$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/1fc5c8f5-9dd2-3fc4-9783-205b12436e73.roa File: 1fc5c8f5-9dd2-3fc4-9783-205b12436e73.roa (raw, json) Hash identifier: 2yCrOOXMBqyBNbW25bpqWBQPX1BjMxdOxRQOcdxCRWw= Subject key identifier: 65:08:68:9D:BB:7A:AA:F3:8F:0D:08:47:EE:8E:F8:C7:DB:8F:5A:ED Certificate issuer: /CN=7daa4589-66d8-4675-8538-e075ba80ecd3 Certificate serial: 010D0C9F4328584F7352D76C96BD2642A7780100 Authority key identifier: BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/1fc5c8f5-9dd2-3fc4-9783-205b12436e73.roa Signing time: Sat 10 Oct 2026 01:00:13 +0000 ROA not before: Sat 10 Oct 2026 01:00:13 +0000 ROA not after: Fri 08 Jan 2027 02:00:13 +0000 asID: 7029 IP address blocks: 170.39.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 18 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:73:52:d7:6c:96:bd:26:42:a7:78:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7daa4589-66d8-4675-8538-e075ba80ecd3 Validity Not Before: Oct 10 01:00:13 2026 GMT Not After : Jan 8 02:00:13 2027 GMT Subject: CN=3e3d3efc-ee7b-45a2-b95a-26c0c9e530ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5f:29:bb:d3:30:06:8a:54:f2:94:94:f8:be: 8c:fe:ab:2a:7c:d2:ed:94:e7:7c:e3:d6:44:20:79: 3c:c5:aa:51:3d:37:45:73:ad:e5:1e:5e:15:5b:d1: 3e:d2:ae:4a:e5:da:70:38:3d:3e:38:37:28:94:ec: e8:3c:50:27:86:6f:df:ba:19:fd:7d:be:16:24:f1: 0f:3e:6f:49:38:c5:0f:6a:33:5a:89:78:ca:f8:f9: 2a:9b:ef:27:26:79:1d:c2:a7:c3:42:13:eb:4a:31: 8d:88:8d:15:b4:30:77:70:c7:df:c4:6b:2c:fd:16: e1:68:23:35:8b:15:3f:be:58:16:12:aa:a5:6c:84: db:2a:d7:3e:84:d7:04:29:7a:53:62:0d:a5:c1:af: 7d:e1:33:70:80:55:89:85:d9:03:04:85:c1:10:84: 37:f4:67:7e:14:b5:29:90:d8:c8:e6:22:16:90:cb: 13:bd:91:6c:10:30:5d:59:be:13:a6:17:c7:ae:5e: 59:7a:bb:86:f9:31:11:4d:be:0d:18:71:37:5d:79: be:07:c6:f0:e8:b9:4d:6a:af:7d:fb:4d:f2:ef:23: 26:e5:27:59:3b:b7:38:88:54:ce:06:fa:2f:ac:c3: d0:71:2e:3d:63:6e:5b:e3:b2:ef:56:5f:8f:67:d3: 2d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:08:68:9D:BB:7A:AA:F3:8F:0D:08:47:EE:8E:F8:C7:DB:8F:5A:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/1fc5c8f5-9dd2-3fc4-9783-205b12436e73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl X509v3 Authority Key Identifier: keyid:BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer sbgp-ipAddrBlock: critical IPv4: 170.39.