$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2c9902ef-6d33-3e34-ae3f-43b7a02c1a09.roa File: 2c9902ef-6d33-3e34-ae3f-43b7a02c1a09.roa (raw, json) Hash identifier: PZeMDl/Qk73AWG5z2nC4O2ExB3+dH3QnGlarlMiS/V0= Subject key identifier: 94:F6:59:44:1D:43:16:1B:0A:FE:23:11:ED:63:0D:98:BD:5E:ED:48 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584E6F3A3645C3666086FD13C880 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2c9902ef-6d33-3e34-ae3f-43b7a02c1a09.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 16509 IP address blocks: 170.85.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:36:45:c3:66:60:86:fd:13:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=82a916ac-8b61-4295-82cd-bc27fbe76a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:43:e2:5c:a7:a7:6f:87:d7:c2:a1:a2:8b:2f: fb:02:5d:85:8c:5b:6e:b1:ee:23:0e:25:65:54:3f: c6:2f:45:09:1d:04:6f:e1:94:3f:73:7f:bc:e7:18: d9:71:b6:ec:a6:bb:a8:07:11:24:41:8b:ec:4d:3a: 40:62:d0:8b:8e:64:21:da:74:fe:3f:ca:c8:c0:93: 71:a5:58:e8:2d:3f:56:25:27:0d:a3:36:0a:5b:59: ad:c5:da:5d:64:06:52:ff:dd:f3:06:d5:17:b8:c4: 22:5b:82:d0:4c:15:c6:8c:9a:16:73:e8:93:51:85: 39:a2:77:a9:9f:de:f9:1f:e6:43:69:00:64:e8:ae: e2:ee:0f:b8:bf:16:1b:42:9b:20:ef:a2:20:bc:8a: 71:f2:1d:a3:c5:8c:05:2a:05:42:a8:6c:02:42:87: 38:c7:c7:72:d8:43:19:cd:58:26:8b:76:81:95:b8: e7:a2:68:9a:31:a1:ed:e2:b4:68:26:30:a2:41:76: 8e:2b:3f:fe:57:ab:82:a2:4e:a3:a4:4c:03:b4:20: ad:9d:63:40:31:f7:96:94:3b:ca:86:d6:0b:95:ba: cd:79:8c:c6:63:42:75:08:e0:a4:6d:62:13:04:39: d7:f1:72:0a:c2:f9:d5:4c:d7:fb:80:5d:2c:15:80: fc:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F6:59:44:1D:43:16:1B:0A:FE:23:11:ED:63:0D:98:BD:5E:ED:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2c9902ef-6d33-3e34-ae3f-43b7a02c1a09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:4a:32:46:e5:4a:47:9c:33:4e:d9:c7:92:b6:16:a9:9f:c0: b4:4c:66:11:11:03:29:7b:d5:ca:81:25:dc:26:e6:89:53:bc: 18:e0:46:8c:fa:18:b0:53:eb:59:a7:d6:b9:ce:11:c6:ea:ed: 12:58:b6:65:d5:9c:a8:b5:a8:6c:a5:78:25:3e:9a:af:c2:42: 7c:3b:93:7c:01:0b:47:92:09:58:52:95:c6:50:5c:e3:aa:d5: 53:c9:94:e2:a2:04:c4:d0:21:4c:67:06:8e:14:87:ab:e6:c8: cb:20:cf:e6:83:d0:8b:53:55:32:55:46:26:fe:a4:fd:18:c5: c7:85:2c:e1:f4:10:1c:41:09:12:78:0a:58:f7:bf:4f:0d:49: fa:2d:7e:6f:2c:48:07:34:d9:3b:96:42:f6:db:3e:ca:69:51: b2:ca:20:c1:c3:05:14:0d:99:4c:e7:e6:e8:31:d4:3b:61:2a: 41:b5:0b:55:f9:0f:46:fe:11:a4:dd:b3:77:a2:fb:10:f5:81: 4b:d6:9f:a2:01:e3:27:36:b8:a0:38:3a:75:a1:4c:96:8d:5d: fc:c3:fc:a3:60:30:e6:d2:8f:56:b4:87:7a:73:e0:78:f1:96: b3:86:2f:c2:e6:5a:8a:2e:5a:2a:2a:b2:a8:43:22:94:1a:bc: cb:b5:77:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOjZFw2Zghv0TyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk ODJhOTE2YWMtOGI2MS00Mjk1LTgyY2QtYmMyN2ZiZTc2YTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskPiXKenb4fXwqGiiy/7Al2FjFtuse4jDiVl VD/GL0UJHQRv4ZQ/c3+85xjZcbbspruoBxEkQYvsTTpAYtCLjmQh2nT+P8rIwJNx pVjoLT9WJScNozYKW1mtxdpdZAZS/93zBtUXuMQiW4LQTBXGjJoWc+iTUYU5onep n975H+ZDaQBk6K7i7g+4vxYbQpsg76IgvIpx8h2jxYwFKgVCqGwCQoc4x8dy2EMZ zVgmi3aBlbjnomiaMaHt4rRoJjCiQXaOKz/+V6uCok6jpEwDtCCtnWNAMfeWlDvK htYLlbrNeYzGY0J1COCkbWITBDnX8XIKwvnVTNf7gF0sFYD8AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJT2WUQdQxYbCv4jEe1jDZi9Xu1IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMmM5OTAyZWYtNmQzMy0z ZTM0LWFlM2YtNDNiN2EwMmMxYTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlU1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMFKMkblSkecM07Zx5K2FqmfwLRMZhERAyl71cqBJdwm5olTvBjgRoz6 GLBT61mn1rnOEcbq7RJYtmXVnKi1qGyleCU+mq/CQnw7k3wBC0eSCVhSlcZQXOOq 1VPJlOKiBMTQIUxnBo4Uh6vmyMsgz+aD0ItTVTJVRib+pP0YxceFLOH0EBxBCRJ4 Clj3v08NSfotfm8sSAc02TuWQvbbPsppUbLKIMHDBRQNmUzn5ugx1DthKkG1C1X5 D0b+EaTds3ei+xD1gUvWn6IB4yc2uKA4OnWhTJaNXfzD/KNgMObSj1a0h3pz4Hjx lrOGL8LmWoouWioqsqhDIpQavMu1d98= -----END CERTIFICATE-----Generated at Fri Jul 24 07:51:20 2026 by rpki-client