$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/01844c74-2602-37e4-ab14-a01f52a17442.roa File: 01844c74-2602-37e4-ab14-a01f52a17442.roa (raw, json) Hash identifier: orBjeazmOdeeW2e6dI3UeTeJLpGsrk2y9JZWaYRr8cI= Subject key identifier: B3:B0:8F:7E:87:7A:1C:62:23:60:DC:B1:DA:20:F2:6A:CC:5C:9D:BE Certificate issuer: /CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1 Certificate serial: 010D0C9F4328584E94EA504CDD9FB7805F9CD200 Authority key identifier: C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/01844c74-2602-37e4-ab14-a01f52a17442.roa Signing time: Wed 22 Jul 2026 09:00:11 +0000 ROA not before: Wed 22 Jul 2026 09:00:11 +0000 ROA not after: Tue 20 Oct 2026 09:00:11 +0000 asID: 16509 IP address blocks: 170.89.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:94:ea:50:4c:dd:9f:b7:80:5f:9c:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1 Validity Not Before: Jul 22 09:00:11 2026 GMT Not After : Oct 20 09:00:11 2026 GMT Subject: CN=588b6339-2ec7-499e-84c9-3a354cb55027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fa:78:f0:75:3c:7d:d7:14:c5:4c:be:a6:63: cd:f5:f9:3e:a1:02:89:c7:2b:ac:8e:20:6b:51:1f: 6a:bf:58:ab:c0:62:79:4b:ad:fe:42:31:37:c6:9b: 43:6c:fa:14:3b:47:0a:78:aa:1b:13:1f:13:ec:3f: 6c:80:58:ab:3c:92:c2:36:c5:f4:f2:34:e8:b6:da: 31:ce:68:18:45:39:ac:08:5c:8d:6f:40:f1:bf:63: b2:a9:53:94:13:3d:12:5d:d7:2f:de:81:8b:0c:c8: fa:da:6e:eb:e5:90:3b:fe:f7:31:98:0a:34:df:1a: f6:2e:97:54:c9:ca:99:94:53:2d:c8:4f:05:d1:c1: 27:1f:2f:c2:7b:96:d5:09:d4:38:d0:44:9c:03:e5: d7:a5:58:51:90:2a:b8:4a:c4:95:af:cf:da:ee:6a: 7a:3c:1c:4e:c2:cd:85:97:c1:8f:24:95:de:1f:10: 33:80:e2:7f:ea:df:96:1c:52:b7:d4:58:2d:c9:2e: 45:0e:c6:72:4c:6b:5b:65:f7:43:97:35:b9:16:f9: 40:14:68:24:5f:dc:ee:52:fb:dd:25:52:c4:f9:c9: 6c:35:bf:38:d2:b7:b3:54:2d:b4:a6:32:5e:3c:b1: 8b:88:75:ad:86:4f:80:14:e0:f3:3d:a2:4c:59:40: 39:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B0:8F:7E:87:7A:1C:62:23:60:DC:B1:DA:20:F2:6A:CC:5C:9D:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/01844c74-2602-37e4-ab14-a01f52a17442.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl X509v3 Authority Key Identifier: keyid:C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer sbgp-ipAddrBlock: critical IPv4: 170.89.