$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/1cf555ca-a9bd-3e9e-abbe-f242d720db3e.roa File: 1cf555ca-a9bd-3e9e-abbe-f242d720db3e.roa (raw, json) Hash identifier: oQbUSChGw7+kyqMA9v+/0jRcjusM+YKvP6ECEJLTx9k= Subject key identifier: CD:9F:94:BE:1F:35:B2:D7:69:E9:3C:82:E9:80:17:FC:57:C5:EC:01 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4FAD7327055091A96FDA00 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/1cf555ca-a9bd-3e9e-abbe-f242d720db3e.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 170.85.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:ad:73:27:05:50:91:a9:6f:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=b781e02b-f1c7-400f-97fe-b2b7ecd9caef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:32:95:24:4a:07:8b:c7:b2:b3:c7:5f:7e:05: 4d:f1:0d:eb:94:57:d0:e9:a3:c3:15:97:5f:13:c4: 04:2b:a0:41:f8:f5:9c:a3:36:c8:d5:6c:e5:9e:a9: b5:2d:7e:f3:ef:59:a6:07:e4:98:3d:f3:63:9e:d6: 60:55:d8:56:8b:ea:91:b7:73:72:b0:7c:a6:a1:a9: 70:4d:0a:b4:b0:81:ae:e1:37:7a:bd:04:c1:17:05: 8c:f8:46:b5:a9:4b:73:ca:f5:39:25:bf:17:e3:04: 47:ca:ae:e5:f5:d6:7a:36:02:2a:48:68:c9:fc:1c: 77:57:4c:d4:2e:ea:ea:f8:9b:66:25:fd:18:ff:f3: 19:84:89:e1:c2:a5:e4:de:4a:6e:40:75:77:4d:35: 10:4a:2a:3b:69:9b:cc:72:d2:3a:09:ab:8f:09:c2: 2e:7c:41:7d:db:ad:3b:c7:63:7c:3b:f8:7d:56:56: 9e:c7:03:b7:f4:37:ee:e5:13:a8:fd:f6:53:a5:70: d4:4d:df:20:a6:c9:56:c1:3e:23:04:2d:a3:d2:28: f6:95:e4:f3:e8:ac:2e:de:98:13:e2:4b:c7:e9:22: 22:1f:ed:b7:3a:44:71:b3:84:6f:03:d7:84:08:0d: 56:c2:c7:dd:46:38:b6:24:f9:86:f3:f1:c0:ce:08: 53:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:9F:94:BE:1F:35:B2:D7:69:E9:3C:82:E9:80:17:FC:57:C5:EC:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/1cf555ca-a9bd-3e9e-abbe-f242d720db3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:16:fb:33:82:b1:90:ef:03:cd:05:46:3c:b1:73:86:8e:58: f9:e1:c4:16:09:f3:a7:5d:01:24:4c:d4:0e:ff:14:c3:ea:2a: f4:98:bc:e0:86:e7:6b:39:03:2c:a7:fb:02:f6:cb:9c:ec:7c: e8:73:ce:19:96:64:01:6a:02:6e:00:da:a8:68:ac:c7:52:c8: 4c:4a:e3:41:44:2c:39:bc:fd:16:f5:5d:3d:65:68:7d:ff:8e: ef:ca:00:94:dd:f5:a3:82:3a:15:2e:13:be:fa:ca:4e:74:0a: c1:48:2c:5a:da:65:cf:70:7d:9e:44:34:8f:73:8b:6d:35:17: 9a:74:27:7b:58:39:1e:5a:ef:40:62:72:cb:ce:0a:eb:53:0c: ec:bc:4e:e8:9d:25:52:9e:39:ca:58:6b:e9:fe:fb:e5:79:ab: dd:c5:58:00:1d:ad:11:33:66:3e:6c:06:25:e4:96:4a:9b:48: 1c:71:dc:5f:f2:81:13:15:2c:58:74:d5:44:6e:e5:d5:e4:57: 6d:a6:e7:b2:1d:97:e0:0f:e9:48:7a:4b:1c:b6:9d:ee:ac:4e: ed:60:00:94:57:75:1c:63:7b:4f:e8:8e:f5:44:bc:24:15:1f: 1c:2f:a0:b4:de:2e:0a:29:46:8e:ba:08:64:d7:19:0a:5b:5e: 19:a5:4a:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT61zJwVQkalv2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk Yjc4MWUwMmItZjFjNy00MDBmLTk3ZmUtYjJiN2VjZDljYWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojKVJEoHi8eys8dffgVN8Q3rlFfQ6aPDFZdf E8QEK6BB+PWcozbI1Wzlnqm1LX7z71mmB+SYPfNjntZgVdhWi+qRt3NysHymoalw TQq0sIGu4Td6vQTBFwWM+Ea1qUtzyvU5Jb8X4wRHyq7l9dZ6NgIqSGjJ/Bx3V0zU Lurq+JtmJf0Y//MZhInhwqXk3kpuQHV3TTUQSio7aZvMctI6CauPCcIufEF92607 x2N8O/h9VlaexwO39Dfu5ROo/fZTpXDUTd8gpslWwT4jBC2j0ij2leTz6Kwu3pgT 4kvH6SIiH+23OkRxs4RvA9eECA1WwsfdRji2JPmG8/HAzghT6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2flL4fNbLXaek8gumAF/xXxewBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMWNmNTU1Y2EtYTliZC0z ZTllLWFiYmUtZjI0MmQ3MjBkYjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlWeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAW+zOCsZDvA80FRjyxc4aOWPnhxBYJ86ddASRM1A7/FMPqKvSYvOCG 52s5Ayyn+wL2y5zsfOhzzhmWZAFqAm4A2qhorMdSyExK40FELDm8/Rb1XT1laH3/ ju/KAJTd9aOCOhUuE776yk50CsFILFraZc9wfZ5ENI9zi201F5p0J3tYOR5a70Bi csvOCutTDOy8TuidJVKeOcpYa+n+++V5q93FWAAdrREzZj5sBiXklkqbSBxx3F/y gRMVLFh01URu5dXkV22m57Idl+AP6Uh6Sxy2ne6sTu1gAJRXdRxje0/ojvVEvCQV HxwvoLTeLgopRo66CGTXGQpbXhmlSj4= -----END CERTIFICATE-----Generated at Fri Apr 17 16:42:02 2026 by rpki-client