$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/889a3a3d-eda5-3dc9-b290-ca3a76472a51.roa File: 889a3a3d-eda5-3dc9-b290-ca3a76472a51.roa (raw, json) Hash identifier: Hgz+HOogmoV9kiCJq8oLpJ0QOpmbiV+CnJq+HLyzNRw= Subject key identifier: BD:85:62:FA:F8:B0:E8:B8:67:AA:09:D1:23:D5:A8:86:79:42:FF:BA Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584F655E16194E9315D4A357A280 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/889a3a3d-eda5-3dc9-b290-ca3a76472a51.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 11427 IP address blocks: 70.120.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5e:16:19:4e:93:15:d4:a3:57:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=7b5dddd7-caff-4042-b279-5e7730519249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ab:9e:2a:63:47:af:d1:1a:e5:9d:30:3f:54: fb:98:c1:20:72:27:b8:f3:4f:31:5b:36:b9:db:a2: 94:39:c7:bf:ae:58:4c:0a:a8:de:d3:31:a4:b3:83: 08:75:a1:ff:c4:52:91:e4:39:e6:92:6e:33:a7:f1: 5c:b4:78:61:f5:8a:59:5a:a0:97:1f:7a:f0:24:f6: b0:52:b7:eb:31:74:9d:7a:f2:63:4a:97:3b:3b:1d: 6d:f9:26:51:90:4a:4e:1a:ac:8c:e1:3a:f6:33:f1: ac:6f:39:fd:a6:1f:e2:d5:9e:09:54:7c:ef:c4:68: ff:df:43:85:94:cb:bd:70:54:91:36:2b:8d:cb:13: 5e:6f:b2:3b:40:e3:71:e3:63:2f:56:6b:3a:00:81: ee:df:db:df:5d:99:67:c6:d5:72:98:d4:aa:c9:15: 52:96:9d:c7:67:88:f8:b8:2a:6b:46:61:cc:f3:e7: bd:91:6f:90:63:15:fd:58:e1:e3:02:14:96:5e:cc: 8a:a7:62:e5:f3:96:7a:44:e4:9b:cb:f3:02:f0:8a: 58:7c:df:84:24:2a:09:a1:af:ad:3b:90:65:f0:e1: 89:a5:34:ca:b8:3b:ac:3a:83:c4:05:40:61:4c:f0: 8a:e4:87:6c:cb:75:c8:b0:01:f8:0c:76:da:42:83: 55:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:85:62:FA:F8:B0:E8:B8:67:AA:09:D1:23:D5:A8:86:79:42:FF:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/889a3a3d-eda5-3dc9-b290-ca3a76472a51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 70.120.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:bb:83:ca:35:fe:f9:19:86:01:82:f5:8b:e9:67:e1:6f:28: cf:38:66:64:2d:ca:7b:1e:d1:5a:6b:b1:dc:06:f8:e1:83:9b: 3b:be:bc:39:df:bf:e0:1b:42:fd:8f:e1:3a:8d:ba:f7:67:1c: 11:1f:2a:c6:79:cf:86:6f:21:c6:d8:c2:0f:7a:71:26:47:45: c9:07:9c:a2:47:1a:71:3e:ae:0d:65:bc:7c:b5:d7:d3:6d:21: cd:95:e5:f3:35:5a:3d:c9:10:ce:3f:7a:73:20:53:e8:08:88: 84:3b:68:75:79:f4:12:75:9e:21:f4:41:d7:61:55:a7:5b:ba: 8f:7d:b0:40:f8:f5:bd:dd:39:e9:ee:1b:ad:13:0a:f0:6d:72: 42:ba:7c:5b:e3:6a:9e:83:d2:8a:4b:ee:cd:be:eb:4a:a5:24: e4:9f:33:53:77:04:06:0d:b4:78:e3:f6:69:51:9e:f2:a2:98: 81:34:25:05:00:6d:63:af:e6:dd:e8:41:71:17:40:02:4e:34: 35:0c:92:76:d6:b4:36:64:51:6c:b5:ee:60:5f:f0:d6:f9:d8: dd:e1:85:c6:b8:68:26:55:9b:3d:d9:81:64:1c:b6:6c:3b:e8: a2:15:28:39:ab:aa:87:4b:12:94:7d:4f:13:0d:5d:70:6d:a9: b7:99:d5:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXhYZTpMV1KNXooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk N2I1ZGRkZDctY2FmZi00MDQyLWIyNzktNWU3NzMwNTE5MjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56ueKmNHr9Ea5Z0wP1T7mMEgcie4808xWza5 26KUOce/rlhMCqje0zGks4MIdaH/xFKR5Dnmkm4zp/FctHhh9YpZWqCXH3rwJPaw UrfrMXSdevJjSpc7Ox1t+SZRkEpOGqyM4Tr2M/Gsbzn9ph/i1Z4JVHzvxGj/30OF lMu9cFSRNiuNyxNeb7I7QONx42MvVms6AIHu39vfXZlnxtVymNSqyRVSlp3HZ4j4 uCprRmHM8+e9kW+QYxX9WOHjAhSWXsyKp2Ll85Z6ROSby/MC8IpYfN+EJCoJoa+t O5Bl8OGJpTTKuDusOoPEBUBhTPCK5Idsy3XIsAH4DHbaQoNVswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2FYvr4sOi4Z6oJ0SPVqIZ5Qv+6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvODg5YTNhM2QtZWRhNS0z ZGM5LWIyOTAtY2EzYTc2NDcyYTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRniAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEO7g8o1/vkZhgGC9YvpZ+FvKM84ZmQtynse0VprsdwG+OGDmzu+vDnf v+AbQv2P4TqNuvdnHBEfKsZ5z4ZvIcbYwg96cSZHRckHnKJHGnE+rg1lvHy119Nt Ic2V5fM1Wj3JEM4/enMgU+gIiIQ7aHV59BJ1niH0QddhVadbuo99sED49b3dOenu G60TCvBtckK6fFvjap6D0opL7s2+60qlJOSfM1N3BAYNtHjj9mlRnvKimIE0JQUA bWOv5t3oQXEXQAJONDUMknbWtDZkUWy17mBf8Nb52N3hhca4aCZVmz3ZgWQctmw7 6KIVKDmrqodLEpR9TxMNXXBtqbeZ1WI= -----END CERTIFICATE-----Generated at Tue Oct 27 13:00:58 2026 by rpki-client