$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/dc659b2e-e1ec-3398-a84f-1a0622493eed.roa File: dc659b2e-e1ec-3398-a84f-1a0622493eed.roa (raw, json) Hash identifier: kghN3kU8Dn4k61n+Bb+vlpebNnFILEjdrMET2FuWlng= Subject key identifier: DF:71:BF:B9:B2:BC:F6:3F:4D:05:A5:97:DA:AF:0E:AD:7E:5C:59:DF Certificate issuer: /CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1 Certificate serial: 010D0C9F4328584DB4A5781D87328A96A70FA080 Authority key identifier: C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/dc659b2e-e1ec-3398-a84f-1a0622493eed.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 14618 IP address blocks: 170.89.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:78:1d:87:32:8a:96:a7:0f:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1 Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=fb92b011-1b59-4950-8544-d1f427a6cd61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:16:97:56:09:0f:85:2a:ef:54:76:59:68:2b: 09:5d:33:d8:c3:15:fb:14:72:80:4a:8c:3a:43:65: fd:5c:28:70:95:2d:65:70:3c:ac:bb:b7:d0:46:51: 4c:46:37:1e:98:0c:10:25:5b:49:32:f7:7a:25:f8: bb:47:63:cf:db:80:b4:51:a7:07:e4:a0:5a:8e:52: 02:a4:82:05:76:a0:80:7f:56:7f:ec:41:b5:91:4a: 84:95:a1:75:6d:fe:73:a1:dc:11:7d:29:4b:46:e0: d3:50:7c:cf:bc:7d:40:42:a4:26:6f:64:3e:89:f7: 17:db:2b:b0:9a:64:e0:2e:b5:d8:5e:12:13:9c:85: 5d:63:ea:0f:ea:ce:51:ad:24:ee:a4:32:3b:18:dc: 90:5e:64:d9:48:fc:0b:d8:06:a1:1f:17:7f:19:9c: 52:f8:b7:74:12:b0:3d:9b:96:79:23:50:e0:b8:9f: f1:42:7d:3f:45:e7:aa:6d:f8:8c:c8:c8:34:2b:d3: f5:b3:3e:16:9e:94:cd:73:e8:12:9e:dd:36:c9:b7: 66:81:68:b9:8a:1c:5e:1a:4c:0b:8d:a0:2d:06:3a: b4:7d:09:8d:86:fa:35:9f:b0:87:49:db:44:2b:f5: 44:49:c7:28:e7:7a:f5:e4:41:68:00:d3:32:06:c4: 83:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:71:BF:B9:B2:BC:F6:3F:4D:05:A5:97:DA:AF:0E:AD:7E:5C:59:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/dc659b2e-e1ec-3398-a84f-1a0622493eed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl X509v3 Authority Key Identifier: keyid:C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer sbgp-ipAddrBlock: critical IPv4: 170.89.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:e7:fd:44:7b:d3:15:ef:4b:ac:2e:6a:dc:e2:c4:85:ad:f0: fe:5a:a7:f0:1e:bf:c8:e3:ba:5c:59:e9:0d:d8:e4:c2:3e:53: 56:0f:44:95:ce:55:53:2f:a7:f2:88:ca:df:8b:a3:1c:51:44: 69:8d:f8:63:53:53:f3:1d:4c:52:c1:7f:6b:99:0c:ee:ac:3f: f9:b0:7e:05:fd:e3:06:24:26:09:30:3d:29:a1:22:73:8a:25: 5c:f8:1d:bc:fb:9b:4d:25:25:02:36:23:6f:4f:32:f5:9d:29: a9:0b:60:88:e3:42:2c:7e:7f:16:15:c6:23:be:99:fa:01:98: 90:83:cf:80:aa:38:93:c6:f4:d7:66:ec:90:55:ba:32:c2:3d: 04:03:78:6c:40:55:5d:91:20:4f:e0:6e:5f:db:e1:5c:1b:b9: c4:d0:d2:ad:c5:fd:90:85:6b:ad:1e:33:dd:83:99:46:84:66: 3f:91:97:e0:2d:b8:d9:19:83:27:b3:01:7b:2d:84:a6:a7:e5: 5d:f1:4c:f1:c6:94:3e:11:49:98:d7:e9:9c:a9:75:a0:f7:ed: 7e:11:4e:b1:ce:7c:5d:9f:3b:32:25:11:30:e6:9f:67:9d:70: f6:15:73:0d:e5:b4:09:b6:d3:b8:09:c2:6c:b6:de:79:cc:2a: f1:2c:10:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE20pXgdhzKKlqcPoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmUzZmYxMGQtOWFjNS00NmE5LThlYjQtODIzMDI3NjA3 Y2ExMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk ZmI5MmIwMTEtMWI1OS00OTUwLTg1NDQtZDFmNDI3YTZjZDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBaXVgkPhSrvVHZZaCsJXTPYwxX7FHKASow6 Q2X9XChwlS1lcDysu7fQRlFMRjcemAwQJVtJMvd6Jfi7R2PP24C0UacH5KBajlIC pIIFdqCAf1Z/7EG1kUqElaF1bf5zodwRfSlLRuDTUHzPvH1AQqQmb2Q+ifcX2yuw mmTgLrXYXhITnIVdY+oP6s5RrSTupDI7GNyQXmTZSPwL2AahHxd/GZxS+Ld0ErA9 m5Z5I1DguJ/xQn0/ReeqbfiMyMg0K9P1sz4WnpTNc+gSnt02ybdmgWi5ihxeGkwL jaAtBjq0fQmNhvo1n7CHSdtEK/VEScco53r15EFoANMyBsSDhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9xv7myvPY/TQWll9qvDq1+XFnfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZTNm ZjEwZC05YWM1LTQ2YTktOGViNC04MjMwMjc2MDdjYTEvZGM2NTliMmUtZTFlYy0z Mzk4LWE4NGYtMWEwNjIyNDkzZWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmUzZmYxMGQtOWFjNS00NmE5LThl YjQtODIzMDI3NjA3Y2ExL2JlM2ZmMTBkLTlhYzUtNDZhOS04ZWI0LTgyMzAyNzYw N2NhMS5jcmwwHwYDVR0jBBgwFoAUxf1vzdJ0mgAFn0XVSeFHrl2VZcYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZTNmZjEwZC05YWM1LTQ2YTktOGViNC04MjMw Mjc2MDdjYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqlkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzn/UR70xXvS6wuatzixIWt8P5ap/Aev8jjulxZ6Q3Y5MI+U1YPRJXO VVMvp/KIyt+LoxxRRGmN+GNTU/MdTFLBf2uZDO6sP/mwfgX94wYkJgkwPSmhInOK JVz4Hbz7m00lJQI2I29PMvWdKakLYIjjQix+fxYVxiO+mfoBmJCDz4CqOJPG9Ndm 7JBVujLCPQQDeGxAVV2RIE/gbl/b4VwbucTQ0q3F/ZCFa60eM92DmUaEZj+Rl+At uNkZgyezAXsthKan5V3xTPHGlD4RSZjX6ZypdaD37X4RTrHOfF2fOzIlETDmn2ed cPYVcw3ltAm207gJwmy23nnMKvEsEPE= -----END CERTIFICATE-----Generated at Wed May 13 06:49:29 2026 by rpki-client