$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/b681d5f7-8589-3579-b73d-94d9991c87f2.roa File: b681d5f7-8589-3579-b73d-94d9991c87f2.roa (raw, json) Hash identifier: I1i17PyOIB5mX1WIn+Ldo1GuSPonGx8117YIv5rFmPU= Subject key identifier: 65:49:8A:CB:23:13:95:D6:7B:00:37:63:B1:56:70:65:23:D1:83:80 Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584F66C2C6385809BAEFACB2FD00 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/b681d5f7-8589-3579-b73d-94d9991c87f2.roa Signing time: Mon 05 Oct 2026 13:00:13 +0000 ROA not before: Mon 05 Oct 2026 13:00:13 +0000 ROA not after: Sun 03 Jan 2027 14:00:13 +0000 asID: 21433 IP address blocks: 170.252.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:c2:c6:38:58:09:ba:ef:ac:b2:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Oct 5 13:00:13 2026 GMT Not After : Jan 3 14:00:13 2027 GMT Subject: CN=43a918ca-b7a6-4d40-87e7-a9ece53e7214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e6:18:e5:a4:d8:a6:02:df:2d:4f:c6:3c:01: 30:02:5f:f8:b0:5d:d2:44:98:07:6d:a3:e0:13:c3: a5:ac:56:7c:a4:36:1d:97:46:ee:9f:6b:8e:af:2e: b5:76:9f:75:c0:70:9b:41:9a:d8:61:12:f9:79:36: 4f:08:3a:8b:20:75:d6:e1:8d:52:1a:81:6d:ea:ab: ab:ad:e7:ec:61:d9:b0:81:fa:61:2d:76:69:ad:3e: 61:97:79:97:19:61:e2:fc:47:f3:37:ba:23:75:59: 11:67:63:50:69:59:72:55:64:2c:6f:0c:46:11:ed: f4:72:db:4b:4a:66:c7:84:e4:c5:f8:b0:09:5a:bc: f1:d7:34:14:11:19:cc:f6:7c:85:09:0a:bb:cd:7a: 58:3e:89:39:8d:5b:a0:bd:b2:c4:5b:50:e7:97:e2: 2e:a1:e2:33:76:56:27:87:92:5c:94:91:3a:28:6c: 15:86:4c:28:82:52:eb:7c:f2:68:6b:76:67:7b:da: 8e:01:8f:c7:ca:e9:4c:ce:f6:bc:ef:89:a4:79:73: 6a:30:14:3c:c2:f0:4b:4f:9c:28:2e:a0:49:19:36: 08:be:5f:2b:3f:f8:87:4e:2a:f1:c9:47:55:3a:73: ea:ba:6e:c0:f1:01:97:71:28:71:60:37:d4:94:d7: 9b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:49:8A:CB:23:13:95:D6:7B:00:37:63:B1:56:70:65:23:D1:83:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/b681d5f7-8589-3579-b73d-94d9991c87f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 170.252.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:77:90:f7:c9:15:e7:f0:99:75:a2:80:62:5e:f9:f1:ab:b0: dd:d5:c4:fd:47:45:a9:6c:8e:ba:24:ed:a6:bd:33:58:3c:f9: 2f:ef:56:4c:d7:dc:01:59:88:6d:40:94:ca:a5:05:17:26:4b: 62:ca:71:fb:ad:5a:b2:29:e8:34:f2:b0:e6:51:81:f2:b1:d1: 22:a5:f9:75:e1:f5:ea:96:b7:c8:b8:26:38:ef:36:7f:69:86: b5:84:53:d2:1d:f6:67:26:40:10:85:ce:e6:16:a2:25:e8:ed: a0:8d:6c:9b:e5:15:d4:2a:ae:9a:6d:3d:cf:70:90:12:26:3c: dd:35:f4:97:4c:42:0d:69:32:a5:9e:4e:77:34:2f:1f:53:5e: 6a:c6:5e:e6:db:7c:22:8f:cf:d3:de:e0:54:11:a4:eb:1d:8c: e5:0a:9f:cf:5d:d0:02:ab:71:c7:8a:cf:04:53:58:46:2f:c6: 22:ad:09:c4:a9:fc:6b:5b:cb:eb:49:95:bc:dc:d3:5c:88:e2: 11:74:b7:2c:4e:f8:c3:a3:e7:2f:e9:bc:48:3a:99:f1:76:c5: f2:78:74:68:c8:d7:89:7b:d0:53:25:a5:05:ec:1e:b7:28:f8: ca:62:1c:5e:3e:fa:99:11:92:49:96:7d:5b:52:59:71:df:98: 78:70:f2:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9mwsY4WAm676yy/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI2MTAwNTEzMDAxM1oXDTI3MDEwMzE0MDAxM1owLzEtMCsGA1UEAxMk NDNhOTE4Y2EtYjdhNi00ZDQwLTg3ZTctYTllY2U1M2U3MjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+YY5aTYpgLfLU/GPAEwAl/4sF3SRJgHbaPg E8OlrFZ8pDYdl0bun2uOry61dp91wHCbQZrYYRL5eTZPCDqLIHXW4Y1SGoFt6qur refsYdmwgfphLXZprT5hl3mXGWHi/EfzN7ojdVkRZ2NQaVlyVWQsbwxGEe30cttL SmbHhOTF+LAJWrzx1zQUERnM9nyFCQq7zXpYPok5jVugvbLEW1Dnl+IuoeIzdlYn h5JclJE6KGwVhkwoglLrfPJoa3Zne9qOAY/HyulMzva874mkeXNqMBQ8wvBLT5wo LqBJGTYIvl8rP/iHTirxyUdVOnPqum7A8QGXcShxYDfUlNebUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVJissjE5XWewA3Y7FWcGUj0YOAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvYjY4MWQ1ZjctODU4OS0z NTc5LWI3M2QtOTRkOTk5MWM4N2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqvxsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE13kPfJFefwmXWigGJe+fGrsN3VxP1HRalsjrok7aa9M1g8+S/vVkzX 3AFZiG1AlMqlBRcmS2LKcfutWrIp6DTysOZRgfKx0SKl+XXh9eqWt8i4JjjvNn9p hrWEU9Id9mcmQBCFzuYWoiXo7aCNbJvlFdQqrpptPc9wkBImPN019JdMQg1pMqWe Tnc0Lx9TXmrGXubbfCKPz9Pe4FQRpOsdjOUKn89d0AKrcceKzwRTWEYvxiKtCcSp /Gtby+tJlbzc01yI4hF0tyxO+MOj5y/pvEg6mfF2xfJ4dGjI14l70FMlpQXsHrco +MpiHF4++pkRkkmWfVtSWXHfmHhw8gE= -----END CERTIFICATE-----Generated at Wed Oct 7 22:54:43 2026 by rpki-client