$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/89106f7c-2016-37c5-a592-0e9f8ee04f96.roa File: 89106f7c-2016-37c5-a592-0e9f8ee04f96.roa (raw, json) Hash identifier: a+iUCfV+ChfOO7S6lnqclc5YM8rBM4u/Mci8txQnWMc= Subject key identifier: A1:36:52:35:ED:B9:28:D7:73:0F:AD:F4:56:CF:A3:92:17:90:12:DA Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584F66C2C7AD4988F234B9239A40 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/89106f7c-2016-37c5-a592-0e9f8ee04f96.roa Signing time: Mon 05 Oct 2026 13:00:13 +0000 ROA not before: Mon 05 Oct 2026 13:00:13 +0000 ROA not after: Sun 03 Jan 2027 14:00:13 +0000 asID: 21433 IP address blocks: 170.251.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:c2:c7:ad:49:88:f2:34:b9:23:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Oct 5 13:00:13 2026 GMT Not After : Jan 3 14:00:13 2027 GMT Subject: CN=8142e369-b574-4564-ac09-e77fedac5e62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2a:1d:20:b8:3f:3b:0a:7e:20:fb:0a:e3:b8: e2:d8:f3:f4:d4:2c:d6:71:dc:c4:42:d4:59:8b:0d: ad:dc:24:e9:7b:01:6a:c9:6e:43:9b:90:62:b0:08: 60:90:e7:59:50:4c:7c:86:df:27:9b:58:95:7f:30: ad:f2:7e:7d:0c:97:ff:2b:1a:bf:56:cb:0e:f3:0e: f8:2e:3f:33:2a:d7:3f:7a:85:d4:a4:73:a2:d6:be: 66:17:35:73:cb:94:0b:cd:49:dc:fc:3d:76:5c:22: 97:f6:77:bf:ae:f1:f1:9a:f3:57:44:e8:b2:92:48: d5:b6:9d:db:2e:66:65:47:ae:39:46:57:9e:24:f2: da:ff:46:a3:9d:e1:3d:5f:00:12:d3:48:37:f4:a8: bc:e5:74:91:00:9f:9f:24:82:2f:6d:6f:00:5d:cc: fa:c6:99:42:cc:bd:e3:b1:96:07:55:01:a1:c8:b4: a4:86:ec:fe:00:64:67:77:42:fd:5c:42:d7:e0:8e: 4c:82:7a:01:f4:22:27:f9:db:b3:f0:79:4c:02:78: 6e:56:c2:ba:8c:7d:8b:69:a2:c4:99:91:6b:46:1c: 99:2c:8c:f1:4f:bf:33:59:6e:28:0f:b8:68:a2:23: 51:86:dc:ec:b6:b3:31:c4:a0:85:54:2c:96:c1:29: da:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:36:52:35:ED:B9:28:D7:73:0F:AD:F4:56:CF:A3:92:17:90:12:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/89106f7c-2016-37c5-a592-0e9f8ee04f96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 170.251.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:e2:cd:23:01:e5:c4:2e:84:88:4f:89:5d:8a:45:a2:cd:cf: a2:47:84:74:a3:cc:ae:fe:61:88:f8:80:54:b6:8c:ad:11:43: d5:34:06:8c:60:32:18:cb:79:5b:03:c6:43:ff:89:95:17:bf: aa:8d:b7:af:33:bc:5a:9a:b6:06:96:87:51:d8:20:d8:52:ee: 0a:3d:81:12:18:01:d9:78:ca:75:af:dd:66:36:fd:57:81:c0: 36:56:e5:d5:37:85:f9:00:89:9d:6d:33:d9:f4:bb:a5:b6:bb: 26:b7:44:26:ce:75:57:a8:f2:07:c3:a8:40:31:57:2d:cc:0d: 11:8a:53:3b:8d:9d:e1:1b:bb:6b:88:b7:6c:2b:9c:c5:ef:7a: 65:82:13:44:b4:98:5f:87:af:25:12:aa:d6:eb:de:6b:22:62: 3e:5a:8f:3f:00:fc:4b:0d:1d:78:01:f6:5b:0c:68:20:7f:69: f2:ea:5e:d7:51:53:00:d3:7a:47:7d:00:72:d3:0b:92:c8:7b: 59:5c:70:b0:5e:63:d8:c1:4f:25:65:a1:0f:55:b6:e7:4b:00: e8:ce:3d:b8:c8:d4:b5:f2:91:81:f7:44:6d:28:69:02:d5:87: ba:3d:46:32:46:08:43:c8:5e:a3:dc:50:a9:1b:2c:9f:45:42: b0:5b:49:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9mwsetSYjyNLkjmkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI2MTAwNTEzMDAxM1oXDTI3MDEwMzE0MDAxM1owLzEtMCsGA1UEAxMk ODE0MmUzNjktYjU3NC00NTY0LWFjMDktZTc3ZmVkYWM1ZTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyodILg/Owp+IPsK47ji2PP01CzWcdzEQtRZ iw2t3CTpewFqyW5Dm5BisAhgkOdZUEx8ht8nm1iVfzCt8n59DJf/Kxq/VssO8w74 Lj8zKtc/eoXUpHOi1r5mFzVzy5QLzUnc/D12XCKX9ne/rvHxmvNXROiykkjVtp3b LmZlR645RleeJPLa/0ajneE9XwAS00g39Ki85XSRAJ+fJIIvbW8AXcz6xplCzL3j sZYHVQGhyLSkhuz+AGRnd0L9XELX4I5MgnoB9CIn+duz8HlMAnhuVsK6jH2LaaLE mZFrRhyZLIzxT78zWW4oD7hooiNRhtzstrMxxKCFVCyWwSnawwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKE2UjXtuSjXcw+t9FbPo5IXkBLaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvODkxMDZmN2MtMjAxNi0z N2M1LWE1OTItMGU5ZjhlZTA0Zjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqvvhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbizSMB5cQuhIhPiV2KRaLNz6JHhHSjzK7+YYj4gFS2jK0RQ9U0Boxg MhjLeVsDxkP/iZUXv6qNt68zvFqatgaWh1HYINhS7go9gRIYAdl4ynWv3WY2/VeB wDZW5dU3hfkAiZ1tM9n0u6W2uya3RCbOdVeo8gfDqEAxVy3MDRGKUzuNneEbu2uI t2wrnMXvemWCE0S0mF+HryUSqtbr3msiYj5ajz8A/EsNHXgB9lsMaCB/afLqXtdR UwDTekd9AHLTC5LIe1lccLBeY9jBTyVloQ9VtudLAOjOPbjI1LXykYH3RG0oaQLV h7o9RjJGCEPIXqPcUKkbLJ9FQrBbSYM= -----END CERTIFICATE-----Generated at Thu Oct 8 08:57:13 2026 by rpki-client