$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3faf91e5-6c81-3d67-b498-f913437fa73a.roa File: 3faf91e5-6c81-3d67-b498-f913437fa73a.roa (raw, json) Hash identifier: ISSoPFnDxnDIyMi7I8b8CItnnUUHzizX44fdYHtDA3M= Subject key identifier: 46:67:1F:56:56:46:60:C3:35:55:63:B6:F6:4C:A4:8C:78:10:0B:58 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584F7FE2EC7AE950565BFDBC0D00 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3faf91e5-6c81-3d67-b498-f913437fa73a.roa Signing time: Wed 14 Oct 2026 13:00:12 +0000 ROA not before: Wed 14 Oct 2026 13:00:12 +0000 ROA not after: Tue 12 Jan 2027 14:00:12 +0000 asID: 22616 IP address blocks: 170.85.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:e2:ec:7a:e9:50:56:5b:fd:bc:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 14 13:00:12 2026 GMT Not After : Jan 12 14:00:12 2027 GMT Subject: CN=005864a9-632a-4f64-aa26-e4308e7ee852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:12:e3:da:f2:a2:6c:12:b0:76:54:66:b5:01: a2:f5:63:a6:db:bd:89:35:62:9b:59:fc:af:2e:10: 06:5b:86:a0:2d:a9:96:f8:e6:00:99:e9:f0:28:d2: 2c:97:c6:0f:41:2e:81:4b:42:88:60:f4:b2:c7:97: fa:87:4d:60:0a:08:11:16:c1:a6:9c:4b:9c:ee:21: 5d:22:04:6e:02:6e:75:38:17:73:ff:3b:75:72:1e: c6:05:6c:33:72:18:fb:97:b1:48:7d:7d:f1:fd:c3: bb:2b:6f:ba:e1:48:8f:fc:d8:d5:2b:08:1c:ec:ff: fe:e4:8f:5e:12:12:08:3e:b8:47:54:1e:45:f6:17: b7:68:05:01:b7:e8:c3:49:10:8a:52:b3:f4:25:4a: 41:e0:ae:4c:1a:74:e1:00:93:c6:e3:fd:e0:ef:d9: 64:e9:7f:f2:aa:71:8d:7e:e3:7a:b0:94:13:ac:71: 8b:df:89:ce:7a:20:f4:90:bf:48:a8:7a:81:69:08: 3b:d5:fb:95:16:90:5b:29:3f:be:25:8a:25:29:d9: e3:af:fc:14:ce:fb:08:c0:8d:67:19:2c:9d:35:bb: 4c:3c:68:fd:26:f6:8e:e7:cf:06:90:98:39:44:39: 1f:83:51:0f:be:8e:61:92:f7:43:00:3a:0e:d4:eb: 78:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:67:1F:56:56:46:60:C3:35:55:63:B6:F6:4C:A4:8C:78:10:0B:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3faf91e5-6c81-3d67-b498-f913437fa73a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:a8:c8:e4:e1:ad:d7:d7:2b:e4:a1:85:5c:3c:e4:f4:63:56: a9:d4:c2:65:38:2a:a7:e4:c1:43:d5:03:c7:58:d1:86:3a:1d: a1:84:da:e1:44:bd:b6:b6:96:cf:29:7d:3f:8e:a5:39:b3:b0: 34:05:38:3a:51:e7:7b:94:9a:36:df:49:dd:3f:48:e1:55:a1: 4f:16:21:b9:6e:18:f1:7a:1c:dc:54:8e:25:64:3a:df:5a:f3: 20:4c:5a:49:b2:1e:81:18:79:dd:e8:04:ac:37:42:a1:a2:8d: 27:cc:ea:5b:c1:96:66:8d:51:60:e5:10:7b:a1:a2:b8:75:de: e2:56:1f:42:48:cf:bf:d8:82:4a:b5:8c:13:69:eb:f5:cd:72: c7:5c:c3:90:5b:71:56:c9:14:de:56:e6:bd:a8:e3:f4:94:7c: ba:2f:af:d3:fe:76:6b:a5:f1:46:1e:9b:7e:ef:09:2a:6c:a6: 21:52:ed:22:c5:e7:95:77:f4:55:03:30:30:ab:57:d1:cc:4e: 3f:d4:1a:d4:0a:46:fd:97:4f:ac:b3:47:1b:73:5a:86:c6:b5: 16:eb:9e:cd:fc:57:b0:12:aa:7f:af:a4:2d:00:33:17:62:1e: ce:d3:6d:dc:6e:35:07:9f:50:2c:4b:71:87:fb:8e:12:5c:b5: fa:cb:01:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/4ux66VBWW/28DQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MTAxNDEzMDAxMloXDTI3MDExMjE0MDAxMlowLzEtMCsGA1UEAxMk MDA1ODY0YTktNjMyYS00ZjY0LWFhMjYtZTQzMDhlN2VlODUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxLj2vKibBKwdlRmtQGi9WOm272JNWKbWfyv LhAGW4agLamW+OYAmenwKNIsl8YPQS6BS0KIYPSyx5f6h01gCggRFsGmnEuc7iFd IgRuAm51OBdz/zt1ch7GBWwzchj7l7FIfX3x/cO7K2+64UiP/NjVKwgc7P/+5I9e EhIIPrhHVB5F9he3aAUBt+jDSRCKUrP0JUpB4K5MGnThAJPG4/3g79lk6X/yqnGN fuN6sJQTrHGL34nOeiD0kL9IqHqBaQg71fuVFpBbKT++JYolKdnjr/wUzvsIwI1n GSydNbtMPGj9JvaO588GkJg5RDkfg1EPvo5hkvdDADoO1Ot4gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZnH1ZWRmDDNVVjtvZMpIx4EAtYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvM2ZhZjkxZTUtNmM4MS0z ZDY3LWI0OTgtZjkxMzQzN2ZhNzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlWvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaoyOThrdfXK+ShhVw85PRjVqnUwmU4KqfkwUPVA8dY0YY6HaGE2uFE vba2ls8pfT+OpTmzsDQFODpR53uUmjbfSd0/SOFVoU8WIbluGPF6HNxUjiVkOt9a 8yBMWkmyHoEYed3oBKw3QqGijSfM6lvBlmaNUWDlEHuhorh13uJWH0JIz7/Ygkq1 jBNp6/XNcsdcw5BbcVbJFN5W5r2o4/SUfLovr9P+dmul8UYem37vCSpspiFS7SLF 55V39FUDMDCrV9HMTj/UGtQKRv2XT6yzRxtzWobGtRbrns38V7ASqn+vpC0AMxdi Hs7TbdxuNQefUCxLcYf7jhJctfrLAd4= -----END CERTIFICATE-----Generated at Fri Oct 30 20:26:42 2026 by rpki-client