$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0c717496-7125-3e04-9f98-ad6053f408be.roa File: 0c717496-7125-3e04-9f98-ad6053f408be.roa (raw, json) Hash identifier: iYnaQso7Izx5ntS/9HDlBtYS4bESfmsWD4bFoEDNIe0= Subject key identifier: A0:21:58:F0:59:CA:55:07:21:97:42:DA:D0:0B:04:30:A9:84:85:15 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584E3B9475263939A7E37F351D00 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0c717496-7125-3e04-9f98-ad6053f408be.roa Signing time: Sat 20 Jun 2026 09:00:13 +0000 ROA not before: Sat 20 Jun 2026 09:00:13 +0000 ROA not after: Fri 18 Sep 2026 09:00:13 +0000 asID: 62044 IP address blocks: 170.85.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3b:94:75:26:39:39:a7:e3:7f:35:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jun 20 09:00:13 2026 GMT Not After : Sep 18 09:00:13 2026 GMT Subject: CN=a55c2932-ca08-4d7e-9e55-1f3ab6675ace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:93:2d:25:d9:26:73:3f:32:3d:0f:1e:97:e7: f2:d8:b7:35:14:9a:c4:ca:7f:5a:f6:87:d9:be:9d: a6:d5:7b:b7:76:0f:de:a5:83:8e:aa:ad:0e:d4:4b: e7:3b:6c:a0:17:90:1a:74:1d:c8:8e:35:12:6e:cc: 26:19:b2:f0:4d:85:a4:81:be:b9:5c:07:79:10:f8: b5:8b:8e:0c:87:ed:6b:15:ea:fa:85:e7:ec:23:80: d8:f7:34:f1:30:0a:06:de:83:f4:fb:9f:68:18:0d: aa:4d:43:be:69:d8:68:6f:e7:d4:aa:d3:2d:6a:7d: 96:35:e9:d9:85:5f:6f:76:98:bc:75:63:cc:0b:da: f1:6d:b0:f9:bb:cf:21:73:c1:42:8f:94:d2:63:76: ec:2f:5a:9a:97:47:a3:06:5e:a4:eb:96:f1:c3:b2: e9:93:35:3e:55:af:8e:e5:49:79:9f:f1:1d:15:63: a6:1d:8e:de:44:7f:12:72:4d:ac:94:30:c6:ef:9b: 97:45:61:23:83:b1:83:5e:e4:5a:f0:00:a7:d8:c0: bf:18:3a:1c:42:1c:81:49:34:21:c5:3f:be:55:a6: 53:ad:32:5b:a0:46:08:2e:12:6f:50:3e:44:ce:99: 2e:3a:17:9a:d5:da:a5:0c:23:7d:49:86:7a:a9:2b: 9d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:21:58:F0:59:CA:55:07:21:97:42:DA:D0:0B:04:30:A9:84:85:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0c717496-7125-3e04-9f98-ad6053f408be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:4b:1e:53:65:e1:f3:82:3c:5c:1d:d4:99:1e:40:39:b4:07: 64:79:1c:8f:e5:dc:0d:bd:d4:b6:82:92:0e:c8:9f:a1:ab:ae: 88:2f:5a:b3:d4:5f:94:d5:90:1a:45:2a:b6:48:a7:aa:30:be: b4:c2:3f:4c:37:d3:2e:51:a5:58:22:08:6d:89:10:76:ab:fb: fa:24:16:6b:b9:bc:d3:28:c8:8f:b9:0f:7e:0f:59:81:c5:0d: 4c:48:29:57:2c:e8:a4:42:78:6a:6c:7b:3a:cf:73:50:85:9c: 55:b8:b0:e1:17:83:0f:24:d4:12:7b:f0:80:00:88:82:03:70: c3:70:c9:82:a9:fb:8a:ab:8e:0d:7c:bd:d4:4d:84:d1:fe:e7: c0:97:21:ed:12:93:c6:d8:dc:a9:e7:11:d8:7c:40:60:f2:ab: df:98:a8:94:fb:3a:fc:ec:78:22:76:71:61:43:3a:0d:99:c9: c9:20:84:c9:61:38:68:39:ff:7f:49:c4:5f:d8:a3:43:56:18: 3c:6b:7f:48:69:bb:ae:2c:26:fc:3c:a1:9c:82:ec:03:17:19: 09:4a:32:bc:8b:8f:ba:aa:45:b2:20:3b:00:ec:f7:f6:d7:72: cf:2f:31:f3:26:ef:3a:c3:42:a7:c2:84:89:9b:f4:bd:6c:df: 54:12:d3:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE47lHUmOTmn4381HQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDYyMDA5MDAxM1oXDTI2MDkxODA5MDAxM1owLzEtMCsGA1UEAxMk YTU1YzI5MzItY2EwOC00ZDdlLTllNTUtMWYzYWI2Njc1YWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZMtJdkmcz8yPQ8el+fy2Lc1FJrEyn9a9ofZ vp2m1Xu3dg/epYOOqq0O1EvnO2ygF5AadB3IjjUSbswmGbLwTYWkgb65XAd5EPi1 i44Mh+1rFer6hefsI4DY9zTxMAoG3oP0+59oGA2qTUO+adhob+fUqtMtan2WNenZ hV9vdpi8dWPMC9rxbbD5u88hc8FCj5TSY3bsL1qal0ejBl6k65bxw7LpkzU+Va+O 5Ul5n/EdFWOmHY7eRH8Sck2slDDG75uXRWEjg7GDXuRa8ACn2MC/GDocQhyBSTQh xT++VaZTrTJboEYILhJvUD5EzpkuOhea1dqlDCN9SYZ6qSudcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAhWPBZylUHIZdC2tALBDCphIUVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMGM3MTc0OTYtNzEyNS0z ZTA0LTlmOTgtYWQ2MDUzZjQwOGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlUsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtLHlNl4fOCPFwd1JkeQDm0B2R5HI/l3A291LaCkg7In6GrrogvWrPU X5TVkBpFKrZIp6owvrTCP0w30y5RpVgiCG2JEHar+/okFmu5vNMoyI+5D34PWYHF DUxIKVcs6KRCeGpsezrPc1CFnFW4sOEXgw8k1BJ78IAAiIIDcMNwyYKp+4qrjg18 vdRNhNH+58CXIe0Sk8bY3KnnEdh8QGDyq9+YqJT7OvzseCJ2cWFDOg2ZyckghMlh OGg5/39JxF/Yo0NWGDxrf0hpu64sJvw8oZyC7AMXGQlKMryLj7qqRbIgOwDs9/bX cs8vMfMm7zrDQqfChImb9L1s31QS0+o= -----END CERTIFICATE-----Generated at Fri Jul 24 13:06:41 2026 by rpki-client