$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3afb08d9-b761-3e41-a7fa-5a474eee1fc7.roa File: 3afb08d9-b761-3e41-a7fa-5a474eee1fc7.roa (raw, json) Hash identifier: ck/vDxf1SLQal8WPSHwGJXQdyu8EuONJkkJffwrdxoA= Subject key identifier: 93:32:64:55:D5:D5:3E:A3:3E:9B:A1:9E:0D:F8:D0:F4:F7:28:31:96 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584F7FE2F8C9976E3D8482D1DEC0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3afb08d9-b761-3e41-a7fa-5a474eee1fc7.roa Signing time: Wed 14 Oct 2026 13:00:12 +0000 ROA not before: Wed 14 Oct 2026 13:00:12 +0000 ROA not after: Tue 12 Jan 2027 14:00:12 +0000 asID: 22616 IP address blocks: 170.85.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:e2:f8:c9:97:6e:3d:84:82:d1:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 14 13:00:12 2026 GMT Not After : Jan 12 14:00:12 2027 GMT Subject: CN=1c26f2df-f54f-4d89-ac36-aea24f8204bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:23:34:98:42:6f:c1:66:ce:d5:a7:e5:af:d0: d4:e1:1a:95:76:54:ee:0a:e1:e0:a9:f2:64:49:89: 52:6b:b9:b4:48:4c:0c:4e:57:c7:fc:1d:a0:c8:af: e6:f1:c8:f6:62:95:b9:93:74:48:a2:e0:e4:d1:5f: dd:dd:c1:b9:4a:4b:4d:10:d2:9f:2e:e4:55:8d:75: 14:78:5e:fe:81:2a:18:fc:cf:ae:86:1a:8b:b2:3b: 3e:c3:be:c7:7b:72:39:7e:72:7a:04:eb:31:f0:de: 26:5d:1f:3a:fd:cc:f2:9a:f0:76:60:9b:82:f8:96: b4:b9:cc:c4:93:1c:04:39:f5:12:8c:11:61:f7:dc: 05:0c:88:dd:c1:fb:11:88:c3:07:f0:37:86:a3:ec: 3b:8b:12:fc:f4:45:67:6f:3f:55:8e:9a:5f:63:b7: 8e:d9:39:81:23:fc:c9:45:a0:93:a6:9a:9d:d7:c6: f5:61:e3:74:a0:cb:1c:f4:21:60:80:a8:44:d4:f7: ba:a3:35:c0:81:26:e4:7f:a6:e1:1b:0d:1d:6e:f7: 83:de:f6:43:13:c5:82:d2:76:0c:8a:45:64:15:57: f9:cd:95:7d:10:92:ff:9c:28:d2:51:ff:5e:62:9b: 7d:84:3f:b6:c0:e1:60:7a:fe:52:be:d0:6f:51:f0: db:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:32:64:55:D5:D5:3E:A3:3E:9B:A1:9E:0D:F8:D0:F4:F7:28:31:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3afb08d9-b761-3e41-a7fa-5a474eee1fc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:23:97:52:9d:b8:de:00:75:e0:73:b3:68:5b:ee:e7:02:b4: b5:44:cd:d6:66:66:7b:b8:85:be:be:11:f0:af:44:e1:3a:af: e8:41:6c:49:92:c7:cc:a2:f3:b5:7c:1f:d5:85:36:6e:67:9c: ec:3a:8c:1c:17:ff:44:39:0d:57:33:d9:ef:d8:74:f9:2d:ff: 15:18:55:97:6e:3f:c6:a7:9b:c9:e8:f5:3c:64:73:20:b3:85: 24:93:0f:47:b0:b0:be:cb:6f:ed:6e:ba:39:18:8a:46:2b:f4: 23:31:9d:8d:33:bb:ed:99:57:49:4d:c2:4a:99:ef:fa:73:75: 71:18:2d:4a:8e:7b:45:08:c9:12:7b:11:77:4c:a9:98:82:3c: 15:03:11:8d:7a:4f:d1:8f:11:0a:23:59:cd:2f:ca:41:bc:b9: df:59:db:e3:4c:3f:77:6c:ac:f6:d5:2f:02:d0:54:13:3e:69: 2e:1a:8b:e0:52:d4:f5:70:be:e9:4b:c5:f6:96:3a:af:13:e2: cf:40:de:90:b0:76:14:5e:1e:6c:20:e5:8f:ca:e4:17:e2:6c: f4:57:6d:d9:71:cc:eb:fa:28:66:65:11:d6:5a:a7:12:e9:e3: fe:b4:1f:2f:2a:79:2b:bf:1e:5f:6e:05:db:2c:d2:71:0f:fa: 53:be:68:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/4vjJl249hILR3sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MTAxNDEzMDAxMloXDTI3MDExMjE0MDAxMlowLzEtMCsGA1UEAxMk MWMyNmYyZGYtZjU0Zi00ZDg5LWFjMzYtYWVhMjRmODIwNGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCM0mEJvwWbO1aflr9DU4RqVdlTuCuHgqfJk SYlSa7m0SEwMTlfH/B2gyK/m8cj2YpW5k3RIouDk0V/d3cG5SktNENKfLuRVjXUU eF7+gSoY/M+uhhqLsjs+w77He3I5fnJ6BOsx8N4mXR86/czymvB2YJuC+Ja0uczE kxwEOfUSjBFh99wFDIjdwfsRiMMH8DeGo+w7ixL89EVnbz9VjppfY7eO2TmBI/zJ RaCTppqd18b1YeN0oMsc9CFggKhE1Pe6ozXAgSbkf6bhGw0dbveD3vZDE8WC0nYM ikVkFVf5zZV9EJL/nCjSUf9eYpt9hD+2wOFgev5SvtBvUfDbgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJMyZFXV1T6jPpuhng340PT3KDGWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvM2FmYjA4ZDktYjc2MS0z ZTQxLWE3ZmEtNWE0NzRlZWUxZmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlWuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUjl1KduN4AdeBzs2hb7ucCtLVEzdZmZnu4hb6+EfCvROE6r+hBbEmS x8yi87V8H9WFNm5nnOw6jBwX/0Q5DVcz2e/YdPkt/xUYVZduP8anm8no9TxkcyCz hSSTD0ewsL7Lb+1uujkYikYr9CMxnY0zu+2ZV0lNwkqZ7/pzdXEYLUqOe0UIyRJ7 EXdMqZiCPBUDEY16T9GPEQojWc0vykG8ud9Z2+NMP3dsrPbVLwLQVBM+aS4ai+BS 1PVwvulLxfaWOq8T4s9A3pCwdhReHmwg5Y/K5BfibPRXbdlxzOv6KGZlEdZapxLp 4/60Hy8qeSu/Hl9uBdss0nEP+lO+aGg= -----END CERTIFICATE-----Generated at Sat Oct 31 15:44:33 2026 by rpki-client