$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/cef6eb0b-724e-322b-aeee-15e582a0c54c.roa File: cef6eb0b-724e-322b-aeee-15e582a0c54c.roa (raw, json) Hash identifier: F9IlCVaOlu85+lZwIIct8wqDpTxF6lEeAg28hPIEXcQ= Subject key identifier: 4B:17:79:8A:3D:44:3A:09:13:85:20:99:A1:87:56:10:CA:BD:AA:53 Certificate issuer: /CN=7daa4589-66d8-4675-8538-e075ba80ecd3 Certificate serial: 010D0C9F4328584F7352E09980C325DF796AE100 Authority key identifier: BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/cef6eb0b-724e-322b-aeee-15e582a0c54c.roa Signing time: Sat 10 Oct 2026 01:00:13 +0000 ROA not before: Sat 10 Oct 2026 01:00:13 +0000 ROA not after: Fri 08 Jan 2027 02:00:13 +0000 asID: 20115 IP address blocks: 170.39.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:73:52:e0:99:80:c3:25:df:79:6a:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7daa4589-66d8-4675-8538-e075ba80ecd3 Validity Not Before: Oct 10 01:00:13 2026 GMT Not After : Jan 8 02:00:13 2027 GMT Subject: CN=0a9e11c9-9d99-41a9-849f-13944b972377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:36:09:b5:49:bf:65:55:39:5b:e7:3b:04:b3: f6:d4:4e:ca:48:59:30:31:7e:5a:7e:fa:3b:c9:3a: 30:3b:01:87:d4:ab:14:c7:d2:0d:b5:99:ba:9a:95: 88:66:51:e8:c8:cf:e6:46:25:c5:19:9a:37:f6:b9: dd:9e:68:60:a9:a7:46:90:d7:c2:47:fd:1e:98:55: ed:d2:02:a2:37:e1:d5:51:01:9a:fd:4a:58:34:6f: 35:f2:c2:58:fc:f9:d9:ac:2c:ee:db:66:79:4d:9a: 52:d7:b3:c6:da:f1:38:cb:03:00:9b:7f:82:5b:3c: dc:51:76:30:a0:74:fd:2d:71:35:53:c4:97:67:42: 2c:83:8f:f8:3c:24:2d:33:23:18:d2:80:40:a5:32: 87:30:14:54:ec:fc:9a:ac:72:ff:f2:d1:7a:05:a2: 46:d4:62:0d:01:b2:1e:80:7b:3b:b9:79:cd:fc:ef: ac:45:9f:e5:25:3e:a7:82:b3:26:07:07:74:e2:cb: 46:41:dd:8f:77:5c:96:95:03:ae:08:36:fa:e7:8f: 6e:79:ba:7d:85:50:2d:b3:e0:1d:3a:2d:e2:51:3e: 48:43:c4:2e:13:ad:1f:e5:b8:33:23:97:1d:f4:76: 29:aa:10:c6:96:c2:72:24:8d:43:dc:39:c1:e8:4e: 7f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:17:79:8A:3D:44:3A:09:13:85:20:99:A1:87:56:10:CA:BD:AA:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/cef6eb0b-724e-322b-aeee-15e582a0c54c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl X509v3 Authority Key Identifier: keyid:BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer sbgp-ipAddrBlock: critical IPv4: 170.39.