$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/f9db3b81-c9ae-3fc4-9a09-da235717f7ae.roa File: f9db3b81-c9ae-3fc4-9a09-da235717f7ae.roa (raw, json) Hash identifier: hYl+Wn7lbMbZn1ib2Dkq9GxBcmZBVlGU18I6CZZ8vbU= Subject key identifier: 20:71:1D:C3:62:DE:38:95:BC:FE:69:6F:95:18:37:E6:FA:15:0C:B8 Certificate issuer: /CN=5fab6378-e15d-4471-b01f-be15fc5bfa04 Certificate serial: 010D0C9F4328584FB3A6685360A0050BCD82A5C0 Authority key identifier: 61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/f9db3b81-c9ae-3fc4-9a09-da235717f7ae.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 3561 IP address blocks: 207.170.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a6:68:53:60:a0:05:0b:cd:82:a5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fab6378-e15d-4471-b01f-be15fc5bfa04 Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=8fbb65e7-6bd0-48b2-b3c0-cae52481d732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3e:1c:99:bd:c0:2c:7b:7f:fd:1b:aa:de:cb: 3f:c4:36:9e:7a:e3:70:d1:42:d1:80:76:a4:f1:59: 96:97:23:b0:de:ea:12:e4:aa:ab:ed:bb:b5:a9:2a: 11:db:aa:18:22:13:d8:c7:dd:05:f3:8c:fc:47:d0: d2:77:a8:5f:ee:85:94:0b:40:fd:5f:1d:31:ed:13: 59:78:45:8b:32:98:fd:4b:34:f6:1e:f2:d9:5c:e7: 78:84:a7:08:19:d7:4b:34:70:73:4c:89:10:c4:ba: 35:ea:4e:25:5d:2a:27:b0:ab:e5:51:cb:07:9b:b5: c6:9e:67:bf:27:2a:ea:bd:ae:52:cd:e7:9e:93:d3: a1:55:8a:54:97:cf:4b:2b:94:46:ac:5f:84:bc:92: 47:67:e8:8e:af:ac:40:1a:33:36:35:0b:58:57:86: 64:0d:80:fb:2d:b3:73:77:80:d6:8b:2d:bd:03:28: 2a:96:88:1c:3a:d4:0e:02:dc:e0:ef:c0:a4:c1:7d: ec:33:e6:03:0c:b1:e0:d5:a9:78:25:7d:d5:af:64: 23:7b:f2:de:a5:b9:ed:b2:ec:3e:9b:36:2e:e1:77: e9:17:f2:f9:57:da:5d:aa:9c:37:b6:7d:ed:d1:f7: 6d:81:20:9a:67:ac:e2:76:fc:af:b8:9c:21:39:4f: f4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:71:1D:C3:62:DE:38:95:BC:FE:69:6F:95:18:37:E6:FA:15:0C:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/f9db3b81-c9ae-3fc4-9a09-da235717f7ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl X509v3 Authority Key Identifier: keyid:61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer sbgp-ipAddrBlock: critical IPv4: 207.170.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:73:a2:8c:0b:26:6a:f9:6c:37:23:6f:04:7b:00:fa:5a:d4: ad:35:eb:c4:d8:49:a2:42:15:24:8e:25:24:57:01:79:66:d8: ed:dd:87:e5:2e:19:c4:4d:6c:96:62:6f:24:aa:12:b2:25:e5: 91:8e:57:ab:d6:97:31:fa:1b:bb:af:ba:3f:f1:8c:f4:78:a4: 70:58:57:cf:fb:47:2d:bf:bf:e4:cf:5a:31:56:f6:df:c5:0b: e9:20:03:5a:33:c5:87:55:9d:15:e3:86:5c:93:06:53:c5:12: b1:92:70:79:16:78:63:9e:4a:e4:20:67:66:32:c9:97:fd:41: 70:6b:40:86:9c:53:50:02:48:4f:9b:c0:08:74:d1:43:4f:49: 8f:98:3a:03:75:39:37:c5:be:a5:63:a8:23:70:90:6c:06:9d: 9b:e0:f4:f7:58:1c:0c:2c:c7:6d:ff:cb:6b:ce:12:54:54:b3: f4:36:e7:b5:e9:31:cd:d9:b9:8a:75:c9:f4:a3:d5:ea:7d:95: 01:a4:b7:e3:95:8a:e6:b0:13:dc:71:c2:76:ed:70:ce:aa:df: a0:6f:cd:32:f6:1e:c9:6a:95:c8:01:f3:81:0d:a0:52:06:da: 18:ed:c4:31:89:e5:95:bd:54:95:90:3b:44:20:72:e5:55:86: a0:b9:43:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+zpmhTYKAFC82CpcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWZhYjYzNzgtZTE1ZC00NDcxLWIwMWYtYmUxNWZjNWJm YTA0MB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk OGZiYjY1ZTctNmJkMC00OGIyLWIzYzAtY2FlNTI0ODFkNzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1D4cmb3ALHt//Ruq3ss/xDaeeuNw0ULRgHak 8VmWlyOw3uoS5Kqr7bu1qSoR26oYIhPYx90F84z8R9DSd6hf7oWUC0D9Xx0x7RNZ eEWLMpj9SzT2HvLZXOd4hKcIGddLNHBzTIkQxLo16k4lXSonsKvlUcsHm7XGnme/ Jyrqva5Szeeek9OhVYpUl89LK5RGrF+EvJJHZ+iOr6xAGjM2NQtYV4ZkDYD7LbNz d4DWiy29AygqlogcOtQOAtzg78CkwX3sM+YDDLHg1al4JX3Vr2Qje/Lepbntsuw+ mzYu4XfpF/L5V9pdqpw3tn3t0fdtgSCaZ6zidvyvuJwhOU/0jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBxHcNi3jiVvP5pb5UYN+b6FQy4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81ZmFi NjM3OC1lMTVkLTQ0NzEtYjAxZi1iZTE1ZmM1YmZhMDQvZjlkYjNiODEtYzlhZS0z ZmM0LTlhMDktZGEyMzU3MTdmN2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWZhYjYzNzgtZTE1ZC00NDcxLWIw MWYtYmUxNWZjNWJmYTA0LzVmYWI2Mzc4LWUxNWQtNDQ3MS1iMDFmLWJlMTVmYzVi ZmEwNC5jcmwwHwYDVR0jBBgwFoAUYUBDv+JQs0dk/NFzD2KYA1AyGNIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81ZmFiNjM3OC1lMTVkLTQ0NzEtYjAxZi1iZTE1 ZmM1YmZhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz6qwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJzoowLJmr5bDcjbwR7APpa1K0168TYSaJCFSSOJSRXAXlm2O3dh+Uu GcRNbJZibySqErIl5ZGOV6vWlzH6G7uvuj/xjPR4pHBYV8/7Ry2/v+TPWjFW9t/F C+kgA1ozxYdVnRXjhlyTBlPFErGScHkWeGOeSuQgZ2YyyZf9QXBrQIacU1ACSE+b wAh00UNPSY+YOgN1OTfFvqVjqCNwkGwGnZvg9PdYHAwsx23/y2vOElRUs/Q257Xp Mc3ZuYp1yfSj1ep9lQGkt+OViuawE9xxwnbtcM6q36BvzTL2HslqlcgB84ENoFIG 2hjtxDGJ5ZW9VJWQO0QgcuVVhqC5Q54= -----END CERTIFICATE-----Generated at Thu Nov 5 15:03:06 2026 by rpki-client