$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9f1ddcc0-7256-4b05-b3c2-b34a7c3dd8e0/8263170f-cfa0-3438-9643-33db823316d0.roa File: 8263170f-cfa0-3438-9643-33db823316d0.roa (raw, json) Hash identifier: vfvoIJ1sMp5HIIY+F/QeJnfZ0+iccwNkpai+kCCXxho= Subject key identifier: 7E:67:5D:18:D8:3C:02:E0:E4:A6:80:84:8E:52:E1:80:27:F7:56:32 Certificate issuer: /CN=9f1ddcc0-7256-4b05-b3c2-b34a7c3dd8e0 Certificate serial: 010D0C9F4328584F3B7D24A1547A1FA77303BB80 Authority key identifier: 0F:C6:68:7E:D3:FC:17:D4:E1:F4:CF:F0:F3:E9:7D:A9:BD:3C:CD:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9f1ddcc0-7256-4b05-b3c2-b34a7c3dd8e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9f1ddcc0-7256-4b05-b3c2-b34a7c3dd8e0/8263170f-cfa0-3438-9643-33db823316d0.roa Signing time: Sun 20 Sep 2026 01:00:11 +0000 ROA not before: Sun 20 Sep 2026 01:00:11 +0000 ROA not after: Sat 19 Dec 2026 02:00:11 +0000 asID: 14618 IP address blocks: 170.48.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9f1ddcc0-7256-4b05-b3c2-b34a7c3dd8e0/9f1ddcc0-7256-4b05-b3c2-b34a7c3dd8e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9f1ddcc0-7256-4b05-b3c2-b34a7c3dd8e0/9f1ddcc0-7256-4b05-b3c2-b34a7c3dd8e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9f1ddcc0-7256-4b05-b3c2-b34a7c3dd8e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:7d:24:a1:54:7a:1f:a7:73:03:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f1ddcc0-7256-4b05-b3c2-b34a7c3dd8e0 Validity Not Before: Sep 20 01:00:11 2026 GMT Not After : Dec 19 02:00:11 2026 GMT Subject: CN=186adc0e-98a5-46f4-90c6-2b74acf975f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5f:56:68:58:b4:39:1e:b1:7b:45:5d:1d:32: 35:38:e9:f5:aa:97:e5:01:5a:6a:da:01:df:92:8f: fc:35:79:48:c8:2e:2e:59:0f:73:2a:8c:58:20:06: 7c:88:b7:d3:0c:47:2a:3e:f2:66:d5:dc:de:93:33: 4e:3e:20:66:1b:7d:88:ed:76:2d:b9:25:3c:97:80: df:f6:cc:55:4e:76:da:f6:c3:e1:f5:8a:6b:41:aa: 94:a2:f6:fc:a7:a5:65:42:1e:6a:2f:34:e5:3e:48: cc:b9:7a:de:76:65:35:05:79:a0:29:06:a7:62:fa: e6:f1:0d:87:d6:ab:63:46:0d:4d:25:67:e7:62:03: a6:b2:49:4d:d2:dc:6a:06:f1:fe:93:3a:f2:a8:ec: 57:a9:09:6f:a4:1e:f4:5c:30:5b:ea:0e:7c:11:f0: 6e:96:eb:91:34:3e:34:b8:55:95:01:a4:43:61:c5: c9:f6:dd:a7:7c:ef:fc:7a:80:5e:e5:e7:23:0a:43: 74:c2:de:1a:cc:8f:81:85:ed:89:53:cd:25:fb:32: 49:41:c1:99:8b:e2:e7:4c:d7:c1:4b:4a:f1:1d:60: 3e:b0:65:e4:ae:e9:d3:d2:cb:02:cf:3d:6f:47:6d: 68:77:3c:6d:0c:32:db:58:49:fe:59:e2:bb:db:6e: 0b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:67:5D:18:D8:3C:02:E0:E4:A6:80:84:8E:52:E1:80:27:F7:56:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9f1ddcc0-7256-4b05-b3c2-b34a7c3dd8e0/8263170f-cfa0-3438-9643-33db823316d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9f1ddcc0-7256-4b05-b3c2-b34a7c3dd8e0/9f1ddcc0-7256-4b05-b3c2-b34a7c3dd8e0.crl X509v3 Authority Key Identifier: keyid:0F:C6:68:7E:D3:FC:17:D4:E1:F4:CF:F0:F3:E9:7D:A9:BD:3C:CD:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9f1ddcc0-7256-4b05-b3c2-b34a7c3dd8e0.cer sbgp-ipAddrBlock: critical IPv4: 170.48.