$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c0f8587e-3f69-3cd9-ac4b-7a57fb063aa8.roa File: c0f8587e-3f69-3cd9-ac4b-7a57fb063aa8.roa (raw, json) Hash identifier: 1GWi63mHmWojm4IFh4n2/FyLzRd0G2cz+q/Vqw3jZ0U= Subject key identifier: B4:A2:3A:EC:18:19:7B:88:C9:CB:E1:07:22:4A:DA:D5:F6:C2:AF:66 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584F7FE2F898CA02E3DC593B2900 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c0f8587e-3f69-3cd9-ac4b-7a57fb063aa8.roa Signing time: Wed 14 Oct 2026 13:00:12 +0000 ROA not before: Wed 14 Oct 2026 13:00:12 +0000 ROA not after: Tue 12 Jan 2027 14:00:12 +0000 asID: 62044 IP address blocks: 170.85.60.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:e2:f8:98:ca:02:e3:dc:59:3b:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 14 13:00:12 2026 GMT Not After : Jan 12 14:00:12 2027 GMT Subject: CN=2cf7cf59-30c1-4b38-96fa-db58e6ad86f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0e:16:64:90:3b:c3:9f:b4:15:2b:f1:a4:38: 33:35:81:7b:04:7f:f0:77:e0:32:e8:be:e1:e2:8e: d2:80:dd:5b:4f:c6:fb:96:5c:64:41:c7:d9:bc:29: 5c:ce:40:dc:02:b9:26:62:a5:f9:89:97:ad:c6:2a: dc:02:52:64:7d:eb:e8:bf:df:1f:21:ab:60:03:2d: 4a:b5:84:97:a5:14:7e:4e:f6:75:72:16:24:32:a5: 23:84:51:f2:f6:d7:5f:1c:be:6f:53:a9:67:f5:b5: e2:5f:e5:21:4f:e2:5c:f6:c4:91:65:c2:d3:26:64: 2d:52:6d:cc:89:4c:18:da:4c:33:09:2a:11:d0:6c: 36:99:52:5f:81:ff:88:cf:df:8e:01:dd:32:5a:91: e3:63:f1:5c:8f:c7:b8:4a:27:6a:a1:9d:41:2c:62: ce:7b:dd:15:35:72:9d:21:95:0b:79:64:7f:ac:15: 1c:66:cb:16:0d:b4:30:85:82:78:ac:50:61:ff:09: 90:40:17:79:8c:bf:c7:98:39:39:db:6b:60:3e:91: 3e:c1:db:96:52:d8:1f:b3:17:54:83:7c:79:e3:76: b2:35:cf:21:90:fd:88:bd:e3:08:89:49:e8:cc:c4: 38:9f:38:4a:e6:f1:c0:0e:b6:65:f0:37:06:d1:98: cb:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A2:3A:EC:18:19:7B:88:C9:CB:E1:07:22:4A:DA:D5:F6:C2:AF:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c0f8587e-3f69-3cd9-ac4b-7a57fb063aa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:24:8c:c9:cb:04:f1:b2:26:93:82:cf:3b:ba:82:5f:ab:66: a5:38:e2:70:8c:47:b9:c8:7b:90:9c:69:b5:72:cf:bc:ae:bd: 70:32:48:4b:40:49:d7:e6:b0:41:d1:94:b0:a1:98:ad:ed:18: 58:99:f6:6d:8b:b0:bc:48:90:c4:6f:12:a3:e2:ce:e3:89:36: 13:04:16:bf:d1:79:ac:32:0f:3e:10:40:6c:0b:b5:52:c4:dc: 7f:f8:51:2d:f0:12:34:f9:94:e1:1d:36:f5:86:b1:1f:33:38: 8b:31:a7:23:02:b5:bb:d0:a0:ba:05:d5:03:e9:b6:6e:68:10: f4:aa:4e:47:1a:ad:65:1f:3a:6b:0c:6b:b4:5e:51:08:92:81: e7:a1:7a:1d:62:8c:0e:d7:67:84:76:5b:01:6e:3b:a8:c7:55: 3b:61:ef:d5:dd:b4:43:b2:36:53:13:13:be:b6:03:00:a1:6a: ce:90:49:ae:b2:2f:08:fe:b4:24:1b:4c:c3:67:4e:5d:10:29: 27:1a:11:3d:b9:66:79:5c:17:47:f3:8e:aa:bb:1c:7d:97:dc: ca:a7:b8:7f:13:db:39:32:b7:7b:86:0e:3e:57:e0:b8:34:ac: 44:78:31:b8:95:2e:94:3d:b1:5d:c5:8c:c5:91:0f:8c:b5:58: ce:34:2f:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/4viYygLj3Fk7KQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MTAxNDEzMDAxMloXDTI3MDExMjE0MDAxMlowLzEtMCsGA1UEAxMk MmNmN2NmNTktMzBjMS00YjM4LTk2ZmEtZGI1OGU2YWQ4NmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg4WZJA7w5+0FSvxpDgzNYF7BH/wd+Ay6L7h 4o7SgN1bT8b7llxkQcfZvClczkDcArkmYqX5iZetxircAlJkfevov98fIatgAy1K tYSXpRR+TvZ1chYkMqUjhFHy9tdfHL5vU6ln9bXiX+UhT+Jc9sSRZcLTJmQtUm3M iUwY2kwzCSoR0Gw2mVJfgf+Iz9+OAd0yWpHjY/Fcj8e4SidqoZ1BLGLOe90VNXKd IZULeWR/rBUcZssWDbQwhYJ4rFBh/wmQQBd5jL/HmDk522tgPpE+wduWUtgfsxdU g3x543ayNc8hkP2IveMIiUnozMQ4nzhK5vHADrZl8DcG0ZjLgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSiOuwYGXuIycvhByJK2tX2wq9mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYzBmODU4N2UtM2Y2OS0z Y2Q5LWFjNGItN2E1N2ZiMDYzYWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlU8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAkjMnLBPGyJpOCzzu6gl+rZqU44nCMR7nIe5CcabVyz7yuvXAySEtA SdfmsEHRlLChmK3tGFiZ9m2LsLxIkMRvEqPizuOJNhMEFr/ReawyDz4QQGwLtVLE 3H/4US3wEjT5lOEdNvWGsR8zOIsxpyMCtbvQoLoF1QPptm5oEPSqTkcarWUfOmsM a7ReUQiSgeeheh1ijA7XZ4R2WwFuO6jHVTth79XdtEOyNlMTE762AwChas6QSa6y Lwj+tCQbTMNnTl0QKScaET25ZnlcF0fzjqq7HH2X3MqnuH8T2zkyt3uGDj5X4Lg0 rER4MbiVLpQ9sV3FjMWRD4y1WM40L2M= -----END CERTIFICATE-----Generated at Sat Oct 31 02:42:03 2026 by rpki-client