$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/d490b4ec-a37d-3473-800b-69852b5ca56d.roa File: d490b4ec-a37d-3473-800b-69852b5ca56d.roa (raw, json) Hash identifier: bIqNd39f8VCtRWgTmproxWdCGJZqOH5TDr0ZmDNf4OY= Subject key identifier: D7:7C:27:F5:F7:6F:D0:9D:31:B4:2B:3F:2C:EF:7A:02:43:96:18:24 Certificate issuer: /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Certificate serial: 010D0C9F4328584F71ED901E3EA4E9CAFA8ADF80 Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/d490b4ec-a37d-3473-800b-69852b5ca56d.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 14618 IP address blocks: 170.176.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:90:1e:3e:a4:e9:ca:fa:8a:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=849a5ca8-f8e2-4a2b-8d40-5b8ee9fb69a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b1:34:07:e4:06:f0:2d:a9:a3:ca:76:13:08: 4a:2d:9f:e8:b2:bf:06:37:2b:69:37:f1:21:66:21: 12:64:49:59:d0:34:61:ab:db:7d:84:08:b5:93:ab: fc:b4:4b:a7:a6:65:94:54:6e:5d:d8:d7:ea:d2:e6: 2c:f0:c9:d2:cf:4d:dc:a4:86:f2:7a:0b:a9:e4:51: 1f:d4:43:ce:d1:33:de:61:45:c1:08:04:79:bc:3d: c9:f5:7f:f5:db:a8:fd:d3:da:3b:35:58:15:ca:3e: 02:4c:65:94:24:35:f9:3e:9a:55:6d:55:11:da:a3: 71:df:c9:3b:77:58:22:04:a3:c5:cb:42:ce:75:bf: d4:6b:f1:24:30:9b:63:87:f1:d3:30:fc:34:47:b2: 49:e1:51:dd:4f:af:d1:4e:da:fa:c1:d4:3d:5f:69: 39:c8:4b:8e:db:c0:58:c1:22:e2:5f:b3:3b:21:80: 61:4e:1d:62:85:d1:9c:96:ec:62:77:be:52:59:b0: de:67:44:26:76:2d:77:a0:d9:c6:e0:1e:a8:b0:22: 73:f9:78:4f:f1:a2:28:11:fa:25:25:9d:5d:84:fd: 53:6f:1d:93:9d:a5:23:75:a5:87:df:3a:96:c5:b8: d6:c6:3c:b3:03:1a:1a:75:60:bf:3f:4e:18:41:89: ba:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:7C:27:F5:F7:6F:D0:9D:31:B4:2B:3F:2C:EF:7A:02:43:96:18:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/d490b4ec-a37d-3473-800b-69852b5ca56d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl X509v3 Authority Key Identifier: keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer sbgp-ipAddrBlock: critical IPv4: 170.176.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:84:21:33:08:ff:6f:0b:7c:50:e1:44:67:a9:47:63:46:93: ee:e7:6d:bd:53:6f:1d:64:2b:f5:59:53:c3:23:7a:80:54:65: f7:dd:a4:b1:31:ae:2c:10:52:8a:3e:d8:fd:63:5b:22:42:cf: 5f:aa:dd:92:18:d6:b6:00:ea:e3:1f:74:a1:00:9a:53:7d:4c: e6:a7:7c:15:57:83:f4:67:34:9a:3f:f6:3c:92:8d:c3:49:f6: b4:ee:ff:e8:25:b2:f8:02:7c:41:e6:0f:c3:11:4b:ea:22:cf: 8d:d6:a7:16:39:cb:d4:6b:fd:4b:3f:d2:e6:49:ad:1b:57:9c: 61:9f:16:1d:96:5c:8e:8a:3e:e0:60:59:71:a0:70:1e:7b:52: ee:ab:aa:a5:9b:6e:96:0f:69:05:09:9d:2c:2a:19:55:bb:30: 02:b4:70:c3:0a:52:86:04:9d:79:92:9f:ad:bf:ae:46:36:4f: 60:4e:aa:2b:9d:3d:cf:7a:76:0b:9f:33:28:fe:80:d3:84:70: d2:0b:29:50:72:c1:03:50:7e:3d:63:50:e0:04:68:3e:46:0d: 9b:6a:03:80:3a:dd:21:44:66:85:51:29:2f:2e:f4:33:ac:4f: 82:c2:4f:5e:6e:f7:ea:39:00:8f:90:7f:a5:be:88:5e:87:26: d6:19:64:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7ZAePqTpyvqK34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI0ZGZiNWYtODU4MC00OGZmLWIzMmUtZmQzOTNmYTdk Y2M0MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk ODQ5YTVjYTgtZjhlMi00YTJiLThkNDAtNWI4ZWU5ZmI2OWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7E0B+QG8C2po8p2EwhKLZ/osr8GNytpN/Eh ZiESZElZ0DRhq9t9hAi1k6v8tEunpmWUVG5d2Nfq0uYs8MnSz03cpIbyegup5FEf 1EPO0TPeYUXBCAR5vD3J9X/126j909o7NVgVyj4CTGWUJDX5PppVbVUR2qNx38k7 d1giBKPFy0LOdb/Ua/EkMJtjh/HTMPw0R7JJ4VHdT6/RTtr6wdQ9X2k5yEuO28BY wSLiX7M7IYBhTh1ihdGcluxid75SWbDeZ0Qmdi13oNnG4B6osCJz+XhP8aIoEfol JZ1dhP1Tbx2TnaUjdaWH3zqWxbjWxjyzAxoadWC/P04YQYm6kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNd8J/X3b9CdMbQrPyzvegJDlhgkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjRk ZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5M2ZhN2RjYzQvZDQ5MGI0ZWMtYTM3ZC0z NDczLTgwMGItNjk4NTJiNWNhNTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI0ZGZiNWYtODU4MC00OGZmLWIz MmUtZmQzOTNmYTdkY2M0LzgyNGRmYjVmLTg1ODAtNDhmZi1iMzJlLWZkMzkzZmE3 ZGNjNC5jcmwwHwYDVR0jBBgwFoAU2YT8ASUa9eXtm7NpUFgxtxJHKZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84MjRkZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5 M2ZhN2RjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOEITMI/28LfFDhRGepR2NGk+7nbb1Tbx1kK/VZU8MjeoBUZffdpLEx riwQUoo+2P1jWyJCz1+q3ZIY1rYA6uMfdKEAmlN9TOanfBVXg/RnNJo/9jySjcNJ 9rTu/+glsvgCfEHmD8MRS+oiz43WpxY5y9Rr/Us/0uZJrRtXnGGfFh2WXI6KPuBg WXGgcB57Uu6rqqWbbpYPaQUJnSwqGVW7MAK0cMMKUoYEnXmSn62/rkY2T2BOqiud Pc96dgufMyj+gNOEcNILKVBywQNQfj1jUOAEaD5GDZtqA4A63SFEZoVRKS8u9DOs T4LCT15u9+o5AI+Qf6W+iF6HJtYZZE8= -----END CERTIFICATE-----Generated at Thu Oct 22 14:15:18 2026 by rpki-client