$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/ccc9cc00-66c4-3020-94b2-d8ff4d561b78.roa File: ccc9cc00-66c4-3020-94b2-d8ff4d561b78.roa (raw, json) Hash identifier: 2nXrE9B0PlX9oH+NPwwhd/Oz+mO33Vk1Xv46GN7Jfic= Subject key identifier: 6A:19:FA:85:40:82:34:B2:F7:4A:DA:45:45:93:76:78:20:89:32:57 Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584F66C2C85A3349BEFFECF7D240 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/ccc9cc00-66c4-3020-94b2-d8ff4d561b78.roa Signing time: Mon 05 Oct 2026 13:00:13 +0000 ROA not before: Mon 05 Oct 2026 13:00:13 +0000 ROA not after: Sun 03 Jan 2027 14:00:13 +0000 asID: 21433 IP address blocks: 170.248.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:c2:c8:5a:33:49:be:ff:ec:f7:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Oct 5 13:00:13 2026 GMT Not After : Jan 3 14:00:13 2027 GMT Subject: CN=8113384b-b118-4750-af80-4cf7161b8211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ea:0e:30:eb:fb:8c:64:4a:58:4f:5d:49:c3: d8:b9:4c:09:03:9d:6f:e7:89:16:6f:9e:0b:ad:5f: 3b:86:0d:09:1b:f4:f5:47:f8:3b:b7:88:90:81:49: 38:a8:f5:95:72:21:bc:b5:ac:fe:e4:7d:10:62:aa: 3b:46:9e:32:fc:3d:0a:3b:1e:d1:02:6a:db:76:fc: 4c:c3:b5:f0:79:39:f9:ca:6a:eb:b9:92:47:10:66: ef:87:07:e5:5c:6f:a9:0c:b6:a6:91:ee:2f:36:13: ac:a7:86:ca:ba:3f:0b:99:39:ad:26:1b:06:bc:6e: 11:a8:11:a9:de:c6:e2:9e:07:a3:65:9c:15:a5:a2: 17:68:68:17:8f:fb:95:ae:da:22:68:4a:55:ad:49: 61:14:e6:26:c4:fe:f6:c3:91:3d:71:4c:39:7a:09: b6:66:31:29:d2:aa:92:0b:17:ea:a1:a8:1e:97:26: 39:d8:06:48:61:a0:d0:d4:2e:32:08:8c:40:e2:37: 32:70:84:11:54:c2:ac:32:49:6d:f1:c6:9c:84:30: 82:4e:f8:c5:a9:3d:fb:26:da:af:e2:29:f7:f1:cc: f1:89:d8:5a:8d:f4:43:51:8f:02:a2:ad:78:ce:31: 1c:3e:06:af:b3:dd:55:00:1d:fd:a4:ec:9b:ba:02: 5d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:19:FA:85:40:82:34:B2:F7:4A:DA:45:45:93:76:78:20:89:32:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/ccc9cc00-66c4-3020-94b2-d8ff4d561b78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 170.248.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:3d:03:be:60:71:d0:77:79:c5:28:fb:dc:d1:93:7b:29:9b: 12:98:4f:9f:a7:4e:f5:df:3e:a6:9c:ec:4f:bd:54:db:47:78: f1:e7:be:dc:78:ce:5d:7d:a9:57:9a:ef:92:a5:32:5e:1a:d0: f9:70:88:f3:10:e3:6b:a7:aa:20:d8:b8:ea:c8:e2:72:08:eb: dc:30:8e:d2:fe:f7:55:ad:61:4a:b1:a2:98:7c:84:a7:b4:c3: c4:c6:98:1d:80:72:d7:e1:89:bc:ed:63:d9:d0:a4:4c:60:2b: 02:64:f7:30:e1:63:c4:57:d2:82:3d:ae:73:a1:1c:08:de:a3: cd:de:f6:3e:fc:90:c5:c1:e6:14:1e:5e:b0:5d:f7:03:39:fe: f0:d8:50:fe:45:f2:56:90:84:88:af:92:a4:70:37:d4:62:d6: c3:b5:2f:6d:da:42:3b:e6:67:fd:26:bc:f0:fa:db:82:b3:32: 00:62:84:e0:2c:9e:e2:c8:f3:77:1b:2d:ff:7e:23:43:10:59: da:bc:4b:e8:75:86:94:fc:44:86:43:92:ac:82:04:e4:11:6e: 84:6e:8e:a0:be:64:ba:d3:f9:bb:67:1b:79:8f:2b:65:d7:f1: 62:95:80:c7:b0:9c:34:48:6a:d7:70:18:17:ba:a0:ce:d5:41: 9b:5c:8a:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9mwshaM0m+/+z30kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI2MTAwNTEzMDAxM1oXDTI3MDEwMzE0MDAxM1owLzEtMCsGA1UEAxMk ODExMzM4NGItYjExOC00NzUwLWFmODAtNGNmNzE2MWI4MjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+oOMOv7jGRKWE9dScPYuUwJA51v54kWb54L rV87hg0JG/T1R/g7t4iQgUk4qPWVciG8taz+5H0QYqo7Rp4y/D0KOx7RAmrbdvxM w7XweTn5ymrruZJHEGbvhwflXG+pDLamke4vNhOsp4bKuj8LmTmtJhsGvG4RqBGp 3sbingejZZwVpaIXaGgXj/uVrtoiaEpVrUlhFOYmxP72w5E9cUw5egm2ZjEp0qqS CxfqoagelyY52AZIYaDQ1C4yCIxA4jcycIQRVMKsMklt8cachDCCTvjFqT37Jtqv 4in38czxidhajfRDUY8Coq14zjEcPgavs91VAB39pOybugJd1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGoZ+oVAgjSy90raRUWTdnggiTJXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvY2NjOWNjMDAtNjZjNC0z MDIwLTk0YjItZDhmZjRkNTYxYjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqvjZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIA9A75gcdB3ecUo+9zRk3spmxKYT5+nTvXfPqac7E+9VNtHePHnvtx4 zl19qVea75KlMl4a0PlwiPMQ42unqiDYuOrI4nII69wwjtL+91WtYUqxoph8hKe0 w8TGmB2ActfhibztY9nQpExgKwJk9zDhY8RX0oI9rnOhHAjeo83e9j78kMXB5hQe XrBd9wM5/vDYUP5F8laQhIivkqRwN9Ri1sO1L23aQjvmZ/0mvPD624KzMgBihOAs nuLI83cbLf9+I0MQWdq8S+h1hpT8RIZDkqyCBOQRboRujqC+ZLrT+btnG3mPK2XX 8WKVgMewnDRIatdwGBe6oM7VQZtcijo= -----END CERTIFICATE-----Generated at Thu Oct 8 08:57:17 2026 by rpki-client