$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/20a9c2ec-ef67-3c02-84d8-6b0a1c551418.roa File: 20a9c2ec-ef67-3c02-84d8-6b0a1c551418.roa (raw, json) Hash identifier: r6u28zwIKlhdG0e4mo41X4Jsyn9FErbADXLl/m7hxTU= Subject key identifier: 03:B9:F9:F4:55:34:62:AA:86:B7:E9:A5:E9:3C:A1:74:CC:E8:9D:E0 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584E3B947F61AB579C5AB1A97280 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/20a9c2ec-ef67-3c02-84d8-6b0a1c551418.roa Signing time: Sat 20 Jun 2026 09:00:13 +0000 ROA not before: Sat 20 Jun 2026 09:00:13 +0000 ROA not after: Fri 18 Sep 2026 09:00:13 +0000 asID: 22616 IP address blocks: 170.85.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3b:94:7f:61:ab:57:9c:5a:b1:a9:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jun 20 09:00:13 2026 GMT Not After : Sep 18 09:00:13 2026 GMT Subject: CN=78fdead6-76d7-4ef5-b8f2-7c55f54a3367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5e:71:9d:2c:99:9a:c3:6a:e4:b8:07:02:41: 03:bb:91:e8:3a:e6:6b:7d:28:3c:c5:9f:df:24:df: e8:42:61:9b:f3:e1:f4:fb:89:3c:31:bc:79:c5:2e: f2:79:fe:70:a6:96:c2:53:64:72:92:97:a2:e7:15: 5e:b5:c2:47:fd:a6:21:92:bd:fa:cc:45:b2:1c:e7: 61:b0:cc:df:b6:04:d9:1c:43:71:ea:82:a6:a8:c8: b8:15:91:11:b5:9f:8e:7d:98:f0:2d:65:52:4a:92: a9:59:8e:36:a8:06:03:91:c9:3a:50:f7:b2:f7:ef: 8f:de:16:92:5f:94:e8:2e:9b:b3:8f:db:d8:7e:76: 74:e9:c8:55:77:66:c7:93:79:5c:4e:aa:fd:ce:71: e8:5c:68:38:84:58:a4:af:14:7e:49:d0:3f:a7:85: 9e:37:51:18:df:14:dc:e5:aa:ca:39:93:7e:71:ca: ce:dc:b5:ce:ca:0b:48:5e:eb:08:a6:b7:99:ab:2f: 46:e3:70:cc:d0:34:6c:6e:1b:c2:a1:58:c4:00:70: 36:43:d0:74:2d:d0:81:0e:8b:c7:73:45:20:61:57: c5:8f:be:10:f0:9f:fd:82:41:c9:e2:bf:78:43:2d: 08:ce:3e:fd:9d:46:1a:66:f3:5d:89:c8:fc:3b:3a: 0c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:B9:F9:F4:55:34:62:AA:86:B7:E9:A5:E9:3C:A1:74:CC:E8:9D:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/20a9c2ec-ef67-3c02-84d8-6b0a1c551418.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:65:7d:73:be:0f:4b:3f:d5:78:c0:64:13:14:76:ff:e9:1f: ff:78:5c:20:a5:58:ed:64:f4:6d:7d:f1:06:c0:7a:70:71:94: 65:aa:20:ef:a3:2c:41:3e:f6:2f:80:07:10:8f:43:0a:ca:79: 82:28:dd:ab:69:d7:29:52:94:67:05:a9:0a:d2:5c:e0:94:98: f3:5d:c6:f6:57:e7:b9:aa:2d:33:d6:67:eb:88:4d:38:3c:3e: 66:81:78:02:41:d3:a5:4f:d5:f3:4e:53:d3:e2:56:57:cb:23: b5:bf:70:fc:69:3a:d6:d2:ee:21:2a:1a:19:de:8e:df:cf:32: 48:2e:e5:1d:8c:90:dc:fe:8b:08:6a:3f:43:84:50:ab:be:b3: 9b:bf:d4:61:e7:89:d1:4b:5f:76:d5:0e:26:48:5b:33:6e:9d: 09:f8:ec:d7:a6:3a:bc:eb:7e:96:54:52:e5:6a:31:f0:9c:cc: c5:e7:0a:f4:55:93:55:f7:13:53:2e:af:87:96:4f:98:ab:82: d6:a7:2a:4f:06:8d:6f:3d:59:69:6f:cd:a1:1f:87:3e:e5:5d: 15:8a:80:ec:da:39:ff:4a:8a:8d:78:54:a0:b1:4f:38:6a:ad: 05:1c:6d:0c:f1:f9:64:08:56:ae:72:f9:09:3a:59:c2:43:19: d4:cb:84:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE47lH9hq1ecWrGpcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDYyMDA5MDAxM1oXDTI2MDkxODA5MDAxM1owLzEtMCsGA1UEAxMk NzhmZGVhZDYtNzZkNy00ZWY1LWI4ZjItN2M1NWY1NGEzMzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhl5xnSyZmsNq5LgHAkEDu5HoOuZrfSg8xZ/f JN/oQmGb8+H0+4k8Mbx5xS7yef5wppbCU2Rykpei5xVetcJH/aYhkr36zEWyHOdh sMzftgTZHENx6oKmqMi4FZERtZ+OfZjwLWVSSpKpWY42qAYDkck6UPey9++P3haS X5ToLpuzj9vYfnZ06chVd2bHk3lcTqr9znHoXGg4hFikrxR+SdA/p4WeN1EY3xTc 5arKOZN+ccrO3LXOygtIXusIpreZqy9G43DM0DRsbhvCoVjEAHA2Q9B0LdCBDovH c0UgYVfFj74Q8J/9gkHJ4r94Qy0Izj79nUYaZvNdicj8OzoM+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAO5+fRVNGKqhrfppek8oXTM6J3gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMjBhOWMyZWMtZWY2Ny0z YzAyLTg0ZDgtNmIwYTFjNTUxNDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlVoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtlfXO+D0s/1XjAZBMUdv/pH/94XCClWO1k9G198QbAenBxlGWqIO+j LEE+9i+ABxCPQwrKeYIo3atp1ylSlGcFqQrSXOCUmPNdxvZX57mqLTPWZ+uITTg8 PmaBeAJB06VP1fNOU9PiVlfLI7W/cPxpOtbS7iEqGhnejt/PMkgu5R2MkNz+iwhq P0OEUKu+s5u/1GHnidFLX3bVDiZIWzNunQn47NemOrzrfpZUUuVqMfCczMXnCvRV k1X3E1Mur4eWT5irgtanKk8GjW89WWlvzaEfhz7lXRWKgOzaOf9Kio14VKCxTzhq rQUcbQzx+WQIVq5y+Qk6WcJDGdTLhEs= -----END CERTIFICATE-----Generated at Fri Jul 24 02:13:57 2026 by rpki-client