$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b1dcc3c8-5f31-3ffc-9990-a4cb8ec91d54.roa File: b1dcc3c8-5f31-3ffc-9990-a4cb8ec91d54.roa (raw, json) Hash identifier: CRQlwIosKnugbzEINW9hhufoRqLzV0S+6/NNFrOpWkM= Subject key identifier: F1:B6:74:E0:0B:11:38:07:23:F2:DD:70:F7:F5:66:C6:6A:11:F9:8D Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584F8F3DEB8D15010931982D7080 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b1dcc3c8-5f31-3ffc-9990-a4cb8ec91d54.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 16509 IP address blocks: 170.85.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:eb:8d:15:01:09:31:98:2d:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=1d89cfed-cfac-4fe3-9929-433592dd4be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a8:1a:e3:e9:c8:1e:4f:0d:35:06:79:77:64: 8c:1b:11:d7:6d:45:ba:78:41:dd:e5:bd:c4:a2:3c: 42:c9:82:74:c8:54:de:16:2f:cb:cc:ab:b7:5e:af: 6e:e0:15:84:19:1f:34:15:31:80:eb:5b:8a:16:59: 2d:fb:8d:8d:1b:0a:fe:df:12:38:3a:7d:b3:cc:be: b1:45:6a:62:ab:18:9a:a0:3b:b7:ed:0a:96:bb:71: a7:79:44:15:98:51:40:37:05:12:76:88:9c:46:55: 11:47:1b:bc:f4:8c:4f:ba:19:77:11:b0:7c:a8:d2: 8b:92:bc:fb:40:70:95:a7:71:3c:dc:31:a5:73:34: 7e:ed:4e:db:78:34:7a:d3:27:13:17:7a:77:44:b8: 43:d8:9e:78:b4:4a:20:05:b7:0d:c0:e1:31:a8:63: ea:f4:3c:13:9b:1f:0c:37:68:b6:12:81:13:a0:3f: c0:69:24:ba:b5:55:0c:dd:04:e9:00:1c:f2:1a:74: 1a:8e:38:be:00:18:e4:b1:35:5c:db:ce:0d:f2:bf: 86:02:ff:fa:0e:e7:6d:4a:8f:4f:40:af:d1:1b:63: 91:b7:05:8b:7f:03:9a:a7:c8:41:65:bd:30:8d:bd: 08:7c:6a:10:7b:fd:c1:16:28:9a:c3:a0:bd:73:4d: 8b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B6:74:E0:0B:11:38:07:23:F2:DD:70:F7:F5:66:C6:6A:11:F9:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b1dcc3c8-5f31-3ffc-9990-a4cb8ec91d54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:c3:35:a4:56:77:e0:bd:24:b5:6d:09:ee:37:ce:7b:cd:31: 6a:db:96:44:23:38:a0:e7:8a:2b:85:c2:f2:03:91:7d:1e:c2: 13:b8:7e:44:79:70:4c:05:a1:09:a4:bd:3a:92:a9:b8:34:d0: ae:30:43:b9:36:35:70:90:82:0b:c6:ca:2e:74:32:6e:cd:0b: b4:12:a1:3d:22:7e:8a:26:c8:6a:8a:ea:dc:b9:43:99:86:30: f5:e2:b9:0f:83:31:40:6c:89:63:a3:da:2a:2d:c3:09:bf:ec: 22:94:79:e4:d4:83:ac:71:bc:c7:9f:27:ad:20:75:f2:cf:ba: 6d:52:1d:ca:ae:a7:12:82:8a:11:3c:ee:f7:dd:37:3c:f5:7a: bc:14:8c:aa:7c:fa:f6:ce:56:1d:7a:b5:ff:d1:85:e6:cd:b6: 4f:7d:40:09:08:42:2c:a1:dc:ae:b1:42:1b:5e:41:bb:32:97: ed:ad:37:35:ca:73:c6:6a:67:81:33:4d:7a:24:cb:a6:d4:3d: 72:c6:bf:1d:4b:13:a0:6b:e4:97:01:3e:b4:08:17:41:eb:33: 4d:71:8f:02:19:6e:64:de:f1:6b:d1:a2:44:50:45:00:7c:1a: ea:b7:d0:36:06:98:21:fe:d4:53:4d:b4:05:a7:3e:f2:b8:1e: 6a:54:cb:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPeuNFQEJMZgtcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk MWQ4OWNmZWQtY2ZhYy00ZmUzLTk5MjktNDMzNTkyZGQ0YmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKga4+nIHk8NNQZ5d2SMGxHXbUW6eEHd5b3E ojxCyYJ0yFTeFi/LzKu3Xq9u4BWEGR80FTGA61uKFlkt+42NGwr+3xI4On2zzL6x RWpiqxiaoDu37QqWu3GneUQVmFFANwUSdoicRlURRxu89IxPuhl3EbB8qNKLkrz7 QHCVp3E83DGlczR+7U7beDR60ycTF3p3RLhD2J54tEogBbcNwOExqGPq9DwTmx8M N2i2EoEToD/AaSS6tVUM3QTpABzyGnQajji+ABjksTVc284N8r+GAv/6DudtSo9P QK/RG2ORtwWLfwOap8hBZb0wjb0IfGoQe/3BFiiaw6C9c02LbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPG2dOALETgHI/LdcPf1ZsZqEfmNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYjFkY2MzYzgtNWYzMS0z ZmZjLTk5OTAtYTRjYjhlYzkxZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjDNaRWd+C9JLVtCe43znvNMWrblkQjOKDniiuFwvIDkX0ewhO4fkR5 cEwFoQmkvTqSqbg00K4wQ7k2NXCQggvGyi50Mm7NC7QSoT0ifoomyGqK6ty5Q5mG MPXiuQ+DMUBsiWOj2iotwwm/7CKUeeTUg6xxvMefJ60gdfLPum1SHcqupxKCihE8 7vfdNzz1erwUjKp8+vbOVh16tf/RhebNtk99QAkIQiyh3K6xQhteQbsyl+2tNzXK c8ZqZ4EzTXoky6bUPXLGvx1LE6Br5JcBPrQIF0HrM01xjwIZbmTe8WvRokRQRQB8 Guq30DYGmCH+1FNNtAWnPvK4HmpUy1w= -----END CERTIFICATE-----Generated at Sat Oct 31 11:22:17 2026 by rpki-client