$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4184f250-dc03-3ec5-98c1-91d853017350.roa File: 4184f250-dc03-3ec5-98c1-91d853017350.roa (raw, json) Hash identifier: hJwwklTiyAQ8J4hFkFy6oDKXnYQ64iCDx3K10UsjsxM= Subject key identifier: 25:CB:C4:6C:38:0B:E3:42:84:6A:55:73:A6:F5:53:F4:A7:9E:DD:39 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584E4824866A2B18ACF7B162C420 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4184f250-dc03-3ec5-98c1-91d853017350.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 22616 IP address blocks: 170.85.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:86:6a:2b:18:ac:f7:b1:62:c4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=f3f580a2-3b58-4d8e-80fc-34ec9b2669d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e7:b5:c0:d1:6f:23:82:a7:65:39:41:7d:0a: d1:9b:21:95:14:de:f7:3d:9e:7e:82:04:27:fa:d8: 57:1f:9d:a9:de:bc:42:71:19:2e:20:91:ce:b4:61: 51:6e:a5:84:38:ab:08:1d:28:18:33:fc:ea:59:83: 6b:c4:9a:4b:40:90:ca:25:e0:cd:98:e7:2b:f2:d4: 9e:2d:46:99:47:87:56:5a:c1:af:1a:c4:f1:c1:9e: 41:ea:63:53:b5:a4:17:bf:cc:84:c7:0e:61:f9:d0: b3:97:e0:f2:f0:0e:82:17:d6:ce:72:fd:fe:7d:5c: f7:bd:83:c7:1a:97:88:ea:db:69:1e:92:0c:11:0e: 7a:34:04:16:22:31:d0:fb:1a:89:1a:46:f2:75:87: 93:61:66:56:f2:c1:5a:1d:6e:fc:93:ca:31:c1:34: 61:ad:c3:16:0c:31:b7:b6:6f:ed:6e:a8:38:f4:47: 60:13:a4:41:a4:af:3b:91:89:05:c1:4b:59:1e:ea: 19:46:61:98:fc:d9:1e:1a:fa:60:86:8f:d1:13:7a: 9d:5b:d2:df:1f:19:35:63:ec:f7:5c:b5:62:1e:eb: e7:64:18:67:d3:3d:d7:6b:7e:1c:40:d0:29:d3:7b: ba:74:a6:9b:c0:4d:79:cf:ab:f5:4c:1a:75:ba:c1: 56:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:CB:C4:6C:38:0B:E3:42:84:6A:55:73:A6:F5:53:F4:A7:9E:DD:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4184f250-dc03-3ec5-98c1-91d853017350.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:f3:33:27:89:7e:6d:33:97:91:be:aa:b4:55:43:05:07:9e: f9:77:78:60:17:f4:cd:61:11:70:2a:10:3a:d9:7e:01:39:e2: fb:75:1a:57:96:94:87:53:38:24:80:7a:6b:ca:b0:67:87:12: c6:9b:89:37:bf:71:be:4f:b8:56:ff:a2:49:7b:cf:c6:17:62: f3:81:9e:bb:d8:1c:a0:33:86:73:44:22:c9:78:d1:f0:32:e4: 2f:af:f8:e8:c6:bc:f9:90:03:ab:6e:d1:43:67:e1:a0:ff:52: 84:37:49:f0:5d:03:11:44:32:c9:d9:2c:aa:b4:b4:25:11:b6: de:7e:1e:2c:88:dd:70:38:2f:74:2a:55:ef:82:d3:03:08:9a: 2a:79:ae:42:97:f3:1b:5e:82:c1:b4:8d:fd:dc:8f:59:01:67: 9f:86:ca:07:2e:3c:0e:d6:2f:90:e6:62:85:87:4a:a9:95:29: 0a:69:30:95:f5:26:f1:03:62:51:c2:b9:c0:1f:70:29:fd:bd: fd:0e:cc:08:0d:09:18:c8:69:af:b8:65:ba:4d:04:5f:2b:41: 86:c4:b1:90:c1:d5:8d:71:ce:f9:96:0c:8e:ed:11:ec:f6:f0: c2:9a:be:65:36:05:02:9b:fc:b2:51:8b:17:15:21:fe:f1:0e: 1a:bf:67:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJIZqKxis97FixCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk ZjNmNTgwYTItM2I1OC00ZDhlLTgwZmMtMzRlYzliMjY2OWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoue1wNFvI4KnZTlBfQrRmyGVFN73PZ5+ggQn +thXH52p3rxCcRkuIJHOtGFRbqWEOKsIHSgYM/zqWYNrxJpLQJDKJeDNmOcr8tSe LUaZR4dWWsGvGsTxwZ5B6mNTtaQXv8yExw5h+dCzl+Dy8A6CF9bOcv3+fVz3vYPH GpeI6ttpHpIMEQ56NAQWIjHQ+xqJGkbydYeTYWZW8sFaHW78k8oxwTRhrcMWDDG3 tm/tbqg49EdgE6RBpK87kYkFwUtZHuoZRmGY/NkeGvpgho/RE3qdW9LfHxk1Y+z3 XLViHuvnZBhn0z3Xa34cQNAp03u6dKabwE15z6v1TBp1usFW1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXLxGw4C+NChGpVc6b1U/Snnt05MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNDE4NGYyNTAtZGMwMy0z ZWM1LTk4YzEtOTFkODUzMDE3MzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlX+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjzMyeJfm0zl5G+qrRVQwUHnvl3eGAX9M1hEXAqEDrZfgE54vt1GleW lIdTOCSAemvKsGeHEsabiTe/cb5PuFb/okl7z8YXYvOBnrvYHKAzhnNEIsl40fAy 5C+v+OjGvPmQA6tu0UNn4aD/UoQ3SfBdAxFEMsnZLKq0tCURtt5+HiyI3XA4L3Qq Ve+C0wMImip5rkKX8xtegsG0jf3cj1kBZ5+GygcuPA7WL5DmYoWHSqmVKQppMJX1 JvEDYlHCucAfcCn9vf0OzAgNCRjIaa+4ZbpNBF8rQYbEsZDB1Y1xzvmWDI7tEez2 8MKavmU2BQKb/LJRixcVIf7xDhq/Z/0= -----END CERTIFICATE-----Generated at Fri Jul 24 17:39:13 2026 by rpki-client