$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0fc43d48-4dde-3723-92d5-e2f8d9bbef6d.roa File: 0fc43d48-4dde-3723-92d5-e2f8d9bbef6d.roa (raw, json) Hash identifier: 2JFw7z3QYjZlxmoKj2y8OLe/dqdKZamEihfw+qHKx+o= Subject key identifier: C0:87:0B:40:4B:DD:1C:50:2B:63:B3:2A:5E:C6:FF:E9:B3:2A:04:4B Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4FA9B2822A84FA7B8C0670 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0fc43d48-4dde-3723-92d5-e2f8d9bbef6d.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 170.85.16.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:a9:b2:82:2a:84:fa:7b:8c:06:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=8de895ef-41bd-48a0-b2b9-9bf8141de47b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:21:78:38:5d:ba:ad:d6:5d:5a:f8:59:5d:02: 3a:48:97:bf:65:0c:05:9c:49:0e:fd:d2:87:5d:37: 9a:72:1d:a9:99:93:8f:58:a1:2d:27:3f:90:e7:16: dc:fc:bf:ff:1a:a8:03:dc:8b:79:fe:39:7f:c1:9b: 72:36:3c:9f:a0:54:b2:35:46:4e:ed:69:40:3b:e9: 0e:77:6c:c9:5d:38:53:0a:fc:0e:82:d5:f6:e1:83: 7a:17:92:e0:f9:91:16:8f:3a:9e:bc:e6:76:9e:61: 63:e0:2f:b8:4e:9c:53:d3:db:2b:78:b9:86:63:77: 3b:26:8a:c5:25:91:1a:d4:b1:e7:0f:6d:16:5b:33: 3c:0a:28:df:83:62:ae:f1:f4:38:c7:9a:f3:3b:86: 84:7c:ff:5d:1a:64:69:bf:ac:ef:34:a0:8f:f3:cd: 49:cf:33:57:a7:eb:a0:88:76:0f:19:28:9d:d8:0b: da:5a:38:f9:f1:3d:c6:ff:8c:fe:db:8d:b0:a2:cf: f5:a2:b8:b2:fc:7a:2f:77:57:30:f6:85:31:0f:b1: a1:cb:e3:b7:76:74:f3:83:ca:1b:f8:7e:96:05:1e: 6b:a2:fb:52:6e:3e:06:68:17:27:00:07:29:c4:2e: dc:89:75:76:4a:74:fd:91:79:cd:90:d5:bf:4d:f5: 4e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:87:0B:40:4B:DD:1C:50:2B:63:B3:2A:5E:C6:FF:E9:B3:2A:04:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0fc43d48-4dde-3723-92d5-e2f8d9bbef6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:b9:bc:25:07:9a:ff:a5:1f:a7:e2:30:14:0b:26:28:f9:b8: 51:a2:db:14:64:40:21:5b:e0:c0:7b:88:6b:d0:bd:3d:c7:fa: 74:3d:45:86:d1:2f:72:5f:37:e8:88:47:60:db:7c:2b:f9:34: af:81:62:4f:01:02:a8:c9:3d:5b:4c:be:c7:cb:64:23:bb:22: 3f:08:f8:4a:15:14:0e:53:c4:6b:bb:e7:cd:53:1b:bc:6d:6f: b0:41:9e:6f:70:45:b0:a8:f9:59:b1:1f:8e:6b:15:b9:62:e3: 7e:50:7f:e8:4a:aa:45:56:44:fa:c2:0f:14:22:6c:fb:13:45: 6a:2c:92:9c:9a:27:7a:a2:20:11:64:24:58:57:a6:6b:6a:bf: 06:82:ee:e4:2c:84:eb:ce:cb:ee:1e:96:f1:7c:ae:98:42:cb: 01:22:79:c7:ef:c0:b9:3c:84:f2:16:5d:a6:a0:c0:bc:32:f6: 1d:da:79:49:bd:47:79:60:ef:66:13:b5:2e:fc:e5:27:0c:f3: 28:3f:73:30:74:a9:5d:47:23:2c:52:87:c3:47:25:ec:1d:60: d8:47:41:d9:45:ea:32:70:41:0b:58:f4:9a:a1:2b:31:1a:41: 29:eb:72:ba:c5:84:55:96:6d:f3:27:66:0d:67:b4:a8:98:46: be:a8:d9:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT6mygiqE+nuMBnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk OGRlODk1ZWYtNDFiZC00OGEwLWIyYjktOWJmODE0MWRlNDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySF4OF26rdZdWvhZXQI6SJe/ZQwFnEkO/dKH XTeach2pmZOPWKEtJz+Q5xbc/L//GqgD3It5/jl/wZtyNjyfoFSyNUZO7WlAO+kO d2zJXThTCvwOgtX24YN6F5Lg+ZEWjzqevOZ2nmFj4C+4TpxT09sreLmGY3c7JorF JZEa1LHnD20WWzM8Cijfg2Ku8fQ4x5rzO4aEfP9dGmRpv6zvNKCP881JzzNXp+ug iHYPGSid2AvaWjj58T3G/4z+242wos/1oriy/Hovd1cw9oUxD7Ghy+O3dnTzg8ob +H6WBR5rovtSbj4GaBcnAAcpxC7ciXV2SnT9kXnNkNW/TfVObwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCHC0BL3RxQK2OzKl7G/+mzKgRLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMGZjNDNkNDgtNGRkZS0z NzIzLTkyZDUtZTJmOGQ5YmJlZjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI25vCUHmv+lH6fiMBQLJij5uFGi2xRkQCFb4MB7iGvQvT3H+nQ9RYbR L3JfN+iIR2DbfCv5NK+BYk8BAqjJPVtMvsfLZCO7Ij8I+EoVFA5TxGu7581TG7xt b7BBnm9wRbCo+VmxH45rFbli435Qf+hKqkVWRPrCDxQibPsTRWoskpyaJ3qiIBFk JFhXpmtqvwaC7uQshOvOy+4elvF8rphCywEiecfvwLk8hPIWXaagwLwy9h3aeUm9 R3lg72YTtS785ScM8yg/czB0qV1HIyxSh8NHJewdYNhHQdlF6jJwQQtY9JqhKzEa QSnrcrrFhFWWbfMnZg1ntKiYRr6o2d4= -----END CERTIFICATE-----Generated at Fri Apr 17 15:14:14 2026 by rpki-client