$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a604cff9-0e0a-3fef-b07e-b2083da639ef.roa File: a604cff9-0e0a-3fef-b07e-b2083da639ef.roa (raw, json) Hash identifier: 1h88d6NfCNDNnkeh/uRSbSZrhTHw7MOcngJxKUR2TFg= Subject key identifier: C7:64:FE:34:DF:DA:D0:8B:1C:DE:AD:47:35:FF:E7:AE:44:D4:7C:5B Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584E4824B78DA428A06119EB6440 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a604cff9-0e0a-3fef-b07e-b2083da639ef.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 22616 IP address blocks: 170.85.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:b7:8d:a4:28:a0:61:19:eb:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=cb5b45ea-5f0a-404e-aa03-c872f055b95e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:92:51:f6:21:31:6d:3e:4a:f1:3e:da:e7:b8: e2:62:9d:d3:e1:2b:c1:36:74:e4:e7:62:af:cc:f2: ac:b1:16:4c:71:66:66:bc:88:2c:1f:d7:3a:63:8d: 4c:8e:f5:6a:41:a3:e5:52:04:f8:44:83:89:dd:fa: 94:f8:4f:14:2e:63:bf:05:c4:53:34:3f:1f:f3:35: 84:a0:77:7f:44:48:0d:2e:25:48:aa:a3:92:6c:0a: 36:8d:2e:bf:03:7d:1f:26:a3:89:26:82:ff:4f:dc: 29:bf:68:57:63:bc:cb:c0:ce:5f:f3:29:48:14:d4: 6d:79:84:09:f3:c3:7e:03:b9:43:db:fe:58:bd:64: 4f:cb:81:a9:9f:ea:ff:44:61:a6:4c:76:ed:24:58: 91:76:2c:5b:b3:15:d7:45:47:a4:56:44:20:7d:b1: 63:af:4a:d9:7a:fa:f5:ea:2b:ee:8e:d6:13:b2:d9: 88:95:22:07:17:87:b1:ef:3e:77:36:7c:3f:b7:10: 75:54:1d:18:d2:e8:88:5b:b0:d3:da:e6:4c:50:53: 73:32:cb:13:1a:40:84:83:95:ae:8a:64:01:bf:eb: 9f:d5:89:a4:39:3b:87:05:4b:3c:a5:90:83:c3:1e: 07:31:6d:60:ff:94:ab:82:d8:45:3e:27:cc:f1:0a: c7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:64:FE:34:DF:DA:D0:8B:1C:DE:AD:47:35:FF:E7:AE:44:D4:7C:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a604cff9-0e0a-3fef-b07e-b2083da639ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:d5:5f:b0:ef:47:0d:f0:7a:c7:4b:35:42:cb:0d:19:53:08: c2:c8:56:b1:a3:71:f5:a9:a4:8e:72:9a:08:6a:3b:12:c5:34: 4c:99:20:9e:34:eb:9b:a3:6b:5d:d9:36:67:db:54:02:38:ee: a6:2b:e1:5e:27:c7:c3:a2:d5:44:a7:ae:7b:26:45:7d:9f:ee: a8:4e:9f:c0:a6:35:a8:51:b8:67:2f:1c:f2:16:7a:60:60:a0: 9a:ad:55:e3:9c:8c:ca:05:ac:5a:72:62:4e:6e:c8:89:ac:cf: df:33:13:61:17:2b:37:f1:fb:1c:87:6d:06:7b:c4:5e:0d:f4: 1e:ac:d1:1b:e4:c4:59:17:ea:31:db:6f:93:15:11:d8:78:d0: 9a:f2:a2:25:d4:b2:e2:1c:fe:2d:df:7f:c9:e8:c2:20:93:44: 18:43:23:48:43:42:bf:c7:40:94:0b:69:27:c1:7d:73:f4:08: ff:8e:ca:22:76:69:59:6d:ac:cc:0c:92:dd:10:59:19:be:de: d8:42:a2:17:48:6e:ac:f0:22:9a:a1:db:74:c6:0b:0b:21:dd: 53:1d:2b:d3:f3:6f:ad:a6:34:07:aa:62:24:c4:32:28:d0:3b: 76:51:0d:c3:51:27:b5:68:3d:07:c5:68:f0:ac:cd:8e:66:13: f3:bd:1b:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJLeNpCigYRnrZEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk Y2I1YjQ1ZWEtNWYwYS00MDRlLWFhMDMtYzg3MmYwNTViOTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpJR9iExbT5K8T7a57jiYp3T4SvBNnTk52Kv zPKssRZMcWZmvIgsH9c6Y41MjvVqQaPlUgT4RIOJ3fqU+E8ULmO/BcRTND8f8zWE oHd/REgNLiVIqqOSbAo2jS6/A30fJqOJJoL/T9wpv2hXY7zLwM5f8ylIFNRteYQJ 88N+A7lD2/5YvWRPy4Gpn+r/RGGmTHbtJFiRdixbsxXXRUekVkQgfbFjr0rZevr1 6ivujtYTstmIlSIHF4ex7z53Nnw/txB1VB0Y0uiIW7DT2uZMUFNzMssTGkCEg5Wu imQBv+uf1YmkOTuHBUs8pZCDwx4HMW1g/5SrgthFPifM8QrH8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdk/jTf2tCLHN6tRzX/565E1HxbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYTYwNGNmZjktMGUwYS0z ZmVmLWIwN2UtYjIwODNkYTYzOWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlX/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTVX7DvRw3wesdLNULLDRlTCMLIVrGjcfWppI5ymghqOxLFNEyZIJ40 65uja13ZNmfbVAI47qYr4V4nx8Oi1USnrnsmRX2f7qhOn8CmNahRuGcvHPIWemBg oJqtVeOcjMoFrFpyYk5uyImsz98zE2EXKzfx+xyHbQZ7xF4N9B6s0RvkxFkX6jHb b5MVEdh40JryoiXUsuIc/i3ff8nowiCTRBhDI0hDQr/HQJQLaSfBfXP0CP+OyiJ2 aVltrMwMkt0QWRm+3thCohdIbqzwIpqh23TGCwsh3VMdK9Pzb62mNAeqYiTEMijQ O3ZRDcNRJ7VoPQfFaPCszY5mE/O9Gw0= -----END CERTIFICATE-----Generated at Fri Jul 24 11:00:49 2026 by rpki-client