$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/d3444f5a-9653-3573-a9e8-b622fe731b30.roa File: d3444f5a-9653-3573-a9e8-b622fe731b30.roa (raw, json) Hash identifier: XYJmEh62EzZEHr9RfaSE1EuS6ppjEb+/TH1NnfZlSAM= Subject key identifier: E8:A7:75:2A:DA:24:9B:11:AE:C1:7E:DA:AF:DE:19:BE:71:D6:18:9E Certificate issuer: /CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1 Certificate serial: 010D0C9F4328584E94EA4D203E7372ED4BC1B3C0 Authority key identifier: C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/d3444f5a-9653-3573-a9e8-b622fe731b30.roa Signing time: Wed 22 Jul 2026 09:00:11 +0000 ROA not before: Wed 22 Jul 2026 09:00:11 +0000 ROA not after: Tue 20 Oct 2026 09:00:11 +0000 asID: 23241 IP address blocks: 170.89.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:94:ea:4d:20:3e:73:72:ed:4b:c1:b3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1 Validity Not Before: Jul 22 09:00:11 2026 GMT Not After : Oct 20 09:00:11 2026 GMT Subject: CN=4c16f5b9-a87c-40c8-9929-a9fc250973c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d0:13:8e:02:a8:cc:40:cd:04:0f:db:53:59: 26:57:fd:09:19:60:79:47:15:f3:61:41:13:c8:b0: ac:e0:47:f0:5b:e1:a5:9c:7b:ee:a2:87:e9:92:ce: 5d:77:df:25:89:3f:4d:1d:bd:cc:8f:5f:b7:f1:ee: 1a:d6:bc:11:6f:4c:41:5b:ff:fe:34:84:88:37:26: 98:0c:9a:fa:9d:5d:39:00:19:03:ef:cb:b5:30:ae: b1:8c:3a:e4:24:f7:5d:86:29:d6:fa:27:2b:cb:12: 54:21:d6:39:5f:24:3b:18:c6:5f:72:7b:bf:22:02: 1e:22:39:17:51:cc:51:0b:b6:40:45:9c:84:39:3f: 97:c6:a7:69:7b:05:02:ef:5a:30:74:cc:76:3d:5d: 0c:63:41:c4:e1:76:2e:fa:a5:6c:4e:23:f4:9c:c9: 58:3f:ed:a5:59:43:f4:c1:3b:1c:77:4e:7b:15:3f: 22:66:d7:2b:45:72:d6:8a:e9:dd:24:4e:c1:8b:49: 56:d2:54:cd:d1:ac:ef:c3:74:7e:08:22:c0:cc:a2: 8f:38:67:57:f8:91:cb:a3:28:8d:5c:bb:4b:8c:2c: c8:dd:39:c8:36:61:4e:55:7b:8b:c5:68:24:65:82: a5:dd:3d:75:65:97:80:a0:a3:4b:f3:31:9f:4e:1d: 00:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A7:75:2A:DA:24:9B:11:AE:C1:7E:DA:AF:DE:19:BE:71:D6:18:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/d3444f5a-9653-3573-a9e8-b622fe731b30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl X509v3 Authority Key Identifier: keyid:C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer sbgp-ipAddrBlock: critical IPv4: 170.89.