$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/52ebeacd-8144-3812-ab9f-7b5897eaf0ee.roa File: 52ebeacd-8144-3812-ab9f-7b5897eaf0ee.roa (raw, json) Hash identifier: PnwsrI5Ew02YOKsLDESGi/xelAspnOD6I65DoEeKJSs= Subject key identifier: 0E:AC:13:8C:23:A7:D5:C1:FA:27:3C:15:A8:49:E4:89:7B:A1:5C:4C Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584EDDF75114306ECD0340BA1F50 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/52ebeacd-8144-3812-ab9f-7b5897eaf0ee.roa Signing time: Mon 17 Aug 2026 13:00:11 +0000 ROA not before: Mon 17 Aug 2026 13:00:11 +0000 ROA not after: Sun 15 Nov 2026 14:00:11 +0000 asID: 22616 IP address blocks: 170.85.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dd:f7:51:14:30:6e:cd:03:40:ba:1f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 17 13:00:11 2026 GMT Not After : Nov 15 14:00:11 2026 GMT Subject: CN=b8b0c1ea-1df8-41e2-a4e1-7c52e1918f0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:62:fe:41:22:a7:2b:bf:2a:43:71:96:bc:3c: f6:b0:44:dc:41:1c:45:07:8b:7c:a0:7e:da:ad:d2: ce:37:a4:8d:d5:b8:e2:5e:9c:6a:91:9f:c2:55:0d: b8:d4:62:61:52:6a:d6:b1:75:ac:0a:b0:2f:4b:b8: 43:3d:83:cc:bf:d0:35:1b:51:55:96:b1:22:47:57: 9b:8b:8e:41:8e:02:ef:0e:26:fd:d1:2b:0d:23:77: 47:10:40:76:b1:b1:3f:a3:92:c6:37:56:6b:19:0c: b8:e1:df:de:40:14:ee:84:f5:fc:39:11:19:e4:a9: 10:3f:c3:40:5d:af:8b:3f:7e:ae:08:9b:c5:1b:6c: 87:37:0a:db:e1:42:8d:93:49:06:36:19:b4:2e:f7: f6:c7:d4:2b:8f:ff:14:d0:14:79:09:bf:05:9c:90: 86:5c:58:c5:08:7a:1b:e1:32:59:51:10:ee:28:f4: 33:61:42:c6:22:5e:24:95:e4:f9:aa:fb:b5:01:be: 17:89:c2:9b:e3:47:95:63:0c:b0:8f:65:53:73:42: 08:54:45:54:8f:46:57:b6:97:9b:58:14:5e:f3:9b: b8:4e:e4:5c:aa:4f:d7:83:32:cf:4b:e5:2e:13:ba: 5e:87:af:80:aa:83:b8:69:23:47:54:28:11:42:3b: 34:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:AC:13:8C:23:A7:D5:C1:FA:27:3C:15:A8:49:E4:89:7B:A1:5C:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/52ebeacd-8144-3812-ab9f-7b5897eaf0ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:05:f1:a6:15:eb:4c:31:14:8a:5b:a6:55:83:0c:4e:84:42: f9:16:d0:af:72:fe:2a:72:34:99:05:3b:8e:ac:de:44:b4:51: 84:b9:ba:5b:50:48:47:00:d8:7d:e9:f9:aa:3f:7e:8b:74:a3: 0d:de:8e:fe:f5:ad:9c:c2:8e:a0:f4:9e:dd:dc:14:93:0f:d2: 1b:43:d0:72:93:45:6b:74:bc:5b:e6:9b:34:d1:fe:ae:72:86: 33:d7:f1:4e:40:f2:5c:d4:b5:04:7a:a5:63:aa:8c:b5:fb:ee: 5a:81:ba:80:1e:3c:79:be:98:b0:69:7d:f1:22:1f:fe:0c:13: 35:62:6d:29:7e:72:07:b8:df:0a:e9:73:de:bf:4c:9c:06:16: 7a:ce:f2:53:fc:f5:94:6e:bc:10:e3:5d:59:57:fe:e7:8e:1d: f9:e0:db:35:37:2f:03:e3:3a:a5:cb:63:29:dd:ce:56:80:06: 91:6f:2b:36:20:92:6e:6e:c8:38:8c:49:a4:49:d6:3d:7d:b6: 8a:9f:fb:05:4c:0e:96:cb:d5:27:b6:73:46:8c:27:d8:c1:a0: d8:a3:48:cc:11:c1:a3:6a:52:32:13:11:de:ac:14:74:cb:20: 33:95:e7:d7:51:e5:27:e9:ce:3e:fc:54:ec:44:26:8e:ff:ab: db:1e:51:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7d91EUMG7NA0C6H1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDgxNzEzMDAxMVoXDTI2MTExNTE0MDAxMVowLzEtMCsGA1UEAxMk YjhiMGMxZWEtMWRmOC00MWUyLWE0ZTEtN2M1MmUxOTE4ZjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGL+QSKnK78qQ3GWvDz2sETcQRxFB4t8oH7a rdLON6SN1bjiXpxqkZ/CVQ241GJhUmrWsXWsCrAvS7hDPYPMv9A1G1FVlrEiR1eb i45BjgLvDib90SsNI3dHEEB2sbE/o5LGN1ZrGQy44d/eQBTuhPX8OREZ5KkQP8NA Xa+LP36uCJvFG2yHNwrb4UKNk0kGNhm0Lvf2x9Qrj/8U0BR5Cb8FnJCGXFjFCHob 4TJZURDuKPQzYULGIl4kleT5qvu1Ab4XicKb40eVYwywj2VTc0IIVEVUj0ZXtpeb WBRe85u4TuRcqk/XgzLPS+UuE7peh6+AqoO4aSNHVCgRQjs0awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6sE4wjp9XB+ic8FahJ5Il7oVxMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNTJlYmVhY2QtODE0NC0z ODEyLWFiOWYtN2I1ODk3ZWFmMGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlUUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUF8aYV60wxFIpbplWDDE6EQvkW0K9y/ipyNJkFO46s3kS0UYS5ultQ SEcA2H3p+ao/fot0ow3ejv71rZzCjqD0nt3cFJMP0htD0HKTRWt0vFvmmzTR/q5y hjPX8U5A8lzUtQR6pWOqjLX77lqBuoAePHm+mLBpffEiH/4MEzVibSl+cge43wrp c96/TJwGFnrO8lP89ZRuvBDjXVlX/ueOHfng2zU3LwPjOqXLYyndzlaABpFvKzYg km5uyDiMSaRJ1j19toqf+wVMDpbL1Se2c0aMJ9jBoNijSMwRwaNqUjITEd6sFHTL IDOV59dR5Sfpzj78VOxEJo7/q9seUUM= -----END CERTIFICATE-----Generated at Sun Sep 13 14:23:09 2026 by rpki-client