$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/81e84a73-b92b-4f3f-96ca-1c70561af28d/2af4c51e-95d7-352e-8fea-fdb5eb0c21f1.roa File: 2af4c51e-95d7-352e-8fea-fdb5eb0c21f1.roa (raw, json) Hash identifier: wmnXvyveG12uKTI6rIGnwclUM/8TIBIeMh0YdLBbmKg= Subject key identifier: 04:39:65:1D:B1:A6:96:65:37:AF:47:F5:47:CD:F0:5C:B2:8A:A4:1F Certificate issuer: /CN=81e84a73-b92b-4f3f-96ca-1c70561af28d Certificate serial: 010D0C9F4328584F480D40FB3551FBED6B824FC0 Authority key identifier: 48:32:A1:9A:C8:25:16:7A:3C:A1:1C:B2:2B:B2:24:7D:E6:3F:27:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/81e84a73-b92b-4f3f-96ca-1c70561af28d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/81e84a73-b92b-4f3f-96ca-1c70561af28d/2af4c51e-95d7-352e-8fea-fdb5eb0c21f1.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 10879 IP address blocks: 170.174.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/81e84a73-b92b-4f3f-96ca-1c70561af28d/81e84a73-b92b-4f3f-96ca-1c70561af28d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/81e84a73-b92b-4f3f-96ca-1c70561af28d/81e84a73-b92b-4f3f-96ca-1c70561af28d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/81e84a73-b92b-4f3f-96ca-1c70561af28d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:40:fb:35:51:fb:ed:6b:82:4f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81e84a73-b92b-4f3f-96ca-1c70561af28d Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=2b911dd1-6d1e-416d-ba49-55253acb375c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:48:11:78:33:31:dd:f0:dc:a1:62:35:6b:cc: c1:00:89:cb:e6:d5:b0:20:fa:ae:e2:3e:10:9d:ea: 91:07:22:34:b6:8a:cb:fb:ff:17:59:75:6b:4a:c4: 7e:1b:2f:08:3a:f8:17:80:ee:48:ab:3a:2c:b5:b3: 97:7b:31:0c:ae:b6:e4:dc:a4:c3:c8:a2:29:b9:89: 94:79:b7:18:63:07:54:4e:84:88:ca:49:06:0c:71: c4:86:ef:61:b2:c3:ad:5e:c5:8b:9f:c4:c8:e0:d3: c3:17:63:26:08:27:12:a4:70:d1:d0:ad:5f:e5:f0: 0b:c5:76:1f:92:43:90:90:39:c3:2a:f2:b7:59:e7: c2:e8:45:28:eb:1c:3e:ab:f7:57:06:2a:ad:93:06: 14:26:ad:d0:e4:5c:1a:f6:82:f8:b3:7b:6f:b0:ac: 1d:1d:d4:83:20:45:00:53:2d:4a:fc:be:9d:c7:65: 3c:bf:55:9d:62:6f:3e:62:18:ba:d9:03:e8:73:74: ff:64:7f:a0:05:d7:ca:22:6d:a0:48:09:e3:dc:77: 64:18:aa:d6:52:e6:cf:a0:a4:ba:85:28:db:ce:7a: c6:1e:15:ef:48:f1:fe:00:12:dc:f6:1a:48:c5:57: 95:fb:be:df:79:34:57:c3:1f:a7:84:cc:a0:33:27: f9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:39:65:1D:B1:A6:96:65:37:AF:47:F5:47:CD:F0:5C:B2:8A:A4:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/81e84a73-b92b-4f3f-96ca-1c70561af28d/2af4c51e-95d7-352e-8fea-fdb5eb0c21f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/81e84a73-b92b-4f3f-96ca-1c70561af28d/81e84a73-b92b-4f3f-96ca-1c70561af28d.crl X509v3 Authority Key Identifier: keyid:48:32:A1:9A:C8:25:16:7A:3C:A1:1C:B2:2B:B2:24:7D:E6:3F:27:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/81e84a73-b92b-4f3f-96ca-1c70561af28d.cer sbgp-ipAddrBlock: critical IPv4: 170.174.