$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/52ebeacd-8144-3812-ab9f-7b5897eaf0ee.roa File: 52ebeacd-8144-3812-ab9f-7b5897eaf0ee.roa (raw, json) Hash identifier: PLDJXfQUOYSKpRAxHfkxLLF8RA9bTyXBcy9hKc4f8aY= Subject key identifier: E9:B5:8D:C3:69:D4:89:54:95:CF:D0:DA:F4:1F:37:04:DB:50:17:F8 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584F7FE2FF6EB3A24A1646D0C940 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/52ebeacd-8144-3812-ab9f-7b5897eaf0ee.roa Signing time: Wed 14 Oct 2026 13:00:12 +0000 ROA not before: Wed 14 Oct 2026 13:00:12 +0000 ROA not after: Tue 12 Jan 2027 14:00:12 +0000 asID: 22616 IP address blocks: 170.85.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:e2:ff:6e:b3:a2:4a:16:46:d0:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 14 13:00:12 2026 GMT Not After : Jan 12 14:00:12 2027 GMT Subject: CN=6bf71a87-4d45-488d-a1fb-1dbe47b4ddbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7c:4f:8f:06:9c:a2:f6:80:74:7e:43:d7:55: c3:32:a3:3a:20:ee:d8:7f:37:0a:3c:b0:40:b1:6f: 26:33:66:23:56:2a:f6:f3:ea:79:95:ba:a7:b7:a2: fa:b8:e4:97:57:a0:c2:9e:dd:21:1b:ed:50:7b:50: 8e:40:b4:35:82:9a:bb:93:3c:e2:47:c7:b3:9e:cd: 8c:c5:04:a2:5a:d1:e7:67:06:d4:c0:b1:45:29:d8: 33:3e:a9:23:99:20:c6:37:f5:f7:1a:0f:c1:e9:c8: b7:58:3a:6b:5c:1a:3b:d8:ea:d4:34:32:0f:17:d5: b0:9f:e3:67:12:5e:06:7f:aa:70:21:bb:55:21:08: 1b:da:fa:e2:bb:6d:e0:7c:3a:a5:46:78:69:56:c8: 54:a3:96:a1:d8:ce:ee:3f:cd:04:0a:a4:26:a6:38: 5a:a4:b8:8f:c0:9d:0e:0b:0a:95:61:04:d0:e2:eb: a0:d5:95:48:f9:40:71:64:ed:71:bb:5b:5d:ef:ed: 23:62:98:3b:8b:d7:c6:03:c4:7b:c6:96:de:15:a8: 06:0a:f6:db:03:c0:61:c4:fe:f0:fb:28:9d:92:1a: a0:8d:a8:72:57:c6:da:6c:97:c9:e3:30:90:42:50: 7a:a6:50:6f:d9:a2:db:43:2c:d7:f5:a0:af:fa:a0: 1f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B5:8D:C3:69:D4:89:54:95:CF:D0:DA:F4:1F:37:04:DB:50:17:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/52ebeacd-8144-3812-ab9f-7b5897eaf0ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:63:8d:b6:37:44:08:99:b7:55:f4:4d:10:54:8b:b6:d5:8e: 8f:60:4b:40:fb:ab:4e:08:95:a2:8d:55:6f:a7:d1:a6:c1:85: dd:48:7e:00:3e:b6:20:89:a4:8d:e1:ec:25:e3:62:9a:fc:74: f9:c6:84:3e:13:2d:13:3a:ee:c7:50:51:26:39:e0:49:e0:4e: e7:8b:ed:8f:46:e1:22:d5:db:29:c5:e5:7b:2d:07:10:17:d6: d6:60:63:a5:6a:2e:28:c0:08:76:6e:64:53:44:09:e7:31:89: 4d:fe:3a:19:f0:ce:d5:97:91:c8:9b:64:ca:93:c9:f1:e2:7a: bb:f1:cb:cf:f7:c9:44:f1:66:0c:f5:b5:91:76:aa:0c:fc:55: 9b:98:bc:55:79:7f:79:fe:51:b6:3e:13:b4:37:93:98:2d:88: 98:f4:7c:79:86:65:b4:57:ae:2f:95:60:1c:84:5a:f1:1f:0c: 22:87:31:74:7e:a4:fe:d4:aa:08:73:54:aa:34:bf:11:21:6d: 0f:0a:a5:70:cb:a0:c3:ce:bb:05:8a:c2:b0:e7:e7:0a:a4:fd: be:42:11:33:29:25:8a:b0:50:0a:18:86:6b:26:6d:ad:83:8a: 65:56:c2:8f:14:0b:c4:02:78:ed:e0:fd:d0:f6:0f:85:3f:0d: 97:22:40:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/4v9us6JKFkbQyUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MTAxNDEzMDAxMloXDTI3MDExMjE0MDAxMlowLzEtMCsGA1UEAxMk NmJmNzFhODctNGQ0NS00ODhkLWExZmItMWRiZTQ3YjRkZGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXxPjwacovaAdH5D11XDMqM6IO7YfzcKPLBA sW8mM2YjVir28+p5lbqnt6L6uOSXV6DCnt0hG+1Qe1COQLQ1gpq7kzziR8ezns2M xQSiWtHnZwbUwLFFKdgzPqkjmSDGN/X3Gg/B6ci3WDprXBo72OrUNDIPF9Wwn+Nn El4Gf6pwIbtVIQgb2vriu23gfDqlRnhpVshUo5ah2M7uP80ECqQmpjhapLiPwJ0O CwqVYQTQ4uug1ZVI+UBxZO1xu1td7+0jYpg7i9fGA8R7xpbeFagGCvbbA8BhxP7w +yidkhqgjahyV8babJfJ4zCQQlB6plBv2aLbQyzX9aCv+qAfXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOm1jcNp1IlUlc/Q2vQfNwTbUBf4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNTJlYmVhY2QtODE0NC0z ODEyLWFiOWYtN2I1ODk3ZWFmMGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlUUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9jjbY3RAiZt1X0TRBUi7bVjo9gS0D7q04IlaKNVW+n0abBhd1IfgA+ tiCJpI3h7CXjYpr8dPnGhD4TLRM67sdQUSY54EngTueL7Y9G4SLV2ynF5XstBxAX 1tZgY6VqLijACHZuZFNECecxiU3+OhnwztWXkcibZMqTyfHiervxy8/3yUTxZgz1 tZF2qgz8VZuYvFV5f3n+UbY+E7Q3k5gtiJj0fHmGZbRXri+VYByEWvEfDCKHMXR+ pP7UqghzVKo0vxEhbQ8KpXDLoMPOuwWKwrDn5wqk/b5CETMpJYqwUAoYhmsmba2D imVWwo8UC8QCeO3g/dD2D4U/DZciQGA= -----END CERTIFICATE-----Generated at Sat Oct 31 08:19:19 2026 by rpki-client