$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f7ce0c53-86ce-313a-9dcd-b699fe8d211b.roa File: f7ce0c53-86ce-313a-9dcd-b699fe8d211b.roa (raw, json) Hash identifier: 0LDqEhViuvFIn0dDkeJvCoxvxLNFc/PpXSnIgBEs050= Subject key identifier: 8A:16:29:4A:AB:58:B5:33:3A:6E:2D:02:A5:F6:56:19:1A:E4:41:68 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584F7FE2FE7AC23D545F1DB2F3C0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f7ce0c53-86ce-313a-9dcd-b699fe8d211b.roa Signing time: Wed 14 Oct 2026 13:00:12 +0000 ROA not before: Wed 14 Oct 2026 13:00:12 +0000 ROA not after: Tue 12 Jan 2027 14:00:12 +0000 asID: 22616 IP address blocks: 170.85.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:e2:fe:7a:c2:3d:54:5f:1d:b2:f3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 14 13:00:12 2026 GMT Not After : Jan 12 14:00:12 2027 GMT Subject: CN=9ca16311-3943-4e43-bac8-1dcef8b89f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e7:f2:a5:49:fb:71:c9:3a:bf:36:5b:ce:d5: 6c:33:fe:6a:e7:1d:21:7d:99:b0:90:a3:cb:14:ef: 7c:df:78:4d:85:51:ff:8c:19:83:49:32:29:0b:86: 4b:60:6c:d5:99:3d:39:de:f4:49:d6:15:9e:01:79: 35:8e:9d:d3:5a:e5:05:66:c8:1a:09:83:76:d1:7d: e3:93:38:1b:6d:66:1f:8f:1b:3e:a1:41:39:de:0e: b2:51:70:89:be:21:90:33:a5:54:e4:4b:b8:ea:00: ef:d2:a2:f3:53:7a:6f:04:34:12:89:01:38:fe:01: 13:f5:d7:bb:46:a1:20:8f:40:67:3e:a6:c1:24:7f: 6a:d7:11:8f:8a:05:91:67:ec:17:6f:1a:0f:10:6a: 0f:4b:db:4d:d6:fe:51:54:7a:ff:69:bb:27:cc:b5: 78:c8:95:07:12:27:96:a4:f8:a3:51:3a:a2:8c:51: 62:51:16:ad:2d:92:03:91:56:d5:9a:2c:7c:15:08: be:13:65:b5:bb:7e:bd:cb:de:a1:df:f7:53:8f:7e: 8f:72:f8:d7:86:0a:77:4c:ef:5f:82:74:51:5b:5b: f8:bf:09:c0:23:e6:ad:19:84:f2:03:7e:39:22:93: f6:a8:b7:80:01:5b:bf:20:ba:1d:2a:9c:64:cb:7c: fe:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:16:29:4A:AB:58:B5:33:3A:6E:2D:02:A5:F6:56:19:1A:E4:41:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f7ce0c53-86ce-313a-9dcd-b699fe8d211b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:7d:bb:72:13:63:09:1a:67:67:39:df:a1:c9:82:f0:72:ac: 47:4c:46:d7:4f:1b:3c:6c:33:7a:5d:9c:2a:ba:39:79:13:40: 01:5b:8e:98:56:ee:1a:64:a9:bf:41:ee:7b:8d:b5:68:25:21: 97:e5:e3:50:ec:29:7c:e3:07:64:6b:91:e0:a6:81:dd:47:44: 1b:3c:f8:2f:2a:2f:48:ee:c8:1e:96:71:b2:35:c2:3d:dc:3f: 49:8d:66:34:c5:a3:31:26:bd:68:35:b1:b4:c8:0b:54:3f:00: 78:ae:40:44:eb:d0:aa:f8:c7:66:32:fe:de:fc:c2:e8:a0:6a: e1:82:76:a5:c8:b7:8b:d5:14:40:7a:8b:07:aa:ae:c9:60:23: e6:dc:54:4c:b7:0f:ec:42:64:4e:37:77:2b:e8:1a:7d:46:6d: 29:ef:9e:ef:76:af:3b:5e:64:bb:1b:b4:52:fb:6a:04:2a:50: 36:b0:1e:60:4c:4e:99:dc:e9:7d:b8:53:42:ce:26:48:7d:19: 78:bd:ca:de:5b:6a:91:7e:c2:84:bb:0d:a9:f6:b5:ca:6e:3a: 60:fb:00:95:d5:d8:77:de:a8:db:a2:c3:38:fd:0b:25:9f:11: 3e:a4:3c:3d:bc:f7:cd:e0:0a:cf:e5:da:08:98:bd:ca:d8:99: ea:31:9b:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/4v56wj1UXx2y88AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MTAxNDEzMDAxMloXDTI3MDExMjE0MDAxMlowLzEtMCsGA1UEAxMk OWNhMTYzMTEtMzk0My00ZTQzLWJhYzgtMWRjZWY4Yjg5ZjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApefypUn7cck6vzZbztVsM/5q5x0hfZmwkKPL FO9833hNhVH/jBmDSTIpC4ZLYGzVmT053vRJ1hWeAXk1jp3TWuUFZsgaCYN20X3j kzgbbWYfjxs+oUE53g6yUXCJviGQM6VU5Eu46gDv0qLzU3pvBDQSiQE4/gET9de7 RqEgj0BnPqbBJH9q1xGPigWRZ+wXbxoPEGoPS9tN1v5RVHr/absnzLV4yJUHEieW pPijUTqijFFiURatLZIDkVbVmix8FQi+E2W1u369y96h3/dTj36PcvjXhgp3TO9f gnRRW1v4vwnAI+atGYTyA345IpP2qLeAAVu/ILodKpxky3z+IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIoWKUqrWLUzOm4tAqX2Vhka5EFoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZjdjZTBjNTMtODZjZS0z MTNhLTlkY2QtYjY5OWZlOGQyMTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlUpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZ9u3ITYwkaZ2c536HJgvByrEdMRtdPGzxsM3pdnCq6OXkTQAFbjphW 7hpkqb9B7nuNtWglIZfl41DsKXzjB2RrkeCmgd1HRBs8+C8qL0juyB6WcbI1wj3c P0mNZjTFozEmvWg1sbTIC1Q/AHiuQETr0Kr4x2Yy/t78wuigauGCdqXIt4vVFEB6 iweqrslgI+bcVEy3D+xCZE43dyvoGn1GbSnvnu92rzteZLsbtFL7agQqUDawHmBM Tpnc6X24U0LOJkh9GXi9yt5bapF+woS7Dan2tcpuOmD7AJXV2HfeqNuiwzj9CyWf ET6kPD28983gCs/l2giYvcrYmeoxmz0= -----END CERTIFICATE-----Generated at Fri Oct 30 16:28:48 2026 by rpki-client