$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ab23d51f-ab3a-339b-b5c4-569f948252ec.roa File: ab23d51f-ab3a-339b-b5c4-569f948252ec.roa (raw, json) Hash identifier: LdSy1twtkFACP9awMo+mz9r32wTpWnj2jer6AZkVeDA= Subject key identifier: FC:0A:90:0A:1E:A7:FE:D4:35:8B:83:45:DC:EA:91:F6:25:D9:1F:96 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584E3B94701FCEF695388BC03580 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ab23d51f-ab3a-339b-b5c4-569f948252ec.roa Signing time: Sat 20 Jun 2026 09:00:13 +0000 ROA not before: Sat 20 Jun 2026 09:00:13 +0000 ROA not after: Fri 18 Sep 2026 09:00:13 +0000 asID: 22616 IP address blocks: 170.85.130.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3b:94:70:1f:ce:f6:95:38:8b:c0:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jun 20 09:00:13 2026 GMT Not After : Sep 18 09:00:13 2026 GMT Subject: CN=a04b6cfc-ff26-4a4d-9032-9c262ab9af50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d3:ef:26:37:5f:35:ed:13:38:ae:15:7f:f1: c0:13:6d:22:9a:14:de:91:03:d4:05:c1:10:f7:1e: db:be:12:56:20:c0:45:13:3e:86:35:0f:15:03:f4: c9:11:8b:d7:f5:cc:b7:5d:e4:1f:bf:a8:5a:87:97: 75:71:4b:59:7c:11:80:aa:ea:04:66:b1:8a:9e:07: 6e:72:23:52:bb:17:03:b5:65:62:e5:c9:1b:0d:59: cd:c4:52:4c:43:8c:4b:93:4d:53:a4:3a:4a:6b:32: 70:c9:7e:08:7b:5e:6c:d7:35:de:1c:4c:1b:c5:ca: 0e:81:58:4a:cf:dd:6e:8b:01:15:e7:b0:c1:0a:e5: 2e:8c:d9:b6:5d:d8:8e:c2:45:c4:7c:78:d9:f7:50: 20:3b:9b:91:30:03:b5:45:80:a8:ff:8a:95:d3:92: b7:4b:1b:4e:ff:01:8c:d1:2d:a5:d0:5d:57:12:e3: 06:7c:09:68:e9:ee:b6:81:69:fc:06:b1:5b:0a:76: 5f:fb:05:38:e4:e2:c2:8b:72:c4:ee:ca:e4:91:bb: d5:ea:48:33:f1:17:fc:15:34:e5:f5:b8:59:77:91: 31:0d:c6:55:c4:17:59:32:48:58:4c:bc:80:5f:54: 26:45:5c:bd:fd:67:aa:0a:cb:2f:0e:52:3d:ac:d0: 0d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:0A:90:0A:1E:A7:FE:D4:35:8B:83:45:DC:EA:91:F6:25:D9:1F:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ab23d51f-ab3a-339b-b5c4-569f948252ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:96:86:84:38:b8:55:26:7e:a6:5c:53:6c:7e:10:2c:ea:41: 9c:81:67:da:19:17:69:32:52:66:3b:ad:d4:15:23:b4:75:a0: cd:11:1f:8e:11:30:0c:21:50:5f:d3:4c:05:37:8c:90:9c:95: 45:78:3f:5b:4c:5f:e2:89:32:7f:54:79:72:c6:23:54:90:3f: 27:5d:21:85:b7:51:f7:49:b0:e9:0a:e8:c3:2c:1c:99:85:9a: 7b:78:17:6d:35:04:3e:f1:a6:eb:06:04:ee:70:ab:02:6e:cf: 2d:40:1a:14:1f:04:f3:0f:14:5e:c0:e0:50:e3:56:b0:ed:71: f3:2f:66:bd:f4:72:c0:8d:d0:1e:ba:8a:a1:4c:cd:b8:70:86: 39:af:96:17:94:20:23:b3:39:22:3a:f3:68:e4:1e:b0:86:72: d8:02:e9:01:3f:4b:6f:fd:33:0d:89:b3:3b:05:9e:64:2b:7a: 68:a2:ab:29:75:6c:9c:4c:85:a2:52:a1:69:49:6a:13:56:01: d1:9d:f5:2c:ce:9e:cb:ce:b4:18:9d:63:29:8b:76:60:fb:7d: 4b:b0:e4:f9:e3:68:35:5e:73:32:96:25:36:a5:02:c7:3a:e1: 3f:d1:20:c0:96:2d:63:37:d5:21:84:5e:dc:f3:7d:cc:f0:5b: 1d:d1:14:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE47lHAfzvaVOIvANYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDYyMDA5MDAxM1oXDTI2MDkxODA5MDAxM1owLzEtMCsGA1UEAxMk YTA0YjZjZmMtZmYyNi00YTRkLTkwMzItOWMyNjJhYjlhZjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltPvJjdfNe0TOK4Vf/HAE20imhTekQPUBcEQ 9x7bvhJWIMBFEz6GNQ8VA/TJEYvX9cy3XeQfv6hah5d1cUtZfBGAquoEZrGKngdu ciNSuxcDtWVi5ckbDVnNxFJMQ4xLk01TpDpKazJwyX4Ie15s1zXeHEwbxcoOgVhK z91uiwEV57DBCuUujNm2XdiOwkXEfHjZ91AgO5uRMAO1RYCo/4qV05K3SxtO/wGM 0S2l0F1XEuMGfAlo6e62gWn8BrFbCnZf+wU45OLCi3LE7srkkbvV6kgz8Rf8FTTl 9bhZd5ExDcZVxBdZMkhYTLyAX1QmRVy9/WeqCssvDlI9rNANdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwKkAoep/7UNYuDRdzqkfYl2R+WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYWIyM2Q1MWYtYWIzYS0z MzliLWI1YzQtNTY5Zjk0ODI1MmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlWCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJuWhoQ4uFUmfqZcU2x+ECzqQZyBZ9oZF2kyUmY7rdQVI7R1oM0RH44R MAwhUF/TTAU3jJCclUV4P1tMX+KJMn9UeXLGI1SQPyddIYW3UfdJsOkK6MMsHJmF mnt4F201BD7xpusGBO5wqwJuzy1AGhQfBPMPFF7A4FDjVrDtcfMvZr30csCN0B66 iqFMzbhwhjmvlheUICOzOSI682jkHrCGctgC6QE/S2/9Mw2JszsFnmQremiiqyl1 bJxMhaJSoWlJahNWAdGd9SzOnsvOtBidYymLdmD7fUuw5PnjaDVeczKWJTalAsc6 4T/RIMCWLWM31SGEXtzzfczwWx3RFPY= -----END CERTIFICATE-----Generated at Fri Jul 24 00:52:10 2026 by rpki-client