$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06a70abd-bd67-4449-954d-d126a76d2622/ff6c8ec0-5d2a-3f54-949d-4306abccdc1d.roa File: ff6c8ec0-5d2a-3f54-949d-4306abccdc1d.roa (raw, json) Hash identifier: R6Tohp9sxQeWjsl2v3F4v/XJfBT2YmBn7lPh9TqV7+8= Subject key identifier: A2:D1:AF:68:43:5C:B4:89:4A:14:56:BB:AE:2B:31:31:70:02:BD:26 Certificate issuer: /CN=06a70abd-bd67-4449-954d-d126a76d2622 Certificate serial: 010D0C9F4328584F96D9EF9AD9F2A2B9D68D0300 Authority key identifier: 49:F9:6A:C5:C4:92:25:27:9F:A3:7B:AA:99:FE:FD:85:12:8A:11:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06a70abd-bd67-4449-954d-d126a76d2622.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06a70abd-bd67-4449-954d-d126a76d2622/ff6c8ec0-5d2a-3f54-949d-4306abccdc1d.roa Signing time: Thu 22 Oct 2026 18:25:49 +0000 ROA not before: Thu 22 Oct 2026 18:25:49 +0000 ROA not after: Wed 20 Jan 2027 19:25:49 +0000 asID: 204729 IP address blocks: 172.82.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06a70abd-bd67-4449-954d-d126a76d2622/06a70abd-bd67-4449-954d-d126a76d2622.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06a70abd-bd67-4449-954d-d126a76d2622/06a70abd-bd67-4449-954d-d126a76d2622.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06a70abd-bd67-4449-954d-d126a76d2622.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:96:d9:ef:9a:d9:f2:a2:b9:d6:8d:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06a70abd-bd67-4449-954d-d126a76d2622 Validity Not Before: Oct 22 18:25:49 2026 GMT Not After : Jan 20 19:25:49 2027 GMT Subject: CN=97132443-8e57-47d9-a6b8-fde9ac93a797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0b:56:37:48:3b:a7:d2:bf:c1:55:7c:1a:6d: 6e:a0:e2:63:4d:bf:70:3d:8d:e2:29:da:59:e0:2c: 0d:62:4a:61:0e:96:33:79:d6:00:20:a6:40:17:14: 26:18:be:8c:09:b6:3c:ba:e8:a2:14:81:e1:56:70: 53:c6:13:f1:a5:1f:62:f7:5e:ab:94:51:59:46:66: c4:22:78:13:90:d0:3c:1b:bd:23:6e:5e:ce:94:b8: 41:df:5b:6c:60:a9:03:02:18:61:fe:a6:f3:54:c6: 45:f3:b3:ac:2d:30:e8:e2:c5:e5:ef:dd:64:3b:50: ff:ac:a3:10:1e:71:02:3f:af:bc:db:ca:19:d2:21: 89:36:52:22:ed:18:e5:09:ed:81:36:b9:fb:c1:e4: cc:c2:41:a3:ab:16:c2:f5:10:51:5d:a1:2b:4e:ec: 4f:39:52:19:6f:64:7d:96:60:5b:01:ff:93:b4:58: 7c:fd:9c:8d:76:4f:ad:b1:6a:2a:6e:db:93:07:d5: bf:5f:40:c2:26:21:b9:be:36:e3:70:46:b9:db:b8: 3b:3c:b7:40:c3:93:ef:bf:08:85:3d:32:e0:83:d9: 17:43:51:16:27:47:7e:2c:74:20:55:6e:71:ff:6f: 8a:ee:c8:f3:11:2c:5e:70:e8:bc:17:45:09:5b:70: 2b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D1:AF:68:43:5C:B4:89:4A:14:56:BB:AE:2B:31:31:70:02:BD:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06a70abd-bd67-4449-954d-d126a76d2622/ff6c8ec0-5d2a-3f54-949d-4306abccdc1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06a70abd-bd67-4449-954d-d126a76d2622/06a70abd-bd67-4449-954d-d126a76d2622.crl X509v3 Authority Key Identifier: keyid:49:F9:6A:C5:C4:92:25:27:9F:A3:7B:AA:99:FE:FD:85:12:8A:11:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06a70abd-bd67-4449-954d-d126a76d2622.cer sbgp-ipAddrBlock: critical IPv4: 172.82.