$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36/1d22327a-573b-3949-b5c8-d7ea3bb1607c.roa File: 1d22327a-573b-3949-b5c8-d7ea3bb1607c.roa (raw, json) Hash identifier: 7GVyHtUJrcwgu1kKEns4iGyfcxl5cIUTD05BZWb/uuY= Subject key identifier: D5:E5:6D:25:0A:CE:4A:9D:63:4B:F7:EF:DF:5F:0F:5C:D5:D0:7C:2D Certificate issuer: /CN=ac4576d4-b383-4f58-8da4-316d12d38f36 Certificate serial: 010D0C9F4328584F979DBB2E8D0E422A6A4337C0 Authority key identifier: 88:85:79:92:5C:D9:E3:38:2D:2A:D0:3D:DF:00:D2:66:92:C9:A7:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36/1d22327a-573b-3949-b5c8-d7ea3bb1607c.roa Signing time: Fri 23 Oct 2026 01:00:12 +0000 ROA not before: Fri 23 Oct 2026 01:00:12 +0000 ROA not after: Thu 21 Jan 2027 02:00:12 +0000 asID: 6079 IP address blocks: 170.124.0.0/19 maxlen: 24 170.124.32.0/19 maxlen: 24 170.124.64.0/19 maxlen: 24 170.124.96.0/19 maxlen: 24 170.124.128.0/19 maxlen: 24 170.124.160.0/19 maxlen: 24 170.124.192.0/19 maxlen: 24 170.124.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36/ac4576d4-b383-4f58-8da4-316d12d38f36.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36/ac4576d4-b383-4f58-8da4-316d12d38f36.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:97:9d:bb:2e:8d:0e:42:2a:6a:43:37:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac4576d4-b383-4f58-8da4-316d12d38f36 Validity Not Before: Oct 23 01:00:12 2026 GMT Not After : Jan 21 02:00:12 2027 GMT Subject: CN=8db6c1da-43c8-4717-ad49-99868fa82336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:76:9d:0c:9e:a6:f2:35:3a:bc:5b:88:6f:9e: 5e:f1:e6:1a:84:07:ac:92:f9:d1:ce:43:b6:8c:25: 62:a9:ce:11:43:c3:4a:9f:f0:08:f6:d3:72:76:23: 9e:40:4d:f3:1e:29:aa:ae:f0:a0:99:be:a7:5b:1b: f7:1b:8e:c3:e5:91:fc:83:de:4d:cd:e1:5a:e9:93: 3d:30:72:d0:36:7d:88:64:73:25:cc:28:c2:6c:3d: df:cc:08:a9:bd:a1:38:95:da:d8:11:05:75:b9:f0: 20:13:b5:b5:5f:7d:3b:82:4a:4c:87:94:36:4d:3d: ea:72:38:89:b1:d9:50:01:54:89:49:51:22:2f:6e: 51:93:9b:0b:5c:13:4d:7f:bd:c2:ec:73:4c:2e:f0: cf:68:c6:c3:a1:0b:d1:c6:22:cb:fa:35:c2:88:82: 9c:1c:de:df:10:c4:4f:56:af:d4:57:6d:a1:5c:21: c9:64:99:19:b6:5c:1c:72:9f:3f:c8:24:04:0f:87: a5:a5:56:86:f0:62:c7:06:ec:00:a6:26:4a:5b:ff: c7:d9:27:2d:00:80:3d:a4:f2:cd:ed:fb:45:08:b1: be:8d:91:26:c0:05:22:6e:1c:b0:9c:53:cc:c8:4e: bb:c7:86:81:13:70:c8:e3:55:ac:20:a5:b6:b1:f8: 5d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E5:6D:25:0A:CE:4A:9D:63:4B:F7:EF:DF:5F:0F:5C:D5:D0:7C:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36/1d22327a-573b-3949-b5c8-d7ea3bb1607c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36/ac4576d4-b383-4f58-8da4-316d12d38f36.crl X509v3 Authority Key Identifier: keyid:88:85:79:92:5C:D9:E3:38:2D:2A:D0:3D:DF:00:D2:66:92:C9:A7:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36.cer sbgp-ipAddrBlock: critical IPv4: 170.124.