$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9a15a9eb-fc7d-31da-9616-aa923e2cca2e.roa File: 9a15a9eb-fc7d-31da-9616-aa923e2cca2e.roa (raw, json) Hash identifier: I1S9VJfSjOc3npD8yzuT28SO0lxPBF662d1PopZLIsQ= Subject key identifier: 3B:DA:F3:F9:B1:0C:5D:04:7C:9E:35:9F:CA:2F:B7:24:F4:AB:6D:79 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584F4973355F3A35A5975483A840 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9a15a9eb-fc7d-31da-9616-aa923e2cca2e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22616 IP address blocks: 170.85.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:35:5f:3a:35:a5:97:54:83:a8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6335b759-67ff-4ca1-bf7d-2b8f33915bb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:11:53:e4:d5:13:5c:14:64:70:7b:d3:f2:bc: b5:70:fc:77:e0:0e:3d:a9:57:1a:fa:5d:ae:d4:fc: d7:54:4d:d8:41:b2:a2:87:34:50:fc:bd:0d:2a:be: 8b:b5:22:c6:47:0f:0a:33:c9:ea:2a:fb:de:25:ae: 93:08:ec:03:0c:98:bb:f9:44:2f:ec:a5:0b:6b:9f: 18:d8:01:ad:15:88:08:0c:c9:04:07:8a:be:b2:10: e4:08:6d:01:e5:2b:da:ad:f9:af:07:91:f5:4a:0d: 38:49:4b:c2:0e:e2:9a:72:49:15:9c:c9:7e:80:84: b0:48:f2:cf:48:28:df:b1:4a:f7:c7:0b:e2:5d:67: 21:89:c5:b4:bc:7d:7d:77:55:3d:b7:41:43:51:be: 2b:c6:18:54:1e:da:0e:b0:32:bc:47:0c:fe:49:c1: b9:83:14:d9:af:24:3c:e8:d9:dc:25:17:94:a4:9f: 18:4e:6d:34:8f:40:da:bb:5b:75:d9:90:4f:11:35: 01:ca:ab:cb:9a:15:4e:6a:5d:0a:d0:c6:30:04:77: 8d:13:8d:98:ba:f5:f9:7a:bd:ba:cc:e8:83:4b:3e: ce:40:d1:b0:59:15:b2:71:f1:84:d9:10:13:c3:e7: f8:1a:07:2a:0d:86:fc:52:d5:3d:a3:4e:26:1b:2d: c6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:DA:F3:F9:B1:0C:5D:04:7C:9E:35:9F:CA:2F:B7:24:F4:AB:6D:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9a15a9eb-fc7d-31da-9616-aa923e2cca2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:a2:04:17:80:eb:5b:c4:c7:14:75:55:9b:b6:5f:ad:aa:ec: 5b:ee:5e:61:a9:0f:80:8c:d7:a5:43:3b:26:f9:59:6e:4f:f5: 8d:e0:40:95:6c:8c:2d:41:49:aa:52:6b:9f:5d:2f:bf:67:38: fe:d1:34:9c:b8:4c:6c:e6:b6:75:d9:14:d3:f9:b7:5f:e5:4c: 77:fe:00:12:94:65:d6:b1:2e:d0:69:0c:18:45:01:2a:db:a0: ba:28:e2:bf:5d:3b:fc:9b:da:01:5b:98:66:07:d8:01:55:35: 65:a7:1d:77:1f:dd:39:e1:e8:fa:3f:6c:13:15:a4:07:fe:f5: 05:98:e1:9f:b2:15:24:74:78:ff:cc:51:43:22:12:bf:8e:60: b3:6c:83:e9:69:32:2e:c9:c1:5f:1a:1c:e8:51:f8:c1:f6:88: 4c:ad:56:ce:8a:07:e0:fe:dd:bb:e9:b3:21:c9:a5:e4:a4:38: 01:87:61:fa:ab:ca:32:f2:a4:1d:eb:fa:15:cd:2c:90:f1:df: 9c:ed:4f:32:b9:41:33:87:10:d3:c0:c7:66:ea:83:7d:66:b6: b3:49:b4:fc:38:d1:ba:33:77:ab:a8:63:76:1d:e3:31:da:2b: 2c:22:29:f9:b9:0f:7d:ab:d2:d9:c3:cb:5b:ab:b4:b4:5c:2f: 03:19:21:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JczVfOjWll1SDqEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjMzNWI3NTktNjdmZi00Y2ExLWJmN2QtMmI4ZjMzOTE1YmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBFT5NUTXBRkcHvT8ry1cPx34A49qVca+l2u 1PzXVE3YQbKihzRQ/L0NKr6LtSLGRw8KM8nqKvveJa6TCOwDDJi7+UQv7KULa58Y 2AGtFYgIDMkEB4q+shDkCG0B5SvarfmvB5H1Sg04SUvCDuKackkVnMl+gISwSPLP SCjfsUr3xwviXWchicW0vH19d1U9t0FDUb4rxhhUHtoOsDK8Rwz+ScG5gxTZryQ8 6NncJReUpJ8YTm00j0Dau1t12ZBPETUByqvLmhVOal0K0MYwBHeNE42YuvX5er26 zOiDSz7OQNGwWRWycfGE2RATw+f4GgcqDYb8UtU9o04mGy3GYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDva8/mxDF0EfJ41n8ovtyT0q215MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvOWExNWE5ZWItZmM3ZC0z MWRhLTk2MTYtYWE5MjNlMmNjYTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlWSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOiBBeA61vExxR1VZu2X62q7FvuXmGpD4CM16VDOyb5WW5P9Y3gQJVs jC1BSapSa59dL79nOP7RNJy4TGzmtnXZFNP5t1/lTHf+ABKUZdaxLtBpDBhFASrb oLoo4r9dO/yb2gFbmGYH2AFVNWWnHXcf3Tnh6Po/bBMVpAf+9QWY4Z+yFSR0eP/M UUMiEr+OYLNsg+lpMi7JwV8aHOhR+MH2iEytVs6KB+D+3bvpsyHJpeSkOAGHYfqr yjLypB3r+hXNLJDx35ztTzK5QTOHENPAx2bqg31mtrNJtPw40bozd6uoY3Yd4zHa KywiKfm5D32r0tnDy1urtLRcLwMZIfc= -----END CERTIFICATE-----Generated at Mon Sep 28 18:23:23 2026 by rpki-client