$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/33e08937-4f17-30a4-a5e7-7341d6901d42.roa File: 33e08937-4f17-30a4-a5e7-7341d6901d42.roa (raw, json) Hash identifier: r/PwFNDzjxaEn4NKxZqdXHg3qTnumb234vSZypWN3xs= Subject key identifier: 33:14:73:A7:E4:51:6B:64:14:52:39:86:B4:4F:75:DA:D4:89:BF:E2 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584F7FE2EBF9E64374765F533780 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/33e08937-4f17-30a4-a5e7-7341d6901d42.roa Signing time: Wed 14 Oct 2026 13:00:12 +0000 ROA not before: Wed 14 Oct 2026 13:00:12 +0000 ROA not after: Tue 12 Jan 2027 14:00:12 +0000 asID: 22616 IP address blocks: 170.85.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:e2:eb:f9:e6:43:74:76:5f:53:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 14 13:00:12 2026 GMT Not After : Jan 12 14:00:12 2027 GMT Subject: CN=cff57e93-673a-48b5-90d3-5bebc900f809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9e:96:9a:72:5e:2a:3b:ce:96:b7:0d:83:72: de:6b:36:95:93:98:80:7f:c1:08:54:f8:e0:7a:8e: be:1b:bd:77:3a:62:6c:07:b7:ef:8c:fe:51:dc:e8: 34:86:30:29:0a:dd:61:7b:c1:b6:99:f7:f1:d7:1c: 02:c7:6b:7d:dc:f0:ce:fb:44:76:c9:3d:d9:dc:75: 7e:d4:b3:9a:4d:4a:7f:c7:6a:59:27:b1:a3:3f:63: ed:73:58:3b:02:de:b8:34:f3:71:6e:62:41:a0:0d: 81:04:18:41:42:fa:c6:e3:80:77:9c:c2:9a:8d:df: 6b:55:9e:68:d0:2e:36:1d:39:fa:ce:92:27:74:cc: 55:78:2a:85:cd:ba:31:20:48:87:85:04:7e:73:45: 04:d0:30:bd:5c:32:66:cb:d6:6e:eb:ba:a0:fd:e3: 54:f3:9f:80:d3:c3:5f:e6:34:b6:82:3a:60:56:80: 2d:e9:e9:bf:40:30:63:a0:4f:f6:3a:a1:52:43:ab: ae:ce:2c:10:4c:0e:e9:14:46:d7:09:f6:9f:33:d4: cf:f6:3c:14:28:88:a2:10:c7:af:aa:09:6d:f0:dd: 09:33:94:66:8c:c9:8e:b6:e0:d6:37:8b:46:00:48: 08:07:3a:83:e8:88:24:4f:31:f9:12:a9:ae:c0:d6: 88:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:14:73:A7:E4:51:6B:64:14:52:39:86:B4:4F:75:DA:D4:89:BF:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/33e08937-4f17-30a4-a5e7-7341d6901d42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:8d:1b:f3:d9:21:d6:40:41:60:27:a0:9b:f4:67:bb:6f:2c: 09:a4:2f:68:b6:c8:a3:3c:23:40:7c:0f:14:45:46:9a:88:74: 71:41:d6:1f:89:1b:00:37:57:30:e5:62:63:cb:39:03:59:6c: bd:a6:6f:04:80:e4:54:b9:5a:82:5b:98:66:34:91:c8:5b:be: 18:d5:48:d0:8f:8e:b0:ee:a5:6f:b9:da:e4:90:ae:55:1d:2e: 59:4a:0d:2a:30:dc:dd:2e:d1:2e:f9:02:fd:68:f4:0c:b3:9a: a6:e4:ac:73:b9:23:81:31:20:be:5e:86:19:42:99:e0:7d:d0: b7:a5:97:4c:df:d7:ee:57:35:ce:79:c3:b0:04:53:a4:7a:21: 9e:8d:25:b7:e6:d7:d9:16:2b:5b:0b:39:d2:42:a3:c9:d2:5f: b6:d0:4a:e2:31:2d:63:c6:79:29:fe:42:a0:49:22:9f:06:9e: a6:e0:2d:b8:d8:c7:04:49:76:1d:fb:ce:94:f6:9c:db:03:87: 79:37:f0:f2:35:01:a3:24:db:2c:f0:93:c2:c7:9d:29:54:d7: af:a5:20:38:17:94:01:93:ad:74:a7:5b:20:e9:1b:0c:a5:ea: d1:dc:67:6e:d9:41:35:e7:b9:bf:bd:0f:5e:ba:3a:29:cc:a8: ca:b3:19:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/4uv55kN0dl9TN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MTAxNDEzMDAxMloXDTI3MDExMjE0MDAxMlowLzEtMCsGA1UEAxMk Y2ZmNTdlOTMtNjczYS00OGI1LTkwZDMtNWJlYmM5MDBmODA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn56WmnJeKjvOlrcNg3LeazaVk5iAf8EIVPjg eo6+G713OmJsB7fvjP5R3Og0hjApCt1he8G2mffx1xwCx2t93PDO+0R2yT3Z3HV+ 1LOaTUp/x2pZJ7GjP2Ptc1g7At64NPNxbmJBoA2BBBhBQvrG44B3nMKajd9rVZ5o 0C42HTn6zpIndMxVeCqFzboxIEiHhQR+c0UE0DC9XDJmy9Zu67qg/eNU85+A08Nf 5jS2gjpgVoAt6em/QDBjoE/2OqFSQ6uuziwQTA7pFEbXCfafM9TP9jwUKIiiEMev qglt8N0JM5RmjMmOtuDWN4tGAEgIBzqD6IgkTzH5EqmuwNaIQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMUc6fkUWtkFFI5hrRPddrUib/iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMzNlMDg5MzctNGYxNy0z MGE0LWE1ZTctNzM0MWQ2OTAxZDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlVYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMONG/PZIdZAQWAnoJv0Z7tvLAmkL2i2yKM8I0B8DxRFRpqIdHFB1h+J GwA3VzDlYmPLOQNZbL2mbwSA5FS5WoJbmGY0kchbvhjVSNCPjrDupW+52uSQrlUd LllKDSow3N0u0S75Av1o9AyzmqbkrHO5I4ExIL5ehhlCmeB90Lell0zf1+5XNc55 w7AEU6R6IZ6NJbfm19kWK1sLOdJCo8nSX7bQSuIxLWPGeSn+QqBJIp8GnqbgLbjY xwRJdh37zpT2nNsDh3k38PI1AaMk2yzwk8LHnSlU16+lIDgXlAGTrXSnWyDpGwyl 6tHcZ27ZQTXnub+9D166OinMqMqzGbU= -----END CERTIFICATE-----Generated at Sun Nov 1 05:40:44 2026 by rpki-client