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:54:5c:09:80:5b:dd:8c:be:5a:52:83:ef:9a:e4:80:16:da: bd:b0:79:ca:6c:7a:ac:7a:2f:14:cd:d7:5f:12:a6:fd:10:32: cf:71:bf:81:e5:e2:74:ed:02:da:d5:c9:ee:1b:ca:fa:e0:eb: f8:02:97:6b:ca:7b:94:9e:7d:30:42:61:0a:29:7d:b6:84:80: ae:23:c4:8e:32:5f:7c:13:0a:d4:7e:ba:5f:ce:1e:0a:04:3c: 34:93:20:c9:87:13:27:8d:89:4a:8f:1b:00:01:60:47:86:f5: 3e:98:7f:c4:56:6e:52:a3:c6:79:55:f5:b6:6e:94:d3:fb:53: 5a:bc:0d:9f:1e:59:3b:15:0e:52:b1:35:3c:54:76:d0:33:29: e5:dd:e0:6e:56:55:84:24:95:01:15:ed:18:72:07:e0:83:b4: 1b:56:a3:a1:a5:a7:1b:e2:11:fa:0b:28:d2:77:26:e1:38:2d: d3:59:ea:b6:98:f4:8d:33:ea:1e:26:9d:6a:08:49:3f:ea:f4: ea:da:37:02:04:9d:1b:2b:fe:96:18:f5:7a:d8:ec:9a:ef:d5: b4:f8:bf:e2:e2:e3:38:80:cb:53:3e:d5:61:73:56:78:80:d2: b3:4f:77:b5:51:55:2c:60:5d:c0:b5:d3:f5:dc:64:ae:66:19: ec:00:bc:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDUD7NVH77WuCT8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODFlODRhNzMtYjkyYi00ZjNmLTk2Y2EtMWM3MDU2MWFm MjhkMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk MmI5MTFkZDEtNmQxZS00MTZkLWJhNDktNTUyNTNhY2IzNzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0gReDMx3fDcoWI1a8zBAInL5tWwIPqu4j4Q neqRByI0torL+/8XWXVrSsR+Gy8IOvgXgO5IqzostbOXezEMrrbk3KTDyKIpuYmU ebcYYwdUToSIykkGDHHEhu9hssOtXsWLn8TI4NPDF2MmCCcSpHDR0K1f5fALxXYf kkOQkDnDKvK3WefC6EUo6xw+q/dXBiqtkwYUJq3Q5Fwa9oL4s3tvsKwdHdSDIEUA Uy1K/L6dx2U8v1WdYm8+Yhi62QPoc3T/ZH+gBdfKIm2gSAnj3HdkGKrWUubPoKS6 hSjbznrGHhXvSPH+ABLc9hpIxVeV+77feTRXwx+nhMygMyf5JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQ5ZR2xppZlN69H9UfN8FyyiqQfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84MWU4 NGE3My1iOTJiLTRmM2YtOTZjYS0xYzcwNTYxYWYyOGQvMmFmNGM1MWUtOTVkNy0z NTJlLThmZWEtZmRiNWViMGMyMWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvODFlODRhNzMtYjkyYi00ZjNmLTk2 Y2EtMWM3MDU2MWFmMjhkLzgxZTg0YTczLWI5MmItNGYzZi05NmNhLTFjNzA1NjFh ZjI4ZC5jcmwwHwYDVR0jBBgwFoAUSDKhmsglFno8oRyyK7IkfeY/J+QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS84MWU4NGE3My1iOTJiLTRmM2YtOTZjYS0xYzcw NTYxYWYyOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqq4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpUXAmAW92MvlpSg++a5IAW2r2wecpseqx6LxTN118Spv0QMs9xv4Hl 4nTtAtrVye4byvrg6/gCl2vKe5SefTBCYQopfbaEgK4jxI4yX3wTCtR+ul/OHgoE PDSTIMmHEyeNiUqPGwABYEeG9T6Yf8RWblKjxnlV9bZulNP7U1q8DZ8eWTsVDlKx NTxUdtAzKeXd4G5WVYQklQEV7RhyB+CDtBtWo6GlpxviEfoLKNJ3JuE4LdNZ6raY 9I0z6h4mnWoIST/q9OraNwIEnRsr/pYY9XrY7Jrv1bT4v+Li4ziAy1M+1WFzVniA 0rNPd7VRVSxgXcC10/XcZK5mGewAvPI= -----END CERTIFICATE-----Generated at Fri Sep 25 21:07:58 2026 by rpki-client