$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3a1dad2c-2d3a-3061-9575-faf007fac428.roa File: 3a1dad2c-2d3a-3061-9575-faf007fac428.roa (raw, json) Hash identifier: gsQaxP3nxkxS09I+CGsRckSiJWGsFTp8ESYOcyAGq4w= Subject key identifier: 4F:7D:B4:56:EC:3D:39:99:F8:25:38:5F:57:58:ED:8C:1E:04:3A:82 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584F7FE2F8E20086DA3794330100 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3a1dad2c-2d3a-3061-9575-faf007fac428.roa Signing time: Wed 14 Oct 2026 13:00:12 +0000 ROA not before: Wed 14 Oct 2026 13:00:12 +0000 ROA not after: Tue 12 Jan 2027 14:00:12 +0000 asID: 22616 IP address blocks: 170.85.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:e2:f8:e2:00:86:da:37:94:33:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 14 13:00:12 2026 GMT Not After : Jan 12 14:00:12 2027 GMT Subject: CN=fdbacc0a-db47-4e6b-aed6-7b66c9de50a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:83:9b:48:41:ed:15:53:e6:b0:a0:38:93:46: d6:73:a3:7b:4b:f4:32:88:c3:24:70:82:30:75:53: 48:f2:f3:b5:4a:f5:71:87:ba:2c:d0:0a:74:f7:7d: b4:77:6c:5e:58:91:ea:24:46:28:92:a6:98:63:d6: 2a:90:2e:7d:34:33:20:01:39:c0:b7:05:db:e9:11: ea:d0:9b:e0:48:b4:0a:6f:8d:22:3f:7c:91:36:80: 58:84:13:ee:b3:4a:b2:6d:75:77:58:30:3b:84:85: 91:e2:68:35:af:1d:3e:9b:cd:fe:70:ed:9d:ef:01: f2:d1:f3:a4:40:fd:0b:dc:b5:55:1e:66:71:db:5c: 82:f2:f7:dc:93:30:36:d7:44:85:95:1c:b9:10:7b: c3:65:fc:d2:3e:24:97:5a:e8:d5:37:17:9c:50:bf: 2e:e1:2f:17:e4:7f:7e:72:11:80:35:a1:b3:9a:57: fb:73:d0:21:49:54:2e:b1:9d:4d:0c:30:2c:51:73: c4:b1:ae:2f:83:18:61:8c:6e:a3:c2:a8:00:46:d3: 53:0f:31:c5:67:5e:90:f0:f6:05:e6:18:31:03:ab: 3e:4f:e1:42:52:2d:ad:6f:e7:2c:ad:81:d1:8d:05: 1d:06:6f:d3:cf:7d:4e:72:b1:55:c2:4d:81:f7:0b: 25:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:7D:B4:56:EC:3D:39:99:F8:25:38:5F:57:58:ED:8C:1E:04:3A:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3a1dad2c-2d3a-3061-9575-faf007fac428.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:3b:05:80:72:39:8f:5f:91:17:3c:93:32:89:de:23:fc:a6: 94:3a:34:2f:2e:3e:c4:7a:05:5c:55:f5:1c:d6:18:54:29:15: af:77:a5:83:e2:87:fe:e3:38:13:77:94:bd:3d:d8:89:e7:30: 98:61:b8:1b:4e:cc:f9:f0:6a:ad:b6:6d:f0:71:9c:96:95:f1: 94:e5:40:ab:ab:9b:50:ae:a2:2b:2f:85:6c:96:55:6f:d6:95: 17:6b:6b:9b:4d:1f:03:39:29:f7:fd:78:5f:9c:4d:5e:fe:a6: 99:a4:47:e9:ae:e0:b8:86:f2:c3:76:18:c4:92:36:eb:9d:57: 96:b3:86:69:98:af:a5:0f:b3:0c:d8:8d:b0:1c:6a:19:49:6a: 1d:ab:b9:05:b5:56:97:28:14:41:cb:6b:db:be:29:1c:01:fa: d1:5f:83:5c:7f:5a:bf:90:40:9a:5b:62:1a:8c:53:bc:2b:b5: 91:ea:86:2a:20:98:ae:44:76:f2:bd:ca:44:95:d6:d7:25:82: 48:9a:bf:c2:2d:40:be:20:c5:ea:e3:8a:6b:02:25:75:3b:02: 46:a5:cd:b6:e1:8b:6d:c0:d9:fc:4d:28:a1:44:96:0d:02:ea: 83:7a:ca:14:9f:02:31:87:6e:0b:c3:b6:d4:c7:84:10:9f:91: aa:67:00:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/4vjiAIbaN5QzAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MTAxNDEzMDAxMloXDTI3MDExMjE0MDAxMlowLzEtMCsGA1UEAxMk ZmRiYWNjMGEtZGI0Ny00ZTZiLWFlZDYtN2I2NmM5ZGU1MGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoObSEHtFVPmsKA4k0bWc6N7S/QyiMMkcIIw dVNI8vO1SvVxh7os0Ap09320d2xeWJHqJEYokqaYY9YqkC59NDMgATnAtwXb6RHq 0JvgSLQKb40iP3yRNoBYhBPus0qybXV3WDA7hIWR4mg1rx0+m83+cO2d7wHy0fOk QP0L3LVVHmZx21yC8vfckzA210SFlRy5EHvDZfzSPiSXWujVNxecUL8u4S8X5H9+ chGANaGzmlf7c9AhSVQusZ1NDDAsUXPEsa4vgxhhjG6jwqgARtNTDzHFZ16Q8PYF 5hgxA6s+T+FCUi2tb+csrYHRjQUdBm/Tz31OcrFVwk2B9wsl9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE99tFbsPTmZ+CU4X1dY7YweBDqCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvM2ExZGFkMmMtMmQzYS0z MDYxLTk1NzUtZmFmMDA3ZmFjNDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlWGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAU7BYByOY9fkRc8kzKJ3iP8ppQ6NC8uPsR6BVxV9RzWGFQpFa93pYPi h/7jOBN3lL092InnMJhhuBtOzPnwaq22bfBxnJaV8ZTlQKurm1CuoisvhWyWVW/W lRdra5tNHwM5Kff9eF+cTV7+ppmkR+mu4LiG8sN2GMSSNuudV5azhmmYr6UPswzY jbAcahlJah2ruQW1VpcoFEHLa9u+KRwB+tFfg1x/Wr+QQJpbYhqMU7wrtZHqhiog mK5EdvK9ykSV1tclgkiav8ItQL4gxerjimsCJXU7Akalzbbhi23A2fxNKKFElg0C 6oN6yhSfAjGHbgvDttTHhBCfkapnAAw= -----END CERTIFICATE-----Generated at Fri Oct 30 20:26:49 2026 by rpki-client