbeOsdY0NRVZta8syzlwbqGumyXo5vizYvOKjVQUbIS9hMTk3UJ8MfvT9i GgrsNYKMO75HVlvd/ewS+zaeNboWJ40qquAccnjb5E8n+UOmCvnd78Np70KNSBaY 3h+AZ/8b4wU0OokHHfpFBhFXLVRKHr+AMC6rMMjX/s6xEMIj4eQld4xFiO2daTxF 2/Kfz9YVKf+3sSvt6NZSHtJZunge8f0koA1UlVbvoHQKHhzoMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGm3fiIIQGv3kBX7nvPRN3o6/c/lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMmQ3Y2E4YWUtYzBjNi0z NDQ4LTk0YWQtNGRhNDU4NGVmNWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMKwwF0ZFP+jJHoxxXMJdS6vNZJrBYHHFuFUubRNthhzkos+6xhrzk6 dNMfoWY4qvvBZIcLvRR2D1KOB0FymR+Vyo4zqm5YuUlOfYv4AnO2jTqx3IpZLmBG iiTMbDGdxtbKclJR4+5NVlTT3fedEat5RxmDfH8h0fbppBbfzVfFwdxJAskpqFY2 K1+SY/7WKQj+Wq0gHdccnqScTupsbzLWAkAWS6eDqKl890//kSNE5rH5k508m1hQ Xus9E0F7gUwV/HnP86kCtqkw6r/LzgcSKRE/uCTnG++i3kuTausaKLFQnsNvuoIL tkzVOSyQVkJ4+pM0Oc/qbwl7dcZuw6Y= -----END CERTIFICATE-----Generated at Sat Oct 31 08:18:53 2026 by rpki-client