$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d89b7b74-799b-350f-8511-b393fb6156e2.roa File: d89b7b74-799b-350f-8511-b393fb6156e2.roa (raw, json) Hash identifier: z04ffBhvDUX2m/OTEu1n1JMp50VdOywUAQxYOXHYIZw= Subject key identifier: E2:15:F2:1D:08:4A:83:7F:2F:82:65:F0:67:AC:C4:07:A4:90:BF:B9 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584E6F3A363A5E757B6A0E724C60 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d89b7b74-799b-350f-8511-b393fb6156e2.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 16509 IP address blocks: 170.85.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:36:3a:5e:75:7b:6a:0e:72:4c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=1aa69c77-f9a7-465c-8b3e-e88e31b509f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f0:6a:70:8a:48:5b:ad:1c:0c:c1:e4:b1:2b: 07:0f:54:3f:db:47:04:49:63:6b:05:28:d0:d5:42: 1f:88:02:7e:bf:49:2b:fb:e4:c4:16:8e:ba:9d:91: 75:6c:8a:1e:b6:4b:56:9d:24:0b:32:2b:b1:bc:4f: 9c:1f:ee:d2:ca:56:96:38:1d:38:dd:1a:b4:7e:31: 3e:61:ec:63:17:f8:b8:07:35:28:1b:3f:d8:d6:ba: de:cf:62:22:59:30:da:f3:21:f3:aa:27:ad:e1:e1: 1f:a0:46:98:99:5a:41:0e:c5:ee:1d:e5:d5:7a:93: 8c:78:c8:e6:7d:37:cb:78:e1:a5:a8:87:4b:cf:35: 49:ca:77:45:04:20:23:9a:16:50:32:6d:7a:46:fd: 3c:ee:d4:51:12:42:d4:cf:51:0b:fd:2d:9c:ca:44: 13:00:4e:19:14:94:c7:06:a8:91:ba:42:81:25:ab: 4d:e0:16:dc:a0:3a:db:5b:a1:60:7e:96:4c:b3:1b: c5:83:da:d8:7e:f0:ec:a1:fc:b4:91:5f:c7:d4:bc: 89:13:55:cd:35:f9:30:40:2b:93:61:94:88:bb:06: 6b:2d:69:3a:eb:74:cb:67:77:fc:3a:bd:6f:ae:4f: a2:85:3f:40:f8:c2:db:e0:37:21:20:35:8d:7f:2e: d8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:15:F2:1D:08:4A:83:7F:2F:82:65:F0:67:AC:C4:07:A4:90:BF:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d89b7b74-799b-350f-8511-b393fb6156e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:82:e8:4b:17:88:55:c3:36:f3:09:42:0b:08:15:0d:d6:5d: 44:25:dc:72:08:b7:f1:d5:44:c1:da:f3:0d:3f:0e:99:c5:0f: 2a:80:83:09:4e:e2:d9:22:1f:3a:13:33:33:2a:8d:c7:f5:66: 35:ac:d7:d6:2c:7d:8b:3e:12:3f:a1:87:fc:6d:85:e4:e9:c0: cf:c5:6c:08:81:45:92:b1:7d:01:51:29:68:8d:ec:e8:cb:6b: 2e:2a:0f:59:4f:61:ff:84:81:77:4b:37:6b:d3:d2:15:11:8b: 06:fa:f2:c9:a0:ac:1d:4e:3c:ab:e6:00:52:1a:64:61:c2:7d: a3:e0:07:d9:4b:6e:9d:6e:0d:31:9c:de:6a:3b:45:82:46:c7: ad:5f:db:7b:86:45:94:9b:d5:b3:5b:c3:05:96:54:f6:1b:dc: 44:7e:93:50:82:2f:d1:80:93:40:3c:a9:f1:ee:73:4f:83:3d: 0b:c6:b8:3f:07:cc:4e:7a:b4:a0:52:c3:c4:60:6b:3a:90:39: 2b:5d:46:43:df:41:8f:9c:de:d0:8a:02:ff:5a:d2:af:e2:26: 25:22:f6:4f:81:49:d1:76:ff:50:40:45:26:e1:c3:f9:3a:87: ac:f8:3b:fb:13:89:e6:ac:c1:e6:c9:d5:fd:02:f6:34:9d:a7: fd:37:5f:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOjY6XnV7ag5yTGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk MWFhNjljNzctZjlhNy00NjVjLThiM2UtZTg4ZTMxYjUwOWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/BqcIpIW60cDMHksSsHD1Q/20cESWNrBSjQ 1UIfiAJ+v0kr++TEFo66nZF1bIoetktWnSQLMiuxvE+cH+7SylaWOB043Rq0fjE+ YexjF/i4BzUoGz/Y1rrez2IiWTDa8yHzqiet4eEfoEaYmVpBDsXuHeXVepOMeMjm fTfLeOGlqIdLzzVJyndFBCAjmhZQMm16Rv087tRREkLUz1EL/S2cykQTAE4ZFJTH BqiRukKBJatN4BbcoDrbW6FgfpZMsxvFg9rYfvDsofy0kV/H1LyJE1XNNfkwQCuT YZSIuwZrLWk663TLZ3f8Or1vrk+ihT9A+MLb4DchIDWNfy7YfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIV8h0ISoN/L4Jl8GesxAekkL+5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZDg5YjdiNzQtNzk5Yi0z NTBmLTg1MTEtYjM5M2ZiNjE1NmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlU0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGC6EsXiFXDNvMJQgsIFQ3WXUQl3HIIt/HVRMHa8w0/DpnFDyqAgwlO 4tkiHzoTMzMqjcf1ZjWs19YsfYs+Ej+hh/xtheTpwM/FbAiBRZKxfQFRKWiN7OjL ay4qD1lPYf+EgXdLN2vT0hURiwb68smgrB1OPKvmAFIaZGHCfaPgB9lLbp1uDTGc 3mo7RYJGx61f23uGRZSb1bNbwwWWVPYb3ER+k1CCL9GAk0A8qfHuc0+DPQvGuD8H zE56tKBSw8RgazqQOStdRkPfQY+c3tCKAv9a0q/iJiUi9k+BSdF2/1BARSbhw/k6 h6z4O/sTieaswebJ1f0C9jSdp/03X4E= -----END CERTIFICATE-----Generated at Fri Jul 24 10:24:22 2026 by rpki-client