$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a38378ac-3414-304a-ba7c-5dd7bc6dab62.roa File: a38378ac-3414-304a-ba7c-5dd7bc6dab62.roa (raw, json) Hash identifier: qi/EEg9VgYNs8+OVfTI6fjXxElW7+ja+5Y+o+pKodRM= Subject key identifier: 04:32:4B:B3:36:9C:DF:7F:9A:3E:51:27:C2:6C:CA:7F:11:E4:2C:7F Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584F58CD55C6EA465469E0AFB0A8 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a38378ac-3414-304a-ba7c-5dd7bc6dab62.roa Signing time: Wed 30 Sep 2026 13:00:13 +0000 ROA not before: Wed 30 Sep 2026 13:00:13 +0000 ROA not after: Tue 29 Dec 2026 14:00:13 +0000 asID: 14618 IP address blocks: 170.85.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:cd:55:c6:ea:46:54:69:e0:af:b0:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Sep 30 13:00:13 2026 GMT Not After : Dec 29 14:00:13 2026 GMT Subject: CN=d60aefbb-ac84-40be-b4de-5046e355d2be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:29:6d:95:45:e2:e5:03:44:ba:58:a9:c2:3a: 88:91:dc:67:33:02:82:53:67:30:0c:96:6b:18:ec: 2d:6a:79:67:ef:9b:52:ac:9b:77:2d:29:08:50:cc: c8:7d:cd:49:f1:75:32:29:16:bc:49:ab:74:fe:06: 17:ab:d4:26:52:fb:88:8a:28:ff:d9:e7:ef:39:b9: 7b:aa:dc:63:07:0b:44:d8:83:17:1f:0f:b7:c2:76: 90:40:89:4e:33:c9:3d:cf:e0:62:1f:b9:32:4f:bf: e7:ec:0a:4b:15:d5:5f:73:28:05:17:62:bd:d3:fa: 59:c8:bc:4d:f1:24:95:3f:d7:91:a9:7a:ad:d0:10: e8:52:5e:7f:45:a2:2b:40:0e:b7:77:11:dd:ee:15: 74:23:6e:45:2b:1c:db:55:01:42:7e:da:ef:8a:82: d7:64:95:9d:e5:78:84:13:c2:1e:74:26:07:95:1d: 4a:27:ac:a6:74:db:5f:d8:f3:b8:fe:14:35:71:8a: ff:ba:19:3b:fa:90:fc:ee:f6:41:bd:1f:3c:66:99: 6d:58:2f:83:9e:8f:3c:a5:23:f0:3c:80:9a:d4:e0: 95:ca:b8:37:5e:4c:f2:2d:69:35:9e:d8:17:6a:f4: c7:b4:12:9b:d5:db:ad:36:6a:22:35:98:c2:11:ce: 46:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:32:4B:B3:36:9C:DF:7F:9A:3E:51:27:C2:6C:CA:7F:11:E4:2C:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a38378ac-3414-304a-ba7c-5dd7bc6dab62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:78:49:52:eb:9f:08:d8:a6:51:1b:c4:97:16:91:57:e8:10: 81:80:13:14:bc:be:47:26:f2:cd:25:ff:0f:77:31:84:c6:a4: 57:29:ce:e4:99:5e:5f:90:e9:80:b3:b4:65:85:3c:c4:38:cd: 62:47:40:7d:e1:4e:a7:67:92:c4:55:2c:85:a4:b0:c8:77:dc: e8:c6:c4:e1:c9:7e:3d:c9:8a:1d:74:08:f1:6e:c7:a6:fd:27: 8b:03:85:e9:3d:83:71:c3:6b:cc:03:98:0a:41:c3:14:82:7b: 83:33:52:86:e2:6c:8e:f7:b0:8e:51:3a:fb:99:00:45:4c:4a: e5:84:59:44:ca:f6:83:91:0f:4f:df:14:3d:6d:d2:6f:e5:b0: a2:90:11:76:6e:d2:7a:3e:49:1e:54:09:d7:c2:2d:12:86:dd: fc:67:ff:d1:fb:69:71:18:6f:e8:6e:41:a6:0b:86:8c:8d:3b: 7d:0f:67:a9:ce:e0:0a:00:18:6c:be:31:ef:15:13:5d:99:a0: 51:74:a9:07:02:b3:05:ce:68:e6:b8:bb:24:48:69:3a:55:ec: cd:76:2f:b1:c0:d5:c2:54:3b:94:44:06:b9:6d:bc:a5:ed:d7: 3b:12:a7:da:88:75:2f:ca:fc:e2:84:b3:8c:b0:3b:75:d8:4b: 5b:4f:3f:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9YzVXG6kZUaeCvsKgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDkzMDEzMDAxM1oXDTI2MTIyOTE0MDAxM1owLzEtMCsGA1UEAxMk ZDYwYWVmYmItYWM4NC00MGJlLWI0ZGUtNTA0NmUzNTVkMmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyltlUXi5QNEulipwjqIkdxnMwKCU2cwDJZr GOwtanln75tSrJt3LSkIUMzIfc1J8XUyKRa8Sat0/gYXq9QmUvuIiij/2efvObl7 qtxjBwtE2IMXHw+3wnaQQIlOM8k9z+BiH7kyT7/n7ApLFdVfcygFF2K90/pZyLxN 8SSVP9eRqXqt0BDoUl5/RaIrQA63dxHd7hV0I25FKxzbVQFCftrvioLXZJWd5XiE E8IedCYHlR1KJ6ymdNtf2PO4/hQ1cYr/uhk7+pD87vZBvR88ZpltWC+Dno88pSPw PICa1OCVyrg3XkzyLWk1ntgXavTHtBKb1dutNmoiNZjCEc5G4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQyS7M2nN9/mj5RJ8Jsyn8R5Cx/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYTM4Mzc4YWMtMzQxNC0z MDRhLWJhN2MtNWRkN2JjNmRhYjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlV5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALh4SVLrnwjYplEbxJcWkVfoEIGAExS8vkcm8s0l/w93MYTGpFcpzuSZ Xl+Q6YCztGWFPMQ4zWJHQH3hTqdnksRVLIWksMh33OjGxOHJfj3Jih10CPFux6b9 J4sDhek9g3HDa8wDmApBwxSCe4MzUobibI73sI5ROvuZAEVMSuWEWUTK9oORD0/f FD1t0m/lsKKQEXZu0no+SR5UCdfCLRKG3fxn/9H7aXEYb+huQaYLhoyNO30PZ6nO 4AoAGGy+Me8VE12ZoFF0qQcCswXOaOa4uyRIaTpV7M12L7HA1cJUO5REBrltvKXt 1zsSp9qIdS/K/OKEs4ywO3XYS1tPP5o= -----END CERTIFICATE-----Generated at Sat Oct 31 02:44:42 2026 by rpki-client