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:5c:33:a6:79:ce:89:6a:24:6e:e6:a2:d7:fc:92:ae:f0:78: 17:1f:d2:36:78:65:49:0a:0d:8f:ad:42:cf:ed:fa:ff:85:6d: 18:6d:af:1b:6b:ed:21:03:a9:cc:87:92:e9:24:6a:af:db:8a: f7:f1:95:de:05:01:20:f3:bb:86:e5:d6:40:6e:1b:0c:1c:5c: 2b:79:36:aa:cb:97:7e:b1:fd:2e:81:da:eb:e4:00:15:ee:ad: 49:d2:66:60:b9:c6:86:bd:10:f3:b9:da:3b:cf:45:78:34:7d: df:6e:01:26:74:e9:4c:dc:cc:1e:1b:1f:2f:0b:a9:02:64:01: f0:a8:bf:52:8c:cf:ce:a7:db:92:e0:7a:65:62:6c:60:d3:7f: 6e:c5:97:24:ee:2d:7d:77:5a:7a:4f:80:0c:69:46:e4:3a:d4: 78:02:0b:a5:ab:d7:cf:8d:e2:dd:87:4d:f7:f4:e7:3b:fd:66: 33:09:6d:fd:b3:1f:1b:47:72:da:76:28:ec:f9:b0:e8:37:85: 45:b2:28:da:16:6c:6d:4c:53:3d:13:12:30:c7:19:39:8a:8e: a9:38:65:29:b1:22:39:db:4f:54:c0:c9:8c:93:3e:dd:9d:c1: 95:5e:76:25:5b:5e:0d:f2:9a:36:8f:7e:54:c5:4e:34:22:6d: 96:6c:29:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6U6k0gPnNy7UvBs8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmUzZmYxMGQtOWFjNS00NmE5LThlYjQtODIzMDI3NjA3 Y2ExMB4XDTI2MDcyMjA5MDAxMVoXDTI2MTAyMDA5MDAxMVowLzEtMCsGA1UEAxMk NGMxNmY1YjktYTg3Yy00MGM4LTk5MjktYTlmYzI1MDk3M2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNATjgKozEDNBA/bU1kmV/0JGWB5RxXzYUET yLCs4EfwW+GlnHvuoofpks5dd98liT9NHb3Mj1+38e4a1rwRb0xBW//+NISINyaY DJr6nV05ABkD78u1MK6xjDrkJPddhinW+icryxJUIdY5XyQ7GMZfcnu/IgIeIjkX UcxRC7ZARZyEOT+XxqdpewUC71owdMx2PV0MY0HE4XYu+qVsTiP0nMlYP+2lWUP0 wTscd057FT8iZtcrRXLWiundJE7Bi0lW0lTN0azvw3R+CCLAzKKPOGdX+JHLoyiN XLtLjCzI3TnINmFOVXuLxWgkZYKl3T11ZZeAoKNL8zGfTh0AwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOindSraJJsRrsF+2q/eGb5x1hieMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZTNm ZjEwZC05YWM1LTQ2YTktOGViNC04MjMwMjc2MDdjYTEvZDM0NDRmNWEtOTY1My0z NTczLWE5ZTgtYjYyMmZlNzMxYjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmUzZmYxMGQtOWFjNS00NmE5LThl YjQtODIzMDI3NjA3Y2ExL2JlM2ZmMTBkLTlhYzUtNDZhOS04ZWI0LTgyMzAyNzYw N2NhMS5jcmwwHwYDVR0jBBgwFoAUxf1vzdJ0mgAFn0XVSeFHrl2VZcYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZTNmZjEwZC05YWM1LTQ2YTktOGViNC04MjMw Mjc2MDdjYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqlmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALxcM6Z5zolqJG7motf8kq7weBcf0jZ4ZUkKDY+tQs/t+v+FbRhtrxtr 7SEDqcyHkukkaq/bivfxld4FASDzu4bl1kBuGwwcXCt5NqrLl36x/S6B2uvkABXu rUnSZmC5xoa9EPO52jvPRXg0fd9uASZ06UzczB4bHy8LqQJkAfCov1KMz86n25Lg emVibGDTf27FlyTuLX13WnpPgAxpRuQ61HgCC6Wr18+N4t2HTff05zv9ZjMJbf2z HxtHctp2KOz5sOg3hUWyKNoWbG1MUz0TEjDHGTmKjqk4ZSmxIjnbT1TAyYyTPt2d wZVediVbXg3ymjaPflTFTjQibZZsKWs= -----END CERTIFICATE-----Generated at Fri Jul 24 11:40:07 2026 by rpki-client