$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/dc659b2e-e1ec-3398-a84f-1a0622493eed.roa File: dc659b2e-e1ec-3398-a84f-1a0622493eed.roa (raw, json) Hash identifier: 4GX3Itg6lzKgyWjOca0P180DBHc4rMJLs1yQRWTzHto= Subject key identifier: B8:3E:B1:0F:6C:83:64:1B:C7:C5:0B:F0:F1:59:D6:56:16:1B:AE:52 Certificate issuer: /CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1 Certificate serial: 010D0C9F4328584E94EA503361D28DB7A6E4DA80 Authority key identifier: C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/dc659b2e-e1ec-3398-a84f-1a0622493eed.roa Signing time: Wed 22 Jul 2026 09:00:11 +0000 ROA not before: Wed 22 Jul 2026 09:00:11 +0000 ROA not after: Tue 20 Oct 2026 09:00:11 +0000 asID: 14618 IP address blocks: 170.89.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:94:ea:50:33:61:d2:8d:b7:a6:e4:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1 Validity Not Before: Jul 22 09:00:11 2026 GMT Not After : Oct 20 09:00:11 2026 GMT Subject: CN=c623d2dd-9953-4514-a0fb-bdb06bfed143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:22:79:fd:42:e1:54:47:3a:af:d5:6e:29:6c: 47:1f:1c:81:5b:9e:d5:7b:18:95:bf:a8:2a:7c:0b: ae:71:02:34:77:a9:11:e0:a9:77:fd:5e:d1:2f:ed: 6f:18:5b:29:c0:5e:33:92:e5:35:78:d8:a9:5a:02: 46:60:e2:c6:c1:bb:c9:28:68:0c:8a:94:54:dd:27: 4f:35:76:56:02:78:94:11:fa:55:32:ef:3b:f2:ba: 46:17:d5:b1:a2:8e:61:40:b7:85:0d:16:af:96:a0: 6b:30:4d:72:d6:fc:9a:4e:44:4a:dd:45:bd:2c:6e: 3d:72:9a:16:70:d8:19:f3:a9:45:55:85:4b:6b:ee: 29:9d:15:23:e1:73:7b:1c:b4:4c:0c:82:82:c0:b9: 19:db:3e:cd:a3:ec:d3:27:01:50:7c:93:8d:ee:44: eb:e2:aa:ad:50:4b:7a:f7:40:99:66:e5:a6:20:49: 2b:7e:a8:6f:ba:cf:3d:aa:37:a8:f1:82:3a:59:8b: fc:96:57:db:a6:f7:e0:f5:57:05:7a:26:9b:ec:af: dd:2a:54:5e:50:a4:bb:a9:d9:20:6d:80:c0:c8:42: 72:d6:4e:65:50:c5:79:65:e0:c0:e2:a4:24:65:0d: de:bd:1b:73:5a:22:9d:1a:d1:3c:64:cb:75:20:39: fe:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:3E:B1:0F:6C:83:64:1B:C7:C5:0B:F0:F1:59:D6:56:16:1B:AE:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/dc659b2e-e1ec-3398-a84f-1a0622493eed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl X509v3 Authority Key Identifier: keyid:C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer sbgp-ipAddrBlock: critical IPv4: 170.89.