$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/86d2125a-8d57-3d4a-913f-a10e84f8dbae.roa File: 86d2125a-8d57-3d4a-913f-a10e84f8dbae.roa (raw, json) Hash identifier: PTTwV5IhKo5bSSxy0MkzOysdHG0GKhJPXHOUvmJ3BH0= Subject key identifier: 9E:AF:C3:A3:BD:EC:21:DB:43:E4:3F:97:C1:13:7B:22:98:88:1F:CD Certificate issuer: /CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1 Certificate serial: 010D0C9F4328584F374D1B767D496BC2AE5E70A0 Authority key identifier: C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/86d2125a-8d57-3d4a-913f-a10e84f8dbae.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 23241 IP address blocks: 170.89.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:1b:76:7d:49:6b:c2:ae:5e:70:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1 Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=b01951fe-f5b7-434c-b52f-28bc5f82aca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bd:9f:51:68:38:82:cf:10:33:5f:b2:a1:94: d8:87:9f:46:04:65:6f:bc:64:14:b9:ba:c8:81:8c: 78:42:cf:a7:92:ff:88:11:13:ed:69:84:fe:66:af: 8a:2c:b5:17:9e:91:7e:39:d4:6e:b1:5c:ee:66:00: 46:44:73:3b:8f:ac:05:f4:9f:fb:f6:d4:5c:6a:37: 88:53:52:7b:a5:b2:31:e4:f4:67:a5:0c:58:a1:b5: 3a:f7:4e:73:7d:7c:52:7d:38:df:12:ee:74:f9:90: b3:63:8c:2a:16:22:38:7f:5a:b0:8f:47:b5:66:b2: bd:8f:c9:ea:aa:65:df:3f:88:eb:17:92:6c:66:82: 61:e9:aa:08:a6:b9:7e:e5:ca:76:c7:b9:72:be:04: 81:15:0f:47:00:4d:5d:fd:13:c3:90:09:cf:49:5c: 34:a9:35:14:24:5b:fc:79:ab:2d:0e:be:69:b6:f2: 66:48:23:cc:81:37:4b:1a:74:38:87:b7:b1:cb:5c: 50:d9:22:2e:6c:c9:23:1c:1c:66:4c:6a:f6:e8:c6: 2f:1a:3c:71:d0:4f:29:0c:18:6d:01:3f:ce:59:f2: 09:18:47:cb:9b:eb:36:39:9f:96:23:8b:79:6d:9e: 0a:37:42:d8:f8:32:11:f9:94:93:94:5e:25:36:75: 4e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:AF:C3:A3:BD:EC:21:DB:43:E4:3F:97:C1:13:7B:22:98:88:1F:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/86d2125a-8d57-3d4a-913f-a10e84f8dbae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl X509v3 Authority Key Identifier: keyid:C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer sbgp-ipAddrBlock: critical IPv4: 170.89.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:7e:67:b1:95:b0:ad:05:57:37:15:fc:ac:36:d1:8c:52:62: 66:5a:fa:0c:78:b9:fd:83:21:0f:06:b9:9a:a9:24:63:26:25: c6:53:a5:38:4d:82:1b:a6:51:23:e4:2d:77:99:19:ec:60:aa: d2:c3:09:e2:2e:13:de:63:dc:58:66:e5:b0:e1:87:bd:b8:9b: 71:6b:de:f6:78:ff:01:65:ac:55:f9:c3:30:da:a3:fa:03:9f: f9:65:4e:cf:49:38:c4:a9:97:fc:89:22:75:f5:81:3d:62:7f: a2:e9:3d:dc:c5:b2:27:d9:7a:68:74:6a:c8:4e:c3:77:4a:da: 50:3c:16:f7:1e:38:10:c4:0e:4c:8c:5b:81:0c:a6:79:66:67: 2f:e3:8a:55:67:8e:99:9d:91:fa:ee:9a:60:5a:e6:5d:0d:af: 71:fc:36:c9:14:e1:91:9b:20:1e:18:10:91:8a:9d:6d:bd:22: 48:70:a2:6b:7e:63:92:cf:c5:19:dd:b6:de:1c:5f:b5:c3:43: bb:04:81:82:fc:a6:65:e1:9d:f1:8f:62:be:8f:5f:79:73:25: f3:1d:86:8e:5a:e8:26:c2:e8:02:18:2c:38:ac:ef:bf:1e:68: 6a:72:56:4a:57:9f:db:c1:44:97:83:cf:d0:29:fc:3a:1e:b4: 1f:5c:ac:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TRt2fUlrwq5ecKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmUzZmYxMGQtOWFjNS00NmE5LThlYjQtODIzMDI3NjA3 Y2ExMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk YjAxOTUxZmUtZjViNy00MzRjLWI1MmYtMjhiYzVmODJhY2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyL2fUWg4gs8QM1+yoZTYh59GBGVvvGQUubrI gYx4Qs+nkv+IERPtaYT+Zq+KLLUXnpF+OdRusVzuZgBGRHM7j6wF9J/79tRcajeI U1J7pbIx5PRnpQxYobU6905zfXxSfTjfEu50+ZCzY4wqFiI4f1qwj0e1ZrK9j8nq qmXfP4jrF5JsZoJh6aoIprl+5cp2x7lyvgSBFQ9HAE1d/RPDkAnPSVw0qTUUJFv8 eastDr5ptvJmSCPMgTdLGnQ4h7exy1xQ2SIubMkjHBxmTGr26MYvGjxx0E8pDBht AT/OWfIJGEfLm+s2OZ+WI4t5bZ4KN0LY+DIR+ZSTlF4lNnVO9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6vw6O97CHbQ+Q/l8ETeyKYiB/NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZTNm ZjEwZC05YWM1LTQ2YTktOGViNC04MjMwMjc2MDdjYTEvODZkMjEyNWEtOGQ1Ny0z ZDRhLTkxM2YtYTEwZTg0ZjhkYmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmUzZmYxMGQtOWFjNS00NmE5LThl YjQtODIzMDI3NjA3Y2ExL2JlM2ZmMTBkLTlhYzUtNDZhOS04ZWI0LTgyMzAyNzYw N2NhMS5jcmwwHwYDVR0jBBgwFoAUxf1vzdJ0mgAFn0XVSeFHrl2VZcYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZTNmZjEwZC05YWM1LTQ2YTktOGViNC04MjMw Mjc2MDdjYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqlkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM9+Z7GVsK0FVzcV/Kw20YxSYmZa+gx4uf2DIQ8GuZqpJGMmJcZTpThN ghumUSPkLXeZGexgqtLDCeIuE95j3Fhm5bDhh724m3Fr3vZ4/wFlrFX5wzDao/oD n/llTs9JOMSpl/yJInX1gT1if6LpPdzFsifZemh0ashOw3dK2lA8FvceOBDEDkyM W4EMpnlmZy/jilVnjpmdkfrummBa5l0Nr3H8NskU4ZGbIB4YEJGKnW29Ikhwomt+ Y5LPxRndtt4cX7XDQ7sEgYL8pmXhnfGPYr6PX3lzJfMdho5a6CbC6AIYLDis778e aGpyVkpXn9vBRJeDz9Ap/DoetB9crIg= -----END CERTIFICATE-----Generated at Sat Sep 26 16:02:10 2026 by rpki-client