$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cf96671a-6a74-3e65-a838-71e0e3f6e68c.roa File: cf96671a-6a74-3e65-a838-71e0e3f6e68c.roa (raw, json) Hash identifier: r1Vt24JggEVV+fnnUA2gugTaYTHgxKiK09WCU9I28p4= Subject key identifier: 5D:5A:29:A2:9A:D2:1B:C7:C7:F1:10:14:6C:E0:42:F2:8A:B3:9C:EC Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584F7FE2EE76DCF2219533CADB00 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cf96671a-6a74-3e65-a838-71e0e3f6e68c.roa Signing time: Wed 14 Oct 2026 13:00:12 +0000 ROA not before: Wed 14 Oct 2026 13:00:12 +0000 ROA not after: Tue 12 Jan 2027 14:00:12 +0000 asID: 22616 IP address blocks: 170.85.76.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:e2:ee:76:dc:f2:21:95:33:ca:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 14 13:00:12 2026 GMT Not After : Jan 12 14:00:12 2027 GMT Subject: CN=3849ade2-b2c5-4222-a23d-9244f7e3e684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:81:7a:1c:c4:ba:36:13:b5:fe:28:72:28:8f: e9:f7:42:50:a9:8b:69:b3:2e:0c:d5:e1:da:44:15: 75:84:b7:dd:21:c0:fe:d7:c0:96:31:06:c6:1e:fe: 18:c7:6e:c1:35:39:cf:f1:d1:35:11:c0:89:11:f8: 43:ed:49:fc:e0:39:ae:4a:b5:2d:f7:01:58:81:c9: 0d:fb:2c:7c:89:c5:59:d9:d6:59:56:40:74:10:bc: 44:a8:34:a1:bc:4b:2a:52:15:1b:83:06:16:c6:5a: 8c:16:ed:60:3c:36:0c:4c:42:5a:13:33:0a:a6:ec: a9:4a:ff:20:05:85:a7:70:b7:f3:cb:7c:6f:67:85: c4:c3:03:0a:b2:5f:2f:6e:71:d8:cb:dd:1e:49:4d: 92:2a:4a:5f:20:af:7c:ae:20:2b:dd:aa:f3:16:4e: 0b:b4:cf:26:db:e0:35:c7:fa:6b:43:14:58:9a:f5: a0:40:04:f0:1e:ac:44:73:d7:ba:10:06:1a:68:07: 31:15:52:c5:0d:50:90:07:13:80:11:76:1c:75:dc: 56:7d:b6:f0:10:52:38:ec:e2:23:f3:b0:be:e4:95: 9a:66:39:18:55:aa:2b:8c:74:b6:e1:a9:e5:8c:50: 34:a2:04:ff:2f:7a:87:d0:fc:6e:57:17:e4:b6:b0: 2d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:5A:29:A2:9A:D2:1B:C7:C7:F1:10:14:6C:E0:42:F2:8A:B3:9C:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cf96671a-6a74-3e65-a838-71e0e3f6e68c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.76.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:f1:e0:2e:73:bd:37:cc:71:3d:d4:03:e6:7a:be:1f:3c:a0: d8:ec:03:f8:fb:74:73:11:60:de:82:7a:63:0e:3a:0e:7d:09: 0e:7b:38:ff:24:81:32:fa:b7:85:c7:40:d1:12:40:3d:5e:b0: 70:19:32:ae:56:07:d5:c8:93:c7:5b:34:74:7c:da:79:89:d3: 63:03:02:d7:83:e4:77:d8:b7:3d:95:4e:82:46:72:59:29:a3: 74:47:85:5e:8e:53:c6:4c:e7:b2:5d:6a:5c:c0:ac:48:87:ec: a3:d5:57:bb:d2:a5:17:57:06:b0:62:bd:5a:04:dc:3e:3f:e5: 0e:9a:b7:55:b2:63:b2:a3:12:9e:71:57:1e:82:80:da:cf:ad: 8c:86:11:2b:2e:2e:2f:d8:5c:bd:f7:b8:d6:8b:4f:3c:5e:32: 74:99:e3:32:04:01:8a:d8:16:fc:12:84:fc:24:a2:62:4e:2e: e8:27:9d:f6:05:69:12:20:4b:4f:83:36:be:6e:41:3c:5a:eb: b5:36:5d:1f:6c:4f:1d:98:0f:8e:8c:54:02:87:45:c9:cb:19: 2f:9f:79:cf:54:3e:e8:da:b6:cd:25:f6:8f:96:49:cb:50:d9: 56:aa:cd:4f:31:05:26:c2:7c:61:da:05:0f:e4:51:13:c5:41: 29:62:37:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/4u523PIhlTPK2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MTAxNDEzMDAxMloXDTI3MDExMjE0MDAxMlowLzEtMCsGA1UEAxMk Mzg0OWFkZTItYjJjNS00MjIyLWEyM2QtOTI0NGY3ZTNlNjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoF6HMS6NhO1/ihyKI/p90JQqYtpsy4M1eHa RBV1hLfdIcD+18CWMQbGHv4Yx27BNTnP8dE1EcCJEfhD7Un84DmuSrUt9wFYgckN +yx8icVZ2dZZVkB0ELxEqDShvEsqUhUbgwYWxlqMFu1gPDYMTEJaEzMKpuypSv8g BYWncLfzy3xvZ4XEwwMKsl8vbnHYy90eSU2SKkpfIK98riAr3arzFk4LtM8m2+A1 x/prQxRYmvWgQATwHqxEc9e6EAYaaAcxFVLFDVCQBxOAEXYcddxWfbbwEFI47OIj 87C+5JWaZjkYVaorjHS24anljFA0ogT/L3qH0PxuVxfktrAt0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1aKaKa0hvHx/EQFGzgQvKKs5zsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvY2Y5NjY3MWEtNmE3NC0z ZTY1LWE4MzgtNzFlMGUzZjZlNjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlVMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnx4C5zvTfMcT3UA+Z6vh88oNjsA/j7dHMRYN6CemMOOg59CQ57OP8k gTL6t4XHQNESQD1esHAZMq5WB9XIk8dbNHR82nmJ02MDAteD5HfYtz2VToJGclkp o3RHhV6OU8ZM57JdalzArEiH7KPVV7vSpRdXBrBivVoE3D4/5Q6at1WyY7KjEp5x Vx6CgNrPrYyGESsuLi/YXL33uNaLTzxeMnSZ4zIEAYrYFvwShPwkomJOLugnnfYF aRIgS0+DNr5uQTxa67U2XR9sTx2YD46MVAKHRcnLGS+fec9UPujats0l9o+WSctQ 2VaqzU8xBSbCfGHaBQ/kURPFQSliN5A= -----END CERTIFICATE-----Generated at Fri Oct 30 13:50:14 2026 by rpki-client