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:ed:dc:3f:25:09:79:82:a2:de:0a:73:76:52:86:35:95:47: 5e:b8:9f:98:21:e0:6d:d1:05:bf:29:94:f9:dc:a1:3c:7c:6d: e9:5e:1e:07:10:8c:6f:de:16:f4:46:78:4d:2e:da:a1:df:32: 65:cd:c7:ef:e6:15:ae:6c:70:d6:1d:d7:1a:fa:8f:62:ef:67: 3a:0b:26:44:22:af:f7:98:bb:fb:78:30:7c:92:95:a4:17:4e: b2:52:52:38:d0:b9:a0:2b:73:b5:59:41:4c:69:8c:ed:51:38: 04:3c:b9:95:af:0b:36:4d:4f:8a:98:54:90:01:d4:7b:74:16: b1:8c:b4:67:37:21:9c:24:d7:aa:55:fa:aa:f7:73:c6:02:0d: b3:41:d6:23:83:a5:b0:8c:05:be:2b:5f:68:ed:ac:89:d8:9a: e3:e3:62:ff:e2:5c:0d:24:ca:43:b2:30:09:39:ce:62:6e:54: 49:38:87:3d:9a:a7:18:49:76:a6:8a:c2:63:40:c3:ce:c0:14: 2c:57:ff:34:27:09:45:57:47:b7:1c:18:ae:2b:04:bb:b0:c4: 7c:0e:15:b0:29:d7:ff:a4:6d:b0:44:30:9a:aa:c8:f6:46:ab: f4:98:4b:8f:26:a5:86:e1:4d:5b:02:9b:ba:d2:c5:f9:3e:35: 30:aa:69:fc -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE+XnbsujQ5CKmpDN8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM0NTc2ZDQtYjM4My00ZjU4LThkYTQtMzE2ZDEyZDM4 ZjM2MB4XDTI2MTAyMzAxMDAxMloXDTI3MDEyMTAyMDAxMlowLzEtMCsGA1UEAxMk OGRiNmMxZGEtNDNjOC00NzE3LWFkNDktOTk4NjhmYTgyMzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HadDJ6m8jU6vFuIb55e8eYahAeskvnRzkO2 jCViqc4RQ8NKn/AI9tNydiOeQE3zHimqrvCgmb6nWxv3G47D5ZH8g95NzeFa6ZM9 MHLQNn2IZHMlzCjCbD3fzAipvaE4ldrYEQV1ufAgE7W1X307gkpMh5Q2TT3qcjiJ sdlQAVSJSVEiL25Rk5sLXBNNf73C7HNMLvDPaMbDoQvRxiLL+jXCiIKcHN7fEMRP Vq/UV22hXCHJZJkZtlwccp8/yCQED4elpVaG8GLHBuwApiZKW//H2SctAIA9pPLN 7ftFCLG+jZEmwAUibhywnFPMyE67x4aBE3DI41WsIKW2sfhd7wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNXlbSUKzkqdY0v3799fD1zV0HwtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzQ1 NzZkNC1iMzgzLTRmNTgtOGRhNC0zMTZkMTJkMzhmMzYvMWQyMjMyN2EtNTczYi0z OTQ5LWI1YzgtZDdlYTNiYjE2MDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM0NTc2ZDQtYjM4My00ZjU4LThk YTQtMzE2ZDEyZDM4ZjM2L2FjNDU3NmQ0LWIzODMtNGY1OC04ZGE0LTMxNmQxMmQz OGYzNi5jcmwwHwYDVR0jBBgwFoAUiIV5klzZ4zgtKtA93wDSZpLJp+8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzQ1NzZkNC1iMzgzLTRmNTgtOGRhNC0zMTZk MTJkMzhmMzYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqnwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAsu3cPyUJeYKi3gpzdlKGNZVHXrifmCHgbdEFvymU+dyhPHxt6V4eBxCM b94W9EZ4TS7aod8yZc3H7+YVrmxw1h3XGvqPYu9nOgsmRCKv95i7+3gwfJKVpBdO slJSONC5oCtztVlBTGmM7VE4BDy5la8LNk1PiphUkAHUe3QWsYy0ZzchnCTXqlX6 qvdzxgINs0HWI4OlsIwFvitfaO2sidia4+Ni/+JcDSTKQ7IwCTnOYm5USTiHPZqn GEl2porCY0DDzsAULFf/NCcJRVdHtxwYrisEu7DEfA4VsCnX/6RtsEQwmqrI9kar 9JhLjyalhuFNWwKbutLF+T41MKpp/A== -----END CERTIFICATE-----Generated at Tue Oct 27 17:26:27 2026 by rpki-client