$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/c8150f7e-efe4-3311-9301-be33e354ea81.roa File: c8150f7e-efe4-3311-9301-be33e354ea81.roa (raw, json) Hash identifier: eaxFL+SMgKlbucsldJ2/Kem7RWB6hDnQ9QX2MCXBDFo= Subject key identifier: B0:3C:17:B4:46:CD:C3:97:83:E0:55:6F:83:11:C5:3A:9A:78:A6:ED Certificate issuer: /CN=69a80da8-69e1-4580-ab63-1ce23bea895b Certificate serial: 010D0C9F4328584F89A85BD24EED205F6F00B7C0 Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/c8150f7e-efe4-3311-9301-be33e354ea81.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 11260 IP address blocks: 148.170.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:5b:d2:4e:ed:20:5f:6f:00:b7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=04a962cf-b632-4327-a58b-8ce40a109aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:88:7e:06:dd:78:00:d9:95:5b:3e:d7:f4:99: 9b:6a:e9:e9:d9:e8:fc:e4:2d:50:af:6e:76:b7:a3: 16:2c:84:c5:34:bb:03:21:98:74:8d:2c:3b:4a:a1: cc:5e:94:e5:43:32:cb:2e:dc:f3:24:dc:f0:ff:56: 47:ed:47:fa:51:e9:da:ae:85:c4:f7:a4:ab:7e:99: 25:0b:59:b1:f5:1e:11:f4:17:49:f8:ac:31:32:88: 5a:05:ad:14:2d:35:4f:dd:af:b4:02:84:bd:9a:50: 13:0d:41:00:29:f9:32:b2:5c:d7:18:c3:3a:5d:51: 78:70:5f:ad:b6:be:ba:33:45:80:8c:94:3f:45:0b: 11:5b:c0:c9:68:af:9b:2d:41:e7:00:2f:8e:06:5f: d8:e9:7f:92:9b:e0:b1:a3:51:ac:a7:99:3d:c9:43: aa:27:16:fa:e0:83:cd:af:52:60:62:cf:74:54:60: 5b:cb:fe:12:af:01:60:85:e1:c5:b6:4a:b8:13:13: b9:47:5a:01:5e:43:25:22:02:66:e2:76:fc:9f:09: da:99:b1:b7:23:e6:70:4c:9c:72:15:5c:c2:70:e0: f1:d9:f8:31:56:ee:4d:46:8a:20:45:c9:42:c1:60: 0d:90:53:53:98:3a:7a:55:ab:d9:4d:d3:68:24:da: da:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:3C:17:B4:46:CD:C3:97:83:E0:55:6F:83:11:C5:3A:9A:78:A6:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/c8150f7e-efe4-3311-9301-be33e354ea81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl X509v3 Authority Key Identifier: keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer sbgp-ipAddrBlock: critical IPv4: 148.170.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:aa:e6:5d:d8:ee:20:af:24:22:22:52:26:0f:7f:d2:6c:bc: 98:07:41:6e:ac:33:85:68:ce:f9:d4:96:64:4a:9b:ad:4b:ee: b2:fa:1a:d7:b4:cd:22:52:eb:2f:a0:2c:c5:f8:32:00:86:03: b5:b2:c2:37:54:d4:8d:e4:cd:fe:be:e0:d3:f6:77:bf:b9:44: b5:e0:ed:e6:bd:d1:35:f2:ca:04:04:0b:24:e5:4e:7b:77:6d: 53:ac:40:5c:e9:60:be:f3:fc:9c:91:0d:e2:36:2c:fa:25:0e: 87:0a:09:cf:94:5d:ee:1f:8c:7c:d7:a3:42:7a:25:0e:74:f1: e4:f9:9f:c0:be:ec:77:57:c2:12:3b:66:41:02:e0:80:0a:90: 60:82:85:d7:00:da:8a:2b:34:ef:d1:66:e6:84:1d:3d:ad:85: 94:c4:ba:cd:90:c4:63:78:63:85:de:51:ac:23:31:30:1b:cb: e1:78:9a:aa:45:fe:e6:23:a0:e4:97:a8:29:01:2c:21:26:d1: 07:8c:e2:cc:37:eb:c9:75:84:a0:f0:c3:93:00:d3:2f:18:15: 1b:d0:c5:ec:ad:b6:a5:a1:a8:66:33:48:2b:4f:e8:13:5b:d3: fd:47:9a:2f:94:d3:d1:ca:21:fd:91:61:0a:9e:18:80:6f:4e: 5b:5a:71:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqFvSTu0gX28At8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlhODBkYTgtNjllMS00NTgwLWFiNjMtMWNlMjNiZWE4 OTViMB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk MDRhOTYyY2YtYjYzMi00MzI3LWE1OGItOGNlNDBhMTA5YWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioh+Bt14ANmVWz7X9Jmbaunp2ej85C1Qr252 t6MWLITFNLsDIZh0jSw7SqHMXpTlQzLLLtzzJNzw/1ZH7Uf6UenaroXE96Srfpkl C1mx9R4R9BdJ+KwxMohaBa0ULTVP3a+0AoS9mlATDUEAKfkyslzXGMM6XVF4cF+t tr66M0WAjJQ/RQsRW8DJaK+bLUHnAC+OBl/Y6X+Sm+Cxo1Gsp5k9yUOqJxb64IPN r1JgYs90VGBby/4SrwFgheHFtkq4ExO5R1oBXkMlIgJm4nb8nwnambG3I+ZwTJxy FVzCcODx2fgxVu5NRoogRclCwWANkFNTmDp6VavZTdNoJNrajQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLA8F7RGzcOXg+BVb4MRxTqaeKbtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4 MGRhOC02OWUxLTQ1ODAtYWI2My0xY2UyM2JlYTg5NWIvYzgxNTBmN2UtZWZlNC0z MzExLTkzMDEtYmUzM2UzNTRlYTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjlhODBkYTgtNjllMS00NTgwLWFi NjMtMWNlMjNiZWE4OTViLzY5YTgwZGE4LTY5ZTEtNDU4MC1hYjYzLTFjZTIzYmVh ODk1Yi5jcmwwHwYDVR0jBBgwFoAUhqiB3KYHVFZrTqUs0M1hUuvpHc8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4MGRhOC02OWUxLTQ1ODAtYWI2My0xY2Uy M2JlYTg5NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGlKqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALOq5l3Y7iCvJCIiUiYPf9JsvJgHQW6sM4VozvnUlmRKm61L7rL6Gte0 zSJS6y+gLMX4MgCGA7WywjdU1I3kzf6+4NP2d7+5RLXg7ea90TXyygQECyTlTnt3 bVOsQFzpYL7z/JyRDeI2LPolDocKCc+UXe4fjHzXo0J6JQ508eT5n8C+7HdXwhI7 ZkEC4IAKkGCChdcA2oorNO/RZuaEHT2thZTEus2QxGN4Y4XeUawjMTAby+F4mqpF /uYjoOSXqCkBLCEm0QeM4sw368l1hKDww5MA0y8YFRvQxeyttqWhqGYzSCtP6BNb 0/1Hmi+U09HKIf2RYQqeGIBvTltacYU= -----END CERTIFICATE-----Generated at Wed Oct 28 02:44:26 2026 by rpki-client