$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/7cf08e17-a54b-3835-8100-17a3c8704db8.roa File: 7cf08e17-a54b-3835-8100-17a3c8704db8.roa (raw, json) Hash identifier: Vtu1N8FtOfV3TOwmhYA6bS3Ax5n5P3zC/X0UvoeGpug= Subject key identifier: 2E:62:EF:FF:17:21:D1:41:CD:41:E6:50:A5:09:2C:29:BF:81:15:54 Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584F66C2BED8B75A4A1653B90C80 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/7cf08e17-a54b-3835-8100-17a3c8704db8.roa Signing time: Mon 05 Oct 2026 13:00:13 +0000 ROA not before: Mon 05 Oct 2026 13:00:13 +0000 ROA not after: Sun 03 Jan 2027 14:00:13 +0000 asID: 21433 IP address blocks: 170.248.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:c2:be:d8:b7:5a:4a:16:53:b9:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Oct 5 13:00:13 2026 GMT Not After : Jan 3 14:00:13 2027 GMT Subject: CN=0b0ba34c-5386-4eb4-9f9f-9018edc2c9f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:85:d2:9b:f6:bf:dd:4b:78:92:fd:82:93:24: 9c:11:e0:58:38:98:e3:47:81:4e:d9:2b:a1:4e:01: 83:93:e6:4c:c4:7c:a6:9e:6d:bc:cd:e1:6f:ba:2d: 58:ff:c6:c8:08:fc:c2:a2:ca:ff:87:03:1a:69:d3: 54:24:72:47:08:b1:50:f4:92:30:a9:89:b1:56:85: 71:72:e4:bc:49:93:13:5d:c0:f1:42:0a:0f:c7:5f: 8a:f6:c9:e7:8c:0f:4a:46:9a:1b:83:66:ed:20:8c: 25:99:54:1c:11:1b:1c:5a:6c:9c:02:98:df:36:53: 76:a3:60:ef:18:c4:c4:5f:07:0f:11:55:0d:8c:80: 10:4f:4a:81:7e:fe:5c:72:1c:52:af:a3:47:1a:df: 71:dd:5d:3f:e0:be:49:fe:93:7f:58:0a:23:f0:d1: 7f:cd:fb:37:aa:f7:2d:06:2b:1a:58:fd:48:19:de: 1c:71:8f:f9:96:a4:5a:e2:6b:fa:cc:a0:b3:5c:55: 1f:03:8d:27:12:8e:9d:4d:cb:9f:ad:f4:cb:b2:74: 81:f4:fd:28:90:8d:c7:bd:7a:94:22:58:15:c8:1f: 6d:55:2c:be:9f:54:f9:8e:10:d5:26:6d:01:1f:0e: 98:6e:c2:cf:b9:36:48:16:e1:0d:78:43:81:a4:ff: 94:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:62:EF:FF:17:21:D1:41:CD:41:E6:50:A5:09:2C:29:BF:81:15:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/7cf08e17-a54b-3835-8100-17a3c8704db8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 170.248.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:43:46:19:fc:99:15:8f:fa:4c:9b:bc:28:cd:3b:0f:b8:dc: 94:8e:b3:cf:a0:66:a5:18:18:87:fb:56:5d:38:47:6e:25:99: d8:01:28:93:cd:12:77:9d:c5:73:ca:da:c6:48:e9:98:55:46: f4:3a:12:ff:ba:00:51:e3:8a:13:db:cd:6b:b6:25:c4:ee:f4: c7:6f:b1:23:11:95:73:70:ce:75:3e:33:9d:27:2c:71:47:ec: e1:52:91:63:f9:0a:00:cf:35:ea:83:71:79:f8:a8:c8:29:f3: 93:6e:e5:07:d0:ee:fb:63:22:a6:6a:1c:65:0d:8c:a1:03:6f: e4:20:db:e3:90:4a:08:1d:70:79:4d:39:a1:92:ea:5e:24:56: 3f:ee:94:fe:7a:3b:ac:57:1f:3b:5b:ef:3e:1e:46:05:a9:19: a8:8e:34:35:0f:ea:f3:a0:e5:53:2f:43:7f:b0:0d:98:0d:d8: 94:2b:82:5b:52:dc:61:c5:ed:7f:15:1d:76:74:55:4f:2b:eb: 29:2a:93:36:cb:ef:96:c0:11:78:dd:aa:3f:86:9d:83:71:4d: 0f:a9:59:3e:52:66:08:d1:f2:0b:a6:5f:5e:b1:7c:9c:77:b9: c6:b5:c4:a0:03:60:b7:c9:ce:b6:da:a0:1b:7a:c7:2c:5c:3c: 7d:75:75:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9mwr7Yt1pKFlO5DIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI2MTAwNTEzMDAxM1oXDTI3MDEwMzE0MDAxM1owLzEtMCsGA1UEAxMk MGIwYmEzNGMtNTM4Ni00ZWI0LTlmOWYtOTAxOGVkYzJjOWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4XSm/a/3Ut4kv2CkyScEeBYOJjjR4FO2Suh TgGDk+ZMxHymnm28zeFvui1Y/8bICPzCosr/hwMaadNUJHJHCLFQ9JIwqYmxVoVx cuS8SZMTXcDxQgoPx1+K9snnjA9KRpobg2btIIwlmVQcERscWmycApjfNlN2o2Dv GMTEXwcPEVUNjIAQT0qBfv5cchxSr6NHGt9x3V0/4L5J/pN/WAoj8NF/zfs3qvct BisaWP1IGd4ccY/5lqRa4mv6zKCzXFUfA40nEo6dTcufrfTLsnSB9P0okI3HvXqU IlgVyB9tVSy+n1T5jhDVJm0BHw6YbsLPuTZIFuENeEOBpP+UMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5i7/8XIdFBzUHmUKUJLCm/gRVUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvN2NmMDhlMTctYTU0Yi0z ODM1LTgxMDAtMTdhM2M4NzA0ZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqvgUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClDRhn8mRWP+kybvCjNOw+43JSOs8+gZqUYGIf7Vl04R24lmdgBKJPN EnedxXPK2sZI6ZhVRvQ6Ev+6AFHjihPbzWu2JcTu9MdvsSMRlXNwznU+M50nLHFH 7OFSkWP5CgDPNeqDcXn4qMgp85Nu5QfQ7vtjIqZqHGUNjKEDb+Qg2+OQSggdcHlN OaGS6l4kVj/ulP56O6xXHztb7z4eRgWpGaiONDUP6vOg5VMvQ3+wDZgN2JQrgltS 3GHF7X8VHXZ0VU8r6ykqkzbL75bAEXjdqj+GnYNxTQ+pWT5SZgjR8gumX16xfJx3 uca1xKADYLfJzrbaoBt6xyxcPH11dVM= -----END CERTIFICATE-----Generated at Thu Oct 8 08:57:11 2026 by rpki-client