$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/96b5ecdf-003c-37fd-b621-8fe6b49bd2e4.roa File: 96b5ecdf-003c-37fd-b621-8fe6b49bd2e4.roa (raw, json) Hash identifier: afTKGFDrY0PsuBkS3oFEulwRoPhfYTYZlQwJNsSif1E= Subject key identifier: 5F:1A:62:DC:66:88:EB:C0:17:16:6C:EC:CC:09:5A:AE:81:DA:78:6B Certificate issuer: /CN=ee86bab0-ef7e-4e23-84fe-bcd5cee869bb Certificate serial: 010D0C9F4328584F7BB2FEDF86264DCCCBFF8280 Authority key identifier: 17:D3:83:21:A7:3C:E6:27:6D:07:DB:A2:70:2D:1B:95:C2:EE:2F:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/96b5ecdf-003c-37fd-b621-8fe6b49bd2e4.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 14618 IP address blocks: 170.52.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b2:fe:df:86:26:4d:cc:cb:ff:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee86bab0-ef7e-4e23-84fe-bcd5cee869bb Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=076e27df-15ac-4ba3-8971-40bfc9fc9d48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:12:f0:d7:cf:d3:db:0d:d5:79:00:e4:ec:96: a7:89:24:87:38:48:d2:a3:bb:b6:11:e4:5c:26:8b: 85:a7:f8:5c:30:15:20:f3:eb:8b:a1:99:65:0a:b6: fd:54:22:52:b0:eb:e0:bf:78:d9:1c:c1:cd:53:94: 98:b9:9b:7a:0a:5a:35:73:43:4f:76:d0:3b:19:cb: 7a:f8:bd:ad:71:4b:66:51:38:08:2b:77:39:72:6a: 62:5a:c3:52:23:72:71:57:fc:e4:f6:57:d8:53:00: f6:e2:98:62:8d:32:4d:a1:aa:2e:40:34:b9:a3:80: cc:a0:30:ca:c1:d6:8d:3b:75:db:08:46:6c:41:12: 5d:65:40:3c:3f:0f:bf:94:e0:b9:b1:49:dc:57:9f: 38:90:43:f0:c2:21:00:82:98:92:60:1d:c6:21:5a: f6:cf:c0:b9:60:45:9f:51:27:ec:d5:4f:4d:4b:e8: 0f:46:ba:eb:77:93:37:37:ee:f8:ef:38:f1:cb:e4: 0a:de:7b:bc:15:2e:de:eb:f8:fd:fc:16:05:b4:26: 6e:49:70:2d:ac:60:75:d9:b1:8f:a9:82:da:ee:8d: 84:b7:a0:c7:b7:9f:64:3c:2a:9e:5c:86:16:9a:83: 82:b8:81:15:76:01:5d:b1:ea:ac:2f:71:6e:36:f2: 43:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1A:62:DC:66:88:EB:C0:17:16:6C:EC:CC:09:5A:AE:81:DA:78:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/96b5ecdf-003c-37fd-b621-8fe6b49bd2e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.crl X509v3 Authority Key Identifier: keyid:17:D3:83:21:A7:3C:E6:27:6D:07:DB:A2:70:2D:1B:95:C2:EE:2F:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.cer sbgp-ipAddrBlock: critical IPv4: 170.52.