$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/432a3b5a-289e-38f4-9d5e-36162b6248ae.roa File: 432a3b5a-289e-38f4-9d5e-36162b6248ae.roa (raw, json) Hash identifier: KJsw052HN+iXdukXpanFwgLiae5l5Qf5PhuF7OiY6Io= Subject key identifier: 1C:78:BE:92:D8:8C:15:19:B9:2D:8C:A6:4F:5E:CA:CF:29:2F:1D:85 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584DF0AB48132B9969EAC9778CE8 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/432a3b5a-289e-38f4-9d5e-36162b6248ae.roa Signing time: Sun 24 May 2026 13:00:30 +0000 ROA not before: Sun 24 May 2026 13:00:30 +0000 ROA not after: Sat 22 Aug 2026 13:00:30 +0000 asID: 8987 IP address blocks: 170.85.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f0:ab:48:13:2b:99:69:ea:c9:77:8c:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: May 24 13:00:30 2026 GMT Not After : Aug 22 13:00:30 2026 GMT Subject: CN=8f5c2faf-f28f-4d41-8a2d-232d16a028d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8f:21:54:b7:fa:1b:78:be:1d:7d:39:60:52: 76:2f:d6:b0:01:5e:6b:40:76:0c:95:e0:6d:54:ec: bb:ec:82:fa:cb:4b:47:be:93:20:cf:0a:d4:14:42: 09:b0:b4:83:6c:c3:b9:43:5c:b2:e0:5c:82:c0:5a: 37:b2:63:6f:2a:56:ec:6e:84:5d:9c:04:0d:d2:9a: d8:a0:99:b8:ad:34:1c:5f:3c:ab:4e:24:ed:08:70: f2:60:a4:50:2f:95:85:8e:66:e6:f9:4b:f6:e7:7e: 98:0f:7b:fd:c2:ef:96:7d:48:30:f1:3e:b9:49:d3: 39:48:e7:78:7e:35:b2:78:4b:a6:3a:8e:e5:e8:d4: 35:0a:26:58:e9:bf:05:18:49:2a:d9:39:45:55:1c: 71:da:29:68:13:f2:6f:7c:7b:ff:38:d3:3d:62:a6: d3:00:d4:ca:39:40:d8:a3:f6:9d:8c:b3:64:91:21: 4c:78:d9:bb:66:4b:0d:18:f8:64:52:a3:a2:76:b5: 26:f0:1f:97:97:7e:99:51:5c:88:21:12:86:61:28: ec:e4:ce:03:a5:fd:80:d8:90:d5:cd:d3:6b:6a:2d: 42:c3:96:75:0d:13:ca:26:a0:c3:94:68:55:b1:fe: e8:c6:54:da:ed:e0:d5:f9:f4:a5:b6:16:79:cd:72: 67:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:78:BE:92:D8:8C:15:19:B9:2D:8C:A6:4F:5E:CA:CF:29:2F:1D:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/432a3b5a-289e-38f4-9d5e-36162b6248ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:2b:5b:4b:59:fd:23:dd:01:b6:6c:f3:ec:3b:b0:b4:51:5d: 55:c4:37:96:34:5e:f4:1a:19:4b:61:97:8a:e5:8b:56:f3:e1: 17:c6:7d:76:50:7a:d8:fc:fd:d6:f3:59:68:09:44:9c:97:86: 01:3f:59:f6:60:40:9f:a0:6a:6d:fb:57:c3:9b:da:42:27:0c: de:67:a3:07:a7:d6:e8:3c:12:2e:93:d1:f1:4c:ff:3a:48:7c: b1:55:9b:e1:13:77:a8:03:81:04:28:ff:5b:58:b5:0b:81:bf: ee:9d:e1:d9:e1:9f:a6:b1:00:2b:76:58:30:77:43:4b:25:90: a1:11:5b:9d:fe:50:77:1c:af:7f:02:d0:35:cd:68:91:0d:7b: 98:36:9b:0a:53:47:8d:c2:10:fc:09:ec:d6:6f:7d:8e:49:2b: af:c6:4f:34:73:ff:39:8f:e4:ff:0d:58:b5:ad:00:1b:f3:86: 66:f0:10:2a:24:10:5b:42:5b:a8:b8:cb:66:eb:d9:5c:a0:83: f1:52:c6:81:f8:16:32:e8:61:52:e1:7d:2e:df:ce:58:fd:3a: 7d:b5:ca:c4:38:68:4f:a7:5a:28:8a:60:05:2a:5d:97:f2:6a: d6:52:d0:cb:86:1c:d3:29:9e:0f:b2:94:35:d3:09:6f:8c:d3: de:f8:69:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3wq0gTK5lp6sl3jOgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDUyNDEzMDAzMFoXDTI2MDgyMjEzMDAzMFowLzEtMCsGA1UEAxMk OGY1YzJmYWYtZjI4Zi00ZDQxLThhMmQtMjMyZDE2YTAyOGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI8hVLf6G3i+HX05YFJ2L9awAV5rQHYMleBt VOy77IL6y0tHvpMgzwrUFEIJsLSDbMO5Q1yy4FyCwFo3smNvKlbsboRdnAQN0prY oJm4rTQcXzyrTiTtCHDyYKRQL5WFjmbm+Uv2536YD3v9wu+WfUgw8T65SdM5SOd4 fjWyeEumOo7l6NQ1CiZY6b8FGEkq2TlFVRxx2iloE/JvfHv/ONM9YqbTANTKOUDY o/adjLNkkSFMeNm7ZksNGPhkUqOidrUm8B+Xl36ZUVyIIRKGYSjs5M4Dpf2A2JDV zdNrai1Cw5Z1DRPKJqDDlGhVsf7oxlTa7eDV+fSlthZ5zXJnQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBx4vpLYjBUZuS2Mpk9eys8pLx2FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNDMyYTNiNWEtMjg5ZS0z OGY0LTlkNWUtMzYxNjJiNjI0OGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwrW0tZ/SPdAbZs8+w7sLRRXVXEN5Y0XvQaGUthl4rli1bz4RfGfXZQ etj8/dbzWWgJRJyXhgE/WfZgQJ+gam37V8Ob2kInDN5nowen1ug8Ei6T0fFM/zpI fLFVm+ETd6gDgQQo/1tYtQuBv+6d4dnhn6axACt2WDB3Q0slkKERW53+UHccr38C 0DXNaJENe5g2mwpTR43CEPwJ7NZvfY5JK6/GTzRz/zmP5P8NWLWtABvzhmbwECok EFtCW6i4y2br2Vygg/FSxoH4FjLoYVLhfS7fzlj9On21ysQ4aE+nWiiKYAUqXZfy atZS0MuGHNMpng+ylDXTCW+M0974aes= -----END CERTIFICATE-----Generated at Sat Jun 13 20:24:13 2026 by rpki-client