$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2888b7f7-bbc8-364a-b3bc-9b9efc19aad5.roa File: 2888b7f7-bbc8-364a-b3bc-9b9efc19aad5.roa (raw, json) Hash identifier: GcGFaoIcLAyOJ3iAKO7YcTpaPjZCZSwf9gIE1VNkBVo= Subject key identifier: 86:13:70:40:52:9A:07:4B:76:33:AB:8A:A3:00:40:E3:27:19:79:3C Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584EDDF74B7D9E7FB2E32A8FC100 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2888b7f7-bbc8-364a-b3bc-9b9efc19aad5.roa Signing time: Mon 17 Aug 2026 13:00:11 +0000 ROA not before: Mon 17 Aug 2026 13:00:11 +0000 ROA not after: Sun 15 Nov 2026 14:00:11 +0000 asID: 22616 IP address blocks: 170.85.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dd:f7:4b:7d:9e:7f:b2:e3:2a:8f:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 17 13:00:11 2026 GMT Not After : Nov 15 14:00:11 2026 GMT Subject: CN=90b1c76e-e1de-416a-ab56-503a17e68bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:13:f0:49:23:3f:51:c6:dc:65:1e:2c:d7:f4: 13:6d:cb:77:90:c8:77:fa:c7:63:14:1c:01:59:a8: 34:f9:e3:81:3c:3e:29:de:b0:39:46:f5:7d:e6:38: ff:f6:35:42:d4:ff:0f:37:14:f6:61:de:ec:ea:5f: d9:b4:c1:ee:8e:c3:b0:af:06:42:f8:da:83:d8:92: 80:71:ca:e7:2b:a1:f6:1f:de:89:93:93:2d:bf:b3: ec:10:82:d8:9d:96:b4:50:1e:c8:2d:6a:bb:9d:16: 82:ab:8c:c7:17:0d:3e:68:51:eb:4b:5e:21:65:cd: 89:30:ae:34:6b:a8:3d:bb:43:ee:66:11:ea:56:3d: 9f:55:e9:e2:9c:3e:d2:ce:1c:ce:61:64:6f:b6:ae: 25:b1:dd:85:4b:26:92:62:bd:48:40:bd:7b:ba:eb: 1d:1f:64:f8:26:47:55:d1:e3:49:09:be:19:df:91: 84:1f:7e:c2:a7:a3:f0:2d:47:c7:59:a8:a3:0e:96: be:96:da:d1:1c:db:17:33:66:0d:5e:e3:ef:33:30: 5e:27:6d:88:bc:07:76:c9:94:14:d0:a7:b9:2a:60: fe:98:e0:4d:00:6d:e5:77:98:49:89:d2:cc:4d:ad: bd:6e:58:7f:17:20:d7:ca:32:94:8d:15:a8:b8:06: f8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:13:70:40:52:9A:07:4B:76:33:AB:8A:A3:00:40:E3:27:19:79:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2888b7f7-bbc8-364a-b3bc-9b9efc19aad5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:ad:b0:97:87:db:d8:35:9c:b2:de:83:37:cf:67:00:cf:3e: 53:f3:c8:f8:47:13:3d:0a:2d:d0:ee:fa:54:36:66:c5:bd:04: 70:46:49:da:1a:e0:2c:78:8c:dd:cd:80:de:09:9d:75:ca:6e: 1d:64:da:0d:24:1a:78:6f:d4:75:a0:43:06:db:f0:e0:23:f8: 5c:12:04:56:31:4f:c3:ac:76:81:ae:ab:39:8e:8b:b6:f1:03: e0:e0:ec:6e:6b:6f:63:44:71:37:b9:fe:0f:0f:7a:49:2a:ae: db:75:03:d0:d3:bb:8f:d8:5e:9a:46:51:cb:82:d6:cd:a6:7d: 83:3a:ac:72:84:74:1d:8d:7b:f7:2c:b8:7f:25:7a:02:8a:ff: d3:83:5e:68:36:fe:63:90:9a:2b:b8:32:e9:6e:47:5a:2d:4b: 47:65:ed:e5:67:f1:35:43:ab:92:cc:50:b1:95:df:2a:53:37: 0b:e3:f5:84:b2:3f:33:fd:a1:3f:28:09:f9:cd:20:27:70:a8: fc:da:67:46:15:89:36:ab:0f:3e:ed:16:ca:ba:6f:65:c1:de: c6:0c:05:28:8d:f4:cb:4f:5b:1b:b0:5c:41:95:ff:be:92:8b: 31:ea:dd:87:e6:26:87:d0:4d:41:b7:78:c8:8f:4c:7c:b8:93: d4:41:9f:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7d90t9nn+y4yqPwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDgxNzEzMDAxMVoXDTI2MTExNTE0MDAxMVowLzEtMCsGA1UEAxMk OTBiMWM3NmUtZTFkZS00MTZhLWFiNTYtNTAzYTE3ZTY4YmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RPwSSM/UcbcZR4s1/QTbct3kMh3+sdjFBwB Wag0+eOBPD4p3rA5RvV95jj/9jVC1P8PNxT2Yd7s6l/ZtMHujsOwrwZC+NqD2JKA ccrnK6H2H96Jk5Mtv7PsEILYnZa0UB7ILWq7nRaCq4zHFw0+aFHrS14hZc2JMK40 a6g9u0PuZhHqVj2fVeninD7SzhzOYWRvtq4lsd2FSyaSYr1IQL17uusdH2T4JkdV 0eNJCb4Z35GEH37Cp6PwLUfHWaijDpa+ltrRHNsXM2YNXuPvMzBeJ22IvAd2yZQU 0Ke5KmD+mOBNAG3ld5hJidLMTa29blh/FyDXyjKUjRWouAb43wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYTcEBSmgdLdjOriqMAQOMnGXk8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMjg4OGI3ZjctYmJjOC0z NjRhLWIzYmMtOWI5ZWZjMTlhYWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlWsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+tsJeH29g1nLLegzfPZwDPPlPzyPhHEz0KLdDu+lQ2ZsW9BHBGSdoa 4Cx4jN3NgN4JnXXKbh1k2g0kGnhv1HWgQwbb8OAj+FwSBFYxT8OsdoGuqzmOi7bx A+Dg7G5rb2NEcTe5/g8Pekkqrtt1A9DTu4/YXppGUcuC1s2mfYM6rHKEdB2Ne/cs uH8legKK/9ODXmg2/mOQmiu4MuluR1otS0dl7eVn8TVDq5LMULGV3ypTNwvj9YSy PzP9oT8oCfnNICdwqPzaZ0YViTarDz7tFsq6b2XB3sYMBSiN9MtPWxuwXEGV/76S izHq3YfmJofQTUG3eMiPTHy4k9RBn4A= -----END CERTIFICATE-----Generated at Sun Sep 13 15:47:52 2026 by rpki-client