$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cf96671a-6a74-3e65-a838-71e0e3f6e68c.roa File: cf96671a-6a74-3e65-a838-71e0e3f6e68c.roa (raw, json) Hash identifier: FAwFSMBCDderPSrJE4PQirpqoefx92c2sMr5jmUWB4Q= Subject key identifier: B7:B6:A3:A3:69:7A:90:EA:2D:8B:B1:20:60:9E:E4:44:5E:4C:87:F3 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584EDDF73FF18B52EFB34C440800 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cf96671a-6a74-3e65-a838-71e0e3f6e68c.roa Signing time: Mon 17 Aug 2026 13:00:11 +0000 ROA not before: Mon 17 Aug 2026 13:00:11 +0000 ROA not after: Sun 15 Nov 2026 14:00:11 +0000 asID: 22616 IP address blocks: 170.85.76.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dd:f7:3f:f1:8b:52:ef:b3:4c:44:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 17 13:00:11 2026 GMT Not After : Nov 15 14:00:11 2026 GMT Subject: CN=0b9a3f10-ddd7-468a-8212-8d92994ebbf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:99:89:f0:ce:67:44:16:d2:b2:8a:65:02:24: d4:86:27:36:28:c1:ce:cd:9b:f1:5e:e0:2b:31:e3: cc:27:ce:8f:b2:7f:21:69:b6:be:60:bd:e6:e3:14: d0:3e:d4:45:a4:b9:a9:e3:57:7c:f5:04:a0:99:f4: 6a:f9:66:3a:ac:7f:66:cb:08:d5:c2:d1:3f:c6:57: ee:1e:30:bd:c7:e0:67:12:05:4e:35:ad:b0:02:5c: 3c:83:e9:26:8b:f6:66:31:1f:45:a1:36:c8:68:eb: fb:b3:66:37:fb:86:40:e3:b1:c7:7b:41:7c:db:25: a6:46:1c:9d:93:50:e7:f3:99:4a:bd:83:88:eb:0f: 4f:c8:2c:f7:06:de:c9:9a:6a:8d:67:f0:88:a2:e9: e8:07:a4:29:c5:82:71:5f:d7:3e:4b:80:c5:23:79: 6f:fd:b7:74:0e:f4:f7:92:1a:94:33:d2:f8:6b:94: c3:3f:27:ca:51:29:3f:e8:5f:25:7c:ef:a6:f4:9a: 08:f0:0a:c3:23:f4:69:6a:4d:2e:cc:3e:dc:ba:39: 9a:dd:3c:70:ed:e9:e2:66:8e:41:1c:e6:17:1f:f9: 64:38:eb:79:5f:cb:c3:ba:4a:a9:01:b9:97:63:5f: 52:00:92:73:60:84:9a:18:40:89:2b:9d:27:8a:22: 0c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B6:A3:A3:69:7A:90:EA:2D:8B:B1:20:60:9E:E4:44:5E:4C:87:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cf96671a-6a74-3e65-a838-71e0e3f6e68c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.76.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:0a:e5:45:f0:b3:2e:d2:fc:40:cf:cf:9f:f8:cc:e3:a1:72: bd:cc:b6:a8:e1:f7:15:63:25:27:f5:07:af:d3:23:63:15:df: 8a:51:0f:85:71:4d:c1:ff:a8:88:dc:f2:8a:08:69:97:93:ee: 4a:3c:65:22:50:09:26:c2:a4:3f:f4:6e:ce:5b:0f:c5:c2:cb: 6d:43:f2:3d:50:22:84:b1:ca:67:27:1b:82:ba:32:70:ff:1d: a1:b9:3a:b7:58:e8:8c:be:2d:69:9b:1d:ad:4e:1d:c3:7f:0a: 6a:1f:e9:1d:a3:74:96:33:a4:d4:c6:cf:bf:4c:7e:84:39:38: 5a:88:57:0f:d0:ac:d1:3e:2d:73:9a:cb:86:e6:b8:2e:2a:ac: 90:db:96:85:26:24:65:94:80:2f:84:f9:66:fe:53:68:b3:13: 24:0b:0f:8f:63:84:39:41:fa:e3:b4:fd:a9:8b:0f:d4:9d:52: c4:59:af:2f:ae:1c:a9:8e:27:24:6a:e4:2a:d1:7a:91:1c:b5: e3:81:5d:02:9e:00:36:de:37:b7:24:5c:12:f5:31:f8:9f:9c: e0:f6:1c:f9:86:13:39:62:47:24:bf:73:6f:95:65:d0:d0:3d: bb:79:3d:f9:49:6a:88:7a:7d:35:31:8c:21:48:93:36:83:b7: 3d:6f:73:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7d9z/xi1Lvs0xECAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDgxNzEzMDAxMVoXDTI2MTExNTE0MDAxMVowLzEtMCsGA1UEAxMk MGI5YTNmMTAtZGRkNy00NjhhLTgyMTItOGQ5Mjk5NGViYmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZmJ8M5nRBbSsoplAiTUhic2KMHOzZvxXuAr MePMJ86Psn8haba+YL3m4xTQPtRFpLmp41d89QSgmfRq+WY6rH9mywjVwtE/xlfu HjC9x+BnEgVONa2wAlw8g+kmi/ZmMR9FoTbIaOv7s2Y3+4ZA47HHe0F82yWmRhyd k1Dn85lKvYOI6w9PyCz3Bt7JmmqNZ/CIounoB6QpxYJxX9c+S4DFI3lv/bd0DvT3 khqUM9L4a5TDPyfKUSk/6F8lfO+m9JoI8ArDI/Rpak0uzD7cujma3Txw7eniZo5B HOYXH/lkOOt5X8vDukqpAbmXY19SAJJzYISaGECJK50niiIMLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLe2o6NpepDqLYuxIGCe5EReTIfzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvY2Y5NjY3MWEtNmE3NC0z ZTY1LWE4MzgtNzFlMGUzZjZlNjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlVMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8K5UXwsy7S/EDPz5/4zOOhcr3Mtqjh9xVjJSf1B6/TI2MV34pRD4Vx TcH/qIjc8ooIaZeT7ko8ZSJQCSbCpD/0bs5bD8XCy21D8j1QIoSxymcnG4K6MnD/ HaG5OrdY6Iy+LWmbHa1OHcN/Cmof6R2jdJYzpNTGz79MfoQ5OFqIVw/QrNE+LXOa y4bmuC4qrJDbloUmJGWUgC+E+Wb+U2izEyQLD49jhDlB+uO0/amLD9SdUsRZry+u HKmOJyRq5CrRepEcteOBXQKeADbeN7ckXBL1MfifnOD2HPmGEzliRyS/c2+VZdDQ Pbt5PflJaoh6fTUxjCFIkzaDtz1vc9E= -----END CERTIFICATE-----Generated at Sun Sep 13 15:02:52 2026 by rpki-client