$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/b53b1711-dad1-3ffa-b45e-b8a228976663.roa File: b53b1711-dad1-3ffa-b45e-b8a228976663.roa (raw, json) Hash identifier: yzS2P+oZhYuz8lLQvLlyETHYAR8i8clY4j6jcZGNCE4= Subject key identifier: 36:08:C1:4C:D6:22:EE:20:6F:A3:1E:B5:63:16:87:90:B5:C2:BA:8D Certificate issuer: /CN=7daa4589-66d8-4675-8538-e075ba80ecd3 Certificate serial: 010D0C9F4328584F7352DB7913D5417D52D79480 Authority key identifier: BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/b53b1711-dad1-3ffa-b45e-b8a228976663.roa Signing time: Sat 10 Oct 2026 01:00:13 +0000 ROA not before: Sat 10 Oct 2026 01:00:13 +0000 ROA not after: Fri 08 Jan 2027 02:00:13 +0000 asID: 7018 IP address blocks: 170.39.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:73:52:db:79:13:d5:41:7d:52:d7:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7daa4589-66d8-4675-8538-e075ba80ecd3 Validity Not Before: Oct 10 01:00:13 2026 GMT Not After : Jan 8 02:00:13 2027 GMT Subject: CN=174481a2-497d-494b-9d8c-4190f2e2ef9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5a:53:af:6d:4b:a4:5c:35:37:af:d1:a8:d5: a4:33:75:c2:6c:de:b9:ee:9f:29:2c:d2:3e:19:1d: 5c:cc:ce:de:32:b8:40:48:19:cd:a2:40:08:21:5f: c7:ab:c9:1f:7e:33:65:dd:5d:65:3e:78:6a:31:31: c0:21:ed:d5:8e:c4:cb:fd:8f:5e:e3:1c:cc:21:c5: 07:ad:24:43:26:27:3e:b7:12:f4:fd:de:7e:eb:04: fb:91:79:d7:15:b9:41:cc:e4:da:d3:11:fc:08:65: 29:93:f2:12:f1:49:dd:ea:bd:ee:59:f9:b4:db:72: c1:b8:c8:80:91:fd:bc:f4:54:07:be:f6:61:75:c7: f5:10:3b:0b:f6:45:2a:b8:e5:0f:a5:86:6a:46:f4: c7:6e:21:47:05:da:70:ce:f2:5b:92:d9:db:10:9c: ee:e6:77:18:4f:9a:cb:0f:ea:ea:d7:38:f7:fc:a0: 63:18:7f:f1:9f:7f:b6:0a:f3:73:a1:f6:75:ae:cf: 5d:e6:2a:cb:86:7e:1a:8e:e1:a0:79:45:b3:bc:3e: 0d:a7:40:3c:46:fc:02:aa:14:63:a7:91:2f:1e:a9: b1:9b:fe:3c:4a:3d:fc:1c:ea:ca:37:c6:55:8d:e3: be:d6:c4:a5:3b:10:68:86:8f:87:7b:ca:c9:2a:43: 43:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:08:C1:4C:D6:22:EE:20:6F:A3:1E:B5:63:16:87:90:B5:C2:BA:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/b53b1711-dad1-3ffa-b45e-b8a228976663.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl X509v3 Authority Key Identifier: keyid:BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer sbgp-ipAddrBlock: critical IPv4: 170.39.