$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/b0e10f7e-7ecd-3b1a-aa62-fccf2fcbcad7.roa File: b0e10f7e-7ecd-3b1a-aa62-fccf2fcbcad7.roa (raw, json) Hash identifier: 1gZWn0OrjXrxnMfHkw5RK/D5Pj9rs4rFWPkqGUJ9CjM= Subject key identifier: 5B:2A:52:2A:33:32:4D:46:19:A9:E5:18:F3:BE:B2:D1:17:A9:76:47 Certificate issuer: /CN=97cac0b7-abb7-43b2-8435-2db8edb2a015 Certificate serial: 010D0C9F4328584F979DAFACCD2D7C891749C180 Authority key identifier: 25:4C:BC:B4:4A:F5:B5:1A:06:D4:CD:E3:A3:9F:B5:07:EF:7B:62:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/b0e10f7e-7ecd-3b1a-aa62-fccf2fcbcad7.roa Signing time: Fri 23 Oct 2026 01:00:12 +0000 ROA not before: Fri 23 Oct 2026 01:00:12 +0000 ROA not after: Thu 21 Jan 2027 02:00:12 +0000 asID: 62802 IP address blocks: 170.4.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/97cac0b7-abb7-43b2-8435-2db8edb2a015.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/97cac0b7-abb7-43b2-8435-2db8edb2a015.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:97:9d:af:ac:cd:2d:7c:89:17:49:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97cac0b7-abb7-43b2-8435-2db8edb2a015 Validity Not Before: Oct 23 01:00:12 2026 GMT Not After : Jan 21 02:00:12 2027 GMT Subject: CN=721b2c20-c8a0-491d-a0c2-998585ab4e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e3:5d:e4:09:22:bc:56:8b:22:2b:af:bb:48: fd:89:c6:6d:3f:27:f5:31:5e:0e:26:d7:50:1b:d1: ba:5b:7d:2c:e4:68:6d:73:38:1e:bc:8e:90:e7:28: ac:43:59:4c:22:cd:58:f5:56:d8:62:ad:ef:c2:ae: 28:0c:32:64:cb:11:e8:67:15:22:2b:ec:64:d9:b3: 6b:0f:24:90:d9:a4:c4:b2:de:85:45:96:5a:77:ce: f2:c5:93:5c:c6:4a:df:dd:a2:d0:e0:86:d7:b4:d0: f6:99:5f:d4:51:01:80:5c:8c:30:26:cc:57:cf:66: 79:61:92:56:38:15:aa:9c:a9:16:24:f8:a2:34:4a: 91:b1:66:13:54:c5:73:55:87:2f:c6:a0:31:c4:5d: 97:87:75:56:8d:0f:0e:e0:97:bd:19:70:c3:0a:6d: 71:86:2b:09:55:f7:a5:d7:c3:fa:ec:66:a6:f9:ed: 26:f9:ec:68:26:8b:e3:f8:6a:61:0e:b6:bf:96:52: b2:92:fb:86:78:45:8a:33:c3:d2:69:fa:98:73:e4: 40:30:2c:7d:59:91:aa:12:64:a0:90:11:77:bf:17: 2a:9b:d9:37:db:b9:13:60:af:ac:e3:50:bc:3d:12: 68:28:e0:53:dc:c5:5f:31:8e:01:ef:f0:4a:2b:86: 36:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:2A:52:2A:33:32:4D:46:19:A9:E5:18:F3:BE:B2:D1:17:A9:76:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/b0e10f7e-7ecd-3b1a-aa62-fccf2fcbcad7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/97cac0b7-abb7-43b2-8435-2db8edb2a015.crl X509v3 Authority Key Identifier: keyid:25:4C:BC:B4:4A:F5:B5:1A:06:D4:CD:E3:A3:9F:B5:07:EF:7B:62:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015.cer sbgp-ipAddrBlock: critical IPv4: 170.4.