$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2888b7f7-bbc8-364a-b3bc-9b9efc19aad5.roa File: 2888b7f7-bbc8-364a-b3bc-9b9efc19aad5.roa (raw, json) Hash identifier: KgOIAuZCm6kPmf/8JFuS9BRmAo9jMS69WgybLEOMuNk= Subject key identifier: 98:9B:78:7D:F1:27:0B:B8:1B:53:C6:79:17:93:7A:58:39:42:B2:C7 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4FAA515CFCB7ECC4DA9E80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2888b7f7-bbc8-364a-b3bc-9b9efc19aad5.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 170.85.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:aa:51:5c:fc:b7:ec:c4:da:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=59db4289-6b68-436b-8ae0-e767a897fc2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:35:06:f3:86:23:b5:82:ac:42:2d:6d:06:a1: 4a:7f:66:3d:11:cc:d8:ed:20:ba:34:b5:92:81:a8: b0:cc:41:9e:2a:ac:91:25:c9:e4:fe:b5:68:d6:06: 31:e6:69:99:99:99:38:d3:5c:5a:ad:fe:be:61:ec: af:e6:30:1e:90:37:3b:c2:21:34:76:56:41:c7:b1: 4b:39:f7:42:00:b3:83:07:82:de:2d:aa:9d:ce:41: c0:f4:87:a6:1d:70:d3:fb:80:7b:73:de:fa:9c:89: 9f:40:67:76:ae:8d:c1:18:13:25:17:21:c0:1f:13: 68:b7:58:d5:34:01:08:c8:79:8a:86:74:3a:87:30: 11:55:2d:cf:1e:27:d6:06:a3:c8:b6:ef:63:1e:ac: ff:fa:1e:bc:04:de:90:a9:2b:14:26:d5:a1:06:db: f3:38:26:bd:31:56:e3:13:d0:e0:5f:88:8f:dc:bf: 3a:83:43:f8:59:4b:7d:21:e3:04:d9:8b:4c:be:11: 9a:ab:0b:e8:42:d2:53:8a:52:34:a7:bf:58:9f:d8: 30:30:1d:fd:a6:d5:49:8f:96:2b:3f:8f:65:f8:4b: 14:53:27:27:c8:14:ce:7d:9b:9e:d9:f0:3e:0f:5b: 06:5d:8f:14:c0:58:13:98:2f:5c:8c:fe:6b:7a:7b: b3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:9B:78:7D:F1:27:0B:B8:1B:53:C6:79:17:93:7A:58:39:42:B2:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2888b7f7-bbc8-364a-b3bc-9b9efc19aad5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:26:0f:86:20:bb:78:fc:4f:73:5e:5b:2f:03:37:92:22:12: 09:2e:99:a3:ea:1a:05:6e:56:09:9e:52:ed:85:60:c3:69:35: 49:3c:14:2c:e7:ae:2c:c7:79:1b:33:b6:cf:e9:be:8a:f5:7c: 7b:b9:90:c4:6c:4a:eb:1d:ec:1d:f7:e5:a7:0d:e8:a7:fa:62: 50:6e:41:21:d8:d6:4b:6e:93:1d:69:b7:a2:f4:6a:e9:9a:39: bf:55:3d:31:1c:9f:35:3c:f6:0a:d0:97:41:13:d8:76:e9:a3: 05:f4:a1:71:e5:e5:36:9e:b7:6a:69:16:24:ec:77:ad:ba:fd: 07:f3:75:67:e7:43:5e:88:8c:e3:8a:54:e6:e3:ba:78:36:ab: dc:37:b5:cc:e3:ea:ae:00:65:5a:df:50:68:c9:2e:4c:36:83: 4d:d0:09:4f:8a:90:bf:33:8e:d5:1c:5a:56:d5:33:cb:12:f3: d9:88:89:57:56:75:dc:9d:17:aa:c8:2f:1d:42:b7:c0:f0:5b: b3:23:e6:f0:d4:c6:7f:ab:1b:30:78:33:3b:88:b6:e3:a2:10: 75:a3:7a:6b:84:12:52:3b:e8:e1:46:60:3d:a7:4d:7e:62:22: 11:f3:96:d3:14:cd:64:b8:73:db:a7:71:c2:6f:5a:6f:c6:8e: 22:82:8a:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT6pRXPy37MTanoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk NTlkYjQyODktNmI2OC00MzZiLThhZTAtZTc2N2E4OTdmYzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDUG84YjtYKsQi1tBqFKf2Y9EczY7SC6NLWS gaiwzEGeKqyRJcnk/rVo1gYx5mmZmZk401xarf6+Yeyv5jAekDc7wiE0dlZBx7FL OfdCALODB4LeLaqdzkHA9IemHXDT+4B7c976nImfQGd2ro3BGBMlFyHAHxNot1jV NAEIyHmKhnQ6hzARVS3PHifWBqPItu9jHqz/+h68BN6QqSsUJtWhBtvzOCa9MVbj E9DgX4iP3L86g0P4WUt9IeME2YtMvhGaqwvoQtJTilI0p79Yn9gwMB39ptVJj5Yr P49l+EsUUycnyBTOfZue2fA+D1sGXY8UwFgTmC9cjP5renuzXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJibeH3xJwu4G1PGeReTelg5QrLHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMjg4OGI3ZjctYmJjOC0z NjRhLWIzYmMtOWI5ZWZjMTlhYWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlWsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsmD4Ygu3j8T3NeWy8DN5IiEgkumaPqGgVuVgmeUu2FYMNpNUk8FCzn rizHeRszts/pvor1fHu5kMRsSusd7B335acN6Kf6YlBuQSHY1ktukx1pt6L0auma Ob9VPTEcnzU89grQl0ET2HbpowX0oXHl5Taet2ppFiTsd626/QfzdWfnQ16IjOOK VObjung2q9w3tczj6q4AZVrfUGjJLkw2g03QCU+KkL8zjtUcWlbVM8sS89mIiVdW ddydF6rILx1Ct8DwW7Mj5vDUxn+rGzB4MzuItuOiEHWjemuEElI76OFGYD2nTX5i IhHzltMUzWS4c9unccJvWm/GjiKCisk= -----END CERTIFICATE-----Generated at Fri Apr 17 12:38:15 2026 by rpki-client