$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f00191ea-7649-3395-af77-d4da4f50995c.roa File: f00191ea-7649-3395-af77-d4da4f50995c.roa (raw, json) Hash identifier: eLCzzfDe5w4sfUGwQfud8Ep8kfWjwnECuzolLx4FZDo= Subject key identifier: E4:59:B7:74:DC:B4:89:9F:42:A4:1E:6F:1D:44:A5:F8:53:8D:7C:8C Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584EED524338E2A20D222D6EF400 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f00191ea-7649-3395-af77-d4da4f50995c.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 16509 IP address blocks: 170.85.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:43:38:e2:a2:0d:22:2d:6e:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=0a77e8c9-5291-4724-a90d-89c4ce4d9af9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:7e:7f:66:1f:4e:d5:48:4f:91:dd:b3:9f:c1: e8:24:0c:22:0e:ef:d1:cf:68:77:12:25:0c:10:29: 88:56:22:54:7f:81:71:b1:6e:77:ce:ba:c0:13:f8: 8c:d4:9e:c6:4d:f8:63:b7:21:12:7a:a1:25:7b:df: c4:7b:77:b8:d4:52:c2:66:e4:2c:eb:02:a1:51:9d: 25:e6:81:40:74:17:7f:8e:77:d3:32:45:58:3b:80: 6b:39:0e:e3:a4:1c:56:17:ba:7e:87:c5:98:8a:0b: 22:e8:68:56:87:c7:1b:a8:57:bc:5b:9c:e8:19:29: f4:4a:e2:74:e1:a0:84:b5:6a:fc:61:e6:97:58:f1: 83:f5:be:f1:06:df:e5:66:39:c1:4a:13:69:76:fc: 0c:35:7b:a9:97:a2:79:fd:56:6b:cf:1e:7b:1b:cf: ec:fd:5a:b6:ac:f8:86:ae:51:73:6d:c3:c7:c4:17: 04:24:bd:d5:e6:64:a7:4b:52:bf:a9:3b:54:c3:c1: 67:9b:50:22:1c:96:59:0e:e2:2c:2e:76:03:c9:42: 73:5d:a5:5a:36:03:ef:a3:e8:d5:3e:c4:95:a7:f1: 7a:35:0b:e8:ce:22:85:f4:b5:e4:c1:54:74:0b:37: 1d:6f:e1:5a:87:63:bb:d7:75:1c:78:c5:ce:99:10: bb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:59:B7:74:DC:B4:89:9F:42:A4:1E:6F:1D:44:A5:F8:53:8D:7C:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f00191ea-7649-3395-af77-d4da4f50995c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:df:5c:2e:03:9d:b7:02:79:c3:17:95:52:aa:88:55:8c:ff: 24:93:5a:17:75:9e:e7:1f:b9:51:86:28:9f:b1:9c:7d:e2:4c: 21:c8:8c:fb:22:57:74:34:b2:92:ae:88:16:3f:48:e4:d7:fc: c4:87:fd:4e:e3:d3:db:c4:99:f5:3b:2e:2d:17:ba:3c:26:52: 6e:f9:b8:00:80:2f:49:69:08:c8:e7:3c:aa:a2:f4:ce:5e:88: fb:90:cc:65:b5:1b:22:d7:85:f8:52:a7:f4:d9:18:26:dd:0b: 0d:49:06:15:73:2a:80:3f:e0:e5:b6:1c:b4:cf:8e:37:50:0e: e4:3f:61:79:dd:17:36:72:51:d2:5c:5e:47:ed:16:22:5b:8f: 01:ba:04:b8:31:51:e6:3a:6e:cd:4a:b9:ba:36:2a:ab:aa:40: f4:04:a3:87:e7:1b:91:22:37:0e:28:42:12:1d:c2:53:0e:60: 23:f2:16:e5:76:28:af:5e:a1:d7:3e:bd:f0:e9:2b:3b:89:7b: 40:5e:72:21:09:7b:4a:37:e7:56:94:c7:8c:75:f3:2a:a3:6d: 54:cd:56:0c:80:a8:11:3c:06:d4:6f:02:ee:67:38:0e:d0:4e: 79:f7:d3:4f:21:6d:3d:56:e1:78:c0:33:cd:b7:4e:ab:9c:0a: 7a:b2:1c:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUkM44qINIi1u9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk MGE3N2U4YzktNTI5MS00NzI0LWE5MGQtODljNGNlNGQ5YWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgn5/Zh9O1UhPkd2zn8HoJAwiDu/Rz2h3EiUM ECmIViJUf4FxsW53zrrAE/iM1J7GTfhjtyESeqEle9/Ee3e41FLCZuQs6wKhUZ0l 5oFAdBd/jnfTMkVYO4BrOQ7jpBxWF7p+h8WYigsi6GhWh8cbqFe8W5zoGSn0SuJ0 4aCEtWr8YeaXWPGD9b7xBt/lZjnBShNpdvwMNXupl6J5/VZrzx57G8/s/Vq2rPiG rlFzbcPHxBcEJL3V5mSnS1K/qTtUw8Fnm1AiHJZZDuIsLnYDyUJzXaVaNgPvo+jV PsSVp/F6NQvoziKF9LXkwVR0Czcdb+Fah2O713UceMXOmRC7QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORZt3TctImfQqQebx1EpfhTjXyMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZjAwMTkxZWEtNzY0OS0z Mzk1LWFmNzctZDRkYTRmNTA5OTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLfXC4DnbcCecMXlVKqiFWM/ySTWhd1nucfuVGGKJ+xnH3iTCHIjPsi V3Q0spKuiBY/SOTX/MSH/U7j09vEmfU7Li0XujwmUm75uACAL0lpCMjnPKqi9M5e iPuQzGW1GyLXhfhSp/TZGCbdCw1JBhVzKoA/4OW2HLTPjjdQDuQ/YXndFzZyUdJc XkftFiJbjwG6BLgxUeY6bs1Kubo2KquqQPQEo4fnG5EiNw4oQhIdwlMOYCPyFuV2 KK9eodc+vfDpKzuJe0BeciEJe0o351aUx4x18yqjbVTNVgyAqBE8BtRvAu5nOA7Q Tnn3008hbT1W4XjAM823TqucCnqyHAM= -----END CERTIFICATE-----Generated at Sun Sep 13 14:23:09 2026 by rpki-client