$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/fd89b5ac-8682-3e38-80c1-9b34f219fadd.roa File: fd89b5ac-8682-3e38-80c1-9b34f219fadd.roa (raw, json) Hash identifier: q6fBBfrqirWHljog6HFJ4s111ykI2lWRcqiIcl2ldp8= Subject key identifier: 08:09:7A:A0:B5:77:77:56:23:F4:EF:4C:76:64:87:6A:BF:81:0B:8C Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584F86DDA813F52983468A756560 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/fd89b5ac-8682-3e38-80c1-9b34f219fadd.roa Signing time: Sat 17 Oct 2026 01:00:13 +0000 ROA not before: Sat 17 Oct 2026 01:00:13 +0000 ROA not after: Fri 15 Jan 2027 02:00:13 +0000 asID: 22616 IP address blocks: 170.85.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:86:dd:a8:13:f5:29:83:46:8a:75:65:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 17 01:00:13 2026 GMT Not After : Jan 15 02:00:13 2027 GMT Subject: CN=83081cd6-c58d-4be6-b897-fc3e8980f079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:63:8a:08:5d:51:ab:10:99:72:db:09:e9:20: 23:bd:d2:8a:31:98:30:d3:53:c5:cf:e7:a7:9b:1d: a4:b3:6a:74:44:4b:4e:99:d0:18:38:62:cf:e7:fe: 74:7b:6b:b2:1b:00:4b:71:a2:ed:2b:32:fa:0d:34: cf:83:2a:27:79:d7:69:35:ae:3b:10:90:f5:fa:5b: f8:dd:6b:8b:ba:64:c4:3c:37:59:c5:fc:a7:7c:bf: cf:2e:5d:ad:a2:95:ba:4b:31:1f:e6:66:7b:58:e8: 41:dc:31:df:64:5a:b6:d2:b0:15:ce:12:c9:8e:0e: 73:7f:8e:44:19:b9:13:75:4c:ba:00:9c:91:e5:bc: ca:ef:4b:f7:8e:d2:4a:39:f4:c8:55:25:2a:ca:e8: 09:75:b6:eb:c2:e9:e7:ff:26:9d:a1:66:88:a8:d4: 42:9a:79:1a:62:76:b9:0c:71:24:85:97:16:25:5a: 2b:89:ce:33:a8:c5:d1:66:e5:e8:cd:f4:fa:f9:a1: cd:de:c9:68:76:7f:8b:d7:08:2a:c6:e4:0d:65:53: 12:07:67:f4:48:71:7d:91:22:94:d4:8a:a2:52:3a: c7:63:19:15:8a:e9:ae:a0:10:af:22:02:13:0a:71: 25:15:a2:80:29:6e:13:fa:92:df:b7:c4:1e:8a:47: 6b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:09:7A:A0:B5:77:77:56:23:F4:EF:4C:76:64:87:6A:BF:81:0B:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/fd89b5ac-8682-3e38-80c1-9b34f219fadd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:d2:03:0b:a6:22:04:15:f7:4f:75:2a:6b:8b:6c:13:e6:a9: d3:74:a6:dc:a1:ab:d6:f5:9c:96:4c:c4:a2:3c:87:01:02:dc: aa:41:a2:35:6d:e3:b9:38:45:aa:86:08:f6:9a:f7:7b:29:77: a7:0c:5b:b4:c8:b8:e6:6d:a4:84:eb:54:c3:5d:88:2b:a3:b2: c7:75:e7:d5:a9:4a:fb:3f:68:aa:da:87:ae:f3:33:89:ca:12: d2:12:32:87:07:e4:16:d9:5a:30:54:ce:69:9a:08:c3:ed:0c: e5:15:6f:28:6d:b0:8c:90:6d:15:d0:a9:e8:c9:3d:1f:bc:7c: f8:17:86:cd:d3:6e:44:22:b2:a3:14:ed:92:ca:bd:a4:5a:ab: b8:5c:dd:77:75:89:f8:a9:8e:05:be:7c:9c:89:94:3e:c4:da: 4d:24:e3:fa:b9:91:3b:85:45:ba:d6:39:29:c1:0a:58:c6:d4: b5:10:d9:86:cc:8c:30:3a:40:fa:69:87:15:d0:13:a5:e3:87: c1:64:18:a7:e6:e9:10:49:40:48:42:ed:67:52:9c:72:1e:52: 70:b8:49:53:33:46:36:ff:10:c1:1f:7a:94:3f:41:cf:9f:3c: bd:7f:00:b9:d9:a4:13:e3:2a:da:46:ce:04:59:3b:8a:9e:46: 8b:db:24:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+G3agT9SmDRop1ZWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MTAxNzAxMDAxM1oXDTI3MDExNTAyMDAxM1owLzEtMCsGA1UEAxMk ODMwODFjZDYtYzU4ZC00YmU2LWI4OTctZmMzZTg5ODBmMDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2OKCF1RqxCZctsJ6SAjvdKKMZgw01PFz+en mx2ks2p0REtOmdAYOGLP5/50e2uyGwBLcaLtKzL6DTTPgyoneddpNa47EJD1+lv4 3WuLumTEPDdZxfynfL/PLl2topW6SzEf5mZ7WOhB3DHfZFq20rAVzhLJjg5zf45E GbkTdUy6AJyR5bzK70v3jtJKOfTIVSUqyugJdbbrwunn/yadoWaIqNRCmnkaYna5 DHEkhZcWJVoric4zqMXRZuXozfT6+aHN3slodn+L1wgqxuQNZVMSB2f0SHF9kSKU 1IqiUjrHYxkViumuoBCvIgITCnElFaKAKW4T+pLft8QeikdrpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgJeqC1d3dWI/TvTHZkh2q/gQuMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZmQ4OWI1YWMtODY4Mi0z ZTM4LTgwYzEtOWIzNGYyMTlmYWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlX8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbSAwumIgQV9091KmuLbBPmqdN0ptyhq9b1nJZMxKI8hwEC3KpBojVt 47k4RaqGCPaa93spd6cMW7TIuOZtpITrVMNdiCujssd159WpSvs/aKrah67zM4nK EtISMocH5BbZWjBUzmmaCMPtDOUVbyhtsIyQbRXQqejJPR+8fPgXhs3TbkQisqMU 7ZLKvaRaq7hc3Xd1ifipjgW+fJyJlD7E2k0k4/q5kTuFRbrWOSnBCljG1LUQ2YbM jDA6QPpphxXQE6Xjh8FkGKfm6RBJQEhC7WdSnHIeUnC4SVMzRjb/EMEfepQ/Qc+f PL1/ALnZpBPjKtpGzgRZO4qeRovbJIc= -----END CERTIFICATE-----Generated at Sun Nov 1 05:52:23 2026 by rpki-client