$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/538e4942-1bed-3d9d-a99a-18a74b34126d.roa File: 538e4942-1bed-3d9d-a99a-18a74b34126d.roa (raw, json) Hash identifier: z9ek7u8cckBN+1ydzjl1PT7snG2ffhqeCWPVcfVI1aI= Subject key identifier: 54:4C:99:4D:E9:DE:AC:AF:84:FC:D4:2D:21:4A:4A:35:9A:36:45:A8 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584EDDF7306823AB16396D6F2280 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/538e4942-1bed-3d9d-a99a-18a74b34126d.roa Signing time: Mon 17 Aug 2026 13:00:11 +0000 ROA not before: Mon 17 Aug 2026 13:00:11 +0000 ROA not after: Sun 15 Nov 2026 14:00:11 +0000 asID: 22616 IP address blocks: 170.85.72.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dd:f7:30:68:23:ab:16:39:6d:6f:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 17 13:00:11 2026 GMT Not After : Nov 15 14:00:11 2026 GMT Subject: CN=fbddda7b-39c4-4f25-815c-d6ce54bca059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:16:b6:35:a9:bc:3c:59:ab:6b:c1:5c:c4:e7: 41:cc:e2:ae:c7:bc:f6:03:2a:44:67:fd:97:08:b3: dd:93:5c:a5:45:b8:f6:6a:71:49:0e:19:12:51:8b: 3e:16:ea:fb:15:49:d3:ce:e1:6a:01:03:ca:24:ac: 30:f7:06:f5:be:5a:00:20:ba:c2:b4:6d:66:9f:5d: 34:c3:e8:b3:d5:59:90:7e:4c:79:9a:fd:0c:6e:bd: f5:01:f0:14:4f:98:eb:fd:14:0b:89:90:d0:3f:32: 32:6c:fd:73:21:ec:e8:41:19:35:04:56:ed:e8:55: 1b:40:51:ea:23:ed:79:7d:4c:d2:6f:dd:3d:c7:62: dd:b6:fb:a0:98:cf:5f:41:ab:7b:2a:5b:a8:07:e4: 68:db:e9:e9:77:44:49:80:92:39:0d:3a:6d:71:ab: c8:ec:3e:c5:95:ce:ca:68:97:f5:c0:98:d3:38:43: e0:23:a6:61:ee:85:87:65:c1:b4:c5:73:a2:9b:17: 73:06:24:a0:c6:f3:ba:6d:41:07:40:28:bf:bc:ef: 0f:60:e6:a9:84:42:9a:5f:20:f1:72:02:e1:22:d1: 3b:2e:59:a9:31:5a:71:a5:17:cf:cc:f6:2f:db:3d: 06:40:c8:b9:e2:6f:04:0e:8e:6c:23:7d:43:a9:26: 4b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:4C:99:4D:E9:DE:AC:AF:84:FC:D4:2D:21:4A:4A:35:9A:36:45:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/538e4942-1bed-3d9d-a99a-18a74b34126d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:63:a9:8d:c6:67:86:a3:29:67:36:fa:3d:c2:ed:17:7c:40: 7c:08:82:6a:23:ae:97:31:de:92:db:fd:1d:fe:bf:31:05:46: 03:b8:33:f2:9e:8b:d6:2d:8b:82:6e:2b:af:8f:b6:fd:c3:96: ea:21:c9:3e:ae:3d:ab:4a:de:6b:23:4c:e1:67:41:78:80:b5: ce:fc:83:f8:08:48:fa:06:8e:5d:04:f1:79:b3:4e:7e:4d:d0: b9:11:e8:77:a2:23:35:b6:78:a1:13:ad:12:17:ab:d6:6b:8f: f4:ca:e0:29:92:c2:d4:61:7e:85:c7:e2:36:f5:b6:b7:52:5f: 64:bb:4e:d5:2f:85:c7:65:e3:a8:44:8b:6f:76:5b:d4:a9:0a: f2:b7:4d:7e:4a:07:69:04:92:a0:a3:c6:92:44:1d:5a:e7:5c: 1f:80:6d:ab:28:25:49:ed:09:af:16:1c:4e:4a:47:c7:59:28: c4:5a:c9:9d:d6:18:70:aa:92:d0:43:c4:f1:48:27:f9:4d:ea: 8e:51:c4:37:64:52:7a:8d:65:55:0e:09:da:6b:dc:89:47:e5: 3d:4b:d0:f3:1f:8b:fc:55:c1:1f:3c:4a:9d:85:7d:d3:93:57: 98:81:24:6e:ee:a3:2c:50:41:93:04:6a:30:fb:47:e8:a7:2d: 13:2e:14:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7d9zBoI6sWOW1vIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDgxNzEzMDAxMVoXDTI2MTExNTE0MDAxMVowLzEtMCsGA1UEAxMk ZmJkZGRhN2ItMzljNC00ZjI1LTgxNWMtZDZjZTU0YmNhMDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwha2Nam8PFmra8FcxOdBzOKux7z2AypEZ/2X CLPdk1ylRbj2anFJDhkSUYs+Fur7FUnTzuFqAQPKJKww9wb1vloAILrCtG1mn100 w+iz1VmQfkx5mv0Mbr31AfAUT5jr/RQLiZDQPzIybP1zIezoQRk1BFbt6FUbQFHq I+15fUzSb909x2LdtvugmM9fQat7KluoB+Ro2+npd0RJgJI5DTptcavI7D7Flc7K aJf1wJjTOEPgI6Zh7oWHZcG0xXOimxdzBiSgxvO6bUEHQCi/vO8PYOaphEKaXyDx cgLhItE7LlmpMVpxpRfPzPYv2z0GQMi54m8EDo5sI31DqSZLIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRMmU3p3qyvhPzULSFKSjWaNkWoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNTM4ZTQ5NDItMWJlZC0z ZDlkLWE5OWEtMThhNzRiMzQxMjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlVIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxjqY3GZ4ajKWc2+j3C7Rd8QHwIgmojrpcx3pLb/R3+vzEFRgO4M/Ke i9Yti4JuK6+Ptv3DluohyT6uPatK3msjTOFnQXiAtc78g/gISPoGjl0E8XmzTn5N 0LkR6HeiIzW2eKETrRIXq9Zrj/TK4CmSwtRhfoXH4jb1trdSX2S7TtUvhcdl46hE i292W9SpCvK3TX5KB2kEkqCjxpJEHVrnXB+AbasoJUntCa8WHE5KR8dZKMRayZ3W GHCqktBDxPFIJ/lN6o5RxDdkUnqNZVUOCdpr3IlH5T1L0PMfi/xVwR88Sp2FfdOT V5iBJG7uoyxQQZMEajD7R+inLRMuFPA= -----END CERTIFICATE-----Generated at Sun Sep 13 15:03:04 2026 by rpki-client