$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/df99cbf9-0e22-3824-bce4-3374a259356a.roa File: df99cbf9-0e22-3824-bce4-3374a259356a.roa (raw, json) Hash identifier: QH5xaooEGEIbH71ulsOHRxmiVwgUWz7yOJwPEZWj+nM= Subject key identifier: 57:E0:61:1D:06:90:E7:BA:DE:20:57:20:C6:A0:2C:6A:79:E9:22:1A Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584F7FE2E9D5D5DA881961CB8300 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/df99cbf9-0e22-3824-bce4-3374a259356a.roa Signing time: Wed 14 Oct 2026 13:00:12 +0000 ROA not before: Wed 14 Oct 2026 13:00:12 +0000 ROA not after: Tue 12 Jan 2027 14:00:12 +0000 asID: 62044 IP address blocks: 170.85.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:e2:e9:d5:d5:da:88:19:61:cb:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 14 13:00:12 2026 GMT Not After : Jan 12 14:00:12 2027 GMT Subject: CN=6c0cd60b-59e3-4e85-8731-a1be973d1d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:2c:f3:40:f4:36:a7:a0:37:a6:e3:64:1c:f8: e0:95:9d:87:e0:8d:fa:5e:cc:7d:e3:b7:ea:43:b0: cb:7d:9b:c5:f5:c3:3e:65:82:c1:29:ee:46:57:a2: 28:81:c8:88:06:e7:86:70:98:47:a9:5d:1b:0d:f3: 03:e7:d9:ad:eb:2e:6e:97:a7:e4:87:40:c6:22:0a: 3f:99:80:4e:dd:e7:97:87:29:e9:56:52:c0:b3:ed: 38:28:e0:41:68:09:36:e5:09:fa:87:9f:01:95:99: 22:21:7a:4a:6e:81:a7:0b:fb:04:67:67:a2:02:97: 8e:35:27:fc:1a:51:ff:57:3c:c0:ba:6e:0a:86:68: 2f:b9:61:a4:30:de:44:32:7f:29:0d:72:ae:70:96: 8e:f2:f3:92:7c:1a:72:28:d3:4e:2b:47:29:6f:9c: 9f:2d:fd:15:e8:e1:f1:cf:03:63:bb:ab:21:8a:51: 96:95:35:c0:ff:77:ce:44:80:31:a6:32:18:5e:a8: 16:f0:b8:76:32:55:1e:05:bd:38:da:11:f4:e6:0b: 21:de:12:38:b9:bd:05:5b:ba:3e:6e:fd:82:78:17: 02:25:16:75:e5:c8:57:a8:1e:18:fc:b2:19:fb:64: 2b:d3:4d:f0:9e:e7:17:3a:c4:5d:db:de:6c:00:c3: d1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E0:61:1D:06:90:E7:BA:DE:20:57:20:C6:A0:2C:6A:79:E9:22:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/df99cbf9-0e22-3824-bce4-3374a259356a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:73:bc:45:db:b7:e0:77:48:29:f1:9e:c7:55:67:cd:cf:9c: 54:8b:08:c4:57:24:95:2d:b6:12:d1:7d:b3:e6:ba:3e:aa:b1: 7a:2e:6e:45:09:63:4a:5b:c9:5b:80:78:65:25:d1:e8:da:49: 46:d2:5a:a0:58:9c:9a:09:4f:02:4f:71:53:09:3c:ac:e3:e6: b4:33:30:7f:95:f9:10:d5:a9:b9:47:cb:25:36:2b:d0:26:29: 9b:4a:6d:b5:2a:8c:3f:6c:79:b6:ba:bb:33:81:fa:46:49:25: 73:02:66:53:12:c5:50:36:65:eb:6d:15:f0:3c:e0:a3:c7:c0: d5:c7:5d:5c:4d:dd:2e:86:99:7d:ca:91:1f:0e:de:c3:40:28: 25:a1:ef:e6:ee:27:83:5d:34:d5:00:0b:f4:71:de:11:a7:44: 47:1e:e1:a7:54:89:c7:34:a7:1d:36:97:71:09:f5:c0:16:c0: e4:ef:d3:ec:6a:31:01:bf:3d:20:38:1a:71:67:e0:25:c4:f9: eb:b7:52:ce:3d:92:af:be:de:17:67:e3:c9:49:6d:d4:d1:32: fe:23:6e:75:8a:15:a6:da:99:b5:93:32:3b:7e:b1:e8:0f:68: 9f:6c:9d:ab:f4:49:9b:7f:cd:8a:9b:0e:d7:17:eb:9f:db:74: a4:83:b7:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/4unV1dqIGWHLgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MTAxNDEzMDAxMloXDTI3MDExMjE0MDAxMlowLzEtMCsGA1UEAxMk NmMwY2Q2MGItNTllMy00ZTg1LTg3MzEtYTFiZTk3M2QxZDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CzzQPQ2p6A3puNkHPjglZ2H4I36Xsx947fq Q7DLfZvF9cM+ZYLBKe5GV6IogciIBueGcJhHqV0bDfMD59mt6y5ul6fkh0DGIgo/ mYBO3eeXhynpVlLAs+04KOBBaAk25Qn6h58BlZkiIXpKboGnC/sEZ2eiApeONSf8 GlH/VzzAum4KhmgvuWGkMN5EMn8pDXKucJaO8vOSfBpyKNNOK0cpb5yfLf0V6OHx zwNju6shilGWlTXA/3fORIAxpjIYXqgW8Lh2MlUeBb042hH05gsh3hI4ub0FW7o+ bv2CeBcCJRZ15chXqB4Y/LIZ+2Qr003wnucXOsRd295sAMPRVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfgYR0GkOe63iBXIMagLGp56SIaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZGY5OWNiZjktMGUyMi0z ODI0LWJjZTQtMzM3NGEyNTkzNTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlUiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZzvEXbt+B3SCnxnsdVZ83PnFSLCMRXJJUtthLRfbPmuj6qsXoubkUJ Y0pbyVuAeGUl0ejaSUbSWqBYnJoJTwJPcVMJPKzj5rQzMH+V+RDVqblHyyU2K9Am KZtKbbUqjD9seba6uzOB+kZJJXMCZlMSxVA2ZettFfA84KPHwNXHXVxN3S6GmX3K kR8O3sNAKCWh7+buJ4NdNNUAC/Rx3hGnREce4adUicc0px02l3EJ9cAWwOTv0+xq MQG/PSA4GnFn4CXE+eu3Us49kq++3hdn48lJbdTRMv4jbnWKFabambWTMjt+segP aJ9snav0SZt/zYqbDtcX65/bdKSDtyU= -----END CERTIFICATE-----Generated at Sat Oct 31 12:42:16 2026 by rpki-client