$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/7f02fce9-3961-3b18-8795-ab236c2e0478.roa File: 7f02fce9-3961-3b18-8795-ab236c2e0478.roa (raw, json) Hash identifier: /EoBJjra8PW5LCHsQ8D3XGqoBO5mfU/T8tJyc6oUVr0= Subject key identifier: 7F:F1:91:1D:37:C8:01:FB:63:89:D0:1F:0C:24:43:1A:05:02:5B:70 Certificate issuer: /CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1 Certificate serial: 010D0C9F4328584DB4A57848E7B4EF4736BD3300 Authority key identifier: C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/7f02fce9-3961-3b18-8795-ab236c2e0478.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 16509 IP address blocks: 170.89.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:78:48:e7:b4:ef:47:36:bd:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1 Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=87f20cec-9125-4004-8b40-6f4fa928b2fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d3:af:32:37:d8:1b:34:75:b7:78:8a:e8:42: 65:2d:b7:ca:a2:ce:fd:3a:7a:2b:65:e3:e6:cf:cc: 81:c5:c1:6d:6c:cb:f1:87:6c:8e:72:e5:ec:94:fe: 61:e5:76:1a:57:28:a9:b8:c9:76:62:51:ec:3f:0f: 2d:aa:c9:cc:a8:68:33:cc:d2:16:51:fc:aa:61:9e: 39:c4:2e:4b:86:40:5f:92:19:3f:25:01:30:96:94: e1:aa:34:3c:ae:a4:7e:4d:bf:04:5d:ae:dc:b0:5f: d0:b6:2c:01:53:7e:ca:f1:7e:d4:ea:b9:ad:60:38: 4a:e9:3c:f9:a2:53:6f:9c:2b:f2:1b:fb:56:0f:ae: ca:80:2a:5e:ca:93:73:53:f3:40:ba:b8:90:75:9b: bc:fa:c0:ba:b6:c4:2e:e8:44:a2:fd:10:e7:a3:3c: d8:d7:c5:25:f8:e3:a9:74:b4:c4:af:2e:97:2f:5a: 38:b4:3a:36:0a:bc:ef:db:02:1e:40:4e:51:de:78: 25:a9:e6:7e:1e:c2:f9:9d:61:81:6a:ce:63:09:59: 02:b7:3f:2f:d5:b9:be:60:db:04:3f:60:d5:05:4b: 0f:d8:20:71:8f:67:93:5e:c5:79:73:b3:95:68:e0: a0:58:a0:9e:1c:de:86:30:5e:32:57:c6:13:5d:9d: 09:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F1:91:1D:37:C8:01:FB:63:89:D0:1F:0C:24:43:1A:05:02:5B:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/7f02fce9-3961-3b18-8795-ab236c2e0478.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl X509v3 Authority Key Identifier: keyid:C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer sbgp-ipAddrBlock: critical IPv4: 170.89.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:f2:16:00:63:7d:55:42:72:d2:94:6a:ab:25:38:02:72:4a: 3f:86:c3:c1:30:20:e5:cc:a9:3d:42:77:a7:68:60:e7:7a:08: ad:d8:77:38:61:20:52:f2:dd:4e:60:1b:af:46:b1:ea:74:af: 83:ca:1f:0b:8f:cd:11:1d:1a:7d:b4:89:90:43:57:cb:f1:88: 2f:5f:26:b8:59:00:ba:38:60:4e:61:c8:a0:88:db:20:54:1a: 69:bf:01:ff:79:d6:82:2e:e7:ad:66:02:4f:ec:46:5f:99:06: 5e:38:f4:6c:89:4e:0c:60:bc:ae:62:fa:40:88:72:02:40:b5: 47:5d:37:81:aa:45:04:39:31:e9:5e:29:96:27:7c:d9:62:d4: ea:80:e0:3c:ad:cc:65:3f:8b:c7:5d:7c:56:be:c0:4c:27:cd: 84:5d:e1:62:b9:f9:96:5f:25:e2:b9:da:79:dc:12:1d:e6:c0: 87:ea:33:22:10:49:9b:1a:82:a4:88:da:a1:72:77:56:e5:76: 79:7e:00:5d:52:f5:5e:a5:96:12:c1:0c:74:2f:77:f6:d3:95: a6:c3:0b:32:67:d4:41:b6:d7:50:06:de:58:6e:14:36:84:41: 8b:97:7f:c1:91:f9:3d:62:87:15:b8:5a:b5:97:02:d7:0b:bf: 9d:de:b2:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE20pXhI57TvRza9MwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmUzZmYxMGQtOWFjNS00NmE5LThlYjQtODIzMDI3NjA3 Y2ExMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk ODdmMjBjZWMtOTEyNS00MDA0LThiNDAtNmY0ZmE5MjhiMmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9OvMjfYGzR1t3iK6EJlLbfKos79OnorZePm z8yBxcFtbMvxh2yOcuXslP5h5XYaVyipuMl2YlHsPw8tqsnMqGgzzNIWUfyqYZ45 xC5LhkBfkhk/JQEwlpThqjQ8rqR+Tb8EXa7csF/QtiwBU37K8X7U6rmtYDhK6Tz5 olNvnCvyG/tWD67KgCpeypNzU/NAuriQdZu8+sC6tsQu6ESi/RDnozzY18Ul+OOp dLTEry6XL1o4tDo2Crzv2wIeQE5R3nglqeZ+HsL5nWGBas5jCVkCtz8v1bm+YNsE P2DVBUsP2CBxj2eTXsV5c7OVaOCgWKCeHN6GMF4yV8YTXZ0JiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/xkR03yAH7Y4nQHwwkQxoFAltwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZTNm ZjEwZC05YWM1LTQ2YTktOGViNC04MjMwMjc2MDdjYTEvN2YwMmZjZTktMzk2MS0z YjE4LTg3OTUtYWIyMzZjMmUwNDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmUzZmYxMGQtOWFjNS00NmE5LThl YjQtODIzMDI3NjA3Y2ExL2JlM2ZmMTBkLTlhYzUtNDZhOS04ZWI0LTgyMzAyNzYw N2NhMS5jcmwwHwYDVR0jBBgwFoAUxf1vzdJ0mgAFn0XVSeFHrl2VZcYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZTNmZjEwZC05YWM1LTQ2YTktOGViNC04MjMw Mjc2MDdjYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqlmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnyFgBjfVVCctKUaqslOAJySj+Gw8EwIOXMqT1Cd6doYOd6CK3Ydzhh IFLy3U5gG69Gsep0r4PKHwuPzREdGn20iZBDV8vxiC9fJrhZALo4YE5hyKCI2yBU Gmm/Af951oIu561mAk/sRl+ZBl449GyJTgxgvK5i+kCIcgJAtUddN4GqRQQ5Mele KZYnfNli1OqA4DytzGU/i8ddfFa+wEwnzYRd4WK5+ZZfJeK52nncEh3mwIfqMyIQ SZsagqSI2qFyd1bldnl+AF1S9V6llhLBDHQvd/bTlabDCzJn1EG211AG3lhuFDaE QYuXf8GR+T1ihxW4WrWXAtcLv53esiM= -----END CERTIFICATE-----Generated at Wed May 13 12:11:28 2026 by rpki-client