$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0b4d9667-f82f-3c3e-906a-0f67b951d71e.roa File: 0b4d9667-f82f-3c3e-906a-0f67b951d71e.roa (raw, json) Hash identifier: Uq3LgvWdU4g0LsdYkUVq6gk7qw5OQWJFWEfFef1l+YE= Subject key identifier: F2:C7:7F:EC:97:97:59:88:68:C8:30:48:49:B2:CF:87:E6:77:EE:06 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584EDDF74447BEA4E6327DC8F200 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0b4d9667-f82f-3c3e-906a-0f67b951d71e.roa Signing time: Mon 17 Aug 2026 13:00:11 +0000 ROA not before: Mon 17 Aug 2026 13:00:11 +0000 ROA not after: Sun 15 Nov 2026 14:00:11 +0000 asID: 22616 IP address blocks: 170.85.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dd:f7:44:47:be:a4:e6:32:7d:c8:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 17 13:00:11 2026 GMT Not After : Nov 15 14:00:11 2026 GMT Subject: CN=dec50570-eb50-4dbd-9051-7326a0381402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:14:7b:59:81:a4:d2:b4:79:9f:27:e4:25:19: 55:b2:c9:a1:4e:0f:16:da:6b:83:70:ce:2a:5b:b5: 6d:33:c0:c7:57:db:b6:35:f0:92:cc:70:6f:32:fc: cc:8c:90:02:cb:50:d9:c6:d4:6b:80:e3:e2:c0:4c: c2:ae:5a:b2:dc:c5:3f:25:4c:fa:5e:bd:3e:ad:91: c2:c3:54:32:e6:60:4f:be:99:6d:db:0e:20:f3:50: 7c:96:8d:47:7d:59:26:d8:86:1a:ca:30:02:fe:ac: cf:1c:eb:2a:fa:e1:f3:46:01:92:6c:70:b5:b4:f8: 99:85:de:f7:8a:0b:af:4e:a4:38:52:38:fd:45:89: 95:46:7c:33:38:b5:ba:ea:7f:cb:1c:22:75:ea:36: f6:db:91:ae:d4:1f:43:a9:9c:aa:81:6d:41:80:3e: c3:60:88:f7:c8:12:c9:46:7e:ea:09:42:40:69:b5: 7b:89:32:2a:6d:a0:a4:ad:c7:b0:88:23:d7:c1:d8: cc:87:ab:99:af:6d:08:03:32:b6:b2:08:ae:fc:60: c8:27:1b:4c:c2:3f:87:f9:d7:5f:f4:75:18:da:ff: 5a:fb:5f:82:15:f7:79:f3:07:47:d3:07:0c:6d:c3: a3:e8:17:04:7a:e3:d3:e2:b3:00:32:31:8e:56:d2: 7e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C7:7F:EC:97:97:59:88:68:C8:30:48:49:B2:CF:87:E6:77:EE:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0b4d9667-f82f-3c3e-906a-0f67b951d71e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:26:15:6b:fe:c4:51:1c:f3:c1:e3:cc:0d:d6:0a:c1:e0:04: 8c:cb:c9:9c:3a:d2:12:59:d9:11:4d:1b:4e:2f:b6:31:a4:3d: 3c:de:a3:d7:29:b5:0c:ec:8f:12:5f:66:9e:49:15:bd:98:f8: fd:02:a6:21:24:91:4b:6b:55:4d:26:11:a1:4f:1a:a7:1c:13: db:5c:d1:a0:a4:04:6f:af:68:c5:df:fc:9b:42:e4:d5:2b:cf: 62:c1:74:10:a8:45:16:d3:2e:2a:2c:24:83:ee:bc:19:f2:6a: 18:89:1d:11:e5:74:5c:5f:d0:53:46:c6:72:3c:cd:ea:8c:be: 12:71:4c:13:2d:43:9b:0a:a3:ef:40:ef:54:fd:ed:aa:e1:b9: 3d:e1:13:82:6b:10:c4:14:cf:b9:92:30:50:e9:0f:67:43:af: ab:d2:80:8f:8b:61:97:f7:ce:53:98:64:dd:a2:e3:15:ee:f5: f3:ee:48:a1:89:7a:c7:09:a5:5b:ef:12:35:3f:b7:4c:8b:df: ae:ca:a2:98:b8:eb:f2:e2:12:14:7a:4e:d2:52:1e:0b:cb:93: b8:94:51:25:b9:b9:17:b0:67:94:03:8d:aa:ce:c7:47:49:a2: 7c:a9:d1:1f:5f:de:d9:f7:de:64:93:dc:41:2d:c1:30:2e:64: 10:41:66:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7d90RHvqTmMn3I8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDgxNzEzMDAxMVoXDTI2MTExNTE0MDAxMVowLzEtMCsGA1UEAxMk ZGVjNTA1NzAtZWI1MC00ZGJkLTkwNTEtNzMyNmEwMzgxNDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixR7WYGk0rR5nyfkJRlVssmhTg8W2muDcM4q W7VtM8DHV9u2NfCSzHBvMvzMjJACy1DZxtRrgOPiwEzCrlqy3MU/JUz6Xr0+rZHC w1Qy5mBPvplt2w4g81B8lo1HfVkm2IYayjAC/qzPHOsq+uHzRgGSbHC1tPiZhd73 iguvTqQ4Ujj9RYmVRnwzOLW66n/LHCJ16jb225Gu1B9DqZyqgW1BgD7DYIj3yBLJ Rn7qCUJAabV7iTIqbaCkrcewiCPXwdjMh6uZr20IAzK2sgiu/GDIJxtMwj+H+ddf 9HUY2v9a+1+CFfd58wdH0wcMbcOj6BcEeuPT4rMAMjGOVtJ+wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLHf+yXl1mIaMgwSEmyz4fmd+4GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMGI0ZDk2NjctZjgyZi0z YzNlLTkwNmEtMGY2N2I5NTFkNzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYmFWv+xFEc88HjzA3WCsHgBIzLyZw60hJZ2RFNG04vtjGkPTzeo9cp tQzsjxJfZp5JFb2Y+P0CpiEkkUtrVU0mEaFPGqccE9tc0aCkBG+vaMXf/JtC5NUr z2LBdBCoRRbTLiosJIPuvBnyahiJHRHldFxf0FNGxnI8zeqMvhJxTBMtQ5sKo+9A 71T97arhuT3hE4JrEMQUz7mSMFDpD2dDr6vSgI+LYZf3zlOYZN2i4xXu9fPuSKGJ escJpVvvEjU/t0yL367Kopi46/LiEhR6TtJSHgvLk7iUUSW5uRewZ5QDjarOx0dJ onyp0R9f3tn33mST3EEtwTAuZBBBZt4= -----END CERTIFICATE-----Generated at Sun Sep 13 16:40:25 2026 by rpki-client