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:68:07:59:1f:f3:39:2d:90:73:b4:4e:f2:bb:2b:0f:79:12: fb:d0:42:b5:10:4b:67:d8:4e:72:e1:bf:31:d0:56:a2:62:94: d2:44:32:0e:fb:cb:7e:86:35:ec:2e:71:46:21:32:9c:e5:ad: 2c:49:7c:8d:24:69:13:c7:de:fb:bd:1e:e9:91:8e:1d:9e:7d: ff:4a:e2:e1:7b:a8:95:92:32:52:81:0a:4d:9c:8f:e7:8a:0c: 66:23:35:4a:85:d6:9a:3f:96:53:c1:37:57:62:9f:73:ff:22: 7c:19:f0:85:0a:6c:0f:00:b2:47:2a:00:9e:63:dc:be:7b:e1: a8:f9:f0:e3:34:14:7d:36:de:e2:63:81:08:09:6f:0f:f0:b8: 69:8d:0d:80:5b:70:b5:6c:fc:6d:6e:f5:c4:19:d0:f7:c9:86: 24:dd:fd:05:14:55:f3:6b:24:d8:55:d4:88:c5:18:fc:30:f1: 81:ae:83:ee:3c:95:5f:77:86:3e:0f:30:4d:f4:37:84:09:53: 05:2e:ab:98:ac:5a:c5:74:b9:36:57:9f:d4:8f:bc:7e:ea:16: e4:b7:13:69:aa:27:31:e2:a6:14:97:09:6e:9f:59:6c:ce:5f: 91:d6:c2:0e:80:68:5e:1a:d5:df:28:06:a4:ac:e0:f4:ce:75: 69:9e:5a:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97sv7fhiZNzMv/goAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWU4NmJhYjAtZWY3ZS00ZTIzLTg0ZmUtYmNkNWNlZTg2 OWJiMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk MDc2ZTI3ZGYtMTVhYy00YmEzLTg5NzEtNDBiZmM5ZmM5ZDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBLw18/T2w3VeQDk7JaniSSHOEjSo7u2EeRc JouFp/hcMBUg8+uLoZllCrb9VCJSsOvgv3jZHMHNU5SYuZt6Clo1c0NPdtA7Gct6 +L2tcUtmUTgIK3c5cmpiWsNSI3JxV/zk9lfYUwD24phijTJNoaouQDS5o4DMoDDK wdaNO3XbCEZsQRJdZUA8Pw+/lOC5sUncV584kEPwwiEAgpiSYB3GIVr2z8C5YEWf USfs1U9NS+gPRrrrd5M3N+747zjxy+QK3nu8FS7e6/j9/BYFtCZuSXAtrGB12bGP qYLa7o2Et6DHt59kPCqeXIYWmoOCuIEVdgFdseqsL3FuNvJDBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8aYtxmiOvAFxZs7MwJWq6B2nhrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lZTg2 YmFiMC1lZjdlLTRlMjMtODRmZS1iY2Q1Y2VlODY5YmIvOTZiNWVjZGYtMDAzYy0z N2ZkLWI2MjEtOGZlNmI0OWJkMmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZWU4NmJhYjAtZWY3ZS00ZTIzLTg0 ZmUtYmNkNWNlZTg2OWJiL2VlODZiYWIwLWVmN2UtNGUyMy04NGZlLWJjZDVjZWU4 NjliYi5jcmwwHwYDVR0jBBgwFoAUF9ODIac85idtB9uicC0blcLuLw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lZTg2YmFiMC1lZjdlLTRlMjMtODRmZS1iY2Q1 Y2VlODY5YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqjQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNoB1kf8zktkHO0TvK7Kw95EvvQQrUQS2fYTnLhvzHQVqJilNJEMg77 y36GNewucUYhMpzlrSxJfI0kaRPH3vu9HumRjh2eff9K4uF7qJWSMlKBCk2cj+eK DGYjNUqF1po/llPBN1din3P/InwZ8IUKbA8AskcqAJ5j3L574aj58OM0FH023uJj gQgJbw/wuGmNDYBbcLVs/G1u9cQZ0PfJhiTd/QUUVfNrJNhV1IjFGPww8YGug+48 lV93hj4PME30N4QJUwUuq5isWsV0uTZXn9SPvH7qFuS3E2mqJzHiphSXCW6fWWzO X5HWwg6AaF4a1d8oBqSs4PTOdWmeWjs= -----END CERTIFICATE-----Generated at Thu Nov 5 09:07:24 2026 by rpki-client