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:09:c9:31:60:3b:78:48:d2:37:cb:3d:b8:47:d7:50:77:2d: 3d:db:32:2b:d9:20:6b:70:0c:69:67:de:e6:0d:01:2d:52:b7: 8c:b7:be:af:27:81:a5:96:df:01:65:6b:91:0b:cb:87:0e:9b: ab:ad:8f:18:2a:85:11:3e:cf:a2:a8:94:13:1a:73:d0:9f:ef: 62:ca:21:a6:85:04:dd:d3:ae:36:a0:89:fc:7e:69:ed:c4:f1: e9:1f:01:49:9c:6a:13:ca:bb:9e:e9:0c:9d:6c:ca:90:a9:92: e7:35:e1:6a:99:8b:e2:2b:21:eb:09:8f:96:a4:34:76:75:28: cf:1c:54:e6:a5:ec:a1:cc:1f:c0:c5:d1:e9:9a:aa:8e:ce:82: 72:66:a7:9b:97:db:af:0a:42:52:e7:b7:18:da:78:13:4d:29: db:6d:75:0f:ba:ee:5a:6d:59:64:38:7c:49:21:81:f4:76:7b: a3:d6:13:f6:7f:de:6f:3e:91:26:a1:da:ca:08:14:85:08:59: cb:9a:f6:65:5d:4e:64:35:23:b7:c0:1c:ce:79:8f:29:dd:51: ff:f8:d1:af:cf:57:14:33:15:5b:8e:e7:e8:df:fc:50:f2:71: f6:0c:48:8a:2e:ee:18:18:13:ce:03:d8:4b:36:a6:e8:32:b7: 73:2b:36:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9zUtt5E9VBfVLXlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RhYTQ1ODktNjZkOC00Njc1LTg1MzgtZTA3NWJhODBl Y2QzMB4XDTI2MTAxMDAxMDAxM1oXDTI3MDEwODAyMDAxM1owLzEtMCsGA1UEAxMk MTc0NDgxYTItNDk3ZC00OTRiLTlkOGMtNDE5MGYyZTJlZjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlpTr21LpFw1N6/RqNWkM3XCbN657p8pLNI+ GR1czM7eMrhASBnNokAIIV/Hq8kffjNl3V1lPnhqMTHAIe3VjsTL/Y9e4xzMIcUH rSRDJic+txL0/d5+6wT7kXnXFblBzOTa0xH8CGUpk/IS8Und6r3uWfm023LBuMiA kf289FQHvvZhdcf1EDsL9kUquOUPpYZqRvTHbiFHBdpwzvJbktnbEJzu5ncYT5rL D+rq1zj3/KBjGH/xn3+2CvNzofZ1rs9d5irLhn4ajuGgeUWzvD4Np0A8RvwCqhRj p5EvHqmxm/48Sj38HOrKN8ZVjeO+1sSlOxBoho+He8rJKkNDZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYIwUzWIu4gb6MetWMWh5C1wrqNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZGFh NDU4OS02NmQ4LTQ2NzUtODUzOC1lMDc1YmE4MGVjZDMvYjUzYjE3MTEtZGFkMS0z ZmZhLWI0NWUtYjhhMjI4OTc2NjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2RhYTQ1ODktNjZkOC00Njc1LTg1 MzgtZTA3NWJhODBlY2QzLzdkYWE0NTg5LTY2ZDgtNDY3NS04NTM4LWUwNzViYTgw ZWNkMy5jcmwwHwYDVR0jBBgwFoAUv9T+9wqpQOy4VAn0Nps0P4ZaCgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83ZGFhNDU4OS02NmQ4LTQ2NzUtODUzOC1lMDc1 YmE4MGVjZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqiemMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYJyTFgO3hI0jfLPbhH11B3LT3bMivZIGtwDGln3uYNAS1St4y3vq8n gaWW3wFla5ELy4cOm6utjxgqhRE+z6KolBMac9Cf72LKIaaFBN3Trjagifx+ae3E 8ekfAUmcahPKu57pDJ1sypCpkuc14WqZi+IrIesJj5akNHZ1KM8cVOal7KHMH8DF 0emaqo7OgnJmp5uX268KQlLntxjaeBNNKdttdQ+67lptWWQ4fEkhgfR2e6PWE/Z/ 3m8+kSah2soIFIUIWcua9mVdTmQ1I7fAHM55jyndUf/40a/PVxQzFVuO5+jf/FDy cfYMSIou7hgYE84D2Es2pugyt3MrNpY= -----END CERTIFICATE-----Generated at Sun Oct 18 13:30:13 2026 by rpki-client