$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/dffdf8df-2e92-3131-9592-d4e48295a499.roa File: dffdf8df-2e92-3131-9592-d4e48295a499.roa (raw, json) Hash identifier: YYO8BW7w/yGLdFtPopjMVdPLH2F2POX4OG+bKzFyuw0= Subject key identifier: 49:ED:B0:A4:87:F2:52:B5:64:1A:13:CD:F4:42:53:C8:D3:83:DA:A1 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584EDDF74C49745A79FF61E43F00 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/dffdf8df-2e92-3131-9592-d4e48295a499.roa Signing time: Mon 17 Aug 2026 13:00:11 +0000 ROA not before: Mon 17 Aug 2026 13:00:11 +0000 ROA not after: Sun 15 Nov 2026 14:00:11 +0000 asID: 22616 IP address blocks: 170.85.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dd:f7:4c:49:74:5a:79:ff:61:e4:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 17 13:00:11 2026 GMT Not After : Nov 15 14:00:11 2026 GMT Subject: CN=d9cfe813-9667-429c-b1c3-173a39ddb125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:df:97:a3:e8:b3:61:a2:50:7d:c7:f4:66:70: 78:5b:ae:bf:e7:b1:52:7b:7e:43:e5:a3:e4:68:80: 9e:c4:97:4f:c6:99:97:16:81:37:47:f8:cf:bb:50: 36:fc:32:c4:fc:04:1e:1a:32:fb:fc:7c:57:30:b5: 44:36:75:8a:bc:81:eb:aa:da:21:0f:4d:56:74:40: c1:a8:a4:93:96:2d:73:d1:ae:e9:ed:a7:20:0e:84: 91:6a:f8:4d:5f:4e:63:6f:8c:4f:97:72:f2:07:5f: 4d:7b:9e:f7:97:8b:90:9e:af:e6:1b:a2:cb:fe:1d: 2f:52:ec:5d:4a:6a:2a:28:61:66:9e:ae:fe:2f:c9: 01:b8:86:b8:5f:b7:22:30:cc:31:ee:5f:e2:71:be: 19:78:14:8f:17:ee:fb:c8:a0:12:53:5f:77:38:34: 93:0e:36:94:aa:a4:f5:be:a6:5a:b0:36:b2:dd:92: 35:7e:a1:4a:6b:1e:d5:18:bb:8d:2d:dd:18:ea:19: 28:09:65:a5:87:f8:f7:66:c4:76:c9:6e:24:eb:1d: 82:34:0f:e0:94:d0:7a:08:69:62:a8:87:12:79:14: 0d:ea:e6:64:86:4e:77:92:e9:5b:38:5c:39:7d:f4: 8f:1b:63:26:61:03:ba:c0:64:41:5a:41:fd:9e:26: 3f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:ED:B0:A4:87:F2:52:B5:64:1A:13:CD:F4:42:53:C8:D3:83:DA:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/dffdf8df-2e92-3131-9592-d4e48295a499.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:57:f4:75:af:1d:02:7b:e2:2a:21:bf:14:e8:d8:3b:19:2c: 3a:dc:b0:c1:9f:26:66:bd:90:6b:5a:c2:b7:83:bb:41:83:81: d0:aa:9d:00:e6:8c:76:45:e7:1b:a8:9f:cd:59:1b:83:d8:7c: e0:78:54:e2:d9:f8:34:fb:40:c7:c1:d2:e7:48:8a:40:3e:21: cb:39:39:33:c9:7e:a3:dc:70:91:8c:9e:8a:c6:fc:7c:b2:10: dd:83:e1:49:23:ee:e3:65:7f:88:cf:b9:19:b3:bd:87:16:f0: ee:1b:73:29:13:32:f6:08:db:f0:2d:4a:86:34:48:e2:5a:49: b5:08:5f:31:78:41:5b:9f:d6:bb:76:72:c2:8a:dc:49:3d:9b: cf:8a:94:ab:0c:e9:81:66:81:36:a3:c5:0d:ef:e0:2f:8c:38: f0:38:8e:24:ad:86:70:66:99:80:6c:53:2d:a0:41:ba:31:f6: 71:87:62:86:5b:64:bc:7c:de:17:29:ac:4d:4f:d4:4b:45:76: 29:6d:57:e8:fc:07:5e:b5:83:8c:70:c5:2d:34:f8:8f:f3:66: 37:a6:d3:c1:11:69:50:74:7b:c8:0f:f7:95:56:11:21:53:1b: 81:a4:a1:86:7b:23:58:26:a0:f2:77:bb:8b:9e:24:c2:9c:58: 88:a5:75:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7d90xJdFp5/2HkPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDgxNzEzMDAxMVoXDTI2MTExNTE0MDAxMVowLzEtMCsGA1UEAxMk ZDljZmU4MTMtOTY2Ny00MjljLWIxYzMtMTczYTM5ZGRiMTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyd+Xo+izYaJQfcf0ZnB4W66/57FSe35D5aPk aICexJdPxpmXFoE3R/jPu1A2/DLE/AQeGjL7/HxXMLVENnWKvIHrqtohD01WdEDB qKSTli1z0a7p7acgDoSRavhNX05jb4xPl3LyB19Ne573l4uQnq/mG6LL/h0vUuxd SmoqKGFmnq7+L8kBuIa4X7ciMMwx7l/icb4ZeBSPF+77yKASU193ODSTDjaUqqT1 vqZasDay3ZI1fqFKax7VGLuNLd0Y6hkoCWWlh/j3ZsR2yW4k6x2CNA/glNB6CGli qIcSeRQN6uZkhk53kulbOFw5ffSPG2MmYQO6wGRBWkH9niY/+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEntsKSH8lK1ZBoTzfRCU8jTg9qhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZGZmZGY4ZGYtMmU5Mi0z MTMxLTk1OTItZDRlNDgyOTVhNDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlW4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRX9HWvHQJ74iohvxTo2DsZLDrcsMGfJma9kGtawreDu0GDgdCqnQDm jHZF5xuon81ZG4PYfOB4VOLZ+DT7QMfB0udIikA+Ics5OTPJfqPccJGMnorG/Hyy EN2D4Ukj7uNlf4jPuRmzvYcW8O4bcykTMvYI2/AtSoY0SOJaSbUIXzF4QVuf1rt2 csKK3Ek9m8+KlKsM6YFmgTajxQ3v4C+MOPA4jiSthnBmmYBsUy2gQbox9nGHYoZb ZLx83hcprE1P1EtFdiltV+j8B161g4xwxS00+I/zZjem08ERaVB0e8gP95VWESFT G4GkoYZ7I1gmoPJ3u4ueJMKcWIildcI= -----END CERTIFICATE-----Generated at Sun Sep 13 15:47:34 2026 by rpki-client