$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ce140d2d-4f24-3ba3-8491-41c722344e49.roa File: ce140d2d-4f24-3ba3-8491-41c722344e49.roa (raw, json) Hash identifier: 2CLIfVPyqWZbFpx38ukWNnqlt70XW0j5hu4+4saVkqk= Subject key identifier: 9F:22:5F:6A:EA:F3:5D:82:85:56:7E:C5:75:53:11:E6:AB:AA:7D:93 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584EA795092515D1AAF542D64400 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ce140d2d-4f24-3ba3-8491-41c722344e49.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8987 IP address blocks: 170.85.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:09:25:15:d1:aa:f5:42:d6:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=25e14f89-07a0-4ad9-834b-4e335d5f282b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cb:db:8b:37:b4:cd:be:a4:df:3a:31:c5:f2: 5a:76:c5:33:75:cc:91:b0:28:a0:ea:71:ff:12:42: 27:47:24:d5:7f:a8:75:bf:c1:d3:61:96:cd:de:e9: 11:fd:b0:0c:4c:ac:bb:27:4d:3d:39:b0:75:39:fb: 14:ef:d6:5e:ee:c1:d7:d5:a2:16:81:92:8d:b8:7a: fe:15:93:71:4b:6c:6b:24:93:82:de:5e:1e:27:78: 1d:0d:62:8d:1c:27:c3:b1:48:4a:2b:20:9b:dd:1a: 97:de:59:48:aa:57:04:fd:dd:50:a6:13:83:40:7d: 95:7f:d8:72:32:57:c8:a7:df:35:40:f3:3b:36:33: a8:9d:40:1f:cc:63:5c:f9:19:53:ff:9d:51:c2:7d: 0c:4a:e8:74:be:a4:a6:39:75:3c:e1:ee:d1:33:e6: 52:2a:10:06:ff:78:99:35:6d:81:b9:2b:fb:a2:0d: 9b:99:92:64:36:ed:1a:1d:55:ab:9c:77:e3:62:f6: 2e:85:4a:3f:7c:d5:04:18:33:46:a0:a9:40:11:2b: 10:fb:ab:f4:05:6f:e8:a8:30:ea:c4:8c:55:ab:7f: c3:ae:2b:54:cb:6e:9c:33:15:23:28:74:93:93:0a: 51:9f:8e:fe:a8:c4:ac:fe:28:4f:46:f6:9e:1c:73: 55:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:22:5F:6A:EA:F3:5D:82:85:56:7E:C5:75:53:11:E6:AB:AA:7D:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ce140d2d-4f24-3ba3-8491-41c722344e49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:c1:4f:a5:ec:37:20:e7:e1:1c:80:02:07:aa:d6:d2:22:f2: 8e:d3:5e:6e:95:de:39:d4:2f:b5:37:66:4c:ff:47:cd:ca:48: 93:38:d9:1d:89:95:d2:50:ca:ab:53:0f:11:a3:02:f0:8d:15: 81:76:a8:a0:84:b9:25:e2:f1:01:58:07:fd:69:da:f6:f9:b8: 9c:ff:af:4b:b7:31:6b:3c:2e:7c:73:14:cc:ab:48:ee:18:bb: cd:f7:d4:53:e4:38:bc:85:4f:a1:df:5b:e5:ba:5b:b3:78:25: 90:38:df:fa:9b:9b:dd:ad:e8:db:b9:d9:ef:17:7a:c7:6c:e5: fe:36:4b:6b:43:ed:5a:2e:3a:84:e8:a4:ac:e6:30:95:9c:6a: 2e:59:6d:0f:e1:53:d9:b9:d1:9e:a6:b6:ee:28:ab:b9:6a:fd: dd:f8:29:c4:b9:23:dd:91:90:ce:af:e5:92:b1:b8:96:10:a4: 2a:cd:60:e2:09:8d:db:27:6e:80:1d:c6:db:91:40:9e:d5:45: 30:12:d2:f4:80:c2:d9:54:dd:00:32:0c:36:83:a9:21:ce:dc: 42:2c:f0:14:e0:ab:5a:bb:16:af:7b:9c:a1:8d:cc:ab:be:b0: b1:ec:cb:96:69:85:e1:2e:f2:06:77:d3:b3:a6:b0:44:96:3b: 60:e4:d8:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlQklFdGq9ULWRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjVlMTRmODktMDdhMC00YWQ5LTgzNGItNGUzMzVkNWYyODJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocvbize0zb6k3zoxxfJadsUzdcyRsCig6nH/ EkInRyTVf6h1v8HTYZbN3ukR/bAMTKy7J009ObB1OfsU79Ze7sHX1aIWgZKNuHr+ FZNxS2xrJJOC3l4eJ3gdDWKNHCfDsUhKKyCb3RqX3llIqlcE/d1QphODQH2Vf9hy MlfIp981QPM7NjOonUAfzGNc+RlT/51Rwn0MSuh0vqSmOXU84e7RM+ZSKhAG/3iZ NW2BuSv7og2bmZJkNu0aHVWrnHfjYvYuhUo/fNUEGDNGoKlAESsQ+6v0BW/oqDDq xIxVq3/DritUy26cMxUjKHSTkwpRn47+qMSs/ihPRvaeHHNVbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8iX2rq812ChVZ+xXVTEearqn2TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvY2UxNDBkMmQtNGYyNC0z YmEzLTg0OTEtNDFjNzIyMzQ0ZTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/BT6XsNyDn4RyAAgeq1tIi8o7TXm6V3jnUL7U3Zkz/R83KSJM42R2J ldJQyqtTDxGjAvCNFYF2qKCEuSXi8QFYB/1p2vb5uJz/r0u3MWs8LnxzFMyrSO4Y u8331FPkOLyFT6HfW+W6W7N4JZA43/qbm92t6Nu52e8Xesds5f42S2tD7VouOoTo pKzmMJWcai5ZbQ/hU9m50Z6mtu4oq7lq/d34KcS5I92RkM6v5ZKxuJYQpCrNYOIJ jdsnboAdxtuRQJ7VRTAS0vSAwtlU3QAyDDaDqSHO3EIs8BTgq1q7Fq97nKGNzKu+ sLHsy5ZpheEu8gZ307OmsESWO2Dk2NA= -----END CERTIFICATE-----Generated at Thu Jul 30 01:12:49 2026 by rpki-client