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:80:0f:27:5d:1b:81:d9:aa:32:94:28:60:73:ee:13:c1:fc: 5f:51:54:6e:0e:2e:b1:d6:8d:7c:20:d4:34:c8:3b:0d:fd:3c: c2:e5:03:d1:e9:de:4d:b4:2d:48:51:e4:42:7c:6d:34:0e:6e: de:de:69:66:74:47:22:e8:81:68:f5:14:20:99:86:0e:e6:1b: 8e:15:da:ed:a5:98:4f:2c:ab:9b:d9:31:75:ce:76:da:f1:85: e0:74:e8:93:e2:86:1d:d6:aa:fa:9b:7e:b3:a0:10:b0:b3:b1: 1a:01:15:bf:15:8e:ca:7a:48:70:a6:03:00:f2:4a:20:7d:e0: d0:e3:c9:ef:0c:31:5a:38:1f:4e:90:43:70:6a:0f:2f:7f:02: c8:b7:43:a4:a0:11:08:a2:fb:45:0c:b9:8c:53:9d:64:97:6d: 17:b7:90:bf:32:f5:4f:71:b0:fd:e1:ee:e2:66:61:c8:41:b4: e2:d8:27:a2:de:3d:ed:be:94:c0:f1:ff:07:12:13:4e:9b:0f: 16:9a:6e:0a:e8:33:bc:95:78:3f:32:65:b4:53:bb:03:6c:6a: 4d:9b:b6:f1:9b:3e:2f:83:af:ef:5c:45:e5:00:66:af:79:9b: a5:ce:3c:31:87:6b:11:3e:77:10:f9:d1:cc:a5:b0:d8:44:59: b3:cd:e0:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+Xna+szS18iRdJwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTdjYWMwYjctYWJiNy00M2IyLTg0MzUtMmRiOGVkYjJh MDE1MB4XDTI2MTAyMzAxMDAxMloXDTI3MDEyMTAyMDAxMlowLzEtMCsGA1UEAxMk NzIxYjJjMjAtYzhhMC00OTFkLWEwYzItOTk4NTg1YWI0ZTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuNd5AkivFaLIiuvu0j9icZtPyf1MV4OJtdQ G9G6W30s5GhtczgevI6Q5yisQ1lMIs1Y9VbYYq3vwq4oDDJkyxHoZxUiK+xk2bNr DySQ2aTEst6FRZZad87yxZNcxkrf3aLQ4IbXtND2mV/UUQGAXIwwJsxXz2Z5YZJW OBWqnKkWJPiiNEqRsWYTVMVzVYcvxqAxxF2Xh3VWjQ8O4Je9GXDDCm1xhisJVfel 18P67Gam+e0m+exoJovj+GphDra/llKykvuGeEWKM8PSafqYc+RAMCx9WZGqEmSg kBF3vxcqm9k327kTYK+s41C8PRJoKOBT3MVfMY4B7/BKK4Y2jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsqUiozMk1GGanlGPO+stEXqXZHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85N2Nh YzBiNy1hYmI3LTQzYjItODQzNS0yZGI4ZWRiMmEwMTUvYjBlMTBmN2UtN2VjZC0z YjFhLWFhNjItZmNjZjJmY2JjYWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTdjYWMwYjctYWJiNy00M2IyLTg0 MzUtMmRiOGVkYjJhMDE1Lzk3Y2FjMGI3LWFiYjctNDNiMi04NDM1LTJkYjhlZGIy YTAxNS5jcmwwHwYDVR0jBBgwFoAUJUy8tEr1tRoG1M3jo5+1B+97YukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85N2NhYzBiNy1hYmI3LTQzYjItODQzNS0yZGI4 ZWRiMmEwMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqgSoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSADyddG4HZqjKUKGBz7hPB/F9RVG4OLrHWjXwg1DTIOw39PMLlA9Hp 3k20LUhR5EJ8bTQObt7eaWZ0RyLogWj1FCCZhg7mG44V2u2lmE8sq5vZMXXOdtrx heB06JPihh3WqvqbfrOgELCzsRoBFb8Vjsp6SHCmAwDySiB94NDjye8MMVo4H06Q Q3BqDy9/Asi3Q6SgEQii+0UMuYxTnWSXbRe3kL8y9U9xsP3h7uJmYchBtOLYJ6Le Pe2+lMDx/wcSE06bDxaabgroM7yVeD8yZbRTuwNsak2btvGbPi+Dr+9cReUAZq95 m6XOPDGHaxE+dxD50cylsNhEWbPN4Oo= -----END CERTIFICATE-----Generated at Sun Oct 25 19:52:05 2026 by rpki-client