$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/946bd0e3-c735-3d33-87e2-cfec347cd9d9.roa File: 946bd0e3-c735-3d33-87e2-cfec347cd9d9.roa (raw, json) Hash identifier: yx/EZ+FMdVyLzrq1oe2PNTC8goGkYe9te/Z5z/y+yFI= Subject key identifier: B0:0F:52:F1:27:FA:64:1F:BE:99:5B:3C:7B:F0:15:F3:95:5C:A4:80 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584EDDF7374D3B8D805F69268F80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/946bd0e3-c735-3d33-87e2-cfec347cd9d9.roa Signing time: Mon 17 Aug 2026 13:00:11 +0000 ROA not before: Mon 17 Aug 2026 13:00:11 +0000 ROA not after: Sun 15 Nov 2026 14:00:11 +0000 asID: 62044 IP address blocks: 170.85.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dd:f7:37:4d:3b:8d:80:5f:69:26:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 17 13:00:11 2026 GMT Not After : Nov 15 14:00:11 2026 GMT Subject: CN=a1f94c74-16d6-4105-9ad7-9bd0c3abed0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e9:f5:8a:6f:79:b8:78:ab:d2:c1:3b:39:cc: e3:85:16:e2:bc:11:85:ec:bd:10:47:fe:e7:a4:6f: 62:ec:7e:64:6d:01:00:ed:6a:df:7c:7b:e9:53:c8: da:aa:33:2c:ed:71:77:98:bb:da:9b:37:f1:66:25: ad:60:72:42:f6:41:5b:10:c0:c8:11:d1:2a:61:d2: f2:24:43:e6:b2:90:79:2b:df:46:2a:02:08:35:26: 46:3f:f2:ed:73:11:10:2e:08:b3:80:52:aa:e7:ca: f5:f0:e9:f9:6d:55:6c:b3:3e:3a:d5:3d:85:bd:ff: f3:d0:ca:c7:0e:a6:31:6c:77:2b:ab:7b:8c:35:ef: 63:a7:22:79:ed:c7:f5:12:7e:e4:90:7c:3d:18:56: e2:57:7b:a7:69:29:89:0e:e7:d0:47:6a:6d:5c:77: 5a:57:9d:8a:45:83:50:ba:1f:7f:58:d6:4d:77:b8: 83:4b:2c:ae:51:1f:5e:94:c3:b6:1e:a3:fe:95:41: 36:d6:75:dc:8a:dc:5e:cf:6d:dd:bc:c7:20:e4:34: 93:8f:4d:53:0b:f6:89:53:fc:42:68:b8:f4:d1:7c: 96:c2:f6:50:00:bb:c6:a3:82:b4:63:1a:30:88:38: c4:90:33:99:92:1e:4f:e4:57:48:7d:07:0e:56:40: 29:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:0F:52:F1:27:FA:64:1F:BE:99:5B:3C:7B:F0:15:F3:95:5C:A4:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/946bd0e3-c735-3d33-87e2-cfec347cd9d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:ef:21:c2:5a:27:41:9f:79:3e:48:a4:39:50:e0:d9:3c:14: 95:a7:3c:0d:bf:99:bf:42:c8:71:dd:03:5a:e4:b5:34:ae:ad: 5b:d7:c9:a5:8f:69:6d:27:69:ff:bf:31:16:ab:fb:bc:56:46: 6c:2e:b8:10:f3:4b:c2:b8:61:e5:7a:aa:36:9d:23:63:1d:d6: 2d:63:c7:9b:0e:75:fe:80:8b:d2:91:e9:68:43:a0:ef:51:7c: 8e:cd:1c:87:74:61:8d:4c:02:6c:fd:f1:16:80:31:24:ca:35: a2:18:09:2c:73:17:26:a8:ca:f8:7e:5e:cc:e6:8a:18:d4:5a: f4:2f:af:a6:2b:ee:3b:95:84:aa:8b:cf:b9:a7:fa:c2:d5:0b: 7a:3f:f9:9d:92:02:85:bd:24:29:c3:04:e6:56:26:22:e2:f1: 67:ae:9b:4f:12:98:62:06:48:44:7c:2e:02:9f:a4:be:4f:f0: b9:6c:e8:2c:c3:bc:0d:a2:a6:7d:2e:54:3d:b2:c9:43:c1:84: 3c:f5:49:c2:38:16:1e:4e:c6:6c:ad:88:e1:74:25:87:01:bd: 3a:c4:dc:dc:86:c4:9e:81:92:90:3b:df:41:52:34:0d:5f:5c: 9d:eb:a5:ad:02:a2:72:53:9b:80:2c:33:ad:0c:96:99:99:3f: 65:ad:b5:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7d9zdNO42AX2kmj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDgxNzEzMDAxMVoXDTI2MTExNTE0MDAxMVowLzEtMCsGA1UEAxMk YTFmOTRjNzQtMTZkNi00MTA1LTlhZDctOWJkMGMzYWJlZDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+n1im95uHir0sE7OczjhRbivBGF7L0QR/7n pG9i7H5kbQEA7WrffHvpU8jaqjMs7XF3mLvamzfxZiWtYHJC9kFbEMDIEdEqYdLy JEPmspB5K99GKgIINSZGP/LtcxEQLgizgFKq58r18On5bVVssz461T2Fvf/z0MrH DqYxbHcrq3uMNe9jpyJ57cf1En7kkHw9GFbiV3unaSmJDufQR2ptXHdaV52KRYNQ uh9/WNZNd7iDSyyuUR9elMO2HqP+lUE21nXcitxez23dvMcg5DSTj01TC/aJU/xC aLj00XyWwvZQALvGo4K0YxowiDjEkDOZkh5P5FdIfQcOVkApvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAPUvEn+mQfvplbPHvwFfOVXKSAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvOTQ2YmQwZTMtYzczNS0z ZDMzLTg3ZTItY2ZlYzM0N2NkOWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrvIcJaJ0GfeT5IpDlQ4Nk8FJWnPA2/mb9CyHHdA1rktTSurVvXyaWP aW0naf+/MRar+7xWRmwuuBDzS8K4YeV6qjadI2Md1i1jx5sOdf6Ai9KR6WhDoO9R fI7NHId0YY1MAmz98RaAMSTKNaIYCSxzFyaoyvh+XszmihjUWvQvr6Yr7juVhKqL z7mn+sLVC3o/+Z2SAoW9JCnDBOZWJiLi8Weum08SmGIGSER8LgKfpL5P8Lls6CzD vA2ipn0uVD2yyUPBhDz1ScI4Fh5OxmytiOF0JYcBvTrE3NyGxJ6BkpA730FSNA1f XJ3rpa0ConJTm4AsM60MlpmZP2Wttbg= -----END CERTIFICATE-----Generated at Sun Sep 13 16:38:53 2026 by rpki-client