$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/4dd7eaf8-2a55-30da-b5d5-4132699801c3.roa File: 4dd7eaf8-2a55-30da-b5d5-4132699801c3.roa (raw, json) Hash identifier: ShJm23kV7IT+2IsiewsgIy6FoRV7WaNpJHWQzviz3ww= Subject key identifier: F2:4A:18:09:A2:B9:2D:25:10:9F:64:60:EC:ED:5E:48:29:D6:DF:1D Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584F6E1C74D9F48AF8CC93D65300 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/4dd7eaf8-2a55-30da-b5d5-4132699801c3.roa Signing time: Thu 08 Oct 2026 04:11:42 +0000 ROA not before: Thu 08 Oct 2026 04:11:42 +0000 ROA not after: Wed 06 Jan 2027 05:11:42 +0000 asID: 7270 IP address blocks: 169.132.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6e:1c:74:d9:f4:8a:f8:cc:93:d6:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Oct 8 04:11:42 2026 GMT Not After : Jan 6 05:11:42 2027 GMT Subject: CN=fbbc7309-9b9b-4e3e-aa0d-77e159e38904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:db:42:ea:e7:59:5e:e6:9f:b2:cb:24:f0:93: 66:c6:0f:06:43:a7:68:1f:4f:66:4f:52:e0:e8:2a: c5:1d:9f:35:c6:8a:39:dd:d7:45:c3:c3:98:9b:12: af:d4:a0:19:8a:f9:9f:15:21:8a:4c:29:0d:b0:52: dc:e2:e9:f7:c1:cb:2b:06:92:b5:89:0a:bf:3a:73: 66:84:e1:b1:68:7a:f3:07:10:b7:db:76:60:95:4e: 8e:8c:07:49:9a:3c:60:b4:e5:e5:02:25:a2:be:b9: ea:d6:51:17:79:36:09:3f:73:b4:18:5d:1a:c2:8b: 84:af:b4:e3:fd:92:9c:da:d9:70:d3:22:a7:48:dd: 48:5e:3c:68:99:d9:b1:fc:3c:21:b7:ad:3a:0b:45: 15:69:2a:e3:84:50:56:81:5e:3f:b6:d0:3e:16:6b: f1:88:b6:f5:f8:20:d7:11:9e:d4:5f:71:5d:3b:0f: a0:1a:28:c2:95:f3:cb:44:8a:60:bd:4a:40:a8:1e: fd:a8:3f:98:9b:12:93:d9:39:0d:8a:4d:53:c5:14: 53:76:a2:51:56:4e:04:bf:d0:b7:22:f5:1d:ec:16: 89:ce:8d:bf:2d:94:b1:3c:58:d4:94:da:dc:85:6d: 60:e9:e1:b5:3b:d5:a7:09:79:b5:0b:b9:69:05:77: db:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:4A:18:09:A2:B9:2D:25:10:9F:64:60:EC:ED:5E:48:29:D6:DF:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/4dd7eaf8-2a55-30da-b5d5-4132699801c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 169.132.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:14:84:a2:21:b1:03:e2:2e:1e:01:dc:86:c2:d0:91:a7:13: dc:4e:db:40:e1:e1:77:7d:bb:54:c7:47:fb:74:65:0d:44:01: d5:a6:cd:e9:98:b9:d5:51:f2:e1:c4:69:c6:86:ef:27:d4:35: 61:cd:c6:84:71:4f:7a:09:4f:a1:0b:5e:66:f9:43:79:7e:38: 0e:06:46:b9:15:c1:ec:f0:b8:93:8c:6a:91:05:4b:f5:ca:55: fe:ba:6f:76:3b:6f:88:08:a7:4d:7e:80:79:35:1c:c4:fd:e7: 1f:88:03:a6:01:67:33:09:98:a3:55:ab:0a:a2:71:8e:bb:c9: f1:6a:e9:a1:0d:08:04:ac:1b:ba:dd:be:33:f1:e0:b5:f2:62: c1:fc:f0:a3:b0:83:70:a7:31:8b:ea:b4:a0:7c:1b:dc:f6:75: 5a:ab:59:7a:a1:62:01:a2:15:c8:94:d9:ef:fc:17:ee:77:34: 15:9e:4b:d8:55:d8:96:3d:82:8c:73:38:5c:15:b5:ed:4a:fc: 64:54:5d:f6:40:8f:c7:0d:d5:45:97:0c:46:7a:81:78:2a:5d: 5b:cf:3a:02:ac:fb:7f:84:d2:fd:06:01:fc:61:33:04:38:5c: 42:fb:56:1c:b2:05:b7:01:cd:7f:f3:03:bc:f2:95:13:76:06: 92:21:9a:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9uHHTZ9Ir4zJPWUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI2MTAwODA0MTE0MloXDTI3MDEwNjA1MTE0MlowLzEtMCsGA1UEAxMk ZmJiYzczMDktOWI5Yi00ZTNlLWFhMGQtNzdlMTU5ZTM4OTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9tC6udZXuafsssk8JNmxg8GQ6doH09mT1Lg 6CrFHZ81xoo53ddFw8OYmxKv1KAZivmfFSGKTCkNsFLc4un3wcsrBpK1iQq/OnNm hOGxaHrzBxC323ZglU6OjAdJmjxgtOXlAiWivrnq1lEXeTYJP3O0GF0awouEr7Tj /ZKc2tlw0yKnSN1IXjxomdmx/Dwht606C0UVaSrjhFBWgV4/ttA+FmvxiLb1+CDX EZ7UX3FdOw+gGijClfPLRIpgvUpAqB79qD+YmxKT2TkNik1TxRRTdqJRVk4Ev9C3 IvUd7BaJzo2/LZSxPFjUlNrchW1g6eG1O9WnCXm1C7lpBXfb6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJKGAmiuS0lEJ9kYOztXkgp1t8dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvNGRkN2VhZjgtMmE1NS0z MGRhLWI1ZDUtNDEzMjY5OTgwMWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqYSqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQUhKIhsQPiLh4B3IbC0JGnE9xO20Dh4Xd9u1THR/t0ZQ1EAdWmzemY udVR8uHEacaG7yfUNWHNxoRxT3oJT6ELXmb5Q3l+OA4GRrkVwezwuJOMapEFS/XK Vf66b3Y7b4gIp01+gHk1HMT95x+IA6YBZzMJmKNVqwqicY67yfFq6aENCASsG7rd vjPx4LXyYsH88KOwg3CnMYvqtKB8G9z2dVqrWXqhYgGiFciU2e/8F+53NBWeS9hV 2JY9goxzOFwVte1K/GRUXfZAj8cN1UWXDEZ6gXgqXVvPOgKs+3+E0v0GAfxhMwQ4 XEL7VhyyBbcBzX/zA7zylRN2BpIhmsA= -----END CERTIFICATE-----Generated at Thu Oct 8 10:08:28 2026 by rpki-client