$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/261f3f23-a2fe-3abd-b7e3-249b0ce2829a.roa File: 261f3f23-a2fe-3abd-b7e3-249b0ce2829a.roa (raw, json) Hash identifier: gFKXYhtnGeKDHtVBKKOrpzEGU1rDvQRSQq5f9gjIr3I= Subject key identifier: CC:9B:1B:15:FD:17:AA:DA:64:3F:99:0E:36:AB:40:2C:6F:42:EF:80 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584EED5245248B4C5E39ADA4EA60 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/261f3f23-a2fe-3abd-b7e3-249b0ce2829a.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 16509 IP address blocks: 170.85.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:45:24:8b:4c:5e:39:ad:a4:ea:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=f6a58998-c0f3-4a1b-96e2-74589bd94245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:25:80:fc:88:c2:e4:0c:09:c9:e1:e6:17:09: b5:e8:87:b5:8c:fa:96:27:9b:43:21:c1:a9:e2:11: 5f:46:de:de:72:7b:34:cc:81:ac:33:da:5b:29:3e: d9:16:51:10:b4:bd:e7:62:b8:74:3e:08:55:1b:fe: e0:bf:e6:03:2c:e8:f6:64:29:84:e6:30:c4:3d:38: 04:98:a2:62:a8:46:cd:63:b0:76:c6:a0:6c:24:7c: 31:6e:6b:a2:a3:4b:64:b1:6c:d0:2d:23:ff:d6:7a: e2:e2:24:6e:63:06:21:65:d1:b5:da:fc:c7:31:e3: 89:07:91:26:f6:13:46:c5:f7:32:b2:55:fd:7c:60: ba:3b:4e:09:33:b5:00:2d:ba:96:19:48:a7:0f:09: 99:9d:b9:27:20:67:d2:02:bb:e4:4c:cd:e9:a3:e2: 72:b2:6e:d4:98:89:89:07:95:6a:b0:3e:28:f2:c1: 25:40:c8:db:43:94:5e:a9:2a:a9:3c:b2:5e:be:9a: 14:8c:9e:92:de:5b:97:06:db:18:33:a3:7a:06:a4: 13:86:af:18:6a:cf:1d:cf:37:6d:4b:89:65:34:b7: 58:e5:49:7b:49:a0:8b:5c:0f:92:18:98:bd:66:5e: 2f:ea:7c:d5:f9:32:f4:8d:6d:45:94:ad:db:39:ef: f9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:9B:1B:15:FD:17:AA:DA:64:3F:99:0E:36:AB:40:2C:6F:42:EF:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/261f3f23-a2fe-3abd-b7e3-249b0ce2829a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:d6:0c:5a:9f:70:96:8c:f7:45:95:21:bb:2b:e6:66:46:7b: d6:7c:ba:7b:9f:22:1c:6e:ea:10:3c:f5:cf:16:60:4e:10:67: 8a:61:ea:0a:8c:b4:1a:8c:8b:31:db:8d:a5:63:47:c5:5a:69: 34:be:7c:11:47:26:ad:96:9e:c1:e7:65:2a:f5:3e:4a:1a:f9: 4a:d0:f7:97:e2:84:f2:3a:3c:48:da:d6:86:c1:f0:66:b6:6b: 9f:64:0e:bf:8a:b3:f1:75:8d:6e:38:9a:a9:02:a7:a3:1a:f7: ee:4a:55:b1:44:3f:69:d4:ae:17:70:6c:65:39:de:53:c3:a0: 9f:a0:b2:b9:6e:4d:24:51:17:e2:fa:8f:de:cd:f3:93:ad:47: 25:28:76:38:40:05:14:fd:b8:17:9d:b1:a7:51:85:82:2e:47: 05:39:88:1c:0e:9f:eb:e8:ed:46:a8:a8:2f:21:05:13:35:c7: 04:05:5f:66:12:c5:c0:bc:24:ab:d8:73:1a:ba:47:6c:53:12: 37:18:2a:04:f7:98:2f:cb:e1:75:76:80:2d:15:90:3b:76:45: c0:4e:d8:26:83:bb:21:c2:ed:55:eb:90:98:77:61:14:70:d2: 21:01:dd:95:3a:74:80:bd:c4:75:84:4d:88:df:ee:71:d6:b6: 7b:e9:80:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUkUki0xeOa2k6mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk ZjZhNTg5OTgtYzBmMy00YTFiLTk2ZTItNzQ1ODliZDk0MjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCWA/IjC5AwJyeHmFwm16Ie1jPqWJ5tDIcGp 4hFfRt7ecns0zIGsM9pbKT7ZFlEQtL3nYrh0PghVG/7gv+YDLOj2ZCmE5jDEPTgE mKJiqEbNY7B2xqBsJHwxbmuio0tksWzQLSP/1nri4iRuYwYhZdG12vzHMeOJB5Em 9hNGxfcyslX9fGC6O04JM7UALbqWGUinDwmZnbknIGfSArvkTM3po+Jysm7UmImJ B5VqsD4o8sElQMjbQ5ReqSqpPLJevpoUjJ6S3luXBtsYM6N6BqQThq8Yas8dzzdt S4llNLdY5Ul7SaCLXA+SGJi9Zl4v6nzV+TL0jW1FlK3bOe/5twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMybGxX9F6raZD+ZDjarQCxvQu+AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMjYxZjNmMjMtYTJmZS0z YWJkLWI3ZTMtMjQ5YjBjZTI4MjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKnWDFqfcJaM90WVIbsr5mZGe9Z8unufIhxu6hA89c8WYE4QZ4ph6gqM tBqMizHbjaVjR8VaaTS+fBFHJq2WnsHnZSr1Pkoa+UrQ95fihPI6PEja1obB8Ga2 a59kDr+Ks/F1jW44mqkCp6Ma9+5KVbFEP2nUrhdwbGU53lPDoJ+gsrluTSRRF+L6 j97N85OtRyUodjhABRT9uBedsadRhYIuRwU5iBwOn+vo7UaoqC8hBRM1xwQFX2YS xcC8JKvYcxq6R2xTEjcYKgT3mC/L4XV2gC0VkDt2RcBO2CaDuyHC7VXrkJh3YRRw 0iEB3ZU6dIC9xHWETYjf7nHWtnvpgJ0= -----END CERTIFICATE-----Generated at Sun Sep 13 18:07:33 2026 by rpki-client