$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5767e3ab-488c-3d3a-8f9e-1d0595c4db3a.roa File: 5767e3ab-488c-3d3a-8f9e-1d0595c4db3a.roa (raw, json) Hash identifier: Xb+FT70o7EnOTx2mczFG1Wmb98A138AwpoB4hNjCFb4= Subject key identifier: 69:00:B0:7A:CE:2B:A8:3B:7F:D5:06:47:8B:FF:7B:84:81:7C:74:F4 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584F7FE2F9CA00E309E5A2393F00 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5767e3ab-488c-3d3a-8f9e-1d0595c4db3a.roa Signing time: Wed 14 Oct 2026 13:00:12 +0000 ROA not before: Wed 14 Oct 2026 13:00:12 +0000 ROA not after: Tue 12 Jan 2027 14:00:12 +0000 asID: 22616 IP address blocks: 170.85.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:e2:f9:ca:00:e3:09:e5:a2:39:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 14 13:00:12 2026 GMT Not After : Jan 12 14:00:12 2027 GMT Subject: CN=4d4cf210-1306-45a8-8e6b-d6ef674ccefa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a9:87:ea:c0:a1:b0:70:ef:27:28:7e:f7:d3: c6:9e:7d:e3:fd:6c:d6:e0:ca:37:52:56:ab:c8:a6: 48:4f:a9:53:88:1c:ba:f9:3d:d1:35:3e:4c:ee:01: cc:e6:95:56:26:32:13:28:81:12:31:3c:7f:8c:ef: b7:f6:c0:9e:0c:8d:d0:53:22:08:7e:ff:c4:ad:d1: 51:45:95:73:47:72:4b:92:9c:94:f2:86:97:22:8b: b5:a1:d7:22:19:ef:cb:fe:d4:38:69:1f:37:7a:bc: ab:a7:12:c7:ea:4c:61:b1:5c:6e:f0:63:10:c8:49: ba:f3:65:fd:d9:dd:e0:73:72:82:1f:7b:0b:79:58: 24:f5:01:e3:9e:2c:0e:dd:68:1f:5a:89:08:6c:10: 77:43:ec:d0:90:92:5f:d1:4e:f3:eb:d9:42:31:97: ac:78:e2:7e:27:76:0b:34:9d:79:c1:2c:1f:0f:88: b9:dd:b1:dc:81:9b:1d:3a:8d:4f:23:6e:aa:eb:0a: 32:08:e9:f8:8a:ca:f6:72:e8:3a:4f:d5:37:03:ed: 4e:21:e0:42:e8:84:00:22:6a:9e:ea:16:8f:4f:90: 1a:d3:ed:d9:dc:aa:e6:04:41:f1:bc:f6:08:71:7b: c5:33:26:d9:28:d8:3e:8f:37:03:ef:8f:11:c9:18: 60:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:00:B0:7A:CE:2B:A8:3B:7F:D5:06:47:8B:FF:7B:84:81:7C:74:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5767e3ab-488c-3d3a-8f9e-1d0595c4db3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:5b:8c:35:26:97:21:3f:3e:39:b6:85:c5:f2:17:e9:1b:3f: 06:f6:2c:00:b1:ab:58:2e:2e:66:4d:1b:e9:e5:ff:9a:ee:8b: e8:c7:6a:3b:9d:09:f9:45:bc:bb:0f:2f:00:3d:9b:5b:45:c2: 26:33:e7:1f:db:f0:c0:c4:f3:90:19:b1:75:94:9e:8b:ed:05: a4:d0:cd:18:c0:cc:6b:73:2b:94:c0:2f:34:8f:a4:bd:45:7a: a9:dd:e4:2c:19:e6:25:03:5a:4a:1d:ee:74:6e:db:a7:93:1d: e7:57:da:75:52:41:88:31:f4:62:79:4d:e9:30:94:5b:60:d4: 89:ee:30:f7:2d:a7:64:25:07:00:66:ca:0d:43:a4:13:20:d3: e8:3f:83:ae:2e:98:0f:40:26:88:70:30:10:47:44:37:d5:3d: 28:44:02:de:4a:3c:dc:80:5d:8f:b4:9a:6d:75:fe:36:b6:e4: 6f:b6:e7:cb:2a:8b:92:46:41:6a:94:3f:d3:49:48:79:fb:47: 73:1b:55:60:13:8d:99:09:fa:56:8f:b9:b1:68:9c:09:07:d8: 2a:8a:19:e6:90:2e:31:b5:c1:5d:4b:bc:82:30:77:c2:b2:89: a1:32:cb:30:b9:36:58:03:01:f9:e4:58:cc:df:17:4d:76:7b: 35:3d:6e:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/4vnKAOMJ5aI5PwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MTAxNDEzMDAxMloXDTI3MDExMjE0MDAxMlowLzEtMCsGA1UEAxMk NGQ0Y2YyMTAtMTMwNi00NWE4LThlNmItZDZlZjY3NGNjZWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qmH6sChsHDvJyh+99PGnn3j/WzW4Mo3Ular yKZIT6lTiBy6+T3RNT5M7gHM5pVWJjITKIESMTx/jO+39sCeDI3QUyIIfv/ErdFR RZVzR3JLkpyU8oaXIou1odciGe/L/tQ4aR83eryrpxLH6kxhsVxu8GMQyEm682X9 2d3gc3KCH3sLeVgk9QHjniwO3WgfWokIbBB3Q+zQkJJf0U7z69lCMZeseOJ+J3YL NJ15wSwfD4i53bHcgZsdOo1PI26q6woyCOn4isr2cug6T9U3A+1OIeBC6IQAImqe 6haPT5Aa0+3Z3KrmBEHxvPYIcXvFMybZKNg+jzcD748RyRhgHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkAsHrOK6g7f9UGR4v/e4SBfHT0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNTc2N2UzYWItNDg4Yy0z ZDNhLThmOWUtMWQwNTk1YzRkYjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlUmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFbjDUmlyE/Pjm2hcXyF+kbPwb2LACxq1guLmZNG+nl/5rui+jHajud CflFvLsPLwA9m1tFwiYz5x/b8MDE85AZsXWUnovtBaTQzRjAzGtzK5TALzSPpL1F eqnd5CwZ5iUDWkod7nRu26eTHedX2nVSQYgx9GJ5TekwlFtg1InuMPctp2QlBwBm yg1DpBMg0+g/g64umA9AJohwMBBHRDfVPShEAt5KPNyAXY+0mm11/ja25G+258sq i5JGQWqUP9NJSHn7R3MbVWATjZkJ+laPubFonAkH2CqKGeaQLjG1wV1LvIIwd8Ky iaEyyzC5NlgDAfnkWMzfF012ezU9bns= -----END CERTIFICATE-----Generated at Fri Oct 30 16:41:57 2026 by rpki-client