$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/2ef88d4a-4713-3ba8-b32a-75ba9fd6a15e.roa File: 2ef88d4a-4713-3ba8-b32a-75ba9fd6a15e.roa (raw, json) Hash identifier: CaVM9dMIPltdDM0NSHUHWVpqizJJAN5SpHAT8LWF28g= Subject key identifier: 1A:18:CD:C1:68:02:91:E0:D8:80:E3:59:FA:17:1E:D0:95:FE:2C:AB Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584E8DA2376D32BCD331F32E5730 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/2ef88d4a-4713-3ba8-b32a-75ba9fd6a15e.roa Signing time: Sun 19 Jul 2026 18:24:20 +0000 ROA not before: Sun 19 Jul 2026 18:24:20 +0000 ROA not after: Sat 17 Oct 2026 18:24:20 +0000 asID: 54858 IP address blocks: 172.81.152.0/22 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:a2:37:6d:32:bc:d3:31:f3:2e:57:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jul 19 18:24:20 2026 GMT Not After : Oct 17 18:24:20 2026 GMT Subject: CN=af85f7cb-df42-404e-9744-2b4e8562a60e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:18:32:2a:f6:52:c6:44:e5:29:cf:db:b9:26: e1:5a:96:6f:ec:df:81:c8:b8:34:82:f0:4e:ee:be: c1:81:6a:dd:1e:95:ff:d7:54:de:6a:ff:ed:1c:85: 65:3f:9c:19:bc:4b:3b:ee:4c:d4:d9:1c:22:ba:cf: fd:47:eb:2b:3c:5b:d6:2b:12:86:54:e3:01:03:bb: ff:34:96:9c:51:63:7d:98:00:f5:cb:e3:4b:3e:a3: 0d:a2:ec:ef:1e:99:43:a1:be:78:b0:3b:08:a9:46: db:23:a7:58:cc:b7:d6:06:f1:5b:a5:03:29:35:95: 49:67:b4:c8:cc:42:23:f7:fa:05:03:6a:61:53:d7: d6:03:1d:ce:bc:fe:e8:16:02:db:12:b2:76:9a:8b: 79:7c:4a:90:9c:66:0b:1f:16:ff:f4:4b:bf:31:f9: 2b:2f:7c:24:02:3f:6d:0c:ff:a8:6d:68:95:85:64: 3a:04:f6:b9:83:d7:35:50:f5:e6:b3:4f:9f:ac:7d: 3b:ce:7f:ed:8e:43:f2:f6:05:49:98:4e:9d:8f:53: 5f:9e:51:4e:c6:6e:05:b0:2a:43:ab:3d:f6:f9:62: bb:0a:92:be:dd:08:bf:a7:08:68:8c:52:a2:6c:16: 4c:26:94:16:8c:62:ee:14:7f:e0:3a:36:34:04:59: 69:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:18:CD:C1:68:02:91:E0:D8:80:E3:59:FA:17:1E:D0:95:FE:2C:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/2ef88d4a-4713-3ba8-b32a-75ba9fd6a15e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 172.81.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:b1:70:06:ac:5e:66:0d:c7:fa:46:4e:d0:2e:4b:22:93:7c: d6:07:92:fb:dc:30:1f:92:90:e6:a2:b3:90:fa:fa:26:3c:f8: bb:bb:1a:97:2c:0f:9f:27:7b:fb:8f:00:0d:c5:02:de:9e:8f: e6:29:7f:67:5e:97:09:8a:a9:80:d8:0b:9f:70:39:73:24:a0: fa:1e:14:56:cb:51:7e:6e:1c:f5:c3:02:2d:7f:77:55:0d:19: 3a:3f:10:a5:72:4f:65:fa:08:08:54:52:21:cb:3a:b4:05:4d: 15:8f:48:1c:35:d2:58:54:45:f7:90:32:1f:ed:b9:9f:a3:eb: 39:f9:db:22:9b:11:7a:de:7c:09:ae:27:af:27:a8:d7:1f:b2: fa:d2:9a:04:a9:37:fa:3f:27:30:54:fa:85:29:4e:69:af:3c: fd:12:4b:40:52:f7:cb:21:dc:8b:da:1f:93:98:cd:56:2c:16: 56:0b:80:f7:c3:87:80:29:67:26:59:ef:29:a8:d2:aa:da:98: ba:35:ee:78:83:c0:3f:b4:1c:21:c0:c8:a1:af:99:d6:6e:ab: 31:97:fc:72:54:f5:f7:ab:2c:0e:2f:da:25:56:d4:ec:a5:8c: e7:3e:e5:c9:95:51:9b:06:f9:77:0c:ca:17:81:cf:7b:0c:4b: 4f:95:2a:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6NojdtMrzTMfMuVzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDcxOTE4MjQyMFoXDTI2MTAxNzE4MjQyMFowLzEtMCsGA1UEAxMk YWY4NWY3Y2ItZGY0Mi00MDRlLTk3NDQtMmI0ZTg1NjJhNjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRgyKvZSxkTlKc/buSbhWpZv7N+ByLg0gvBO 7r7BgWrdHpX/11Teav/tHIVlP5wZvEs77kzU2Rwius/9R+srPFvWKxKGVOMBA7v/ NJacUWN9mAD1y+NLPqMNouzvHplDob54sDsIqUbbI6dYzLfWBvFbpQMpNZVJZ7TI zEIj9/oFA2phU9fWAx3OvP7oFgLbErJ2mot5fEqQnGYLHxb/9Eu/MfkrL3wkAj9t DP+obWiVhWQ6BPa5g9c1UPXms0+frH07zn/tjkPy9gVJmE6dj1NfnlFOxm4FsCpD qz32+WK7CpK+3Qi/pwhojFKibBZMJpQWjGLuFH/gOjY0BFlp1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBoYzcFoApHg2IDjWfoXHtCV/iyrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMmVmODhkNGEtNDcxMy0z YmE4LWIzMmEtNzViYTlmZDZhMTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqxcAasXmYNx/pGTtAuSyKTfNYHkvvcMB+SkOais5D6+iY8+Lu7Gpcs D58ne/uPAA3FAt6ej+Ypf2delwmKqYDYC59wOXMkoPoeFFbLUX5uHPXDAi1/d1UN GTo/EKVyT2X6CAhUUiHLOrQFTRWPSBw10lhURfeQMh/tuZ+j6zn52yKbEXrefAmu J68nqNcfsvrSmgSpN/o/JzBU+oUpTmmvPP0SS0BS98sh3IvaH5OYzVYsFlYLgPfD h4ApZyZZ7ymo0qramLo17niDwD+0HCHAyKGvmdZuqzGX/HJU9ferLA4v2iVW1Oyl jOc+5cmVUZsG+XcMyheBz3sMS0+VKjg= -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:34 2026 by rpki-client