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:34:e1:51:99:8f:cc:46:2b:92:f6:75:c8:d4:00:65:c6:1b: 7c:51:5c:a1:40:99:88:9c:ad:58:11:33:81:cb:31:c0:8a:0a: 70:ab:df:d8:0d:23:bc:fa:cb:0f:f5:4a:ce:26:d5:e7:96:57: ff:53:9f:14:3e:fc:e7:62:47:48:a5:32:9c:b6:0e:48:d5:e9: d0:44:1b:d2:15:79:1d:68:a3:61:7b:53:c1:57:39:89:11:b4: 1a:5a:84:0a:47:62:d2:e9:dd:52:47:ee:db:ec:1b:72:fd:71: d1:9c:8b:d5:44:52:20:7e:b4:f2:4b:4c:ff:37:95:56:12:24: 30:49:46:48:d2:25:ec:2e:a3:f5:ae:b5:80:fb:57:0c:1f:73: 30:cc:48:83:38:2b:39:57:52:b1:74:03:b9:95:a5:b2:10:d6: b1:ce:45:05:2f:95:58:26:58:f1:40:d0:55:a1:e7:f7:f7:fb: 50:03:e2:cc:4b:08:22:d7:85:52:3c:14:a5:31:eb:16:1a:e8: 06:4f:1a:e3:da:ba:68:27:03:aa:cf:21:7f:da:70:8d:ba:04: c8:18:ab:f1:5b:0a:8f:36:07:8e:c9:86:ea:78:29:d7:54:3c: 2d:23:dd:dd:81:e8:fc:af:dc:08:ad:60:58:43:b6:ba:cb:68: 19:69:4e:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+W2e+a2fKiudaNAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDZhNzBhYmQtYmQ2Ny00NDQ5LTk1NGQtZDEyNmE3NmQy NjIyMB4XDTI2MTAyMjE4MjU0OVoXDTI3MDEyMDE5MjU0OVowLzEtMCsGA1UEAxMk OTcxMzI0NDMtOGU1Ny00N2Q5LWE2YjgtZmRlOWFjOTNhNzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAtWN0g7p9K/wVV8Gm1uoOJjTb9wPY3iKdpZ 4CwNYkphDpYzedYAIKZAFxQmGL6MCbY8uuiiFIHhVnBTxhPxpR9i916rlFFZRmbE IngTkNA8G70jbl7OlLhB31tsYKkDAhhh/qbzVMZF87OsLTDo4sXl791kO1D/rKMQ HnECP6+828oZ0iGJNlIi7RjlCe2BNrn7weTMwkGjqxbC9RBRXaErTuxPOVIZb2R9 lmBbAf+TtFh8/ZyNdk+tsWoqbtuTB9W/X0DCJiG5vjbjcEa527g7PLdAw5PvvwiF PTLgg9kXQ1EWJ0d+LHQgVW5x/2+K7sjzESxecOi8F0UJW3AreQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLRr2hDXLSJShRWu64rMTFwAr0mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wNmE3 MGFiZC1iZDY3LTQ0NDktOTU0ZC1kMTI2YTc2ZDI2MjIvZmY2YzhlYzAtNWQyYS0z ZjU0LTk0OWQtNDMwNmFiY2NkYzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDZhNzBhYmQtYmQ2Ny00NDQ5LTk1 NGQtZDEyNmE3NmQyNjIyLzA2YTcwYWJkLWJkNjctNDQ0OS05NTRkLWQxMjZhNzZk MjYyMi5jcmwwHwYDVR0jBBgwFoAUSflqxcSSJSefo3uqmf79hRKKEagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wNmE3MGFiZC1iZDY3LTQ0NDktOTU0ZC1kMTI2 YTc2ZDI2MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFJZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAM04VGZj8xGK5L2dcjUAGXGG3xRXKFAmYicrVgRM4HLMcCKCnCr39gN I7z6yw/1Ss4m1eeWV/9TnxQ+/OdiR0ilMpy2DkjV6dBEG9IVeR1oo2F7U8FXOYkR tBpahApHYtLp3VJH7tvsG3L9cdGci9VEUiB+tPJLTP83lVYSJDBJRkjSJewuo/Wu tYD7VwwfczDMSIM4KzlXUrF0A7mVpbIQ1rHORQUvlVgmWPFA0FWh5/f3+1AD4sxL CCLXhVI8FKUx6xYa6AZPGuPaumgnA6rPIX/acI26BMgYq/FbCo82B47Jhup4KddU PC0j3d2B6Pyv3AitYFhDtrrLaBlpTjA= -----END CERTIFICATE-----Generated at Tue Oct 27 22:46:18 2026 by rpki-client