$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/20a9c2ec-ef67-3c02-84d8-6b0a1c551418.roa File: 20a9c2ec-ef67-3c02-84d8-6b0a1c551418.roa (raw, json) Hash identifier: cjuwB7FlEv7paquKL8U4nJC1VS/skR0jLCd9vUFOJ/c= Subject key identifier: 2F:6C:AB:32:76:A7:5B:29:8D:3A:05:CA:80:2C:5D:C8:11:C7:7B:16 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4FA3D34B7D4BFE909AAF80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/20a9c2ec-ef67-3c02-84d8-6b0a1c551418.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 170.85.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:a3:d3:4b:7d:4b:fe:90:9a:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=e42c7328-958c-4039-a922-1b1c5f88ab24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:2e:c0:17:d0:4f:ec:e2:6b:55:15:e9:e5:68: f4:a7:07:dc:15:77:ac:ec:92:0b:f7:6f:1c:22:5b: 82:23:5e:67:cd:5e:ec:ef:d0:b6:52:22:88:a4:b3: 69:b9:5d:a0:32:17:60:66:96:a3:9b:2d:6c:b4:fa: 08:94:86:2f:3f:e0:06:96:36:81:57:01:88:69:13: cf:35:df:93:89:5a:50:1f:f3:9f:50:97:4d:b0:02: 76:7b:77:3c:33:5d:21:1f:ee:46:08:20:b5:45:bb: dd:93:31:11:3b:03:38:39:e9:cc:e5:8b:3e:45:14: 28:ff:d9:28:7d:3d:f7:fb:88:ba:90:05:aa:b0:20: 16:e3:43:eb:f0:ef:b7:00:a1:3c:e3:8e:85:67:3f: 4b:d3:af:83:ce:a1:37:8b:9b:6c:7b:34:7c:74:f9: ca:20:c0:52:ed:f1:e3:02:7b:3b:5c:61:f7:e9:09: 8e:d4:53:f4:41:4c:59:2e:32:c8:b0:04:ac:f7:9d: 5e:db:f1:19:97:41:b5:ba:c1:74:93:cc:a8:a8:a2: c3:09:48:8c:dc:8b:06:d8:8b:cf:89:af:5e:72:89: 98:fe:cf:81:75:6d:30:e9:6c:4e:a5:d8:6c:0c:ea: d0:09:57:d2:36:00:85:34:39:2b:2f:63:4f:de:f9: 6f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:6C:AB:32:76:A7:5B:29:8D:3A:05:CA:80:2C:5D:C8:11:C7:7B:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/20a9c2ec-ef67-3c02-84d8-6b0a1c551418.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:06:93:5a:45:31:5f:e7:5f:f3:f2:fc:2a:19:2e:86:6b:da: 64:1b:23:09:82:a5:9c:a8:ad:9a:88:0c:c5:08:ec:54:dc:de: 40:2f:23:1e:0c:7d:3a:ff:91:02:72:90:f6:90:dd:df:c4:18: d4:9f:ff:84:ce:c8:8b:44:d8:29:f0:29:f5:73:31:78:9b:9a: dd:f0:7a:84:08:0c:0f:74:48:88:5a:ac:4d:ab:69:19:72:cd: 7b:4d:0c:80:6a:a1:05:20:f6:15:f9:8e:89:ae:e3:e7:6a:59: 47:db:6d:d8:20:0a:6e:cb:a5:00:e8:0b:da:28:2f:73:c3:90: 8c:7b:88:4e:35:f9:33:b4:e0:23:c2:f7:61:0d:06:5b:07:e4: 64:3f:31:ae:66:0a:58:f2:b9:0f:ec:6f:ec:a6:d8:58:a6:d2: 66:ac:24:b0:44:6e:cc:0a:6e:f9:2c:8b:82:e8:84:ab:1c:a7: 1e:35:18:31:61:88:e9:68:06:9f:4f:ea:10:13:5c:f1:a3:ac: 44:40:8d:3c:8a:4f:19:1c:3c:6e:a0:d0:7a:f2:fa:07:c2:04: 54:77:5f:1c:30:b2:f5:54:96:97:af:39:76:8a:30:7a:19:27: 59:b0:80:cd:8b:72:a9:02:ef:ee:fc:e9:19:e6:e0:1d:ed:94: e6:6d:22:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT6PTS31L/pCar4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk ZTQyYzczMjgtOTU4Yy00MDM5LWE5MjItMWIxYzVmODhhYjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6y7AF9BP7OJrVRXp5Wj0pwfcFXes7JIL928c IluCI15nzV7s79C2UiKIpLNpuV2gMhdgZpajmy1stPoIlIYvP+AGljaBVwGIaRPP Nd+TiVpQH/OfUJdNsAJ2e3c8M10hH+5GCCC1RbvdkzEROwM4OenM5Ys+RRQo/9ko fT33+4i6kAWqsCAW40Pr8O+3AKE8446FZz9L06+DzqE3i5tsezR8dPnKIMBS7fHj Ans7XGH36QmO1FP0QUxZLjLIsASs951e2/EZl0G1usF0k8yoqKLDCUiM3IsG2IvP ia9ecomY/s+BdW0w6WxOpdhsDOrQCVfSNgCFNDkrL2NP3vlvSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9sqzJ2p1spjToFyoAsXcgRx3sWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMjBhOWMyZWMtZWY2Ny0z YzAyLTg0ZDgtNmIwYTFjNTUxNDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlVoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKcGk1pFMV/nX/Py/CoZLoZr2mQbIwmCpZyorZqIDMUI7FTc3kAvIx4M fTr/kQJykPaQ3d/EGNSf/4TOyItE2CnwKfVzMXibmt3weoQIDA90SIharE2raRly zXtNDIBqoQUg9hX5jomu4+dqWUfbbdggCm7LpQDoC9ooL3PDkIx7iE41+TO04CPC 92ENBlsH5GQ/Ma5mCljyuQ/sb+ym2Fim0masJLBEbswKbvksi4LohKscpx41GDFh iOloBp9P6hATXPGjrERAjTyKTxkcPG6g0Hry+gfCBFR3XxwwsvVUlpevOXaKMHoZ J1mwgM2LcqkC7+786Rnm4B3tlOZtIlE= -----END CERTIFICATE-----Generated at Fri Apr 17 22:44:44 2026 by rpki-client