$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/42da7a8b-0839-3b45-9870-9d2407ce1cb0.roa File: 42da7a8b-0839-3b45-9870-9d2407ce1cb0.roa (raw, json) Hash identifier: zsWKz4QKB6z7dWCADOMhSfPwlDHTPigEpZh9PJC5ZUc= Subject key identifier: 25:6C:09:4E:49:A2:6D:D9:78:05:38:E7:E8:99:91:28:1A:28:1B:B1 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584F7FE2EED754CE2364974C09A0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/42da7a8b-0839-3b45-9870-9d2407ce1cb0.roa Signing time: Wed 14 Oct 2026 13:00:12 +0000 ROA not before: Wed 14 Oct 2026 13:00:12 +0000 ROA not after: Tue 12 Jan 2027 14:00:12 +0000 asID: 22616 IP address blocks: 170.85.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:e2:ee:d7:54:ce:23:64:97:4c:09:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 14 13:00:12 2026 GMT Not After : Jan 12 14:00:12 2027 GMT Subject: CN=ff409edc-d30b-4452-90ce-66d8c8d8f992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:29:74:4b:23:b7:b1:ce:24:16:f2:40:d7:5a: 25:e0:4e:07:5e:6e:c0:8f:d8:fa:d3:64:e0:09:49: 41:49:ae:57:9d:49:47:ec:6b:83:9a:0d:23:84:ca: d7:12:1e:b9:ac:bb:37:72:7d:f2:35:f4:8c:80:c0: de:63:bc:b9:14:39:2d:1e:1e:64:ba:bc:6a:6b:d2: 86:40:ad:fd:24:05:f7:f6:48:af:91:3e:c2:0e:11: b4:3a:42:e8:96:57:b7:dd:e3:fe:8e:d4:55:ae:7c: c6:47:2c:0d:ea:3b:99:6a:69:79:a0:a5:2b:98:60: e3:af:cb:94:5a:f5:e6:1a:43:c0:2b:bc:69:92:bb: 95:17:0c:ff:63:05:70:eb:68:47:37:ff:c8:b5:1c: 52:4c:c5:8d:0d:a9:f8:8d:66:9d:65:a9:17:7b:1e: 36:93:86:7f:33:16:4a:5f:db:34:69:b2:5c:a0:54: da:69:84:ce:37:3f:9d:e9:80:3c:a0:a6:f8:3c:1b: 88:d0:92:b5:ba:10:83:bf:7b:b1:82:6e:16:53:04: be:74:6a:ee:7c:88:28:66:97:cd:4c:da:11:81:34: c7:12:c8:d5:f7:a1:48:75:8f:9c:90:41:40:41:67: db:c5:12:a0:6f:de:6c:8d:b1:73:3c:c5:27:3c:98: 04:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:6C:09:4E:49:A2:6D:D9:78:05:38:E7:E8:99:91:28:1A:28:1B:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/42da7a8b-0839-3b45-9870-9d2407ce1cb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:a4:2e:7f:97:30:cb:36:f9:ea:42:9d:d9:a0:89:28:15:a0: 06:e8:65:1c:53:98:7e:36:43:22:cd:42:bc:68:50:77:da:b1: f8:0f:3f:95:50:f8:14:31:9d:41:3d:ae:e9:05:27:38:d8:25: c7:b3:36:d7:79:60:de:a9:d5:f2:7f:d6:5c:ed:2c:88:dd:e9: a9:90:64:9b:bd:aa:91:81:7b:ba:22:ef:e5:e3:51:63:17:09: 8f:24:d4:7a:7d:dd:5b:ed:0b:bd:50:9a:b5:29:ad:95:a5:6f: da:da:bd:b9:6f:76:ed:eb:50:69:d0:08:67:2d:dc:2c:f8:3e: f5:fe:4c:ef:4c:2b:47:ba:e9:bd:1e:2e:25:3f:52:f6:9e:63: a7:70:04:2c:bb:7d:d2:bd:82:42:bf:bf:4a:26:bc:1c:39:d8: 2e:3d:0b:76:75:19:64:d8:b5:1d:98:19:82:fa:99:b6:57:31: 89:a7:aa:f8:89:e3:82:3c:ce:ae:ed:e6:4c:00:7e:bb:c6:01: 45:bd:c1:c9:4d:cd:96:54:22:78:7a:72:42:a8:43:f1:10:1e: 8c:61:42:9d:6e:9b:ed:ea:d8:41:f0:4b:08:c2:65:2e:7b:e0: d8:33:ff:dd:bf:91:40:0b:1e:d2:46:a3:f3:ab:02:f5:18:d1: 82:36:a2:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/4u7XVM4jZJdMCaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MTAxNDEzMDAxMloXDTI3MDExMjE0MDAxMlowLzEtMCsGA1UEAxMk ZmY0MDllZGMtZDMwYi00NDUyLTkwY2UtNjZkOGM4ZDhmOTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyl0SyO3sc4kFvJA11ol4E4HXm7Aj9j602Tg CUlBSa5XnUlH7GuDmg0jhMrXEh65rLs3cn3yNfSMgMDeY7y5FDktHh5kurxqa9KG QK39JAX39kivkT7CDhG0OkLolle33eP+jtRVrnzGRywN6juZaml5oKUrmGDjr8uU WvXmGkPAK7xpkruVFwz/YwVw62hHN//ItRxSTMWNDan4jWadZakXex42k4Z/MxZK X9s0abJcoFTaaYTONz+d6YA8oKb4PBuI0JK1uhCDv3uxgm4WUwS+dGrufIgoZpfN TNoRgTTHEsjV96FIdY+ckEFAQWfbxRKgb95sjbFzPMUnPJgEcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVsCU5Jom3ZeAU45+iZkSgaKBuxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNDJkYTdhOGItMDgzOS0z YjQ1LTk4NzAtOWQyNDA3Y2UxY2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlV2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIykLn+XMMs2+epCndmgiSgVoAboZRxTmH42QyLNQrxoUHfasfgPP5VQ +BQxnUE9rukFJzjYJcezNtd5YN6p1fJ/1lztLIjd6amQZJu9qpGBe7oi7+XjUWMX CY8k1Hp93VvtC71QmrUprZWlb9ravblvdu3rUGnQCGct3Cz4PvX+TO9MK0e66b0e LiU/UvaeY6dwBCy7fdK9gkK/v0omvBw52C49C3Z1GWTYtR2YGYL6mbZXMYmnqviJ 44I8zq7t5kwAfrvGAUW9wclNzZZUInh6ckKoQ/EQHoxhQp1um+3q2EHwSwjCZS57 4Ngz/92/kUALHtJGo/OrAvUY0YI2ogc= -----END CERTIFICATE-----Generated at Sun Nov 1 14:50:26 2026 by rpki-client