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:ed:f6:5f:76:b5:a6:4d:44:a0:7b:a8:66:a6:46:67:c7:84: 7f:c5:f4:c3:3e:2f:27:c9:cb:b6:ff:76:46:00:b2:ee:9b:1e: f5:9a:81:21:bc:46:cd:f6:53:76:95:bb:11:b2:c8:66:ce:6b: a0:07:cc:2b:9a:25:4f:d0:c3:cc:eb:51:92:c6:2a:b0:1d:cb: 66:65:da:c6:28:b5:0d:cf:8a:ee:ad:eb:98:63:68:4d:b7:c0: bd:df:8e:59:b1:e4:70:15:61:53:34:d0:70:12:3e:f6:4e:6d: 9f:57:93:f2:c1:01:4f:87:95:0d:0a:cb:b4:3f:86:15:57:1d: a8:4c:8c:19:b7:ac:38:95:17:6f:ab:78:b0:65:e5:06:69:71: 60:44:61:38:ee:17:d6:97:fa:86:a9:b9:5a:63:d9:8c:53:8d: 34:11:d5:05:cb:b8:c0:81:ac:8a:0d:20:c7:84:21:33:4b:1e: f7:c2:71:95:75:7d:14:cd:d1:d1:83:26:78:ab:76:4c:7d:ed: a4:5c:d1:4e:77:3c:ec:9b:85:62:a4:53:44:00:1e:12:50:22: 1e:8b:e3:65:c9:3e:05:6e:c8:a9:fa:72:01:79:3b:3f:13:46: 07:84:12:5b:5c:44:0d:d0:94:0d:cf:8d:48:c1:db:e7:9c:17: a0:93:b8:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9zUuCZgMMl33lq4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RhYTQ1ODktNjZkOC00Njc1LTg1MzgtZTA3NWJhODBl Y2QzMB4XDTI2MTAxMDAxMDAxM1oXDTI3MDEwODAyMDAxM1owLzEtMCsGA1UEAxMk MGE5ZTExYzktOWQ5OS00MWE5LTg0OWYtMTM5NDRiOTcyMzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDYJtUm/ZVU5W+c7BLP21E7KSFkwMX5afvo7 yTowOwGH1KsUx9INtZm6mpWIZlHoyM/mRiXFGZo39rndnmhgqadGkNfCR/0emFXt 0gKiN+HVUQGa/UpYNG818sJY/PnZrCzu22Z5TZpS17PG2vE4ywMAm3+CWzzcUXYw oHT9LXE1U8SXZ0Isg4/4PCQtMyMY0oBApTKHMBRU7PyarHL/8tF6BaJG1GINAbIe gHs7uXnN/O+sRZ/lJT6ngrMmBwd04stGQd2Pd1yWlQOuCDb6549uebp9hVAts+Ad Oi3iUT5IQ8QuE60f5bgzI5cd9HYpqhDGlsJyJI1D3DnB6E5/iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEsXeYo9RDoJE4UgmaGHVhDKvapTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZGFh NDU4OS02NmQ4LTQ2NzUtODUzOC1lMDc1YmE4MGVjZDMvY2VmNmViMGItNzI0ZS0z MjJiLWFlZWUtMTVlNTgyYTBjNTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2RhYTQ1ODktNjZkOC00Njc1LTg1 MzgtZTA3NWJhODBlY2QzLzdkYWE0NTg5LTY2ZDgtNDY3NS04NTM4LWUwNzViYTgw ZWNkMy5jcmwwHwYDVR0jBBgwFoAUv9T+9wqpQOy4VAn0Nps0P4ZaCgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83ZGFhNDU4OS02NmQ4LTQ2NzUtODUzOC1lMDc1 YmE4MGVjZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqiemMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPt9l92taZNRKB7qGamRmfHhH/F9MM+LyfJy7b/dkYAsu6bHvWagSG8 Rs32U3aVuxGyyGbOa6AHzCuaJU/Qw8zrUZLGKrAdy2Zl2sYotQ3Piu6t65hjaE23 wL3fjlmx5HAVYVM00HASPvZObZ9Xk/LBAU+HlQ0Ky7Q/hhVXHahMjBm3rDiVF2+r eLBl5QZpcWBEYTjuF9aX+oapuVpj2YxTjTQR1QXLuMCBrIoNIMeEITNLHvfCcZV1 fRTN0dGDJnirdkx97aRc0U53POybhWKkU0QAHhJQIh6L42XJPgVuyKn6cgF5Oz8T RgeEEltcRA3QlA3PjUjB2+ecF6CTuC4= -----END CERTIFICATE-----Generated at Sat Oct 24 17:41:43 2026 by rpki-client