$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e8d52976-1af5-3ee3-a528-24bbbd940160.roa File: e8d52976-1af5-3ee3-a528-24bbbd940160.roa (raw, json) Hash identifier: daABCwAAxKYXxdE4BFnL7GT+7MoIjt85VtzZc6a/4DY= Subject key identifier: F5:CF:FF:07:FF:74:4E:56:B8:AF:1B:6F:12:D0:29:63:15:92:5F:46 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584F549D5C6A57A939D25B23C340 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e8d52976-1af5-3ee3-a528-24bbbd940160.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 8987 IP address blocks: 170.85.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:5c:6a:57:a9:39:d2:5b:23:c3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=f14ec7f6-c17c-48b6-b85d-f9a833febc5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:30:c9:6a:43:e4:1e:90:d6:67:26:01:bc:d5: e4:18:08:72:f5:91:8b:fc:31:79:a0:ba:4b:26:e6: 37:fa:42:35:12:f7:8a:98:1f:39:cf:7c:dd:50:20: 66:e2:6d:61:3e:5d:f1:86:4e:f1:eb:2f:46:97:0e: 7a:12:6a:ca:d8:cd:2e:1f:35:06:f5:40:77:16:0a: 6e:bd:01:2c:85:ba:7d:9a:15:f5:f8:73:9a:01:8a: 71:21:01:fd:69:19:6d:92:d3:78:84:34:29:dd:73: de:08:76:0a:73:49:f1:c6:78:20:18:da:f3:26:18: 73:3a:79:94:4b:06:ea:79:70:41:09:e8:5a:34:db: 95:1b:8b:88:72:eb:d3:81:48:f5:da:92:a3:4d:b7: f1:7a:e9:ce:e4:95:15:a0:11:e0:67:f7:24:76:69: eb:8a:c4:df:b5:b2:03:18:fd:60:85:f3:c6:46:96: c4:7e:9e:17:ce:21:ba:5c:82:ba:7c:33:2b:ef:f6: 86:ae:27:df:8e:21:1d:4c:1b:ed:b2:33:ee:db:f0: 54:f4:7c:da:9d:cb:2d:0d:ec:d4:30:83:a4:60:c6: 9d:29:ae:3c:8b:61:4d:ef:92:80:54:cf:f2:95:bb: 89:17:b2:3a:02:e6:42:7f:65:4c:87:1f:c5:53:d2: 17:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:CF:FF:07:FF:74:4E:56:B8:AF:1B:6F:12:D0:29:63:15:92:5F:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e8d52976-1af5-3ee3-a528-24bbbd940160.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:7e:1b:e3:99:c6:a0:0c:ee:2e:92:cf:3b:da:eb:45:96:8e: bb:cb:05:96:03:72:f8:e2:7f:42:44:a9:b7:f5:9a:62:8b:8a: d5:37:c9:63:25:82:f2:88:de:ea:77:af:b5:94:69:0c:25:c0: e9:7a:68:4e:97:fe:90:ed:96:d1:71:08:11:2e:7b:61:f5:a7: b7:8a:3d:34:95:9a:b8:f2:0b:54:10:61:56:01:40:92:f2:3b: 50:a5:31:16:4b:a5:cb:36:b0:60:68:80:de:d8:36:7a:18:ef: 45:d7:2d:e2:1b:c8:80:56:f7:a6:84:a5:30:1a:7f:36:df:64: 02:52:e7:ab:fb:a2:2e:fa:93:2d:ba:e1:e3:fc:e1:de:5e:ce: 1d:da:6b:3a:2f:e5:ef:67:b4:c6:f4:49:53:ff:7a:d5:7b:76: fd:22:21:2d:65:fa:33:fa:51:8e:c3:01:1e:05:c3:03:64:18: 66:2d:1e:dc:a6:f7:37:5d:2a:90:5c:de:60:4d:dd:a4:8d:92: 0d:17:d2:82:c4:bb:b0:61:ac:0e:6b:24:f9:11:10:46:a5:54: 2c:31:24:bf:1b:78:ec:2b:8f:09:e5:38:33:21:69:d3:a6:c9: 36:93:a2:86:b2:23:42:f7:63:c7:92:4d:3f:c8:ba:e6:21:9b: f8:b4:72:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnVxqV6k50lsjw0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ZjE0ZWM3ZjYtYzE3Yy00OGI2LWI4NWQtZjlhODMzZmViYzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDDJakPkHpDWZyYBvNXkGAhy9ZGL/DF5oLpL JuY3+kI1EveKmB85z3zdUCBm4m1hPl3xhk7x6y9Glw56EmrK2M0uHzUG9UB3Fgpu vQEshbp9mhX1+HOaAYpxIQH9aRltktN4hDQp3XPeCHYKc0nxxnggGNrzJhhzOnmU SwbqeXBBCehaNNuVG4uIcuvTgUj12pKjTbfxeunO5JUVoBHgZ/ckdmnrisTftbID GP1ghfPGRpbEfp4XziG6XIK6fDMr7/aGriffjiEdTBvtsjPu2/BU9HzancstDezU MIOkYMadKa48i2FN75KAVM/ylbuJF7I6AuZCf2VMhx/FU9IXmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXP/wf/dE5WuK8bbxLQKWMVkl9GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZThkNTI5NzYtMWFmNS0z ZWUzLWE1MjgtMjRiYmJkOTQwMTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFl+G+OZxqAM7i6Szzva60WWjrvLBZYDcvjif0JEqbf1mmKLitU3yWMl gvKI3up3r7WUaQwlwOl6aE6X/pDtltFxCBEue2H1p7eKPTSVmrjyC1QQYVYBQJLy O1ClMRZLpcs2sGBogN7YNnoY70XXLeIbyIBW96aEpTAafzbfZAJS56v7oi76ky26 4eP84d5ezh3aazov5e9ntMb0SVP/etV7dv0iIS1l+jP6UY7DAR4FwwNkGGYtHtym 9zddKpBc3mBN3aSNkg0X0oLEu7BhrA5rJPkREEalVCwxJL8beOwrjwnlODMhadOm yTaTooayI0L3Y8eSTT/IuuYhm/i0cmo= -----END CERTIFICATE-----Generated at Sun Nov 1 19:55:33 2026 by rpki-client