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:18:97:d2:ce:0c:c4:61:f5:8f:dc:a7:47:e1:ce:79:8f:3a: 2f:17:7b:2b:51:af:63:e2:13:ea:4f:ff:f2:fc:73:50:27:4e: dd:98:2b:65:63:79:c4:28:5d:58:96:0f:f6:cb:d9:6b:47:63: 17:63:89:26:76:f3:23:ad:92:b6:66:ea:0f:a6:46:94:72:f6: 1e:7d:2e:58:c3:02:cc:32:bf:40:5d:19:25:c0:f9:df:b8:47: ec:6c:dd:89:c2:75:02:84:88:cd:e6:7e:4f:ad:45:56:40:3d: ed:5f:32:48:1e:89:d7:a3:61:b1:83:5a:14:65:10:16:ba:eb: 48:9d:d1:f4:7e:e4:7c:82:34:22:9e:66:ab:f0:53:89:c5:a5: 25:3c:a1:d1:5b:62:91:09:8c:59:fb:0a:a8:af:5c:5e:c0:b0: 02:f3:07:c7:78:bf:aa:27:13:a1:7d:51:dc:6f:5d:92:69:83: 4e:34:ad:7a:f0:b4:a2:50:23:c1:12:16:6b:55:31:60:75:6a: c5:50:43:57:33:e4:64:1d:44:a3:18:fa:99:4e:11:a3:f5:e3: d0:79:ba:90:db:fe:12:8f:a2:fe:5d:ac:bd:b4:2d:44:55:68: bf:ae:5e:f5:4e:72:ad:7f:56:52:63:7d:c3:f6:07:98:5a:19: 6a:2a:d6:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9zUtdslr0mQqd4AQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RhYTQ1ODktNjZkOC00Njc1LTg1MzgtZTA3NWJhODBl Y2QzMB4XDTI2MTAxMDAxMDAxM1oXDTI3MDEwODAyMDAxM1owLzEtMCsGA1UEAxMk M2UzZDNlZmMtZWU3Yi00NWEyLWI5NWEtMjZjMGM5ZTUzMGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnV8pu9MwBopU8pSU+L6M/qsqfNLtlOd849ZE IHk8xapRPTdFc63lHl4VW9E+0q5K5dpwOD0+ODcolOzoPFAnhm/fuhn9fb4WJPEP Pm9JOMUPajNaiXjK+Pkqm+8nJnkdwqfDQhPrSjGNiI0VtDB3cMffxGss/RbhaCM1 ixU/vlgWEqqlbITbKtc+hNcEKXpTYg2lwa994TNwgFWJhdkDBIXBEIQ39Gd+FLUp kNjI5iIWkMsTvZFsEDBdWb4TphfHrl5ZeruG+TERTb4NGHE3XXm+B8bw6LlNaq99 +03y7yMm5SdZO7c4iFTOBvovrMPQcS49Y25b47LvVl+PZ9MtqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUIaJ27eqrzjw0IR+6O+Mfbj1rtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZGFh NDU4OS02NmQ4LTQ2NzUtODUzOC1lMDc1YmE4MGVjZDMvMWZjNWM4ZjUtOWRkMi0z ZmM0LTk3ODMtMjA1YjEyNDM2ZTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2RhYTQ1ODktNjZkOC00Njc1LTg1 MzgtZTA3NWJhODBlY2QzLzdkYWE0NTg5LTY2ZDgtNDY3NS04NTM4LWUwNzViYTgw ZWNkMy5jcmwwHwYDVR0jBBgwFoAUv9T+9wqpQOy4VAn0Nps0P4ZaCgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83ZGFhNDU4OS02NmQ4LTQ2NzUtODUzOC1lMDc1 YmE4MGVjZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqielMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8Yl9LODMRh9Y/cp0fhznmPOi8XeytRr2PiE+pP//L8c1AnTt2YK2Vj ecQoXViWD/bL2WtHYxdjiSZ28yOtkrZm6g+mRpRy9h59LljDAswyv0BdGSXA+d+4 R+xs3YnCdQKEiM3mfk+tRVZAPe1fMkgeidejYbGDWhRlEBa660id0fR+5HyCNCKe ZqvwU4nFpSU8odFbYpEJjFn7CqivXF7AsALzB8d4v6onE6F9UdxvXZJpg040rXrw tKJQI8ESFmtVMWB1asVQQ1cz5GQdRKMY+plOEaP149B5upDb/hKPov5drL20LURV aL+uXvVOcq1/VlJjfcP2B5haGWoq1oM= -----END CERTIFICATE-----Generated at Sat Oct 17 12:41:54 2026 by rpki-client