$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/4b8e6d7e-4845-3fc7-b3be-d6439fb3015b.roa File: 4b8e6d7e-4845-3fc7-b3be-d6439fb3015b.roa (raw, json) Hash identifier: eCHo6U5YLznKKQnzDFFIX1NwIYvt1Qc3JxLxdpPtoJA= Subject key identifier: 4C:EF:CA:A0:2A:B0:E6:C9:35:33:A9:6F:F5:A3:82:56:07:5A:9A:88 Certificate issuer: /CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d Certificate serial: 010D0C9F4328584F3E47EB233642D5E768FEB6C0 Authority key identifier: BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/4b8e6d7e-4845-3fc7-b3be-d6439fb3015b.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 33343 IP address blocks: 170.110.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:eb:23:36:42:d5:e7:68:fe:b6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=cb88094d-4ef1-42d2-88f0-8da11fbeffb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7f:21:f6:50:3a:f4:46:52:d4:af:b2:16:1d: fe:75:5e:d2:2f:b2:4f:df:6e:88:3c:d1:77:61:b9: 71:3d:e1:24:83:43:d5:6a:29:fc:a3:9f:e9:78:13: dc:69:3d:95:3d:73:5a:8f:0f:14:c6:d3:01:ac:e8: 66:a9:26:72:e9:8b:19:2b:b8:7c:14:b4:bb:df:91: 09:53:88:30:cc:af:fa:e3:dd:aa:81:7b:0d:e5:d1: 70:c0:43:98:89:b3:8e:52:d6:b9:ba:10:41:47:ec: 5f:a5:4c:d8:7c:69:23:fc:d6:56:da:6b:d5:59:c4: 6d:3a:6c:c6:f4:32:d1:de:5a:77:3d:06:7e:f2:20: 9d:81:39:da:53:5b:f1:0c:a5:ae:d3:a8:03:bd:ee: 7d:2b:0d:88:c3:85:57:97:0c:6c:45:37:af:98:ed: c0:9d:53:d9:99:e9:7f:57:3f:32:44:d5:e4:24:ae: c6:df:96:44:59:ec:49:5b:bd:4f:5e:5c:d8:29:4f: b8:86:bb:c9:5f:7d:b2:ba:5c:a1:f1:85:69:c4:7e: ce:a8:16:09:30:b4:6c:10:2f:a8:b5:9a:97:61:5e: a6:a2:d3:9d:23:27:09:13:2d:26:cb:1d:4a:01:f6: c0:47:bc:c3:aa:52:2c:68:67:e2:86:4a:85:7a:0b: 8a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:EF:CA:A0:2A:B0:E6:C9:35:33:A9:6F:F5:A3:82:56:07:5A:9A:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/4b8e6d7e-4845-3fc7-b3be-d6439fb3015b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl X509v3 Authority Key Identifier: keyid:BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer sbgp-ipAddrBlock: critical IPv4: 170.110.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:a8:c9:c6:2e:da:55:4c:74:99:b7:72:68:26:6c:f0:81:8d: 51:50:2d:5c:22:8d:5c:53:60:f9:03:e3:da:76:62:92:e0:93: 8c:a8:bb:f6:4d:56:bd:7f:87:57:66:e4:65:89:ad:6c:86:bc: ed:80:2a:28:e8:52:dc:7d:6d:27:9c:a1:fe:59:a8:b3:9e:ec: 1b:eb:87:54:aa:36:60:54:7c:d0:e5:4d:0f:02:2b:65:d9:76: d7:5f:d9:07:02:66:98:88:44:2b:65:cb:34:d2:65:05:0d:f2: 60:76:42:9a:0a:6a:84:3d:7b:d6:48:68:64:92:a0:2a:f6:c5: 9e:ad:ef:59:35:3f:fe:c6:9c:97:3e:74:c1:2c:1a:f1:30:f0: ca:14:a8:43:e4:5c:73:1c:b6:bd:f1:51:de:7d:07:1e:d6:e0: ff:61:9d:77:d6:68:43:97:f4:46:79:35:ae:8e:65:f1:5d:8c: 68:6b:98:19:50:87:33:14:4f:ee:e6:c7:ff:f6:26:47:cc:90: f9:2e:47:43:9c:33:c5:f9:04:a7:94:ef:54:36:65:2f:8c:27: c4:03:f4:31:bb:e7:31:f5:91:8c:17:7b:30:45:0e:2c:bf:90: 7f:81:98:4e:96:e4:8d:79:f2:db:a4:cf:11:e3:76:ca:ae:d0: 0b:50:8f:d4 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8+R+sjNkLV52j+tsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGJlMGQxYTQtMmM4OC00NTk2LTgxZDctM2I2Njg1ZTA0 YTJkMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk Y2I4ODA5NGQtNGVmMS00MmQyLTg4ZjAtOGRhMTFmYmVmZmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH8h9lA69EZS1K+yFh3+dV7SL7JP326IPNF3 YblxPeEkg0PVain8o5/peBPcaT2VPXNajw8UxtMBrOhmqSZy6YsZK7h8FLS735EJ U4gwzK/6492qgXsN5dFwwEOYibOOUta5uhBBR+xfpUzYfGkj/NZW2mvVWcRtOmzG 9DLR3lp3PQZ+8iCdgTnaU1vxDKWu06gDve59Kw2Iw4VXlwxsRTevmO3AnVPZmel/ Vz8yRNXkJK7G35ZEWexJW71PXlzYKU+4hrvJX32yulyh8YVpxH7OqBYJMLRsEC+o tZqXYV6motOdIycJEy0myx1KAfbAR7zDqlIsaGfihkqFeguK8QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEzvyqAqsObJNTOpb/WjglYHWpqIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wYmUw ZDFhNC0yYzg4LTQ1OTYtODFkNy0zYjY2ODVlMDRhMmQvNGI4ZTZkN2UtNDg0NS0z ZmM3LWIzYmUtZDY0MzlmYjMwMTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMGJlMGQxYTQtMmM4OC00NTk2LTgx ZDctM2I2Njg1ZTA0YTJkLzBiZTBkMWE0LTJjODgtNDU5Ni04MWQ3LTNiNjY4NWUw NGEyZC5jcmwwHwYDVR0jBBgwFoAUv5vktT4TlR8HU9jpDI5FWg61DIIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wYmUwZDFhNC0yYzg4LTQ1OTYtODFkNy0zYjY2 ODVlMDRhMmQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqm4wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAwKjJxi7aVUx0mbdyaCZs8IGNUVAtXCKNXFNg+QPj2nZikuCTjKi79k1W vX+HV2bkZYmtbIa87YAqKOhS3H1tJ5yh/lmos57sG+uHVKo2YFR80OVNDwIrZdl2 11/ZBwJmmIhEK2XLNNJlBQ3yYHZCmgpqhD171khoZJKgKvbFnq3vWTU//saclz50 wSwa8TDwyhSoQ+Rccxy2vfFR3n0HHtbg/2Gdd9ZoQ5f0Rnk1ro5l8V2MaGuYGVCH MxRP7ubH//YmR8yQ+S5HQ5wzxfkEp5TvVDZlL4wnxAP0MbvnMfWRjBd7MEUOLL+Q f4GYTpbkjXny26TPEeN2yq7QC1CP1A== -----END CERTIFICATE-----Generated at Sun Sep 27 10:35:48 2026 by rpki-client