$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/22b0e1f8-0511-3263-b054-3890238ca296.roa File: 22b0e1f8-0511-3263-b054-3890238ca296.roa (raw, json) Hash identifier: c1/WbccpuZEKr4ULS+t2yNYtb2cwh/gIJnPbB0N/dRk= Subject key identifier: F6:C7:D8:89:02:37:5E:FA:13:96:5B:4A:B7:57:36:91:F0:31:F8:26 Certificate issuer: /CN=7daa4589-66d8-4675-8538-e075ba80ecd3 Certificate serial: 010D0C9F4328584ED001D7E1CCE0117EB511AF80 Authority key identifier: BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/22b0e1f8-0511-3263-b054-3890238ca296.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 20115 IP address blocks: 170.39.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:d7:e1:cc:e0:11:7e:b5:11:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7daa4589-66d8-4675-8538-e075ba80ecd3 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=3c82834a-720b-4c62-bb7c-af9126a27f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:9a:a3:7c:39:c3:48:e8:07:9b:95:c0:6a:bc: db:f5:48:b7:3e:80:29:98:f7:ce:6c:63:0b:56:9e: bd:eb:92:05:43:f0:21:77:79:ff:3c:81:e9:4a:55: 9f:09:82:c0:12:b1:ec:d5:76:e6:03:2a:bc:27:b9: 2f:02:b4:67:60:a8:ad:70:d4:e3:3b:11:45:23:75: 60:90:aa:da:48:83:ae:b1:5d:18:cf:12:28:ac:3d: ca:cf:f9:2d:2a:7c:6e:7d:59:27:5f:b9:a4:d1:11: 30:01:91:03:39:eb:6e:eb:4c:39:70:aa:28:0f:3b: 50:3f:97:60:c5:bf:99:4d:bc:b8:36:3e:65:38:36: 9a:7a:1d:17:1c:69:5f:2a:b4:29:4e:0f:07:cb:37: 02:d5:00:8d:60:1c:2f:24:ae:95:05:0e:19:38:f0: 26:20:57:95:27:94:16:b2:eb:d6:61:15:9c:5a:11: 64:d3:bf:31:b0:c1:0a:58:f5:53:6c:d8:32:c3:27: 95:fd:0e:d2:aa:92:39:4f:c1:3d:de:43:b0:b6:ad: 96:82:cf:1e:bd:3c:50:1e:42:17:9a:24:fa:3d:11: 8f:cb:d0:eb:80:9e:f7:b4:9d:a3:74:f6:09:4f:03: ee:12:39:02:d3:e4:00:19:7d:b7:9e:e9:4b:d2:36: 18:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C7:D8:89:02:37:5E:FA:13:96:5B:4A:B7:57:36:91:F0:31:F8:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/22b0e1f8-0511-3263-b054-3890238ca296.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl X509v3 Authority Key Identifier: keyid:BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer sbgp-ipAddrBlock: critical IPv4: 170.39.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:82:1d:62:7b:c1:59:5e:62:78:ab:3e:33:a2:c6:76:ee:a5: 91:6d:88:c4:d7:29:ee:2e:e9:9b:54:31:ef:8a:42:9a:2f:9c: 69:df:e9:27:81:08:ba:28:b1:98:df:91:0c:af:13:b4:d3:f6: f1:2c:b1:8a:af:c1:e1:ef:4f:4d:ef:e1:9d:ae:2e:c1:89:11: d0:6d:c7:ed:f7:a8:58:f0:dd:aa:67:b0:eb:b5:6b:4e:73:51: 52:1d:88:0a:06:e2:31:30:94:a4:40:56:fe:0a:16:3d:fe:9d: a7:ed:4c:de:26:3e:9f:11:5f:bf:dd:d8:8d:08:3a:b0:4f:dd: de:79:6e:92:90:9f:56:c5:3a:ee:c0:19:33:2d:f2:0c:ef:60: b9:ce:b1:34:8e:88:2f:c8:0c:9e:ad:77:b3:55:cb:aa:67:a9: fa:6a:53:89:a7:00:4f:5f:4c:75:0e:97:a7:76:0e:6d:46:82: ca:8b:b9:18:c3:3d:c5:34:8e:1b:e5:76:64:90:71:96:a8:07: 86:98:f9:0d:06:36:1f:af:2d:ae:13:f4:d8:1b:34:6f:dc:e2: 2c:59:ae:c0:81:70:e5:0d:8a:88:3a:63:25:24:a4:6f:7b:65: 7c:40:cb:21:e8:53:0b:14:dc:25:cb:07:b0:85:1a:71:6c:e0: 84:c6:0f:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAdfhzOARfrURr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RhYTQ1ODktNjZkOC00Njc1LTg1MzgtZTA3NWJhODBl Y2QzMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk M2M4MjgzNGEtNzIwYi00YzYyLWJiN2MtYWY5MTI2YTI3ZjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85qjfDnDSOgHm5XAarzb9Ui3PoApmPfObGML Vp6965IFQ/Ahd3n/PIHpSlWfCYLAErHs1XbmAyq8J7kvArRnYKitcNTjOxFFI3Vg kKraSIOusV0YzxIorD3Kz/ktKnxufVknX7mk0REwAZEDOetu60w5cKooDztQP5dg xb+ZTby4Nj5lODaaeh0XHGlfKrQpTg8HyzcC1QCNYBwvJK6VBQ4ZOPAmIFeVJ5QW suvWYRWcWhFk078xsMEKWPVTbNgywyeV/Q7SqpI5T8E93kOwtq2Wgs8evTxQHkIX miT6PRGPy9DrgJ73tJ2jdPYJTwPuEjkC0+QAGX23nulL0jYY/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPbH2IkCN176E5ZbSrdXNpHwMfgmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZGFh NDU4OS02NmQ4LTQ2NzUtODUzOC1lMDc1YmE4MGVjZDMvMjJiMGUxZjgtMDUxMS0z MjYzLWIwNTQtMzg5MDIzOGNhMjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2RhYTQ1ODktNjZkOC00Njc1LTg1 MzgtZTA3NWJhODBlY2QzLzdkYWE0NTg5LTY2ZDgtNDY3NS04NTM4LWUwNzViYTgw ZWNkMy5jcmwwHwYDVR0jBBgwFoAUv9T+9wqpQOy4VAn0Nps0P4ZaCgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83ZGFhNDU4OS02NmQ4LTQ2NzUtODUzOC1lMDc1 YmE4MGVjZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqiekMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeCHWJ7wVleYnirPjOixnbupZFtiMTXKe4u6ZtUMe+KQpovnGnf6SeB CLoosZjfkQyvE7TT9vEssYqvweHvT03v4Z2uLsGJEdBtx+33qFjw3apnsOu1a05z UVIdiAoG4jEwlKRAVv4KFj3+naftTN4mPp8RX7/d2I0IOrBP3d55bpKQn1bFOu7A GTMt8gzvYLnOsTSOiC/IDJ6td7NVy6pnqfpqU4mnAE9fTHUOl6d2Dm1GgsqLuRjD PcU0jhvldmSQcZaoB4aY+Q0GNh+vLa4T9NgbNG/c4ixZrsCBcOUNiog6YyUkpG97 ZXxAyyHoUwsU3CXLB7CFGnFs4ITGD1E= -----END CERTIFICATE-----Generated at Tue Sep 1 03:35:08 2026 by rpki-client