$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/2d0193d3-f77e-31d9-a549-a3f230e8d931.roa File: 2d0193d3-f77e-31d9-a549-a3f230e8d931.roa (raw, json) Hash identifier: Ho9WCARd4IKLUVkiwGnYbKn+mM+MhML9SPvjHTUEQhA= Subject key identifier: A7:5D:7B:21:1C:6F:2F:A6:14:C2:CA:7E:94:8B:94:9E:0E:CB:EB:AC Certificate issuer: /CN=dc598c19-9d8e-4650-abce-c34c5146591f Certificate serial: 010D0C9F4328584ED4325BFC515DA93EDF46BA80 Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/2d0193d3-f77e-31d9-a549-a3f230e8d931.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 9009 IP address blocks: 172.85.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:32:5b:fc:51:5d:a9:3e:df:46:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=9baa3cbb-c89a-44c3-8150-cb3c6c9a7128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1a:78:2a:43:db:b8:78:45:59:58:16:85:78: 9b:ba:05:87:a6:64:79:83:af:4b:6e:26:4b:d1:8a: dd:48:cb:de:58:00:67:34:aa:a5:a3:47:c1:64:e3: ad:53:f3:4b:f8:4a:81:6b:9b:aa:7b:d3:63:2f:19: 0f:26:10:44:c4:b2:c5:73:17:fb:a0:b1:47:b6:c2: e4:82:85:0e:b0:24:db:0a:5f:7a:59:14:ac:0f:ea: c8:cd:66:aa:cc:3f:d7:a4:3b:e9:ab:58:65:c2:ad: fb:35:67:93:5c:9b:35:8e:1c:5b:09:d0:0a:90:98: 6f:27:eb:e6:88:e3:82:20:b6:f9:25:97:e9:63:ba: 7d:d0:6a:a9:a2:b2:29:fd:0c:70:b8:5e:b1:a1:8a: 97:5b:9e:ab:08:dc:54:1c:87:6e:36:d7:c6:56:62: c2:a5:14:80:a2:d6:40:05:a6:0c:d7:08:d9:2e:88: 00:ce:ba:98:2a:d2:e0:46:1b:15:8b:69:4f:4b:59: ba:65:0f:1b:8b:db:00:ed:5f:d4:a8:c2:3a:24:5a: d2:c8:fd:13:2d:46:01:30:81:b3:b2:52:18:f0:93: c4:a5:96:49:ea:7e:a1:1d:0a:2f:9b:b7:8e:bc:4f: 94:ec:db:d1:76:82:1f:07:ed:f3:f9:aa:ce:6e:c7: 98:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:5D:7B:21:1C:6F:2F:A6:14:C2:CA:7E:94:8B:94:9E:0E:CB:EB:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/2d0193d3-f77e-31d9-a549-a3f230e8d931.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl X509v3 Authority Key Identifier: keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer sbgp-ipAddrBlock: critical IPv4: 172.85.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:84:82:cc:e0:60:92:5c:fa:a4:64:bd:f9:9a:4c:cf:d4:88: b9:b2:2a:35:c2:98:62:f4:ef:66:e5:47:8d:fb:9f:40:7e:dc: a8:ab:b3:cf:dd:93:5b:9e:2a:bf:fd:f2:15:60:2d:e7:5d:95: f4:e2:34:92:fc:c4:ea:73:6b:50:15:6b:59:6c:05:ac:9d:d3: d5:48:44:b2:a6:9f:ba:08:15:ee:bc:21:b3:a8:7d:5b:f6:bd: 1c:17:b7:5a:10:58:54:d6:21:94:a2:a9:ff:c9:56:1e:a7:a6: b8:55:7a:9b:3a:7b:b7:18:61:1f:c6:3a:69:95:c5:64:e7:54: 23:94:34:05:24:93:9e:c7:00:ef:f8:7d:4f:8d:5b:5a:d4:3b: 05:2e:8f:97:43:b1:36:8f:a6:68:78:7b:a7:2f:d6:4e:a7:29: 90:71:9a:f0:86:e9:bd:04:e3:58:d4:a9:b4:c5:e3:69:96:bc: e9:50:cb:32:78:ef:d6:81:cd:22:93:0e:b6:93:5d:40:f6:02: 8e:55:00:30:3a:75:f3:66:11:c9:75:2f:e0:da:7a:3e:8e:62: c8:7e:90:40:e9:a5:e4:10:3f:18:05:8d:2b:17:fc:ce:e0:3b: 15:34:84:fd:cb:5c:9c:4e:a4:d4:97:60:d1:ff:4d:b3:2c:a8: a7:2b:e0:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMlv8UV2pPt9GuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM1OThjMTktOWQ4ZS00NjUwLWFiY2UtYzM0YzUxNDY1 OTFmMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk OWJhYTNjYmItYzg5YS00NGMzLTgxNTAtY2IzYzZjOWE3MTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxp4KkPbuHhFWVgWhXibugWHpmR5g69LbiZL 0YrdSMveWABnNKqlo0fBZOOtU/NL+EqBa5uqe9NjLxkPJhBExLLFcxf7oLFHtsLk goUOsCTbCl96WRSsD+rIzWaqzD/XpDvpq1hlwq37NWeTXJs1jhxbCdAKkJhvJ+vm iOOCILb5JZfpY7p90GqporIp/QxwuF6xoYqXW56rCNxUHIduNtfGVmLCpRSAotZA BaYM1wjZLogAzrqYKtLgRhsVi2lPS1m6ZQ8bi9sA7V/UqMI6JFrSyP0TLUYBMIGz slIY8JPEpZZJ6n6hHQovm7eOvE+U7NvRdoIfB+3z+arObseYzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKddeyEcby+mFMLKfpSLlJ4Oy+usMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kYzU5 OGMxOS05ZDhlLTQ2NTAtYWJjZS1jMzRjNTE0NjU5MWYvMmQwMTkzZDMtZjc3ZS0z MWQ5LWE1NDktYTNmMjMwZThkOTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGM1OThjMTktOWQ4ZS00NjUwLWFi Y2UtYzM0YzUxNDY1OTFmL2RjNTk4YzE5LTlkOGUtNDY1MC1hYmNlLWMzNGM1MTQ2 NTkxZi5jcmwwHwYDVR0jBBgwFoAUZJxII/ggNcM5/fDGWr3QRs2B+owwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kYzU5OGMxOS05ZDhlLTQ2NTAtYWJjZS1jMzRj NTE0NjU5MWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFVrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGEgszgYJJc+qRkvfmaTM/UiLmyKjXCmGL072blR437n0B+3Kirs8/d k1ueKr/98hVgLeddlfTiNJL8xOpza1AVa1lsBayd09VIRLKmn7oIFe68IbOofVv2 vRwXt1oQWFTWIZSiqf/JVh6nprhVeps6e7cYYR/GOmmVxWTnVCOUNAUkk57HAO/4 fU+NW1rUOwUuj5dDsTaPpmh4e6cv1k6nKZBxmvCG6b0E41jUqbTF42mWvOlQyzJ4 79aBzSKTDraTXUD2Ao5VADA6dfNmEcl1L+Daej6OYsh+kEDppeQQPxgFjSsX/M7g OxU0hP3LXJxOpNSXYNH/TbMsqKcr4LM= -----END CERTIFICATE-----Generated at Sun Sep 20 18:26:40 2026 by rpki-client