$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2c9902ef-6d33-3e34-ae3f-43b7a02c1a09.roa File: 2c9902ef-6d33-3e34-ae3f-43b7a02c1a09.roa (raw, json) Hash identifier: 1BJCmn5FSA36k6bGUFmf2qiLWD9seBa3LUy4ugaPu8A= Subject key identifier: E2:EF:C7:3F:7E:89:D6:E9:7B:18:8E:1A:4A:51:0E:0D:CB:75:FC:7C Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584CAE5723D6D5A5A747BCBD71C0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2c9902ef-6d33-3e34-ae3f-43b7a02c1a09.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 16509 IP address blocks: 170.85.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:23:d6:d5:a5:a7:47:bc:bd:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=699fc66b-ac6b-407e-a691-779b66a69f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cf:4e:5a:21:96:00:b3:08:3d:d9:67:2b:e6: 9b:ad:74:59:51:e0:95:12:cc:1f:d1:6f:41:36:3e: 3e:71:03:8b:93:44:0d:0a:54:c9:71:ae:91:6e:7d: 54:88:3f:04:c4:e1:07:f3:fd:c2:ad:5a:8b:ca:00: 79:11:f5:0c:d7:00:e3:7c:a2:b7:32:20:03:08:b4: 1f:36:fb:59:ca:c1:3d:c7:24:e9:0e:47:68:65:8f: 4f:09:83:97:79:4f:c9:2c:5d:70:87:8f:fa:eb:4c: 84:a5:39:86:4f:19:e3:89:53:27:b4:07:48:0d:f3: e4:04:a5:0b:18:96:c0:60:19:6d:04:d7:ac:4d:bc: 63:b6:1b:27:d6:62:4f:c0:36:4e:66:80:a4:e7:8f: b7:86:1e:73:c8:31:9e:2a:b1:e2:23:6d:a1:9c:e6: cb:ab:12:2b:d9:1b:59:af:f9:ba:c0:4c:0c:ec:45: 67:b0:7c:a8:c2:7b:f1:45:5f:89:d6:65:f5:43:b0: 36:12:4f:1a:14:9b:e7:68:8e:85:e0:10:ae:42:76: 40:15:a6:af:fa:4a:e7:ca:dc:0a:a8:c9:b6:93:d3: d6:86:53:79:89:8a:5a:09:31:5c:3a:d8:8e:c4:06: 66:36:b6:43:42:6d:95:1b:37:79:70:d0:03:f2:5c: f3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:EF:C7:3F:7E:89:D6:E9:7B:18:8E:1A:4A:51:0E:0D:CB:75:FC:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2c9902ef-6d33-3e34-ae3f-43b7a02c1a09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:fc:67:83:e0:10:82:74:3c:67:2e:a4:9b:d2:63:82:7b:2e: 8e:e2:ae:10:7c:b1:be:5f:65:77:06:a3:d0:12:f5:ed:bc:29: f0:50:6f:13:df:be:b0:a4:60:87:e9:7b:b8:af:20:11:e0:1b: c5:2a:db:87:fe:48:f4:90:4d:52:1f:42:0a:1a:de:43:6b:12: 41:81:96:26:cb:4d:75:36:7f:b9:14:f7:ca:96:fa:c3:38:01: f7:e8:1d:6b:ea:52:0b:a8:23:5d:f5:07:f7:9d:01:95:35:c3: a2:fa:ce:be:7a:08:63:7e:e0:6e:81:31:03:74:94:ee:ef:ff: 53:07:cd:13:f8:85:b7:7b:7a:fd:a6:6b:98:e4:9f:fc:07:42: a5:f9:e4:eb:e2:d5:23:a0:5a:a8:3e:9d:99:55:6b:fd:fa:d2: 89:19:22:d7:5c:5b:e6:1a:63:7f:5d:d7:b2:24:10:e9:d7:b7: 06:52:be:4f:f3:39:5f:6f:88:0b:31:66:aa:cb:5c:ed:10:24: 18:84:13:f8:41:83:32:cf:62:8f:01:b7:67:70:3d:02:67:e3: de:a4:0e:e5:82:28:11:9a:d0:30:d2:9b:0c:0a:31:7a:b8:df: 92:1d:ab:d5:1a:c4:ff:6b:31:ec:99:00:81:ac:ce:01:58:5f: da:9d:a2:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVyPW1aWnR7y9ccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk Njk5ZmM2NmItYWM2Yi00MDdlLWE2OTEtNzc5YjY2YTY5ZjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc9OWiGWALMIPdlnK+abrXRZUeCVEswf0W9B Nj4+cQOLk0QNClTJca6Rbn1UiD8ExOEH8/3CrVqLygB5EfUM1wDjfKK3MiADCLQf NvtZysE9xyTpDkdoZY9PCYOXeU/JLF1wh4/660yEpTmGTxnjiVMntAdIDfPkBKUL GJbAYBltBNesTbxjthsn1mJPwDZOZoCk54+3hh5zyDGeKrHiI22hnObLqxIr2RtZ r/m6wEwM7EVnsHyownvxRV+J1mX1Q7A2Ek8aFJvnaI6F4BCuQnZAFaav+krnytwK qMm2k9PWhlN5iYpaCTFcOtiOxAZmNrZDQm2VGzd5cNAD8lzzJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLvxz9+idbpexiOGkpRDg3Ldfx8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMmM5OTAyZWYtNmQzMy0z ZTM0LWFlM2YtNDNiN2EwMmMxYTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlU1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACL8Z4PgEIJ0PGcupJvSY4J7Lo7irhB8sb5fZXcGo9AS9e28KfBQbxPf vrCkYIfpe7ivIBHgG8Uq24f+SPSQTVIfQgoa3kNrEkGBlibLTXU2f7kU98qW+sM4 AffoHWvqUguoI131B/edAZU1w6L6zr56CGN+4G6BMQN0lO7v/1MHzRP4hbd7ev2m a5jkn/wHQqX55Ovi1SOgWqg+nZlVa/360okZItdcW+YaY39d17IkEOnXtwZSvk/z OV9viAsxZqrLXO0QJBiEE/hBgzLPYo8Bt2dwPQJn496kDuWCKBGa0DDSmwwKMXq4 35Idq9UaxP9rMeyZAIGszgFYX9qdoqs= -----END CERTIFICATE-----Generated at Mon Mar 2 06:21:18 2026 by rpki-client