$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/01678d2f-e860-36d8-a956-cc14fe23a1b3.roa File: 01678d2f-e860-36d8-a956-cc14fe23a1b3.roa (raw, json) Hash identifier: HjJvVpwXxH6VEFDZ4q8qsZDcCy2Si7T3NRbpx8LgxHY= Subject key identifier: F8:2A:DA:D9:D5:2D:4C:E2:81:0A:59:1B:64:8F:4A:42:CB:FF:B1:DA Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4F97F21F67A925858B0900 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/01678d2f-e860-36d8-a956-cc14fe23a1b3.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 170.85.240.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:97:f2:1f:67:a9:25:85:8b:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=2e298b3f-bd85-4285-afb0-265c5fd558f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:37:37:c2:9a:c2:64:8c:0e:f0:ce:74:cd:fd: d5:a2:b0:26:f9:ef:90:b9:73:6d:8d:28:d2:9f:a1: 02:5b:d9:37:be:2a:2d:0f:53:40:ed:e6:e5:48:82: 03:ed:63:01:39:8d:d4:57:c3:77:d4:75:90:09:af: 1c:9a:07:44:96:d5:c4:14:0f:13:45:96:8b:c6:a6: 9d:25:81:b1:39:91:89:db:0d:46:e0:e4:1d:be:bc: f9:aa:f2:0b:a5:e3:9d:12:20:22:6b:c4:90:ed:a9: dc:52:02:1d:13:54:9c:40:23:6e:5a:26:29:ed:1b: 4d:cb:2c:d6:56:eb:17:86:31:93:a7:6a:4e:65:24: 23:e3:9a:fe:59:69:34:46:4f:00:04:0a:1a:c6:4f: 5e:92:a4:77:98:ef:84:a0:1d:37:ee:48:7d:ae:50: c8:ef:46:e5:35:82:fa:9a:de:86:59:5c:c4:bd:79: 48:86:3a:b8:2f:41:16:f9:a0:1b:30:8a:75:56:70: ad:3f:f0:45:99:2a:62:51:8f:9e:55:3b:66:0c:eb: bc:d3:1f:8a:0e:0c:ee:7a:f3:90:6c:4b:d5:85:80: d8:ed:3d:f3:3e:94:1d:2c:89:eb:39:e4:a3:7d:51: e8:27:bb:ff:2e:57:03:f8:22:c0:21:0d:22:4d:7e: 94:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:2A:DA:D9:D5:2D:4C:E2:81:0A:59:1B:64:8F:4A:42:CB:FF:B1:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/01678d2f-e860-36d8-a956-cc14fe23a1b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:8b:bd:2d:0e:42:f7:70:08:bd:bc:32:26:c1:b1:5e:87:5e: bd:07:36:e5:1a:bf:4f:18:6f:c9:76:9c:51:1a:dd:0f:4a:3f: 33:98:03:08:21:b0:25:79:7b:82:7a:dc:11:6d:a2:53:b2:e2: 8e:24:3a:d5:de:51:ce:6a:cc:f8:96:eb:82:04:5b:83:a5:87: a0:d5:ec:b0:b8:63:7f:65:df:dd:1f:6c:c0:48:72:f7:88:c7: 6c:ea:86:b6:ad:cb:f5:75:dd:f7:90:00:dd:db:b9:a3:bf:06: 02:21:b5:0d:b9:86:6c:e6:cd:9b:ff:50:c4:ee:c1:db:71:9a: 7c:41:89:68:be:89:e2:bf:14:be:0b:93:bc:fc:56:b1:9e:66: 46:74:43:be:17:31:a8:a8:bd:32:fc:6d:4c:de:27:c3:bb:88: 55:17:9b:65:ab:be:86:2f:88:a8:f2:9c:3d:93:b7:5f:4d:69: 89:14:b0:e9:65:a7:10:51:fe:09:8e:65:26:7f:3b:34:24:cc: 1f:01:4a:73:be:e1:99:fb:51:6d:39:63:b9:06:f7:20:d2:1a: 77:de:3b:82:58:f5:1a:95:7b:0b:e6:c3:48:df:d1:56:30:78: 39:2c:ee:c6:66:e1:70:b5:8b:36:26:23:c1:a4:5d:23:21:f3: 26:14:d0:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT5fyH2epJYWLCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk MmUyOThiM2YtYmQ4NS00Mjg1LWFmYjAtMjY1YzVmZDU1OGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjc3wprCZIwO8M50zf3VorAm+e+QuXNtjSjS n6ECW9k3viotD1NA7eblSIID7WMBOY3UV8N31HWQCa8cmgdEltXEFA8TRZaLxqad JYGxOZGJ2w1G4OQdvrz5qvILpeOdEiAia8SQ7ancUgIdE1ScQCNuWiYp7RtNyyzW VusXhjGTp2pOZSQj45r+WWk0Rk8ABAoaxk9ekqR3mO+EoB037kh9rlDI70blNYL6 mt6GWVzEvXlIhjq4L0EW+aAbMIp1VnCtP/BFmSpiUY+eVTtmDOu80x+KDgzuevOQ bEvVhYDY7T3zPpQdLInrOeSjfVHoJ7v/LlcD+CLAIQ0iTX6UYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPgq2tnVLUzigQpZG2SPSkLL/7HaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMDE2NzhkMmYtZTg2MC0z NmQ4LWE5NTYtY2MxNGZlMjNhMWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6LvS0OQvdwCL28MibBsV6HXr0HNuUav08Yb8l2nFEa3Q9KPzOYAwgh sCV5e4J63BFtolOy4o4kOtXeUc5qzPiW64IEW4Olh6DV7LC4Y39l390fbMBIcveI x2zqhraty/V13feQAN3buaO/BgIhtQ25hmzmzZv/UMTuwdtxmnxBiWi+ieK/FL4L k7z8VrGeZkZ0Q74XMaiovTL8bUzeJ8O7iFUXm2WrvoYviKjynD2Tt19NaYkUsOll pxBR/gmOZSZ/OzQkzB8BSnO+4Zn7UW05Y7kG9yDSGnfeO4JY9RqVewvmw0jf0VYw eDks7sZm4XC1izYmI8GkXSMh8yYU0GM= -----END CERTIFICATE-----Generated at Fri Apr 17 15:18:04 2026 by rpki-client