$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a9ee670f-e9f9-3cba-a4fc-b9c4f2381232.roa File: a9ee670f-e9f9-3cba-a4fc-b9c4f2381232.roa (raw, json) Hash identifier: sF90BrTzm4xdj9ma4VWFYdd54xI2MWxud9QQ6jEIksA= Subject key identifier: 69:81:2A:40:49:29:6A:CF:4E:4F:40:5F:34:C5:E8:54:14:97:B7:33 Certificate issuer: /CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51 Certificate serial: 010D0C9F4328584F49749093395DA5A554F04A80 Authority key identifier: B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a9ee670f-e9f9-3cba-a4fc-b9c4f2381232.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8143 IP address blocks: 170.205.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:90:93:39:5d:a5:a5:54:f0:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bebcfd84-8b03-4205-94f7-6a90f1802782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5b:ff:82:75:7d:3a:71:38:ee:d1:5c:81:3d: 66:98:71:ed:dc:a2:28:f9:d2:ce:2f:cf:2a:57:99: 7c:e7:a1:ea:11:50:f2:7c:38:62:0d:51:df:88:7a: 8f:02:e3:ed:72:0f:06:98:01:76:59:d2:18:64:dc: 78:35:f8:d1:89:53:7b:22:e1:48:65:67:09:3d:b1: e9:1a:55:04:93:43:4a:00:99:ea:32:de:36:03:dd: 5d:78:01:62:99:d8:62:62:da:12:60:d8:9e:b7:44: c5:09:52:b9:75:ae:69:d9:da:79:1e:94:83:14:cb: c9:7c:e2:6e:b2:37:87:d6:0a:83:32:b7:46:f7:70: 63:80:fa:1e:9e:9a:b1:41:80:f4:66:af:88:e6:5d: fb:0a:75:bd:b9:b7:2e:71:d5:75:46:33:9a:de:6c: 74:b2:a7:0e:49:01:b8:99:d9:1a:2b:65:d8:c7:45: d2:69:47:88:62:61:83:4a:61:11:08:ac:16:34:4c: 3f:47:4a:17:f4:3d:89:a7:5c:53:33:a1:4c:b3:e8: 56:92:52:ab:3e:f2:6a:8f:24:0c:26:b0:42:44:ec: 86:e3:4c:5a:c5:7e:bf:18:33:80:1a:22:f2:d7:70: 06:60:b3:69:9f:f5:2c:1a:1a:fd:35:d3:6e:04:b0: 14:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:81:2A:40:49:29:6A:CF:4E:4F:40:5F:34:C5:E8:54:14:97:B7:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a9ee670f-e9f9-3cba-a4fc-b9c4f2381232.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl X509v3 Authority Key Identifier: keyid:B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer sbgp-ipAddrBlock: critical IPv4: 170.205.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:8f:ce:4f:d9:a9:a6:08:a3:20:78:09:9a:8c:d4:f1:44:55: 9a:99:c1:ee:f5:38:66:43:3a:9b:a1:f3:76:b6:8c:bf:04:c9: 96:96:02:02:74:f8:a7:02:89:8a:0e:a8:e2:f5:a4:3d:2c:05: fd:06:da:48:ad:4e:a9:d3:c5:cf:ae:48:b3:ff:64:dd:50:96: a4:8c:ca:70:ca:e0:1f:35:ea:77:c1:5c:54:b1:70:30:d3:1d: 95:22:b4:bb:f0:62:ad:c1:44:f5:64:83:a8:2d:e3:a5:89:35: 64:bf:2f:00:be:44:d2:29:fe:df:0d:c4:b4:82:c8:99:91:98: 8b:26:fa:ac:8c:2d:45:42:8a:79:74:41:57:b1:19:2e:fd:ee: 8b:25:d3:b2:49:b4:51:97:5d:21:4c:43:f2:e5:61:93:8b:9b: f5:9e:eb:fb:e4:ac:c9:b6:6b:94:b6:8b:3d:f3:04:c4:cf:76: ba:07:65:03:51:b7:b3:fa:a3:b4:f9:b7:d9:0e:38:7c:25:05: ed:76:f3:92:c3:c6:a4:12:e0:39:75:14:f5:93:af:07:e1:dc: 3d:b4:b1:06:be:3d:8c:de:e4:e1:55:6a:4d:98:21:1f:b0:8b: db:54:85:b6:a7:90:1d:db:d2:59:b1:0d:cb:ee:29:b8:b8:23: 34:19:76:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdJCTOV2lpVTwSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIyZmRiMjctZTRmZS00ZDgxLTliZjQtZTEzYjFkYWY3 ZjUxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmViY2ZkODQtOGIwMy00MjA1LTk0ZjctNmE5MGYxODAyNzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlv/gnV9OnE47tFcgT1mmHHt3KIo+dLOL88q V5l856HqEVDyfDhiDVHfiHqPAuPtcg8GmAF2WdIYZNx4NfjRiVN7IuFIZWcJPbHp GlUEk0NKAJnqMt42A91deAFimdhiYtoSYNiet0TFCVK5da5p2dp5HpSDFMvJfOJu sjeH1gqDMrdG93BjgPoenpqxQYD0Zq+I5l37CnW9ubcucdV1RjOa3mx0sqcOSQG4 mdkaK2XYx0XSaUeIYmGDSmERCKwWNEw/R0oX9D2Jp1xTM6FMs+hWklKrPvJqjyQM JrBCROyG40xaxX6/GDOAGiLy13AGYLNpn/UsGhr9NdNuBLAUxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmBKkBJKWrPTk9AXzTF6FQUl7czMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMjJm ZGIyNy1lNGZlLTRkODEtOWJmNC1lMTNiMWRhZjdmNTEvYTllZTY3MGYtZTlmOS0z Y2JhLWE0ZmMtYjljNGYyMzgxMjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTIyZmRiMjctZTRmZS00ZDgxLTli ZjQtZTEzYjFkYWY3ZjUxL2EyMmZkYjI3LWU0ZmUtNGQ4MS05YmY0LWUxM2IxZGFm N2Y1MS5jcmwwHwYDVR0jBBgwFoAUt1cVv4naXOAxdOzv9stZsvi4OkAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMjJmZGIyNy1lNGZlLTRkODEtOWJmNC1lMTNi MWRhZjdmNTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqs0qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiPzk/ZqaYIoyB4CZqM1PFEVZqZwe71OGZDOpuh83a2jL8EyZaWAgJ0 +KcCiYoOqOL1pD0sBf0G2kitTqnTxc+uSLP/ZN1QlqSMynDK4B816nfBXFSxcDDT HZUitLvwYq3BRPVkg6gt46WJNWS/LwC+RNIp/t8NxLSCyJmRmIsm+qyMLUVCinl0 QVexGS797osl07JJtFGXXSFMQ/LlYZOLm/We6/vkrMm2a5S2iz3zBMTPdroHZQNR t7P6o7T5t9kOOHwlBe1285LDxqQS4Dl1FPWTrwfh3D20sQa+PYze5OFVak2YIR+w i9tUhbankB3b0lmxDcvuKbi4IzQZdjg= -----END CERTIFICATE-----Generated at Tue Oct 20 08:45:35 2026 by rpki-client