$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/10a882d0-94d6-3201-ab8e-24440454a896.roa File: 10a882d0-94d6-3201-ab8e-24440454a896.roa (raw, json) Hash identifier: 3GRuJxeEMvyo13pZkGxVZy2Qcjt9ASoD+ssLAsTHuAE= Subject key identifier: 14:23:2F:A0:84:28:F0:D2:43:F4:20:64:77:1C:99:87:77:FC:79:43 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4FA40757465F52AB3CD980 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/10a882d0-94d6-3201-ab8e-24440454a896.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 170.85.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:a4:07:57:46:5f:52:ab:3c:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=477fdace-f9be-45e9-8737-940850b6e983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a3:2a:4d:71:51:60:95:b7:87:2e:dc:1b:43: c0:44:b9:8d:59:3f:7f:76:f4:2d:bc:c0:c8:83:c4: 7c:4a:8f:b8:6b:84:91:c9:ee:7d:a0:31:79:37:41: 1e:7e:9c:50:81:6a:f5:dc:8d:77:e0:a7:19:31:04: 00:cf:83:e5:19:d6:74:9a:a2:18:91:3c:2b:6d:c5: c3:de:08:3e:d0:25:d9:65:05:12:4c:8f:0b:04:9f: a6:2b:62:66:9b:6a:ce:59:cd:20:12:31:2a:c1:c9: 86:41:9d:72:1c:ce:8c:e3:6b:a8:b9:12:a7:24:7e: 09:75:e7:c3:90:5d:db:3a:57:3a:db:d7:51:64:37: 1a:0d:6f:ec:c6:ee:b4:8d:52:ee:ac:0b:f7:d4:18: 24:39:e1:d1:73:05:bb:04:a7:fd:ba:00:fb:c9:5c: 73:ba:02:f9:20:52:80:7e:ea:3e:60:c5:89:1b:1d: 8b:09:ef:39:90:00:9c:92:ef:63:97:88:26:29:2b: 0b:e5:e8:1a:da:53:40:3a:1b:b1:69:a4:32:58:ee: 78:12:b5:bd:e8:b4:3c:5c:23:dd:44:6d:bc:12:9e: 8f:45:8d:f2:ca:d6:81:27:14:a1:da:ab:a0:0e:d7: 38:0e:1c:19:10:70:16:b0:29:9a:3a:83:ed:0b:93: 30:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:23:2F:A0:84:28:F0:D2:43:F4:20:64:77:1C:99:87:77:FC:79:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/10a882d0-94d6-3201-ab8e-24440454a896.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:a5:af:39:1e:5e:9a:9f:f0:1f:9c:36:f5:a4:c1:9a:22:bf: 25:63:1b:48:56:c5:af:8c:ed:a9:d4:60:ef:7b:f6:88:71:ae: 5d:57:d9:1c:aa:a6:9b:ec:ea:2a:bc:b2:32:54:63:bc:13:89: 3f:ae:3d:db:f3:11:e2:01:37:52:e8:75:2f:e7:ec:a7:44:cd: 55:25:92:60:46:66:45:19:0d:e2:29:69:f9:d6:a5:90:a0:98: 09:91:dd:eb:c6:fb:21:ec:f2:16:5b:c3:8f:8b:56:6b:76:f2: cb:c1:80:e7:6b:18:7d:21:16:6b:99:50:3a:e3:b5:4c:c2:13: c8:a0:84:59:2b:11:38:9e:bd:59:8f:23:cf:c9:d3:04:c3:0f: 18:6a:b7:65:f5:c6:d9:2f:b6:53:10:84:53:26:0d:31:2c:08: 1e:8c:f5:e1:46:63:d5:bb:a2:ff:63:46:7f:33:6f:84:fa:2f: 7e:99:dd:aa:2d:79:91:f6:43:7b:80:26:62:01:d9:cf:64:39: 34:34:bc:d4:92:5b:25:12:f4:35:64:e9:62:62:f8:67:9c:44: e3:59:b8:ea:4d:b2:95:43:d7:2d:0e:74:e1:bf:d3:9b:21:ab: df:e5:7d:76:ee:53:ad:cd:7d:f8:9a:3d:03:5b:85:67:65:77: 92:64:40:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT6QHV0ZfUqs82YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk NDc3ZmRhY2UtZjliZS00NWU5LTg3MzctOTQwODUwYjZlOTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqMqTXFRYJW3hy7cG0PARLmNWT9/dvQtvMDI g8R8So+4a4SRye59oDF5N0EefpxQgWr13I134KcZMQQAz4PlGdZ0mqIYkTwrbcXD 3gg+0CXZZQUSTI8LBJ+mK2Jmm2rOWc0gEjEqwcmGQZ1yHM6M42uouRKnJH4JdefD kF3bOlc629dRZDcaDW/sxu60jVLurAv31BgkOeHRcwW7BKf9ugD7yVxzugL5IFKA fuo+YMWJGx2LCe85kACcku9jl4gmKSsL5ega2lNAOhuxaaQyWO54ErW96LQ8XCPd RG28Ep6PRY3yytaBJxSh2qugDtc4DhwZEHAWsCmaOoPtC5Mw3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQjL6CEKPDSQ/QgZHccmYd3/HlDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMTBhODgyZDAtOTRkNi0z MjAxLWFiOGUtMjQ0NDA0NTRhODk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlVEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOlrzkeXpqf8B+cNvWkwZoivyVjG0hWxa+M7anUYO979ohxrl1X2Ryq ppvs6iq8sjJUY7wTiT+uPdvzEeIBN1LodS/n7KdEzVUlkmBGZkUZDeIpafnWpZCg mAmR3evG+yHs8hZbw4+LVmt28svBgOdrGH0hFmuZUDrjtUzCE8ighFkrETievVmP I8/J0wTDDxhqt2X1xtkvtlMQhFMmDTEsCB6M9eFGY9W7ov9jRn8zb4T6L36Z3aot eZH2Q3uAJmIB2c9kOTQ0vNSSWyUS9DVk6WJi+GecRONZuOpNspVD1y0OdOG/05sh q9/lfXbuU63NffiaPQNbhWdld5JkQOQ= -----END CERTIFICATE-----Generated at Fri Apr 17 17:18:49 2026 by rpki-client