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:93:11:25:81:12:62:57:fb:4a:2a:a3:05:e1:83:bb:84:29: 9d:66:2e:14:be:2d:5c:e4:37:de:ef:f0:9d:ff:5a:74:20:fe: 95:e4:f7:6f:93:ff:36:3a:b7:98:1b:d9:1c:33:67:8b:98:89: f8:08:11:29:07:c8:52:3d:1d:73:bf:76:08:00:64:9d:34:59: 8b:fc:bc:de:75:5f:26:fc:4b:9f:7f:42:3c:19:56:08:63:e4: 47:8f:fa:81:fd:e7:4e:96:d2:85:ff:5f:fb:66:be:de:52:bb: ce:07:43:f1:91:6a:c4:e2:fd:df:b0:15:5d:8f:91:83:61:60: 71:d3:0f:dd:33:3b:42:1e:3a:fa:6b:55:d7:12:38:64:95:3c: 0d:0b:d8:1d:09:92:19:9f:45:41:6d:5b:97:2c:39:92:63:47: d3:87:52:05:d7:cd:65:b7:ff:47:49:2e:cf:03:4b:70:98:9e: 2e:40:30:2b:34:95:f1:33:7f:f9:98:54:16:4d:56:fa:b0:89: 59:88:d9:2c:c7:2d:45:bf:4f:7e:25:98:88:e6:3e:72:c0:a7: 70:02:e6:f7:cb:b0:c6:0c:96:c2:7f:99:57:04:27:00:39:83: e1:18:f8:ef:74:c2:8b:2c:13:eb:de:82:4d:4a:24:6b:64:e2: 7a:c5:ac:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6U6lBM3Z+3gF+c0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmUzZmYxMGQtOWFjNS00NmE5LThlYjQtODIzMDI3NjA3 Y2ExMB4XDTI2MDcyMjA5MDAxMVoXDTI2MTAyMDA5MDAxMVowLzEtMCsGA1UEAxMk NTg4YjYzMzktMmVjNy00OTllLTg0YzktM2EzNTRjYjU1MDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvp48HU8fdcUxUy+pmPN9fk+oQKJxyusjiBr UR9qv1irwGJ5S63+QjE3xptDbPoUO0cKeKobEx8T7D9sgFirPJLCNsX08jTottox zmgYRTmsCFyNb0Dxv2OyqVOUEz0SXdcv3oGLDMj62m7r5ZA7/vcxmAo03xr2LpdU ycqZlFMtyE8F0cEnHy/Ce5bVCdQ40EScA+XXpVhRkCq4SsSVr8/a7mp6PBxOws2F l8GPJJXeHxAzgOJ/6t+WHFK31FgtyS5FDsZyTGtbZfdDlzW5FvlAFGgkX9zuUvvd JVLE+clsNb840rezVC20pjJePLGLiHWthk+AFODzPaJMWUA5hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOwj36HehxiI2Dcsdog8mrMXJ2+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZTNm ZjEwZC05YWM1LTQ2YTktOGViNC04MjMwMjc2MDdjYTEvMDE4NDRjNzQtMjYwMi0z N2U0LWFiMTQtYTAxZjUyYTE3NDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmUzZmYxMGQtOWFjNS00NmE5LThl YjQtODIzMDI3NjA3Y2ExL2JlM2ZmMTBkLTlhYzUtNDZhOS04ZWI0LTgyMzAyNzYw N2NhMS5jcmwwHwYDVR0jBBgwFoAUxf1vzdJ0mgAFn0XVSeFHrl2VZcYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZTNmZjEwZC05YWM1LTQ2YTktOGViNC04MjMw Mjc2MDdjYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqlkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKmTESWBEmJX+0oqowXhg7uEKZ1mLhS+LVzkN97v8J3/WnQg/pXk92+T /zY6t5gb2RwzZ4uYifgIESkHyFI9HXO/dggAZJ00WYv8vN51Xyb8S59/QjwZVghj 5EeP+oH9506W0oX/X/tmvt5Su84HQ/GRasTi/d+wFV2PkYNhYHHTD90zO0IeOvpr VdcSOGSVPA0L2B0JkhmfRUFtW5csOZJjR9OHUgXXzWW3/0dJLs8DS3CYni5AMCs0 lfEzf/mYVBZNVvqwiVmI2SzHLUW/T34lmIjmPnLAp3AC5vfLsMYMlsJ/mVcEJwA5 g+EY+O90wossE+vegk1KJGtk4nrFrFg= -----END CERTIFICATE-----Generated at Fri Jul 24 12:22:46 2026 by rpki-client