$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/06f1afa8-cf6b-3ffb-8c49-179a495b8486.roa File: 06f1afa8-cf6b-3ffb-8c49-179a495b8486.roa (raw, json) Hash identifier: wROfyEqI0uH0FxWTAI+Vly7PBQp5vU4vG6Ro3ZSAxls= Subject key identifier: 0A:12:B6:12:78:7C:96:37:2B:3A:D9:59:6A:56:BA:0D:E4:B9:AD:35 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4F925245E1331E593F63C0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/06f1afa8-cf6b-3ffb-8c49-179a495b8486.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 170.85.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:92:52:45:e1:33:1e:59:3f:63:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=85d6e3e0-c51d-49cb-b490-e27cfbbc9454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ab:be:c7:ba:a0:0c:c7:81:b5:38:db:96:03: 01:7b:9c:94:04:e9:e2:95:b4:09:de:db:ac:c2:02: 18:ae:2b:31:2a:8b:e7:09:16:d3:31:90:9f:bd:3c: a7:c1:56:31:11:58:b2:5d:74:44:5b:db:4d:f8:d6: d2:1e:0b:25:24:0d:91:e6:8b:23:9a:a9:be:12:c4: 6a:68:82:ca:58:11:ff:00:85:7f:06:05:63:1e:08: 21:7f:a7:f6:65:29:5c:3a:da:d9:3d:d6:5f:8c:10: 0d:1f:be:20:7c:8f:5b:4a:52:7d:02:c5:eb:33:4b: 4e:33:bf:33:34:b3:76:53:70:13:0d:95:49:36:b9: 31:8c:cc:f2:01:3f:b6:51:b7:6e:b3:7b:c9:3e:53: bc:ed:83:bc:48:2e:ad:08:9b:42:d9:af:d0:aa:03: 0c:74:ba:14:79:ce:26:a0:40:7a:52:00:eb:71:b4: 11:e9:00:b6:b1:11:2b:0a:aa:1e:fd:45:76:84:bb: 7a:05:9e:37:23:c9:bf:a3:90:39:a8:f4:ef:d8:f5: 71:af:96:2f:96:07:ed:e3:46:20:c8:b8:a0:48:b6: dc:47:a9:88:5f:c3:a7:33:05:0c:36:77:65:c4:d6: 31:66:69:47:ce:96:c7:0c:09:f6:33:c7:29:66:26: 80:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:12:B6:12:78:7C:96:37:2B:3A:D9:59:6A:56:BA:0D:E4:B9:AD:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/06f1afa8-cf6b-3ffb-8c49-179a495b8486.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:fe:af:2c:6c:14:69:58:15:99:81:b9:a0:d7:e8:27:f8:03: 40:02:85:34:a5:4a:b8:dc:bb:77:da:72:fb:7e:01:85:d7:59: 11:1c:79:2a:97:fa:9c:04:54:91:41:63:12:5e:d2:61:ad:85: 70:2f:7c:61:74:09:7c:dc:82:11:e3:e6:0d:4f:3b:98:59:60: 9d:0b:6b:aa:f7:bf:f7:4e:4a:61:e6:5e:14:ad:58:9e:39:b9: 09:6a:32:f8:d0:7a:25:4b:37:c3:7d:eb:6d:8e:bd:ff:27:63: 34:06:96:59:4a:e6:0f:3a:38:2e:7f:33:1d:c7:0f:54:70:98: f9:18:20:98:41:91:d9:9c:a0:0b:7c:34:40:ea:13:46:6b:b7: 3d:7e:20:28:6b:c9:1b:a9:d1:2e:ae:b0:a0:35:86:bc:06:8e: 35:4b:a4:52:1c:e8:d9:3c:b7:83:ce:ba:5f:5e:8e:ac:a8:48: 30:74:d0:68:a6:e7:4a:7d:64:13:c5:bb:bf:56:84:2a:37:2f: 1c:f8:87:21:bc:34:60:74:03:c2:11:26:3e:25:5b:dc:f7:d7: ca:4e:50:d7:ba:a9:56:7f:e0:7f:14:b5:67:bd:71:22:d4:9b: ad:49:d4:7b:eb:a6:3c:9e:e0:ba:9c:d4:66:31:2d:62:59:93: e3:28:cf:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT5JSReEzHlk/Y8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk ODVkNmUzZTAtYzUxZC00OWNiLWI0OTAtZTI3Y2ZiYmM5NDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7au+x7qgDMeBtTjblgMBe5yUBOnilbQJ3tus wgIYrisxKovnCRbTMZCfvTynwVYxEViyXXREW9tN+NbSHgslJA2R5osjmqm+EsRq aILKWBH/AIV/BgVjHgghf6f2ZSlcOtrZPdZfjBANH74gfI9bSlJ9AsXrM0tOM78z NLN2U3ATDZVJNrkxjMzyAT+2Ubdus3vJPlO87YO8SC6tCJtC2a/QqgMMdLoUec4m oEB6UgDrcbQR6QC2sRErCqoe/UV2hLt6BZ43I8m/o5A5qPTv2PVxr5Yvlgft40Yg yLigSLbcR6mIX8OnMwUMNndlxNYxZmlHzpbHDAn2M8cpZiaAhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoSthJ4fJY3KzrZWWpWug3kua01MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMDZmMWFmYTgtY2Y2Yi0z ZmZiLThjNDktMTc5YTQ5NWI4NDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIn+ryxsFGlYFZmBuaDX6Cf4A0AChTSlSrjcu3facvt+AYXXWREceSqX +pwEVJFBYxJe0mGthXAvfGF0CXzcghHj5g1PO5hZYJ0La6r3v/dOSmHmXhStWJ45 uQlqMvjQeiVLN8N9622Ovf8nYzQGlllK5g86OC5/Mx3HD1RwmPkYIJhBkdmcoAt8 NEDqE0Zrtz1+IChryRup0S6usKA1hrwGjjVLpFIc6Nk8t4POul9ejqyoSDB00Gim 50p9ZBPFu79WhCo3Lxz4hyG8NGB0A8IRJj4lW9z318pOUNe6qVZ/4H8UtWe9cSLU m61J1Hvrpjye4Lqc1GYxLWJZk+Moz9M= -----END CERTIFICATE-----Generated at Fri Apr 17 14:43:28 2026 by rpki-client