$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0d61c73f-5f3e-384e-a032-d147485deb5e.roa File: 0d61c73f-5f3e-384e-a032-d147485deb5e.roa (raw, json) Hash identifier: H0CLzyespMFlVmuA/ymm1lRprbOdCLYLLU2YywJdQwg= Subject key identifier: DA:8E:50:9E:0E:55:32:21:A0:E8:E7:A4:A0:B6:2B:A2:A8:62:24:31 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4F932F77EB12435EB49A80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0d61c73f-5f3e-384e-a032-d147485deb5e.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 170.85.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:93:2f:77:eb:12:43:5e:b4:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=da4945e7-99d4-455b-827d-33f12109d109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:39:38:98:fe:be:84:e3:ed:79:88:e8:0e:e5: d7:b2:87:16:48:23:28:56:1d:33:8f:89:fe:ea:18: 27:6b:e6:37:f5:e9:13:f5:bc:65:67:f1:7b:c7:ae: 96:2a:9d:74:25:d9:db:b1:82:28:ee:d0:85:84:59: 86:3b:eb:2b:4e:e2:49:b5:04:b5:60:0f:6d:b5:b6: b4:b3:e5:11:e2:7f:e8:2e:05:8c:e4:3b:00:61:5d: c0:8b:86:db:ae:35:a7:76:c0:cc:72:dc:98:f4:77: 3e:7a:ff:c7:a0:24:c3:ba:6d:39:60:6b:08:63:25: b1:4e:e0:70:db:92:99:72:19:c1:0e:b9:72:a6:de: 00:34:0f:6d:06:83:05:70:59:a5:cd:6f:79:df:73: 0d:7f:a1:21:30:f9:41:d0:19:dd:8a:6c:15:49:e0: bd:f3:d2:76:a9:34:4f:74:fe:d9:06:9a:5b:d5:76: 42:56:d5:1a:38:ec:33:a7:c3:0a:e7:77:7a:5c:2b: 16:0b:bc:98:1f:c3:50:88:63:02:e5:3d:94:10:9c: 18:aa:7f:e7:a3:df:98:a2:c0:04:78:c0:2c:0b:4b: 16:44:27:c4:6f:f1:1b:7d:b6:f1:2e:53:4f:0a:59: 80:d2:80:bb:b3:ae:b8:43:37:b1:24:07:c3:c1:3e: b8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:8E:50:9E:0E:55:32:21:A0:E8:E7:A4:A0:B6:2B:A2:A8:62:24:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0d61c73f-5f3e-384e-a032-d147485deb5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:0b:12:cb:9e:c4:d6:2a:8b:5b:02:04:01:b9:a5:56:0f:96: df:7f:a4:c3:cf:4f:8e:49:49:5d:da:51:96:66:86:09:fe:7e: 0b:ab:c1:fe:90:c3:b8:c9:ca:49:2d:c5:66:9d:cf:77:a0:85: 9d:e1:8b:58:65:1d:c3:6a:1a:81:82:eb:d5:d8:56:9e:9a:67: e4:e5:71:aa:a6:24:6b:f1:76:95:ee:ec:cd:e4:51:20:db:ec: 7a:46:bb:7c:d5:6c:0f:af:db:0f:7b:a0:13:e9:34:eb:89:bd: 99:a2:67:45:3f:a1:19:db:6b:c5:09:96:f6:c8:4a:57:47:fd: 0a:6e:f3:31:ba:c1:c9:8a:a1:36:cf:39:74:4b:96:60:e6:bb: 4c:64:a2:86:27:89:32:45:b4:3d:45:a5:ab:61:c8:c1:22:5a: ca:4f:64:d4:c4:35:ac:aa:f9:0c:9f:04:2e:8b:47:af:5f:ff: 3c:ad:98:38:cf:7a:cb:df:4b:e6:34:58:fe:5f:89:97:49:60: 37:b9:57:71:03:76:17:29:bc:a3:cd:b9:05:b5:05:e7:f9:8d: 21:44:ca:76:7e:b9:ec:27:2e:bd:a7:df:1d:87:df:8f:61:01: d9:33:3e:68:ba:2c:e8:3d:35:6f:03:6a:a2:cc:29:4a:4b:04: f6:e4:fc:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT5Mvd+sSQ160moAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk ZGE0OTQ1ZTctOTlkNC00NTViLTgyN2QtMzNmMTIxMDlkMTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDk4mP6+hOPteYjoDuXXsocWSCMoVh0zj4n+ 6hgna+Y39ekT9bxlZ/F7x66WKp10JdnbsYIo7tCFhFmGO+srTuJJtQS1YA9ttba0 s+UR4n/oLgWM5DsAYV3Ai4bbrjWndsDMctyY9Hc+ev/HoCTDum05YGsIYyWxTuBw 25KZchnBDrlypt4ANA9tBoMFcFmlzW9533MNf6EhMPlB0BndimwVSeC989J2qTRP dP7ZBppb1XZCVtUaOOwzp8MK53d6XCsWC7yYH8NQiGMC5T2UEJwYqn/no9+YosAE eMAsC0sWRCfEb/EbfbbxLlNPClmA0oC7s664QzexJAfDwT64GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqOUJ4OVTIhoOjnpKC2K6KoYiQxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMGQ2MWM3M2YtNWYzZS0z ODRlLWEwMzItZDE0NzQ4NWRlYjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlXyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMELEsuexNYqi1sCBAG5pVYPlt9/pMPPT45JSV3aUZZmhgn+fgurwf6Q w7jJykktxWadz3eghZ3hi1hlHcNqGoGC69XYVp6aZ+TlcaqmJGvxdpXu7M3kUSDb 7HpGu3zVbA+v2w97oBPpNOuJvZmiZ0U/oRnba8UJlvbISldH/Qpu8zG6wcmKoTbP OXRLlmDmu0xkooYniTJFtD1FpathyMEiWspPZNTENayq+QyfBC6LR69f/zytmDjP esvfS+Y0WP5fiZdJYDe5V3EDdhcpvKPNuQW1Bef5jSFEynZ+uewnLr2n3x2H349h AdkzPmi6LOg9NW8DaqLMKUpLBPbk/FE= -----END CERTIFICATE-----Generated at Fri Apr 17 13:57:46 2026 by rpki-client