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:52:6a:c7:54:09:f4:9e:b0:9c:89:5d:66:13:aa:53:96:ec: b5:14:9e:fe:4a:50:1f:a2:15:4a:6d:ee:6b:50:f6:07:ce:2e: c8:91:80:ce:29:a9:5a:21:ec:bd:c4:c5:b5:83:bd:41:e1:1b: 31:0f:f2:fc:39:e7:87:75:bf:8f:05:5e:56:aa:7f:2d:ea:9a: 33:56:ce:d6:0d:b4:ae:bf:11:40:66:a2:9a:2c:ff:c6:b5:29: 6d:8c:64:89:4a:da:35:f7:dd:9f:18:56:a9:6e:b7:85:ac:7b: 90:f8:4b:7e:06:88:22:4b:7e:4f:72:83:82:66:87:ea:0e:7e: 50:8a:42:44:ec:1b:6d:db:fa:35:b5:21:e5:92:c9:95:56:2c: 44:01:f5:8d:6c:37:f4:30:7b:2d:e5:15:b1:bf:22:46:74:ce: a5:ec:c8:dc:38:72:81:0b:3a:bc:69:6f:e0:ce:53:b2:66:f0: 34:7d:ad:bd:af:bc:d6:3f:81:4a:3c:19:c5:57:82:d2:2c:c8: 41:b5:01:5d:9e:0c:8f:db:d6:20:81:ee:89:aa:67:17:d2:79: 0e:eb:03:77:1f:6d:ba:98:94:a2:9e:53:32:6a:06:91:2a:e5: 1f:63:b1:ff:e4:57:c9:fe:1b:34:7c:1e:49:b6:87:ee:95:c4: b3:e0:09:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6U6lAzYdKNt6bk2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmUzZmYxMGQtOWFjNS00NmE5LThlYjQtODIzMDI3NjA3 Y2ExMB4XDTI2MDcyMjA5MDAxMVoXDTI2MTAyMDA5MDAxMVowLzEtMCsGA1UEAxMk YzYyM2QyZGQtOTk1My00NTE0LWEwZmItYmRiMDZiZmVkMTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliJ5/ULhVEc6r9VuKWxHHxyBW57VexiVv6gq fAuucQI0d6kR4Kl3/V7RL+1vGFspwF4zkuU1eNipWgJGYOLGwbvJKGgMipRU3SdP NXZWAniUEfpVMu878rpGF9Wxoo5hQLeFDRavlqBrME1y1vyaTkRK3UW9LG49cpoW cNgZ86lFVYVLa+4pnRUj4XN7HLRMDIKCwLkZ2z7No+zTJwFQfJON7kTr4qqtUEt6 90CZZuWmIEkrfqhvus89qjeo8YI6WYv8llfbpvfg9VcFeiab7K/dKlReUKS7qdkg bYDAyEJy1k5lUMV5ZeDA4qQkZQ3evRtzWiKdGtE8ZMt1IDn+jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLg+sQ9sg2Qbx8UL8PFZ1lYWG65SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZTNm ZjEwZC05YWM1LTQ2YTktOGViNC04MjMwMjc2MDdjYTEvZGM2NTliMmUtZTFlYy0z Mzk4LWE4NGYtMWEwNjIyNDkzZWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmUzZmYxMGQtOWFjNS00NmE5LThl YjQtODIzMDI3NjA3Y2ExL2JlM2ZmMTBkLTlhYzUtNDZhOS04ZWI0LTgyMzAyNzYw N2NhMS5jcmwwHwYDVR0jBBgwFoAUxf1vzdJ0mgAFn0XVSeFHrl2VZcYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZTNmZjEwZC05YWM1LTQ2YTktOGViNC04MjMw Mjc2MDdjYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqlkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALNSasdUCfSesJyJXWYTqlOW7LUUnv5KUB+iFUpt7mtQ9gfOLsiRgM4p qVoh7L3ExbWDvUHhGzEP8vw554d1v48FXlaqfy3qmjNWztYNtK6/EUBmopos/8a1 KW2MZIlK2jX33Z8YVqlut4Wse5D4S34GiCJLfk9yg4Jmh+oOflCKQkTsG23b+jW1 IeWSyZVWLEQB9Y1sN/Qwey3lFbG/IkZ0zqXsyNw4coELOrxpb+DOU7Jm8DR9rb2v vNY/gUo8GcVXgtIsyEG1AV2eDI/b1iCB7omqZxfSeQ7rA3cfbbqYlKKeUzJqBpEq 5R9jsf/kV8n+GzR8Hkm2h+6VxLPgCVc= -----END CERTIFICATE-----Generated at Thu Jul 23 22:36:16 2026 by rpki-client