$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/60c927ec-90ac-3752-8522-afaff9a34b0e.roa File: 60c927ec-90ac-3752-8522-afaff9a34b0e.roa (raw, json) Hash identifier: TJU7fvE7zbSB2weuYRL9zHtj+y4owEAQldOZcXxgG4U= Subject key identifier: 11:D3:79:FB:E4:04:2C:39:E9:7D:D0:04:81:05:86:77:40:F8:0C:3A Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584E3B94877E6995B5857D893920 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/60c927ec-90ac-3752-8522-afaff9a34b0e.roa Signing time: Sat 20 Jun 2026 09:00:13 +0000 ROA not before: Sat 20 Jun 2026 09:00:13 +0000 ROA not after: Fri 18 Sep 2026 09:00:13 +0000 asID: 22616 IP address blocks: 170.85.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3b:94:87:7e:69:95:b5:85:7d:89:39:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jun 20 09:00:13 2026 GMT Not After : Sep 18 09:00:13 2026 GMT Subject: CN=34eef92b-0e29-41eb-a334-6914afd21e19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f6:e3:0a:d7:a3:c8:0a:f7:78:fd:49:25:19: 4f:4e:c8:29:fb:f3:66:5d:f6:0e:81:64:ab:9d:0a: 80:24:f8:fb:a0:0f:c8:5a:2b:ac:21:1d:2f:97:6d: 47:4a:04:d5:f6:c4:e3:df:49:b2:3e:1e:40:e1:8d: 1c:f5:74:f7:6b:5c:05:ed:c5:e3:c6:78:be:a6:23: f2:ea:29:33:df:3f:2e:5d:e7:69:08:b2:3d:f7:20: 6f:5a:96:39:2c:d3:8c:3f:26:54:01:09:e5:fe:20: 0d:5a:77:6b:2f:8e:2b:43:ef:e0:0f:f4:1c:94:a3: 09:31:35:13:e5:69:c4:5a:4d:c5:0b:d0:bc:36:54: 4a:e7:9f:18:61:98:cf:77:cc:30:3a:d6:ec:69:d2: c8:95:77:85:8b:1f:4e:c6:71:b5:f4:d2:fc:27:1b: f2:72:46:8c:38:48:de:71:8f:2f:ef:30:f7:8b:7a: a8:88:db:5e:08:03:77:cf:7e:43:25:44:39:59:0d: 57:9b:07:db:d7:86:a8:a2:70:a3:65:e8:cb:68:3e: 83:b4:ab:3a:62:30:fd:da:e0:eb:9c:12:53:61:e1: 1d:a3:16:f8:70:a7:3b:00:84:33:4b:2f:7e:8e:dc: da:aa:f3:bf:03:12:3a:bb:d7:53:82:03:78:6b:25: c8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D3:79:FB:E4:04:2C:39:E9:7D:D0:04:81:05:86:77:40:F8:0C:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/60c927ec-90ac-3752-8522-afaff9a34b0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:5a:7e:24:e4:e1:e5:2d:c4:f9:3c:18:dd:bb:ad:de:09:5a: 94:72:df:f6:45:ad:fb:cf:80:c3:0a:46:d3:f4:d5:43:81:86: 84:e9:5e:d9:dc:f7:ed:0f:04:ce:fd:d0:18:d6:e3:05:97:77: 58:69:d7:92:dd:a3:9d:19:af:c1:e9:da:0b:11:66:1c:5a:c5: 70:2a:cf:2d:91:e0:bc:c0:69:a3:3d:6e:1b:3d:9a:5d:7d:5b: 03:74:b1:81:6d:98:76:76:ae:96:6e:79:fb:36:95:e6:76:de: 13:af:e2:fd:ac:4d:c6:01:fd:0b:57:49:1b:b5:c4:63:d8:e2: ca:81:4b:92:db:87:4e:39:34:6a:c9:36:7b:a7:82:9d:b7:69: 55:63:64:44:44:d2:b5:f9:15:73:80:81:22:a7:8f:34:da:b9: ce:15:01:9d:47:c2:21:e2:66:14:2a:34:4f:dd:22:c6:85:c4: ab:04:ab:36:ba:20:c6:2d:0b:0e:f1:c5:c4:78:c0:16:97:18: 69:34:a7:30:7c:aa:b8:00:76:96:e0:f5:48:ae:8e:a1:0c:bd: 9b:29:73:9b:d2:0c:2f:5f:30:3f:41:75:a1:25:7d:54:93:06: 25:0b:73:bd:4c:0f:ba:45:03:75:92:d9:c5:93:d0:8d:91:14: ff:b9:87:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE47lId+aZW1hX2JOSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDYyMDA5MDAxM1oXDTI2MDkxODA5MDAxM1owLzEtMCsGA1UEAxMk MzRlZWY5MmItMGUyOS00MWViLWEzMzQtNjkxNGFmZDIxZTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifbjCtejyAr3eP1JJRlPTsgp+/NmXfYOgWSr nQqAJPj7oA/IWiusIR0vl21HSgTV9sTj30myPh5A4Y0c9XT3a1wF7cXjxni+piPy 6ikz3z8uXedpCLI99yBvWpY5LNOMPyZUAQnl/iANWndrL44rQ+/gD/QclKMJMTUT 5WnEWk3FC9C8NlRK558YYZjPd8wwOtbsadLIlXeFix9OxnG19NL8JxvyckaMOEje cY8v7zD3i3qoiNteCAN3z35DJUQ5WQ1Xmwfb14aoonCjZejLaD6DtKs6YjD92uDr nBJTYeEdoxb4cKc7AIQzSy9+jtzaqvO/AxI6u9dTggN4ayXIPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHTefvkBCw56X3QBIEFhndA+Aw6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNjBjOTI3ZWMtOTBhYy0z NzUyLTg1MjItYWZhZmY5YTM0YjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJafiTk4eUtxPk8GN27rd4JWpRy3/ZFrfvPgMMKRtP01UOBhoTpXtnc 9+0PBM790BjW4wWXd1hp15Ldo50Zr8Hp2gsRZhxaxXAqzy2R4LzAaaM9bhs9ml19 WwN0sYFtmHZ2rpZuefs2leZ23hOv4v2sTcYB/QtXSRu1xGPY4sqBS5Lbh045NGrJ Nnungp23aVVjZERE0rX5FXOAgSKnjzTauc4VAZ1HwiHiZhQqNE/dIsaFxKsEqza6 IMYtCw7xxcR4wBaXGGk0pzB8qrgAdpbg9UiujqEMvZspc5vSDC9fMD9BdaElfVST BiULc71MD7pFA3WS2cWT0I2RFP+5h8c= -----END CERTIFICATE-----Generated at Fri Jul 24 00:50:45 2026 by rpki-client