$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/31f5da74-d402-3ae8-adb9-4cb018b9aeb4.roa File: 31f5da74-d402-3ae8-adb9-4cb018b9aeb4.roa (raw, json) Hash identifier: p2wNrB3SR+qkAIiTrYsOMddqjsKS2OzhWkSfHD1Uzok= Subject key identifier: 43:2D:68:00:9D:B3:18:53:5E:C8:9B:74:48:94:3D:CF:AD:61:E2:53 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4F9F6C4308226BF6D53F00 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/31f5da74-d402-3ae8-adb9-4cb018b9aeb4.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 170.85.66.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:9f:6c:43:08:22:6b:f6:d5:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=b321cb07-e83b-40fc-b6f9-a852cdc4a96a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:73:62:a4:60:d3:df:67:19:00:ed:b7:08:b3: 05:c2:77:68:0b:bb:71:da:5f:e9:52:a8:72:57:79: f3:d2:67:d4:ed:3c:dc:48:1b:1d:61:c3:85:75:62: 1f:72:a2:55:9a:ae:58:bb:11:43:44:62:26:14:61: c8:fd:5c:e1:9d:2c:f0:9e:c9:9b:d8:47:54:d8:4a: 2e:8a:ef:b7:75:59:f5:68:ae:63:d2:00:ba:9c:9e: c7:cf:eb:74:9d:dc:a4:e2:d2:44:40:24:3f:cc:b1: c3:63:c2:64:05:21:46:34:bc:2d:9e:d4:f4:d3:c5: 96:d1:5f:5f:c3:ef:59:40:ce:07:48:81:a2:4e:12: eb:61:52:b8:5d:5c:c9:4d:60:40:e2:58:63:86:0c: 40:99:df:b0:d9:8c:5f:ff:a8:8d:f9:25:d9:41:b1: 56:cb:b6:83:f6:5b:01:f1:67:56:ee:33:0a:7a:0a: f4:a3:c4:93:10:a9:98:a6:4d:55:2c:cd:59:9e:18: 47:d6:b7:f7:74:18:e2:fd:d5:bd:36:45:d5:da:c4: 3a:8f:43:2e:32:db:3b:77:7e:36:55:b0:f4:e0:67: b4:30:48:9e:fd:3c:f4:39:b7:ba:2e:d4:f8:93:57: 11:e8:b3:81:e6:d4:7c:20:fb:57:12:49:db:3f:dc: b2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:2D:68:00:9D:B3:18:53:5E:C8:9B:74:48:94:3D:CF:AD:61:E2:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/31f5da74-d402-3ae8-adb9-4cb018b9aeb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:29:28:f1:3d:cd:e6:6f:0a:f4:e9:1f:1b:75:6a:70:09:3e: 36:68:f4:c8:be:ad:90:27:83:1e:1a:12:9f:a3:07:5e:92:10: 77:79:6e:98:51:54:7c:4c:37:12:94:c9:89:6b:a2:7e:0f:05: 80:74:30:70:c9:46:e1:83:04:52:4d:f8:f2:9b:12:09:ce:87: ef:15:43:9e:8a:87:91:ea:cd:96:a4:b5:61:fb:05:c0:b4:6c: 38:29:3e:c9:76:33:0b:df:43:b5:57:74:1b:ee:2f:56:03:7a: 6d:da:7b:1b:e2:2e:92:66:bd:6c:64:a7:88:30:60:da:04:56: 33:81:4b:02:69:a9:91:04:2f:03:c1:c4:84:ea:01:a8:91:2c: 9a:31:9b:b1:c0:e3:e6:7f:2f:d9:3f:79:13:24:6d:07:fa:cd: e5:d1:fc:d9:89:78:6e:87:13:cf:92:10:13:76:b0:13:df:7b: d9:58:b0:eb:9c:5f:0e:e8:e5:57:60:35:c6:e6:94:c3:d3:80: 34:b0:b4:9a:d7:ae:45:4d:4c:f0:31:d6:2b:d1:4f:65:d9:91: a0:9d:4d:8e:e8:58:de:b0:76:0c:4f:f1:f7:0c:17:89:31:b5: b0:de:cc:0d:8f:90:e7:b1:20:30:b1:91:22:2a:d0:ef:83:f0: e1:b2:d1:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT59sQwgia/bVPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk YjMyMWNiMDctZTgzYi00MGZjLWI2ZjktYTg1MmNkYzRhOTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13NipGDT32cZAO23CLMFwndoC7tx2l/pUqhy V3nz0mfU7TzcSBsdYcOFdWIfcqJVmq5YuxFDRGImFGHI/VzhnSzwnsmb2EdU2Eou iu+3dVn1aK5j0gC6nJ7Hz+t0ndyk4tJEQCQ/zLHDY8JkBSFGNLwtntT008WW0V9f w+9ZQM4HSIGiThLrYVK4XVzJTWBA4lhjhgxAmd+w2Yxf/6iN+SXZQbFWy7aD9lsB 8WdW7jMKegr0o8STEKmYpk1VLM1ZnhhH1rf3dBji/dW9NkXV2sQ6j0MuMts7d342 VbD04Ge0MEie/Tz0Obe6LtT4k1cR6LOB5tR8IPtXEknbP9yyRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMtaACdsxhTXsibdEiUPc+tYeJTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMzFmNWRhNzQtZDQwMi0z YWU4LWFkYjktNGNiMDE4YjlhZWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlVCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgpKPE9zeZvCvTpHxt1anAJPjZo9Mi+rZAngx4aEp+jB16SEHd5bphR VHxMNxKUyYlron4PBYB0MHDJRuGDBFJN+PKbEgnOh+8VQ56Kh5HqzZaktWH7BcC0 bDgpPsl2MwvfQ7VXdBvuL1YDem3aexviLpJmvWxkp4gwYNoEVjOBSwJpqZEELwPB xITqAaiRLJoxm7HA4+Z/L9k/eRMkbQf6zeXR/NmJeG6HE8+SEBN2sBPfe9lYsOuc Xw7o5VdgNcbmlMPTgDSwtJrXrkVNTPAx1ivRT2XZkaCdTY7oWN6wdgxP8fcMF4kx tbDezA2PkOexIDCxkSIq0O+D8OGy0Rs= -----END CERTIFICATE-----Generated at Fri Apr 17 12:41:29 2026 by rpki-client