$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/33f8b3e3-7cd6-358a-b887-6a36f2f8b151.roa File: 33f8b3e3-7cd6-358a-b887-6a36f2f8b151.roa (raw, json) Hash identifier: a633DmnILSvbXwAhWq7MzkvdvoytZg6Q3xcKJpYKTtE= Subject key identifier: 1D:C4:97:ED:AE:0E:7D:FA:33:79:CA:6F:8D:02:4B:9E:3E:42:30:64 Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584F4B435488BF404C87EE5A9B70 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/33f8b3e3-7cd6-358a-b887-6a36f2f8b151.roa Signing time: Fri 25 Sep 2026 16:36:44 +0000 ROA not before: Fri 25 Sep 2026 16:36:44 +0000 ROA not after: Thu 24 Dec 2026 17:36:44 +0000 asID: 21433 IP address blocks: 170.248.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4b:43:54:88:bf:40:4c:87:ee:5a:9b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Sep 25 16:36:44 2026 GMT Not After : Dec 24 17:36:44 2026 GMT Subject: CN=0a14048a-e012-4bcc-a639-12ca87b27948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:31:38:50:1c:62:8c:98:01:f3:37:b4:8f:65: 7e:7f:73:e9:52:d0:44:8e:bf:8e:2d:c3:a6:ff:4a: 30:11:b8:3a:ed:39:7c:0f:b9:2f:6d:6d:d3:17:9e: 9b:82:08:e7:9c:6b:29:69:77:4d:24:2c:52:98:a8: 9d:9f:40:e9:eb:a9:b9:f3:09:de:d1:d5:1f:2b:10: be:91:07:52:2c:b4:93:1d:ec:23:b2:4b:72:ee:c1: d8:9a:d4:6f:4c:75:ab:1a:0b:ee:64:6a:de:20:fb: 20:60:99:0a:d4:04:87:b9:df:51:31:5f:31:b1:9c: a8:5d:cd:9f:7e:63:8f:38:ba:f7:7d:fe:ce:71:bb: 3f:1e:ac:ae:8a:32:e1:55:1a:b8:57:89:29:88:a8: 97:a1:f9:a5:11:5c:5f:f7:87:c3:1e:56:63:d7:c3: 4d:72:cc:dc:7c:f1:01:28:fa:5f:6b:99:9a:8d:68: 21:4b:1a:ba:63:b9:73:16:db:09:97:cf:26:bb:9c: a7:99:f3:18:f9:88:88:4b:40:9b:d9:76:cd:92:6e: 93:0f:8b:45:fe:84:43:56:57:26:b5:ea:f7:de:3d: 22:0b:49:b1:74:fe:ad:d8:c7:71:3b:64:18:b7:28: c2:3f:1f:0c:0e:87:39:13:59:e6:19:86:2c:6e:9d: 8e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C4:97:ED:AE:0E:7D:FA:33:79:CA:6F:8D:02:4B:9E:3E:42:30:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/33f8b3e3-7cd6-358a-b887-6a36f2f8b151.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 170.248.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:71:63:f5:57:ff:d7:12:ab:81:83:1b:40:b0:10:55:c6:69: 5e:bb:9a:4e:0a:e9:25:a0:49:ac:e0:26:73:b0:cc:d5:11:35: 58:35:2a:c4:9f:70:00:c3:75:10:2c:b8:ce:9b:6a:13:53:d2: e4:b4:fb:ce:03:c3:b9:ed:9a:05:e5:87:a1:8a:4d:89:0e:ac: 4c:da:4b:4d:7c:1e:b2:cc:a5:02:be:56:c1:aa:e8:f4:dc:ae: cc:ab:dd:e8:ac:83:97:36:da:e8:d7:e5:d0:aa:3c:96:69:4e: 7f:13:c0:25:b2:8c:81:ea:3e:b7:70:64:8d:48:30:b8:11:f8: bd:5b:c4:f5:86:c7:5d:2d:ac:5d:ca:51:3e:ba:6a:4c:e5:ad: 00:a8:ad:b5:97:63:3f:f3:ac:b0:fe:60:36:ca:7c:ba:1a:11: a6:6b:fe:60:a2:41:1e:1e:5b:b3:73:e0:66:e9:b7:07:42:fb: 35:ac:34:d0:d0:cd:50:2e:00:0d:30:c1:00:b4:13:e8:8f:f3: 47:33:d7:e4:16:30:56:eb:06:6b:e8:68:ae:6a:d7:df:c2:30: b0:27:51:1d:94:4a:8a:2f:60:79:ed:79:1c:57:ca:9b:58:71: 84:f8:04:28:26:3c:56:c6:53:af:02:2d:bb:86:37:32:95:4b: 82:d1:d2:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9LQ1SIv0BMh+5am3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI2MDkyNTE2MzY0NFoXDTI2MTIyNDE3MzY0NFowLzEtMCsGA1UEAxMk MGExNDA0OGEtZTAxMi00YmNjLWE2MzktMTJjYTg3YjI3OTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozE4UBxijJgB8ze0j2V+f3PpUtBEjr+OLcOm /0owEbg67Tl8D7kvbW3TF56bggjnnGspaXdNJCxSmKidn0Dp66m58wne0dUfKxC+ kQdSLLSTHewjskty7sHYmtRvTHWrGgvuZGreIPsgYJkK1ASHud9RMV8xsZyoXc2f fmOPOLr3ff7Ocbs/HqyuijLhVRq4V4kpiKiXofmlEVxf94fDHlZj18NNcszcfPEB KPpfa5majWghSxq6Y7lzFtsJl88mu5ynmfMY+YiIS0Cb2XbNkm6TD4tF/oRDVlcm ter33j0iC0mxdP6t2MdxO2QYtyjCPx8MDoc5E1nmGYYsbp2O6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3El+2uDn36M3nKb40CS54+QjBkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvMzNmOGIzZTMtN2NkNi0z NThhLWI4ODctNmEzNmYyZjhiMTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqvh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZxY/VX/9cSq4GDG0CwEFXGaV67mk4K6SWgSazgJnOwzNURNVg1KsSf cADDdRAsuM6bahNT0uS0+84Dw7ntmgXlh6GKTYkOrEzaS018HrLMpQK+VsGq6PTc rsyr3eisg5c22ujX5dCqPJZpTn8TwCWyjIHqPrdwZI1IMLgR+L1bxPWGx10trF3K UT66akzlrQCorbWXYz/zrLD+YDbKfLoaEaZr/mCiQR4eW7Nz4GbptwdC+zWsNNDQ zVAuAA0wwQC0E+iP80cz1+QWMFbrBmvoaK5q19/CMLAnUR2USoovYHnteRxXyptY cYT4BCgmPFbGU68CLbuGNzKVS4LR0t8= -----END CERTIFICATE-----Generated at Sun Oct 4 06:43:23 2026 by rpki-client