$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/df99cbf9-0e22-3824-bce4-3374a259356a.roa File: df99cbf9-0e22-3824-bce4-3374a259356a.roa (raw, json) Hash identifier: q6oJkYhLsiVTUE9WBLwQUrTZqd75cjcoPZ+2Ra98o+w= Subject key identifier: 24:AB:13:BE:69:7F:50:80:C0:2C:4E:8C:DA:66:27:68:9B:CD:0D:3B Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584EDDF73B426813DA0233FED880 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/df99cbf9-0e22-3824-bce4-3374a259356a.roa Signing time: Mon 17 Aug 2026 13:00:11 +0000 ROA not before: Mon 17 Aug 2026 13:00:11 +0000 ROA not after: Sun 15 Nov 2026 14:00:11 +0000 asID: 62044 IP address blocks: 170.85.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dd:f7:3b:42:68:13:da:02:33:fe:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 17 13:00:11 2026 GMT Not After : Nov 15 14:00:11 2026 GMT Subject: CN=7e5b15f6-6a6b-42bb-9c9b-ef60afc9f7b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a7:a1:3a:57:72:34:b7:42:89:fa:f2:68:2b: d5:c4:a4:9c:23:35:46:44:33:ea:32:f6:af:31:68: 48:d4:d1:23:cc:16:40:4f:3c:d1:ee:3c:bf:9e:6c: 9b:8c:46:64:47:21:1a:29:ea:1d:34:4d:6c:9a:ac: fa:a1:86:9c:80:20:fd:fb:b6:67:c9:e6:2c:d9:91: a1:48:2d:f0:8a:ea:d7:04:f4:f7:0b:51:0a:c2:99: ae:37:d7:a5:60:0d:43:06:b2:22:5f:95:e8:1f:4c: fa:4e:d7:9a:ce:5a:f3:d3:eb:1a:46:40:79:68:a5: 41:b6:f1:c6:17:cd:42:4a:f4:c6:8b:6c:0e:d9:2a: e2:cf:d9:07:ff:53:82:5b:a0:44:a1:1e:bc:aa:90: 80:66:2c:6c:05:fd:61:28:ad:e5:56:18:31:ed:fe: 46:c5:6f:5e:bc:9a:59:a8:f1:f9:20:94:dd:73:2a: e9:af:88:78:5e:44:6e:33:19:c3:a1:5c:3c:1e:b0: 4f:5a:dc:88:81:be:10:7d:8e:38:d2:bd:21:8c:d1: 89:ea:cb:4e:53:af:d0:a8:34:81:49:db:23:51:6c: 92:0b:32:69:5b:03:1a:f1:b2:17:86:89:a4:63:22: a9:6b:66:03:82:d4:6c:4b:95:98:3c:9b:79:1e:51: d5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:AB:13:BE:69:7F:50:80:C0:2C:4E:8C:DA:66:27:68:9B:CD:0D:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/df99cbf9-0e22-3824-bce4-3374a259356a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:10:5b:0b:a4:ed:38:58:1a:e4:e4:a7:bf:c1:fc:a2:db:8a: 8c:1e:83:d0:a9:0d:5f:fe:3b:ef:22:7b:ae:81:99:80:56:ad: 2c:d7:6a:da:79:45:87:db:f7:1d:c5:23:6f:1e:6f:8b:cf:00: c9:df:5c:0f:f1:95:b8:4d:d2:e7:ba:67:b8:f4:2a:2a:5f:0d: 1f:2b:0a:59:5a:b1:bf:c0:75:91:7a:dc:4c:ba:5f:f7:d5:7d: bb:30:e4:b8:b0:ed:29:cf:ea:9b:55:c2:e4:8e:5d:50:4d:f0: 1d:61:3f:7d:34:dd:2e:a5:a1:be:60:5f:29:87:57:a1:76:3c: 00:d6:21:66:33:3b:ad:08:b2:a4:8c:98:e3:e9:d8:d4:cb:98: 5b:49:22:25:b9:69:ab:68:14:04:a8:bb:3d:a1:4b:17:8c:6e: 64:a3:b3:1e:87:1b:c5:90:89:51:49:7b:a0:89:0b:2f:62:23: 58:49:10:63:ef:1a:80:c8:44:00:7a:cf:61:c1:fb:46:41:1b: 8c:47:b7:96:8d:91:64:e9:22:74:21:be:91:c6:6a:0e:51:92: 1a:18:9c:82:99:17:c9:43:56:a9:0e:0c:b9:a0:43:63:4a:52: 42:d5:72:b8:32:6d:bc:9c:ac:2a:67:2a:cd:31:ba:2d:6a:8e: 18:de:d5:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7d9ztCaBPaAjP+2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDgxNzEzMDAxMVoXDTI2MTExNTE0MDAxMVowLzEtMCsGA1UEAxMk N2U1YjE1ZjYtNmE2Yi00MmJiLTljOWItZWY2MGFmYzlmN2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6ehOldyNLdCifryaCvVxKScIzVGRDPqMvav MWhI1NEjzBZATzzR7jy/nmybjEZkRyEaKeodNE1smqz6oYacgCD9+7ZnyeYs2ZGh SC3wiurXBPT3C1EKwpmuN9elYA1DBrIiX5XoH0z6Tteazlrz0+saRkB5aKVBtvHG F81CSvTGi2wO2Sriz9kH/1OCW6BEoR68qpCAZixsBf1hKK3lVhgx7f5GxW9evJpZ qPH5IJTdcyrpr4h4XkRuMxnDoVw8HrBPWtyIgb4QfY440r0hjNGJ6stOU6/QqDSB SdsjUWySCzJpWwMa8bIXhomkYyKpa2YDgtRsS5WYPJt5HlHV6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSrE75pf1CAwCxOjNpmJ2ibzQ07MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZGY5OWNiZjktMGUyMi0z ODI0LWJjZTQtMzM3NGEyNTkzNTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlUiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIQWwuk7ThYGuTkp7/B/KLbioweg9CpDV/+O+8ie66BmYBWrSzXatp5 RYfb9x3FI28eb4vPAMnfXA/xlbhN0ue6Z7j0KipfDR8rCllasb/AdZF63Ey6X/fV fbsw5Liw7SnP6ptVwuSOXVBN8B1hP3003S6lob5gXymHV6F2PADWIWYzO60IsqSM mOPp2NTLmFtJIiW5aatoFASouz2hSxeMbmSjsx6HG8WQiVFJe6CJCy9iI1hJEGPv GoDIRAB6z2HB+0ZBG4xHt5aNkWTpInQhvpHGag5RkhoYnIKZF8lDVqkODLmgQ2NK UkLVcrgybbycrCpnKs0xui1qjhje1aI= -----END CERTIFICATE-----Generated at Sun Sep 13 15:49:28 2026 by rpki-client