$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cb8be6cc-c8a9-313c-aa08-e67a69031e6e.roa File: cb8be6cc-c8a9-313c-aa08-e67a69031e6e.roa (raw, json) Hash identifier: +Zr5iakfyetemBVTna5fWm8ueIHtP4lTyKOhfaC5zng= Subject key identifier: 6D:95:24:AD:47:FE:7D:B6:6F:F6:5C:F0:9E:52:26:C2:0C:2F:C3:84 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584F7FE2E263C8C9A50F2C985640 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cb8be6cc-c8a9-313c-aa08-e67a69031e6e.roa Signing time: Wed 14 Oct 2026 13:00:12 +0000 ROA not before: Wed 14 Oct 2026 13:00:12 +0000 ROA not after: Tue 12 Jan 2027 14:00:12 +0000 asID: 22616 IP address blocks: 170.85.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:e2:e2:63:c8:c9:a5:0f:2c:98:56:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 14 13:00:12 2026 GMT Not After : Jan 12 14:00:12 2027 GMT Subject: CN=7e25d2dc-8c3e-44bb-8434-17f00337c944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b2:83:eb:ca:95:5c:c0:0c:f0:60:c3:b1:61: f0:07:76:80:ca:7f:b4:6a:5c:92:91:c3:b1:3d:40: 97:d2:df:49:02:c3:61:2c:c2:b0:e7:2d:a4:a8:34: f7:49:6a:00:9a:b5:de:29:9f:09:21:51:b4:5d:5f: a6:90:4c:f7:0a:63:08:d2:f7:73:f3:f1:f4:13:10: c4:87:55:3c:c3:48:f2:d8:64:31:e5:46:bd:c1:62: 4d:b4:34:b7:19:77:23:d3:af:42:3f:43:6a:82:07: 6f:76:b3:15:d2:f6:b4:46:2d:20:66:01:71:30:b6: 4e:4a:e7:dc:28:ba:f5:1c:3e:e5:82:45:d9:52:ee: 5b:1d:f7:4b:2b:77:cc:15:78:0c:da:0e:48:b1:4d: 72:64:81:ac:a3:93:7d:67:61:b6:55:84:f6:4d:da: 7b:96:49:bc:7d:10:e1:80:64:90:48:6e:e9:74:23: 00:a3:ee:2e:44:03:97:52:67:d1:ba:c2:8f:1a:ff: c4:3b:4f:ae:bc:16:94:13:0c:33:11:dd:9b:f4:9e: f6:06:1c:6c:75:4b:0a:9f:59:cf:ce:5e:dc:a2:7b: 50:6b:e2:a3:19:77:2d:10:c2:38:37:15:57:c5:47: 29:18:e5:1f:b9:92:b3:25:54:61:09:87:53:f0:01: fe:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:95:24:AD:47:FE:7D:B6:6F:F6:5C:F0:9E:52:26:C2:0C:2F:C3:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cb8be6cc-c8a9-313c-aa08-e67a69031e6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:77:74:a0:e1:d0:3c:25:40:25:5c:60:69:53:54:12:dd:63: 63:68:5c:9d:8d:4f:7e:ac:d6:7d:c3:fe:25:f0:07:34:02:8b: 15:fa:d9:c4:b3:98:ea:eb:ff:66:f0:2c:7c:ab:98:2a:47:88: 3d:f3:67:7c:9b:01:b2:58:44:f3:14:99:9d:fc:06:8b:0e:32: 23:8b:11:f0:4d:75:2e:09:9c:f5:8c:f9:3d:40:ee:e5:d6:08: e3:04:01:29:8b:33:88:13:a7:fe:cc:d2:19:1b:7c:6c:4f:01: 09:4e:15:05:43:c5:a3:0c:1b:6c:ad:20:58:92:1f:7a:7d:c4: 25:6d:13:31:ed:47:fa:96:18:f1:8d:f0:60:ab:91:fb:08:c8: 32:57:43:75:01:76:6a:32:d8:f1:32:e4:1d:1c:45:a3:93:4b: 3f:8f:44:97:20:97:3b:59:41:ab:f3:2a:9b:2a:d1:3a:ed:4d: 6a:7b:d8:1d:f4:4f:2a:5b:13:59:24:1d:1f:8d:b5:88:73:b8: 55:19:e1:d8:7d:97:65:9a:51:a0:bb:e4:04:70:19:b8:05:36: d9:a7:8f:b4:c0:f0:57:66:8c:f8:e5:d0:2b:4b:9f:a1:f5:d9: 09:24:32:ee:1f:79:9b:29:79:76:f0:70:94:c8:62:48:90:71: ee:dd:2f:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/4uJjyMmlDyyYVkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MTAxNDEzMDAxMloXDTI3MDExMjE0MDAxMlowLzEtMCsGA1UEAxMk N2UyNWQyZGMtOGMzZS00NGJiLTg0MzQtMTdmMDAzMzdjOTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7KD68qVXMAM8GDDsWHwB3aAyn+0alySkcOx PUCX0t9JAsNhLMKw5y2kqDT3SWoAmrXeKZ8JIVG0XV+mkEz3CmMI0vdz8/H0ExDE h1U8w0jy2GQx5Ua9wWJNtDS3GXcj069CP0NqggdvdrMV0va0Ri0gZgFxMLZOSufc KLr1HD7lgkXZUu5bHfdLK3fMFXgM2g5IsU1yZIGso5N9Z2G2VYT2Tdp7lkm8fRDh gGSQSG7pdCMAo+4uRAOXUmfRusKPGv/EO0+uvBaUEwwzEd2b9J72BhxsdUsKn1nP zl7contQa+KjGXctEMI4NxVXxUcpGOUfuZKzJVRhCYdT8AH+twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2VJK1H/n22b/Zc8J5SJsIML8OEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvY2I4YmU2Y2MtYzhhOS0z MTNjLWFhMDgtZTY3YTY5MDMxZTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlWqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHl3dKDh0DwlQCVcYGlTVBLdY2NoXJ2NT36s1n3D/iXwBzQCixX62cSz mOrr/2bwLHyrmCpHiD3zZ3ybAbJYRPMUmZ38BosOMiOLEfBNdS4JnPWM+T1A7uXW COMEASmLM4gTp/7M0hkbfGxPAQlOFQVDxaMMG2ytIFiSH3p9xCVtEzHtR/qWGPGN 8GCrkfsIyDJXQ3UBdmoy2PEy5B0cRaOTSz+PRJcglztZQavzKpsq0TrtTWp72B30 TypbE1kkHR+NtYhzuFUZ4dh9l2WaUaC75ARwGbgFNtmnj7TA8FdmjPjl0CtLn6H1 2QkkMu4feZspeXbwcJTIYkiQce7dL40= -----END CERTIFICATE-----Generated at Fri Oct 30 18:09:55 2026 by rpki-client