$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/cd124e97-9822-3851-8c41-a26a1b62603f.roa File: cd124e97-9822-3851-8c41-a26a1b62603f.roa (raw, json) Hash identifier: TgYXhySJLf2AvJZbyHYg+i7xoxAFUiu8ikKu7a449ZI= Subject key identifier: 6D:A3:50:0C:37:ED:16:91:AF:6F:C1:09:03:B2:7B:D3:01:56:3C:3C Certificate issuer: /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9 Certificate serial: 010D0C9F4328584F6C5816D16F64EAA2E20CAE00 Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/cd124e97-9822-3851-8c41-a26a1b62603f.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 14555 IP address blocks: 170.10.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:16:d1:6f:64:ea:a2:e2:0c:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=3a2bea4a-f5f0-462e-9ffd-f7425b894eb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:bd:f4:db:65:e7:7c:73:16:f2:79:37:99:11: 6b:9a:d9:29:6f:ec:bf:4a:64:74:87:42:5b:03:53: fb:17:5c:48:1a:dd:c2:ff:90:b7:95:7f:3d:fa:91: 09:96:ae:b0:b8:b8:42:eb:96:d8:31:f8:07:f7:5c: 67:55:b0:73:92:b4:95:b1:d5:ec:93:e7:a6:e4:f0: 97:bb:7b:ad:11:9c:4a:9e:51:10:6a:0c:d5:9c:32: b7:1a:d3:04:c8:98:3d:6b:85:a1:e2:35:b2:bf:f0: ff:65:38:85:6a:dc:68:e9:84:09:3f:4a:0b:b4:e1: d6:ea:b8:ce:de:98:8b:c9:ae:79:b2:cf:8e:37:23: aa:28:85:65:60:ab:30:67:17:c3:84:41:dc:c1:c9: 41:99:41:d3:a1:c8:27:50:79:79:b3:81:59:5b:28: 74:a0:a7:63:f8:e4:2c:34:52:ae:5f:79:02:27:d9: a9:5c:c3:6d:f7:65:78:10:7d:72:71:bc:71:b4:c5: 9f:96:48:95:c7:72:fc:5e:a8:48:1b:09:3a:53:6e: 58:ff:5e:f9:30:f7:3b:57:61:f9:c5:5c:49:6a:ca: eb:44:c8:4d:c3:56:ef:67:cb:e8:f8:53:ba:06:48: 72:c0:46:cf:94:d8:15:19:a2:b2:6b:cc:9c:e2:d9: 61:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A3:50:0C:37:ED:16:91:AF:6F:C1:09:03:B2:7B:D3:01:56:3C:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/cd124e97-9822-3851-8c41-a26a1b62603f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl X509v3 Authority Key Identifier: keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer sbgp-ipAddrBlock: critical IPv4: 170.10.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:27:af:a9:03:a4:85:92:92:55:81:b0:ed:5a:79:ac:a2:42: 24:24:f5:da:1e:35:c6:50:0a:87:04:b4:84:c8:49:e8:e3:58: e1:44:a3:6a:c8:24:2a:1f:f8:ef:a9:ff:4f:37:81:a9:d1:48: 14:65:55:4d:c6:af:b3:7c:21:e5:92:8b:7f:5c:58:51:7a:6f: 3c:13:b3:79:b5:01:fe:f8:36:55:12:ec:5e:1d:fc:11:ee:89: 1f:5d:67:71:76:23:e0:c5:cf:eb:fa:f6:d9:cc:6b:27:47:72: 88:39:8d:e8:e1:4f:c2:7a:a6:c5:9a:e6:28:bf:17:72:fe:06: 21:fe:6a:45:db:96:a2:7b:c1:d0:88:5b:28:f7:f0:b4:d0:b1: c0:66:27:1a:12:95:40:30:16:d6:29:03:7f:3c:25:d6:63:43: 3f:d3:8e:8c:62:56:ff:7f:4a:74:7c:0f:e2:b3:a7:b9:5e:4b: 41:3e:e2:51:00:1a:50:3d:b6:1a:6a:b8:62:3e:27:48:15:13: ea:28:a4:ce:10:7b:44:be:2d:17:ff:64:df:84:59:46:e1:90: 59:81:61:cc:bf:5e:73:ab:8e:07:49:ab:bb:1d:13:e3:a6:83: ee:12:27:fd:39:0d:32:65:4b:c0:f1:59:25:19:a3:e7:62:02: 87:a3:90:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWBbRb2TqouIMrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IxNDM3MTMtNzkyMy00ZTRkLTk0NzYtYjhlNWNlMWNh OWM5MB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk M2EyYmVhNGEtZjVmMC00NjJlLTlmZmQtZjc0MjViODk0ZWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhr3022XnfHMW8nk3mRFrmtkpb+y/SmR0h0Jb A1P7F1xIGt3C/5C3lX89+pEJlq6wuLhC65bYMfgH91xnVbBzkrSVsdXsk+em5PCX u3utEZxKnlEQagzVnDK3GtMEyJg9a4Wh4jWyv/D/ZTiFatxo6YQJP0oLtOHW6rjO 3piLya55ss+ONyOqKIVlYKswZxfDhEHcwclBmUHTocgnUHl5s4FZWyh0oKdj+OQs NFKuX3kCJ9mpXMNt92V4EH1ycbxxtMWflkiVx3L8XqhIGwk6U25Y/175MPc7V2H5 xVxJasrrRMhNw1bvZ8vo+FO6BkhywEbPlNgVGaKya8yc4tlhwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2jUAw37RaRr2/BCQOye9MBVjw8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0 MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1Y2UxY2E5YzkvY2QxMjRlOTctOTgyMi0z ODUxLThjNDEtYTI2YTFiNjI2MDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2IxNDM3MTMtNzkyMy00ZTRkLTk0 NzYtYjhlNWNlMWNhOWM5LzdiMTQzNzEzLTc5MjMtNGU0ZC05NDc2LWI4ZTVjZTFj YTljOS5jcmwwHwYDVR0jBBgwFoAUYdUy6W27yi6kNGeQ5T4cjK+y2TAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1 Y2UxY2E5YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFonr6kDpIWSklWBsO1aeayiQiQk9doeNcZQCocEtITISejjWOFEo2rI JCof+O+p/083ganRSBRlVU3Gr7N8IeWSi39cWFF6bzwTs3m1Af74NlUS7F4d/BHu iR9dZ3F2I+DFz+v69tnMaydHcog5jejhT8J6psWa5ii/F3L+BiH+akXblqJ7wdCI Wyj38LTQscBmJxoSlUAwFtYpA388JdZjQz/TjoxiVv9/SnR8D+Kzp7leS0E+4lEA GlA9thpquGI+J0gVE+oopM4Qe0S+LRf/ZN+EWUbhkFmBYcy/XnOrjgdJq7sdE+Om g+4SJ/05DTJlS8DxWSUZo+diAoejkCs= -----END CERTIFICATE-----Generated at Tue Oct 27 17:24:20 2026 by rpki-client