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:d3:04:e5:56:86:66:cb:d7:c2:4e:d7:38:87:ad:c8:19:2b: 5d:e2:ed:d0:14:63:19:3f:76:98:fc:85:72:59:93:42:43:80: e9:e7:bc:6d:31:1d:5d:3b:37:2a:9e:da:dc:07:bd:92:b9:a3: 06:6f:4f:65:0d:e5:68:4a:cc:5a:42:39:bc:78:51:c6:d6:88: 7c:0f:fe:3d:9c:f9:b4:42:fc:41:36:37:96:d6:89:c7:db:db: ec:fc:ce:69:ec:27:cf:c8:be:9f:1b:88:28:6f:d0:1c:6f:ad: ad:34:f1:67:ed:56:4a:ee:54:81:dd:fa:a1:1f:dd:16:5f:e5: 35:58:74:3c:e1:de:6e:8d:3f:29:13:72:b8:86:37:ff:cf:09: b4:82:86:49:6f:b1:ad:d7:e6:c9:fe:d2:9d:c8:46:66:48:c3: ae:df:88:a1:b0:d5:74:48:22:2b:73:db:9b:a2:dc:64:f8:38: 4e:d1:30:1f:28:4c:21:58:23:93:5e:9b:be:29:6f:b5:8d:8a: 8e:8f:a4:84:42:73:6a:f7:b0:8b:44:b1:10:4f:22:d2:71:c5: 37:66:1c:29:23:a0:71:c2:29:4b:08:54:3c:5f:92:4a:fa:84: 99:97:6e:14:93:96:63:32:ec:58:fe:26:11:2f:93:a3:f0:bb: f4:59:c4:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE87fSShVHofp3MDu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWYxZGRjYzAtNzI1Ni00YjA1LWIzYzItYjM0YTdjM2Rk OGUwMB4XDTI2MDkyMDAxMDAxMVoXDTI2MTIxOTAyMDAxMVowLzEtMCsGA1UEAxMk MTg2YWRjMGUtOThhNS00NmY0LTkwYzYtMmI3NGFjZjk3NWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyV9WaFi0OR6xe0VdHTI1OOn1qpflAVpq2gHf ko/8NXlIyC4uWQ9zKoxYIAZ8iLfTDEcqPvJm1dzekzNOPiBmG32I7XYtuSU8l4Df 9sxVTnba9sPh9YprQaqUovb8p6VlQh5qLzTlPkjMuXredmU1BXmgKQanYvrm8Q2H 1qtjRg1NJWfnYgOmsklN0txqBvH+kzryqOxXqQlvpB70XDBb6g58EfBuluuRND40 uFWVAaRDYcXJ9t2nfO/8eoBe5ecjCkN0wt4azI+Bhe2JU80l+zJJQcGZi+LnTNfB S0rxHWA+sGXkrunT0ssCzz1vR21odzxtDDLbWEn+WeK7224LRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5nXRjYPALg5KaAhI5S4YAn91YyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85ZjFk ZGNjMC03MjU2LTRiMDUtYjNjMi1iMzRhN2MzZGQ4ZTAvODI2MzE3MGYtY2ZhMC0z NDM4LTk2NDMtMzNkYjgyMzMxNmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOWYxZGRjYzAtNzI1Ni00YjA1LWIz YzItYjM0YTdjM2RkOGUwLzlmMWRkY2MwLTcyNTYtNGIwNS1iM2MyLWIzNGE3YzNk ZDhlMC5jcmwwHwYDVR0jBBgwFoAUD8ZoftP8F9Th9M/w8+l9qb08zUAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85ZjFkZGNjMC03MjU2LTRiMDUtYjNjMi1iMzRh N2MzZGQ4ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqjCMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXTBOVWhmbL18JO1ziHrcgZK13i7dAUYxk/dpj8hXJZk0JDgOnnvG0x HV07Nyqe2twHvZK5owZvT2UN5WhKzFpCObx4UcbWiHwP/j2c+bRC/EE2N5bWicfb 2+z8zmnsJ8/Ivp8biChv0Bxvra008WftVkruVIHd+qEf3RZf5TVYdDzh3m6NPykT criGN//PCbSChklvsa3X5sn+0p3IRmZIw67fiKGw1XRIIitz25ui3GT4OE7RMB8o TCFYI5Nem74pb7WNio6PpIRCc2r3sItEsRBPItJxxTdmHCkjoHHCKUsIVDxfkkr6 hJmXbhSTlmMy7Fj+JhEvk6Pwu/RZxLY= -----END CERTIFICATE-----Generated at Mon Sep 21 09:09:15 2026 by rpki-client