$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cf96671a-6a74-3e65-a838-71e0e3f6e68c.roa File: cf96671a-6a74-3e65-a838-71e0e3f6e68c.roa (raw, json) Hash identifier: BAmMZHaPdjw7zdr3ZZLTRVLv715iUr63smsdkM4rFvw= Subject key identifier: D4:97:C3:47:2B:75:B9:24:F3:25:51:3C:80:A7:A9:EC:91:C2:B7:9C Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584E3B947AC016C20BCA3C7F0500 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cf96671a-6a74-3e65-a838-71e0e3f6e68c.roa Signing time: Sat 20 Jun 2026 09:00:13 +0000 ROA not before: Sat 20 Jun 2026 09:00:13 +0000 ROA not after: Fri 18 Sep 2026 09:00:13 +0000 asID: 22616 IP address blocks: 170.85.76.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3b:94:7a:c0:16:c2:0b:ca:3c:7f:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jun 20 09:00:13 2026 GMT Not After : Sep 18 09:00:13 2026 GMT Subject: CN=d71514a4-5e28-4a6d-a893-6e0d83700e2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3b:f0:bd:e3:08:66:4b:65:63:bd:48:62:47: a8:b6:13:07:a0:bc:f4:6d:55:f1:42:4d:e6:21:43: 81:a5:ce:3f:3e:3b:b6:e9:af:be:45:5b:fd:e3:a5: 5d:e8:9c:23:c9:e0:69:14:d8:c2:71:a4:4a:bc:90: 18:ff:7f:59:c2:b2:36:09:f1:38:0a:8f:cf:86:6d: 96:2f:98:62:e6:4c:a6:4a:d4:7a:bf:a8:34:21:0c: cb:aa:d4:80:2f:78:e4:dd:dd:86:9b:b0:7f:6a:cc: 32:c7:8e:bf:34:67:35:d5:41:0f:0c:93:ba:53:43: 76:6c:6d:7f:15:1a:35:b4:e2:8f:31:ae:8d:ce:1a: 35:4f:db:e5:aa:e8:ef:3c:e5:5a:47:dd:c8:0d:e1: 7d:9e:b8:a7:68:92:06:48:eb:cc:d3:01:d6:2b:a2: 49:56:9f:88:d4:b9:c4:91:e6:22:29:79:ba:42:13: 87:9a:6a:8a:76:c2:bc:d5:66:a6:3c:26:f5:15:36: f8:a0:5c:1b:b8:68:e8:42:ce:af:6f:d8:e9:76:13: 94:ec:a6:8b:c5:e7:4b:04:3d:95:e6:de:50:e7:57: bc:eb:5c:99:18:93:b0:4b:51:b7:67:00:f5:28:3e: e8:c7:54:03:aa:a0:81:b6:f7:4d:fd:c0:5b:55:f8: 3b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:97:C3:47:2B:75:B9:24:F3:25:51:3C:80:A7:A9:EC:91:C2:B7:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cf96671a-6a74-3e65-a838-71e0e3f6e68c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.76.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:0b:e6:20:f1:69:1f:b6:73:ab:07:dc:77:e8:0d:34:2d:77: f3:2b:80:95:c3:76:46:70:12:8a:d8:6d:13:64:5c:57:04:65: 93:01:92:5f:ae:44:16:74:60:8a:1a:99:60:7d:2c:08:1a:67: 3d:56:8b:57:40:8b:7d:de:64:8d:0b:c1:9e:67:77:bf:b8:1c: 27:49:90:68:07:28:fb:52:14:0f:14:61:f7:f8:64:4d:a4:13: 4b:60:6d:36:3b:51:c6:e5:ec:cc:98:fb:da:3c:93:aa:18:ed: cf:98:e4:bc:aa:41:9e:9a:f4:f9:ec:29:ef:f2:2d:31:c4:46: dc:fb:a0:c8:16:49:3d:8e:91:07:8b:78:27:43:18:42:7b:93: 46:1f:3f:5b:2d:1e:5a:27:9e:d9:e6:d4:05:ba:f6:75:13:78: 6a:9a:e2:e6:0e:b4:33:a4:e1:a6:42:db:67:74:a4:0a:b7:dd: 58:b0:86:a4:31:d9:e5:da:8e:64:88:00:bb:f4:3c:30:84:e5: 11:9a:c4:91:87:df:7b:ae:d3:44:1c:7c:47:92:09:62:82:69: e9:aa:7a:59:54:e9:86:41:f5:b7:8e:f0:3b:75:75:46:e9:01: e6:16:ca:84:dd:01:c2:45:d5:2c:e9:fa:c6:3c:3e:78:e0:1b: 36:76:8a:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE47lHrAFsILyjx/BQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDYyMDA5MDAxM1oXDTI2MDkxODA5MDAxM1owLzEtMCsGA1UEAxMk ZDcxNTE0YTQtNWUyOC00YTZkLWE4OTMtNmUwZDgzNzAwZTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DvwveMIZktlY71IYkeothMHoLz0bVXxQk3m IUOBpc4/Pju26a++RVv946Vd6JwjyeBpFNjCcaRKvJAY/39ZwrI2CfE4Co/Phm2W L5hi5kymStR6v6g0IQzLqtSAL3jk3d2Gm7B/aswyx46/NGc11UEPDJO6U0N2bG1/ FRo1tOKPMa6Nzho1T9vlqujvPOVaR93IDeF9nrinaJIGSOvM0wHWK6JJVp+I1LnE keYiKXm6QhOHmmqKdsK81WamPCb1FTb4oFwbuGjoQs6vb9jpdhOU7KaLxedLBD2V 5t5Q51e861yZGJOwS1G3ZwD1KD7ox1QDqqCBtvdN/cBbVfg7kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSXw0crdbkk8yVRPICnqeyRwrecMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvY2Y5NjY3MWEtNmE3NC0z ZTY1LWE4MzgtNzFlMGUzZjZlNjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlVMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoL5iDxaR+2c6sH3HfoDTQtd/MrgJXDdkZwEorYbRNkXFcEZZMBkl+u RBZ0YIoamWB9LAgaZz1Wi1dAi33eZI0LwZ5nd7+4HCdJkGgHKPtSFA8UYff4ZE2k E0tgbTY7Ucbl7MyY+9o8k6oY7c+Y5LyqQZ6a9PnsKe/yLTHERtz7oMgWST2OkQeL eCdDGEJ7k0YfP1stHlonntnm1AW69nUTeGqa4uYOtDOk4aZC22d0pAq33ViwhqQx 2eXajmSIALv0PDCE5RGaxJGH33uu00QcfEeSCWKCaemqellU6YZB9beO8Dt1dUbp AeYWyoTdAcJF1Szp+sY8PnjgGzZ2inY= -----END CERTIFICATE-----Generated at Fri Jul 24 09:12:22 2026 by rpki-client