$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/7f02fce9-3961-3b18-8795-ab236c2e0478.roa File: 7f02fce9-3961-3b18-8795-ab236c2e0478.roa (raw, json) Hash identifier: QYARbX8N9ZNXWmek6H+B1CoYCuoKuiL3yb8kYb78ewA= Subject key identifier: 73:F6:E7:2F:75:96:13:40:C4:02:D9:A7:89:8A:38:71:FB:11:62:CC Certificate issuer: /CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1 Certificate serial: 010D0C9F4328584F374D1EEBC60DDB76237A1D00 Authority key identifier: C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/7f02fce9-3961-3b18-8795-ab236c2e0478.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 170.89.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:1e:eb:c6:0d:db:76:23:7a:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1 Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=3c426df4-dc0e-49b6-bedd-e63d6590ac57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e1:75:c9:f3:8f:59:98:da:2a:f3:f7:2d:89: 29:8e:fe:68:4a:39:9b:e9:19:a7:48:a4:30:66:ba: 8f:36:25:c4:ff:28:01:35:eb:1b:58:bb:31:3d:c8: 92:a3:05:bc:9c:5e:4a:57:37:ae:12:98:b1:91:73: 2b:3d:d9:4c:f5:8e:14:6d:83:c5:c1:2e:6b:83:ab: 39:dd:97:c6:02:3f:de:63:21:11:45:bb:8c:21:38: 90:6b:64:da:f2:3f:12:d3:08:8c:b9:af:00:cc:f8: 4e:0d:3d:f4:07:00:f0:42:c3:92:22:1b:92:7b:de: 38:c8:45:c5:f0:25:69:01:7a:25:7f:23:b0:f5:f7: 82:99:45:f5:eb:ad:de:50:ca:b4:79:bc:50:c7:7e: bf:e2:3b:70:18:5d:10:8f:3a:d1:78:d3:79:fe:2d: 4d:be:0c:68:69:b5:2c:74:e9:f5:f1:ab:11:02:3b: ff:ae:b8:e8:b5:f0:ca:e9:17:98:08:a7:35:de:4c: 44:e9:e6:60:36:24:d0:0e:7a:53:e4:a2:a7:74:dc: ef:aa:47:2c:4b:24:ee:93:5f:8d:81:db:f1:13:fc: 46:7d:41:b4:6f:b8:c3:f2:55:11:b9:c4:ba:42:f1: 3d:d5:05:2b:92:2d:b0:17:a6:1f:f3:ae:42:83:f2: e9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F6:E7:2F:75:96:13:40:C4:02:D9:A7:89:8A:38:71:FB:11:62:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/7f02fce9-3961-3b18-8795-ab236c2e0478.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl X509v3 Authority Key Identifier: keyid:C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer sbgp-ipAddrBlock: critical IPv4: 170.89.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:79:5c:38:ca:d4:34:38:d0:7e:a0:7b:73:73:89:4e:4a:8a: 8c:08:b1:bb:b9:0f:39:23:13:9e:e6:0e:ee:1d:71:93:36:9a: 18:b4:17:74:e7:e8:8c:f9:68:d8:09:f5:07:ff:2b:71:a4:20: c0:f8:89:88:a5:15:a3:da:37:a0:c0:fa:65:36:ef:26:74:47: 05:4b:09:7d:65:15:fd:7a:70:9c:58:4f:22:73:50:03:fc:bb: e7:2f:16:5a:49:06:c0:e5:c8:93:96:69:6a:6e:9a:8b:41:6c: 3e:94:d0:a2:76:a9:4c:a9:3f:6c:09:6c:ef:66:c7:87:09:60: 3d:62:67:5e:1b:30:76:93:2b:92:84:aa:86:2e:d9:fd:e2:f1: 89:10:27:74:80:b6:3f:1c:e7:1b:a4:34:c8:65:9a:94:3e:2b: 5b:fa:ad:00:a3:18:5f:f3:bb:73:30:8f:ff:f6:a7:3b:01:5e: bf:e8:44:5c:d1:17:a4:cf:bb:6f:e9:61:cf:1e:d7:e0:29:56: 47:8c:f1:59:40:c4:ae:59:0d:87:87:f1:c8:c2:f8:2d:c3:ba: 32:b8:c7:56:65:6b:2f:02:be:7d:10:d5:be:79:ed:4c:20:db: 98:ef:8f:7a:21:5e:af:dd:f7:14:85:89:9c:44:9d:3e:24:65: b0:50:12:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TR7rxg3bdiN6HQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmUzZmYxMGQtOWFjNS00NmE5LThlYjQtODIzMDI3NjA3 Y2ExMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk M2M0MjZkZjQtZGMwZS00OWI2LWJlZGQtZTYzZDY1OTBhYzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOF1yfOPWZjaKvP3LYkpjv5oSjmb6RmnSKQw ZrqPNiXE/ygBNesbWLsxPciSowW8nF5KVzeuEpixkXMrPdlM9Y4UbYPFwS5rg6s5 3ZfGAj/eYyERRbuMITiQa2Ta8j8S0wiMua8AzPhODT30BwDwQsOSIhuSe944yEXF 8CVpAXolfyOw9feCmUX1663eUMq0ebxQx36/4jtwGF0QjzrReNN5/i1NvgxoabUs dOn18asRAjv/rrjotfDK6ReYCKc13kxE6eZgNiTQDnpT5KKndNzvqkcsSyTuk1+N gdvxE/xGfUG0b7jD8lURucS6QvE91QUrki2wF6Yf865Cg/LpfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHP25y91lhNAxALZp4mKOHH7EWLMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZTNm ZjEwZC05YWM1LTQ2YTktOGViNC04MjMwMjc2MDdjYTEvN2YwMmZjZTktMzk2MS0z YjE4LTg3OTUtYWIyMzZjMmUwNDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmUzZmYxMGQtOWFjNS00NmE5LThl YjQtODIzMDI3NjA3Y2ExL2JlM2ZmMTBkLTlhYzUtNDZhOS04ZWI0LTgyMzAyNzYw N2NhMS5jcmwwHwYDVR0jBBgwFoAUxf1vzdJ0mgAFn0XVSeFHrl2VZcYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZTNmZjEwZC05YWM1LTQ2YTktOGViNC04MjMw Mjc2MDdjYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqlmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJ5XDjK1DQ40H6ge3NziU5KiowIsbu5DzkjE57mDu4dcZM2mhi0F3Tn 6Iz5aNgJ9Qf/K3GkIMD4iYilFaPaN6DA+mU27yZ0RwVLCX1lFf16cJxYTyJzUAP8 u+cvFlpJBsDlyJOWaWpumotBbD6U0KJ2qUypP2wJbO9mx4cJYD1iZ14bMHaTK5KE qoYu2f3i8YkQJ3SAtj8c5xukNMhlmpQ+K1v6rQCjGF/zu3Mwj//2pzsBXr/oRFzR F6TPu2/pYc8e1+ApVkeM8VlAxK5ZDYeH8cjC+C3DujK4x1Zlay8Cvn0Q1b557Uwg 25jvj3ohXq/d9xSFiZxEnT4kZbBQEsk= -----END CERTIFICATE-----Generated at Sun Oct 4 01:40:56 2026 by rpki-client