$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/ff94971f-87dc-357c-99a9-98110a2d1389.roa File: ff94971f-87dc-357c-99a9-98110a2d1389.roa (raw, json) Hash identifier: Dx8ss6L+6tACtOV11Gwvctgepi8H798zUcDM3Deuv9o= Subject key identifier: E7:D2:46:AB:09:B4:5A:78:0B:B8:1C:EA:5A:F8:E7:88:62:A7:B2:57 Certificate issuer: /CN=1d71aad6-87bb-4b95-b81e-5f6d95d05f03 Certificate serial: 010D0C9F4328584EA78F4959DD59F136DF24CD80 Authority key identifier: 64:EB:9A:E0:63:A7:1F:14:5A:3B:C2:09:12:04:E7:85:81:F6:88:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/ff94971f-87dc-357c-99a9-98110a2d1389.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 53548 IP address blocks: 170.39.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:49:59:dd:59:f1:36:df:24:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d71aad6-87bb-4b95-b81e-5f6d95d05f03 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=bd58499d-3d88-4aa1-9564-c0b2b400e36f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f0:c6:df:9b:02:88:3f:b5:c8:bd:de:89:c4: c7:f6:0d:bc:d7:5b:f0:97:94:14:2b:1f:12:19:4d: fe:4b:6f:43:21:4d:73:60:a2:90:97:54:cb:24:f2: e3:3f:18:0b:9c:4f:63:3f:a8:65:b7:fb:f4:ad:60: 1c:06:d4:db:6f:59:68:4c:8f:46:bc:ac:58:33:00: 6d:78:4a:35:16:da:bd:6e:c4:8a:b1:78:3a:1a:64: 86:c2:ac:6e:d3:ea:b9:da:6e:e2:d4:9f:cc:5f:8f: 89:1e:c6:f2:fa:88:0f:ab:c7:c7:0b:93:4c:25:66: 8b:a4:48:a6:80:2a:94:44:40:81:32:ec:84:ec:23: c1:f9:48:35:d6:6e:6d:f7:2e:ab:17:2b:0f:98:b3: e6:fe:5f:2a:0a:50:d3:71:a7:5f:30:61:99:1c:49: 90:4f:16:f6:62:50:a1:15:ad:3e:a0:62:76:88:0c: 20:65:01:5f:28:80:70:7a:6c:0a:5b:c3:a7:12:45: 2c:7b:8d:ce:ca:fb:f3:cd:c9:a4:0f:e8:03:51:16: f5:31:2f:4f:fe:95:c6:fe:aa:6d:07:57:51:21:c1: f5:e9:20:88:9a:bc:c8:36:2c:ce:44:76:08:c4:24: 00:db:c3:ea:ed:62:3b:37:c3:38:b0:38:96:09:d5: f1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D2:46:AB:09:B4:5A:78:0B:B8:1C:EA:5A:F8:E7:88:62:A7:B2:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/ff94971f-87dc-357c-99a9-98110a2d1389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.crl X509v3 Authority Key Identifier: keyid:64:EB:9A:E0:63:A7:1F:14:5A:3B:C2:09:12:04:E7:85:81:F6:88:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.cer sbgp-ipAddrBlock: critical IPv4: 170.39.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:fe:e3:82:d2:b3:a6:ed:1b:76:32:9f:0b:c8:26:d6:03:44: be:0b:dd:eb:c2:25:ff:51:80:8b:b7:8f:f2:99:2c:3c:1a:51: fe:37:02:19:b6:af:33:0d:85:16:c5:55:5f:97:23:0c:49:69: 84:de:da:ef:c9:50:07:fa:10:71:a2:77:67:f4:c7:2e:c8:83: 28:6e:2e:7f:77:58:15:98:6d:14:73:e8:56:5f:07:70:12:2b: 7d:ec:87:a3:a0:7f:b8:86:63:f7:f4:83:78:49:06:40:2d:c6: 28:f7:c9:2e:d6:1b:9c:30:1c:9b:d5:a8:f4:0b:ce:48:8b:99: f4:1c:87:7d:ab:36:f6:22:28:8b:05:90:b6:85:01:9a:ef:e3: 4c:9f:09:dc:36:7f:fc:29:5d:5b:50:49:3a:b7:09:ed:63:db: 67:fc:16:df:a1:b9:3d:ae:b7:59:00:d6:72:a4:42:27:24:d0: 8e:eb:6e:60:e8:98:ef:e1:28:c7:a8:05:e3:09:0a:36:af:f2: e6:16:88:87:8f:1e:92:29:11:e8:eb:e2:aa:dc:52:70:3c:bb: 7c:93:18:bd:d8:21:a6:c3:4c:88:eb:27:65:d6:6d:40:bd:b6: 59:15:56:5b:f6:f4:66:1f:75:39:d0:60:c5:cd:29:f0:17:68: 98:8a:f2:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj0lZ3VnxNt8kzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ3MWFhZDYtODdiYi00Yjk1LWI4MWUtNWY2ZDk1ZDA1 ZjAzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YmQ1ODQ5OWQtM2Q4OC00YWExLTk1NjQtYzBiMmI0MDBlMzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvDG35sCiD+1yL3eicTH9g2811vwl5QUKx8S GU3+S29DIU1zYKKQl1TLJPLjPxgLnE9jP6hlt/v0rWAcBtTbb1loTI9GvKxYMwBt eEo1Ftq9bsSKsXg6GmSGwqxu0+q52m7i1J/MX4+JHsby+ogPq8fHC5NMJWaLpEim gCqURECBMuyE7CPB+Ug11m5t9y6rFysPmLPm/l8qClDTcadfMGGZHEmQTxb2YlCh Fa0+oGJ2iAwgZQFfKIBwemwKW8OnEkUse43OyvvzzcmkD+gDURb1MS9P/pXG/qpt B1dRIcH16SCImrzINizORHYIxCQA28Pq7WI7N8M4sDiWCdXxBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfSRqsJtFp4C7gc6lr454hip7JXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZDcx YWFkNi04N2JiLTRiOTUtYjgxZS01ZjZkOTVkMDVmMDMvZmY5NDk3MWYtODdkYy0z NTdjLTk5YTktOTgxMTBhMmQxMzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWQ3MWFhZDYtODdiYi00Yjk1LWI4 MWUtNWY2ZDk1ZDA1ZjAzLzFkNzFhYWQ2LTg3YmItNGI5NS1iODFlLTVmNmQ5NWQw NWYwMy5jcmwwHwYDVR0jBBgwFoAUZOua4GOnHxRaO8IJEgTnhYH2iG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZDcxYWFkNi04N2JiLTRiOTUtYjgxZS01ZjZk OTVkMDVmMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqifwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAML+44LSs6btG3YynwvIJtYDRL4L3evCJf9RgIu3j/KZLDwaUf43Ahm2 rzMNhRbFVV+XIwxJaYTe2u/JUAf6EHGid2f0xy7IgyhuLn93WBWYbRRz6FZfB3AS K33sh6Ogf7iGY/f0g3hJBkAtxij3yS7WG5wwHJvVqPQLzkiLmfQch32rNvYiKIsF kLaFAZrv40yfCdw2f/wpXVtQSTq3Ce1j22f8Ft+huT2ut1kA1nKkQick0I7rbmDo mO/hKMeoBeMJCjav8uYWiIePHpIpEejr4qrcUnA8u3yTGL3YIabDTIjrJ2XWbUC9 tlkVVlv29GYfdTnQYMXNKfAXaJiK8nI= -----END CERTIFICATE-----Generated at Wed Aug 26 18:04:46 2026 by rpki-client