$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/538e4942-1bed-3d9d-a99a-18a74b34126d.roa File: 538e4942-1bed-3d9d-a99a-18a74b34126d.roa (raw, json) Hash identifier: aDwrHaHlEkXpWNcSZuwY8h9BgF9dmRiB8eNjhW1H5Uk= Subject key identifier: A6:56:6C:DD:F5:84:7C:43:76:9D:08:3F:AF:F1:0A:84:49:AB:D7:AC Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584E3B946ABC2B324871803C6E00 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/538e4942-1bed-3d9d-a99a-18a74b34126d.roa Signing time: Sat 20 Jun 2026 09:00:13 +0000 ROA not before: Sat 20 Jun 2026 09:00:13 +0000 ROA not after: Fri 18 Sep 2026 09:00:13 +0000 asID: 22616 IP address blocks: 170.85.72.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3b:94:6a:bc:2b:32:48:71:80:3c:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jun 20 09:00:13 2026 GMT Not After : Sep 18 09:00:13 2026 GMT Subject: CN=803123a0-f620-40da-a372-ddd892c78ac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:47:1c:f4:bc:2c:bb:1d:67:cf:ea:38:7c:92: c9:c8:86:34:e6:1d:79:05:ae:36:9f:05:40:40:70: 7c:70:5e:73:f8:c2:7d:e8:f9:8b:4d:68:9e:5c:4c: 73:d0:66:f4:96:6c:c9:30:d6:55:f5:6d:a7:6d:06: 2b:8f:5a:fc:d3:38:12:63:29:9d:0c:e3:52:c1:3b: 62:a6:85:42:c7:36:21:ea:5e:59:8b:17:5a:af:f4: bc:a5:33:8f:be:6b:b0:4a:9a:5c:92:32:fe:6b:f2: fa:80:bb:77:85:b3:df:a9:98:bd:78:28:bc:aa:ba: ad:1e:86:98:44:b5:cd:99:88:7e:46:03:cd:97:29: 70:9b:35:57:1d:e9:56:65:77:0e:2d:0e:52:13:5b: ea:ff:f1:c5:b5:7e:f6:52:c6:eb:d3:ad:7c:94:7d: ea:3f:c2:25:f7:7a:26:af:f9:2b:9d:dc:4f:9e:a9: 90:1e:a7:f1:73:0e:50:0c:99:03:32:7a:70:8c:bc: a4:1d:5b:a6:b7:bf:72:66:d8:7a:5b:80:59:ba:a5: 79:69:cf:1d:1d:d9:ec:f4:70:8e:87:4f:5b:57:54: 7f:7d:c4:e7:2c:e9:65:fa:e5:bc:56:55:cf:06:34: 01:0b:ba:2e:f4:e1:d3:b6:da:9a:22:05:bd:b7:0f: 1d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:56:6C:DD:F5:84:7C:43:76:9D:08:3F:AF:F1:0A:84:49:AB:D7:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/538e4942-1bed-3d9d-a99a-18a74b34126d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:14:58:a1:ba:40:32:92:94:da:72:d9:99:1c:08:c7:25:16: 3f:3a:1a:10:9f:f4:46:08:a7:63:7f:ba:56:f2:79:87:92:20: 01:f3:0b:b7:0a:6e:10:1e:86:0a:63:19:3e:b8:f9:27:4f:e3: ce:14:1a:ba:45:54:9a:e3:e6:f1:fe:6a:4d:46:4b:fd:17:58: 4d:39:0f:96:f5:f5:0b:96:56:0c:da:f9:02:da:f9:b6:ca:a1: fe:8b:3c:6b:d7:ea:f9:45:6e:cd:a6:59:56:ea:54:01:6f:2e: 55:0b:b4:7e:fd:fa:45:77:14:42:87:da:9e:e9:b6:ca:ad:20: e8:5e:95:5a:56:81:7b:65:43:b5:a5:a7:aa:7c:b0:dc:25:f1: d8:b9:98:d2:1d:ee:94:eb:6d:77:d2:80:d5:71:a2:ac:ce:d5: 93:35:95:0c:ff:84:8f:ea:b2:ad:b1:64:17:d6:3c:8c:a1:2a: 67:c8:51:fa:1b:f2:9c:cf:90:16:45:22:a6:d9:41:46:03:c2: 27:88:98:ae:30:81:4d:b0:f2:57:ce:49:d9:51:a5:83:8e:b4: 85:4b:0c:6e:6c:c7:2a:fb:e8:c6:2a:84:81:0a:77:ff:e5:61: 97:a5:b7:52:3e:a3:ec:4e:6c:4b:65:9f:27:68:68:e5:6e:c6: fc:31:c1:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE47lGq8KzJIcYA8bgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDYyMDA5MDAxM1oXDTI2MDkxODA5MDAxM1owLzEtMCsGA1UEAxMk ODAzMTIzYTAtZjYyMC00MGRhLWEzNzItZGRkODkyYzc4YWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEcc9Lwsux1nz+o4fJLJyIY05h15Ba42nwVA QHB8cF5z+MJ96PmLTWieXExz0Gb0lmzJMNZV9W2nbQYrj1r80zgSYymdDONSwTti poVCxzYh6l5Zixdar/S8pTOPvmuwSppckjL+a/L6gLt3hbPfqZi9eCi8qrqtHoaY RLXNmYh+RgPNlylwmzVXHelWZXcOLQ5SE1vq//HFtX72Usbr0618lH3qP8Il93om r/krndxPnqmQHqfxcw5QDJkDMnpwjLykHVumt79yZth6W4BZuqV5ac8dHdns9HCO h09bV1R/fcTnLOll+uW8VlXPBjQBC7ou9OHTttqaIgW9tw8dyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZWbN31hHxDdp0IP6/xCoRJq9esMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNTM4ZTQ5NDItMWJlZC0z ZDlkLWE5OWEtMThhNzRiMzQxMjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlVIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgUWKG6QDKSlNpy2ZkcCMclFj86GhCf9EYIp2N/ulbyeYeSIAHzC7cK bhAehgpjGT64+SdP484UGrpFVJrj5vH+ak1GS/0XWE05D5b19QuWVgza+QLa+bbK of6LPGvX6vlFbs2mWVbqVAFvLlULtH79+kV3FEKH2p7ptsqtIOhelVpWgXtlQ7Wl p6p8sNwl8di5mNId7pTrbXfSgNVxoqzO1ZM1lQz/hI/qsq2xZBfWPIyhKmfIUfob 8pzPkBZFIqbZQUYDwieImK4wgU2w8lfOSdlRpYOOtIVLDG5sxyr76MYqhIEKd//l YZelt1I+o+xObEtlnydoaOVuxvwxwRw= -----END CERTIFICATE-----Generated at Fri Jul 24 11:08:57 2026 by rpki-client