$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/eb96b8a6-7a4e-36fe-a3c7-af5767d94696.roa File: eb96b8a6-7a4e-36fe-a3c7-af5767d94696.roa (raw, json) Hash identifier: QtM1H59RjKYfFPwwn5BYI0LCVc1ZJvwPk4WCTJu1Ec8= Subject key identifier: A7:0F:4E:6E:71:D1:91:76:23:D8:AA:88:EB:51:6F:65:AB:FB:C1:A5 Certificate issuer: /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9 Certificate serial: 010D0C9F4328584FD526B3527708133A19C5C220 Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/eb96b8a6-7a4e-36fe-a3c7-af5767d94696.roa Signing time: Sat 14 Nov 2026 02:00:13 +0000 ROA not before: Sat 14 Nov 2026 02:00:13 +0000 ROA not after: Fri 12 Feb 2027 02:00:13 +0000 asID: 19905 IP address blocks: 170.10.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d5:26:b3:52:77:08:13:3a:19:c5:c2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9 Validity Not Before: Nov 14 02:00:13 2026 GMT Not After : Feb 12 02:00:13 2027 GMT Subject: CN=f8a547b1-5998-47b7-b5b5-0bc4658505b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e5:7c:73:73:c0:43:b1:12:08:31:1a:7e:32: c6:1a:6c:99:fe:77:26:a3:7e:8c:25:1a:15:b2:ab: 1a:c1:10:2d:f4:8c:27:ea:67:87:74:f0:04:c6:04: 00:6a:26:ed:08:97:f4:7d:ae:34:01:38:09:7a:50: ff:03:9b:38:56:93:e1:a1:e5:45:9a:ae:42:37:66: 22:9a:c1:45:0a:f9:f7:9f:7c:8d:91:84:34:51:08: a8:3c:53:0d:07:59:76:f6:b0:c9:96:66:77:08:5c: 5a:c1:7f:a9:ac:be:a7:73:0d:5f:07:bb:6e:12:11: 8c:a9:a4:a9:99:49:f2:70:a8:58:4a:99:bc:71:64: 97:72:ed:a7:a8:5f:af:43:b1:be:55:fe:b8:39:f5: 7e:08:45:c3:a4:d3:0c:c2:e5:14:21:25:e7:be:83: e8:81:51:2c:db:38:dd:04:24:32:04:2d:92:1f:2d: a1:a2:19:e2:f2:a8:85:6d:34:b7:dc:80:15:b3:ae: 0c:fd:1e:da:c8:e3:95:ed:67:92:53:76:32:5f:ef: 06:bd:d6:a7:63:7e:69:95:f4:01:6a:60:ea:cb:d5: 80:47:d3:0a:e2:f9:d4:a7:81:ff:e5:15:a8:3f:ef: ff:2c:bc:02:1b:62:11:42:8a:2d:67:ac:7e:e5:90: ef:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:0F:4E:6E:71:D1:91:76:23:D8:AA:88:EB:51:6F:65:AB:FB:C1:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/eb96b8a6-7a4e-36fe-a3c7-af5767d94696.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl X509v3 Authority Key Identifier: keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer sbgp-ipAddrBlock: critical IPv4: 170.10.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:c1:f4:f6:fb:d7:c8:e3:a0:c1:e1:de:b9:f0:4d:48:10:c5: 9b:9d:d4:9b:9c:39:33:8a:7c:a6:67:df:72:0e:68:bb:b2:93: 81:c3:89:91:2d:ca:1d:18:75:9d:68:8e:21:8d:54:fa:f8:f0: c6:76:f5:43:c2:2c:63:35:c6:b6:36:88:ad:4f:19:7b:31:22: a6:a7:a0:cc:9b:9e:64:31:f7:eb:39:9a:e8:1d:2a:e0:07:53: 52:d7:61:36:b2:6c:43:dd:ab:4f:c3:19:cd:6a:e0:ae:72:ef: f2:cb:13:7f:dd:1b:85:6f:cc:4a:cc:56:d1:1d:a9:aa:ef:8b: c3:05:a0:99:7e:42:ee:69:b8:63:dd:67:f3:07:dc:fb:18:90: 23:f0:24:7e:bf:9f:81:9d:16:33:58:a3:f1:d4:08:dc:dd:4f: f8:95:43:36:6d:8e:53:45:26:82:62:da:fe:7e:c7:f3:86:25: f6:32:1e:f8:3a:43:89:5d:f6:2a:9d:a8:fc:f4:af:0f:a6:43: 1c:54:57:0a:25:f1:68:94:73:41:c0:6d:7b:1a:c1:11:8a:3a: cc:09:7d:79:89:e0:4a:fb:18:0a:c6:81:1c:f5:de:75:8d:d3: ba:a3:9f:2b:cf:a7:47:04:6a:55:50:47:e4:ea:41:56:0c:d5: 5d:c8:5a:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/VJrNSdwgTOhnFwiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IxNDM3MTMtNzkyMy00ZTRkLTk0NzYtYjhlNWNlMWNh OWM5MB4XDTI2MTExNDAyMDAxM1oXDTI3MDIxMjAyMDAxM1owLzEtMCsGA1UEAxMk ZjhhNTQ3YjEtNTk5OC00N2I3LWI1YjUtMGJjNDY1ODUwNWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+V8c3PAQ7ESCDEafjLGGmyZ/ncmo36MJRoV sqsawRAt9Iwn6meHdPAExgQAaibtCJf0fa40ATgJelD/A5s4VpPhoeVFmq5CN2Yi msFFCvn3n3yNkYQ0UQioPFMNB1l29rDJlmZ3CFxawX+prL6ncw1fB7tuEhGMqaSp mUnycKhYSpm8cWSXcu2nqF+vQ7G+Vf64OfV+CEXDpNMMwuUUISXnvoPogVEs2zjd BCQyBC2SHy2hohni8qiFbTS33IAVs64M/R7ayOOV7WeSU3YyX+8GvdanY35plfQB amDqy9WAR9MK4vnUp4H/5RWoP+//LLwCG2IRQootZ6x+5ZDvswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcPTm5x0ZF2I9iqiOtRb2Wr+8GlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0 MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1Y2UxY2E5YzkvZWI5NmI4YTYtN2E0ZS0z NmZlLWEzYzctYWY1NzY3ZDk0Njk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2IxNDM3MTMtNzkyMy00ZTRkLTk0 NzYtYjhlNWNlMWNhOWM5LzdiMTQzNzEzLTc5MjMtNGU0ZC05NDc2LWI4ZTVjZTFj YTljOS5jcmwwHwYDVR0jBBgwFoAUYdUy6W27yi6kNGeQ5T4cjK+y2TAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1 Y2UxY2E5YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjB9Pb718jjoMHh3rnwTUgQxZud1JucOTOKfKZn33IOaLuyk4HDiZEt yh0YdZ1ojiGNVPr48MZ29UPCLGM1xrY2iK1PGXsxIqanoMybnmQx9+s5mugdKuAH U1LXYTaybEPdq0/DGc1q4K5y7/LLE3/dG4VvzErMVtEdqarvi8MFoJl+Qu5puGPd Z/MH3PsYkCPwJH6/n4GdFjNYo/HUCNzdT/iVQzZtjlNFJoJi2v5+x/OGJfYyHvg6 Q4ld9iqdqPz0rw+mQxxUVwol8WiUc0HAbXsawRGKOswJfXmJ4Er7GArGgRz13nWN 07qjnyvPp0cEalVQR+TqQVYM1V3IWtI= -----END CERTIFICATE-----Generated at Sun Nov 15 20:34:38 2026 by rpki-client