$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/42ac1941-2b50-38c6-acee-89f1dd91689c.roa File: 42ac1941-2b50-38c6-acee-89f1dd91689c.roa (raw, json) Hash identifier: kn/0xyuDMD6h5ZAzpK2Sd4xj4WJmqg56OiJEFsOQGx8= Subject key identifier: DB:89:D0:0B:EE:95:28:9C:B4:55:71:DD:73:95:74:47:54:A5:DB:FC Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584F86DDAA954991249D63515780 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/42ac1941-2b50-38c6-acee-89f1dd91689c.roa Signing time: Sat 17 Oct 2026 01:00:13 +0000 ROA not before: Sat 17 Oct 2026 01:00:13 +0000 ROA not after: Fri 15 Jan 2027 02:00:13 +0000 asID: 62651 IP address blocks: 173.255.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:86:dd:aa:95:49:91:24:9d:63:51:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Oct 17 01:00:13 2026 GMT Not After : Jan 15 02:00:13 2027 GMT Subject: CN=35127720-0bb4-4ca2-84fd-f347542e47c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:90:a1:76:56:87:01:85:8f:2b:af:e6:80:c7: c2:0e:20:b7:94:bf:e0:22:08:91:9f:bd:5e:e7:bf: f7:7d:41:85:59:d6:dc:fa:44:8c:e4:67:30:37:74: 41:ff:68:82:e1:5c:0e:cc:15:58:26:22:67:1a:9b: 90:6e:25:d8:ae:4e:53:55:06:34:7a:0c:72:03:f7: 7b:ae:2b:3d:51:21:94:e0:c5:4a:97:a5:2b:31:57: ba:07:79:9e:ea:5b:90:25:72:b6:34:9c:95:90:c3: bb:0c:30:a7:62:69:e3:52:40:ae:06:97:bf:bf:80: 98:b5:f3:31:7e:4e:63:a1:b6:b7:25:46:42:85:d0: 28:8e:8c:08:23:d9:4c:44:fa:36:75:c5:d8:2e:19: d7:0c:cc:40:ff:03:7e:5b:d9:dd:0e:bf:73:d8:86: 24:46:dd:b9:1d:a0:cd:d3:a1:5a:e6:95:b5:5c:7d: 2a:0e:10:3e:6f:44:c7:e4:2d:8d:f9:5a:21:74:be: de:14:28:d2:6d:63:f6:fd:1e:ec:d1:81:da:e0:7f: 3f:e4:ed:98:56:e0:5c:52:2d:b3:d0:da:51:23:49: 6e:50:c5:60:48:79:4e:5a:e8:10:5d:4a:d9:29:99: 78:28:34:89:fe:ab:a4:5b:14:59:8c:2c:89:63:f9: ab:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:89:D0:0B:EE:95:28:9C:B4:55:71:DD:73:95:74:47:54:A5:DB:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/42ac1941-2b50-38c6-acee-89f1dd91689c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 173.255.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:8e:3c:ee:2f:97:ae:a0:e1:b0:1c:2e:9e:5e:bd:0f:af:c5: 2c:a9:da:fa:4c:13:fc:fc:3d:a0:11:9f:da:be:a5:3e:e4:c6: 4f:56:e3:fa:10:d2:ca:3e:a5:7f:53:b3:cd:ec:93:da:46:2c: 77:83:e9:fd:4f:cc:ef:9f:7a:f2:71:15:d3:3d:6c:44:7b:af: 4e:ef:9d:0f:04:96:00:b3:53:40:93:05:04:79:4e:7a:0b:c8: 85:18:35:20:32:04:a2:b9:48:b9:ae:83:bc:ba:cd:33:e1:87: ae:b1:46:c2:a7:58:d9:67:22:c4:b0:7f:26:14:29:eb:29:9e: 41:8a:cf:be:85:ea:e1:60:52:9f:1c:f0:01:c0:57:5a:28:15: 48:63:50:95:6f:8a:e7:f1:30:44:3d:90:39:d5:5f:c3:a1:b5: 5d:a9:17:c0:2b:08:8e:5f:2e:6e:66:6e:9e:93:49:ba:c2:ac: 82:e3:8e:e6:cb:26:84:2c:17:74:de:d8:d5:f0:50:13:9f:dc: 34:59:40:8a:df:b6:c4:99:db:0c:61:11:f3:ac:6d:4c:62:53: 36:74:4d:e2:b9:29:87:0d:48:65:6a:72:70:c2:79:dc:de:40: e3:eb:7d:42:b6:3d:fa:b1:5e:2f:1c:f8:6f:a0:7d:9d:4e:57: e9:9f:ca:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+G3aqVSZEknWNRV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MTAxNzAxMDAxM1oXDTI3MDExNTAyMDAxM1owLzEtMCsGA1UEAxMk MzUxMjc3MjAtMGJiNC00Y2EyLTg0ZmQtZjM0NzU0MmU0N2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5ChdlaHAYWPK6/mgMfCDiC3lL/gIgiRn71e 57/3fUGFWdbc+kSM5GcwN3RB/2iC4VwOzBVYJiJnGpuQbiXYrk5TVQY0egxyA/d7 ris9USGU4MVKl6UrMVe6B3me6luQJXK2NJyVkMO7DDCnYmnjUkCuBpe/v4CYtfMx fk5joba3JUZChdAojowII9lMRPo2dcXYLhnXDMxA/wN+W9ndDr9z2IYkRt25HaDN 06Fa5pW1XH0qDhA+b0TH5C2N+VohdL7eFCjSbWP2/R7s0YHa4H8/5O2YVuBcUi2z 0NpRI0luUMVgSHlOWugQXUrZKZl4KDSJ/qukWxRZjCyJY/mrowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNuJ0AvulSictFVx3XOVdEdUpdv8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvNDJhYzE5NDEtMmI1MC0z OGM2LWFjZWUtODlmMWRkOTE2ODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrf+qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKOPO4vl66g4bAcLp5evQ+vxSyp2vpME/z8PaARn9q+pT7kxk9W4/oQ 0so+pX9Ts83sk9pGLHeD6f1PzO+fevJxFdM9bER7r07vnQ8ElgCzU0CTBQR5TnoL yIUYNSAyBKK5SLmug7y6zTPhh66xRsKnWNlnIsSwfyYUKespnkGKz76F6uFgUp8c 8AHAV1ooFUhjUJVviufxMEQ9kDnVX8OhtV2pF8ArCI5fLm5mbp6TSbrCrILjjubL JoQsF3Te2NXwUBOf3DRZQIrftsSZ2wxhEfOsbUxiUzZ0TeK5KYcNSGVqcnDCedze QOPrfUK2PfqxXi8c+G+gfZ1OV+mfyhw= -----END CERTIFICATE-----Generated at Thu Oct 29 18:32:20 2026 by rpki-client