$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/33e08937-4f17-30a4-a5e7-7341d6901d42.roa File: 33e08937-4f17-30a4-a5e7-7341d6901d42.roa (raw, json) Hash identifier: kzPiyYImlPmM6ZcrvdGPazfE91Y+JZVjpOXVbCIH9xc= Subject key identifier: 0F:74:B5:34:F6:60:75:B2:5B:88:C5:A4:F9:A1:46:35:06:42:C3:23 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4F9BA2F47109A5639A6D34 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/33e08937-4f17-30a4-a5e7-7341d6901d42.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 170.85.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:9b:a2:f4:71:09:a5:63:9a:6d:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=9000e5ef-9ae6-445a-a254-0736ddd6e19b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6b:6d:62:f5:a0:11:a8:f3:7c:9a:11:ff:f4: 2c:73:97:e8:5d:d3:52:ce:94:be:60:5e:dd:72:6d: 71:5b:34:d9:74:b9:c5:6d:2f:3d:e8:71:7c:c4:a8: 35:34:3a:2f:24:8e:5b:7e:1f:f4:9b:ea:67:ed:3f: 13:bc:ea:79:1e:b9:92:fa:d8:d8:d0:53:03:31:62: 82:d2:e5:87:a0:95:b4:3b:38:05:0f:02:03:40:7a: dd:57:dc:54:87:d7:46:55:04:1b:28:d5:dd:06:23: ee:1c:de:04:2e:77:de:2b:f1:70:5f:df:80:59:88: 37:83:57:c4:ad:86:42:b5:22:4c:92:73:be:a9:6b: 04:a5:66:7f:d7:e1:d7:57:73:1a:01:9d:dc:d7:a9: ca:9c:98:5d:79:2a:27:e0:2f:36:ba:9b:52:02:8c: c4:73:d2:91:4c:b5:97:c8:58:96:15:9f:7a:56:76: 9a:44:dd:13:f4:40:33:c8:65:b5:cf:c6:7b:e4:83: 51:d1:b0:07:5e:b7:2b:12:32:ac:73:71:ad:5f:66: ec:c0:e4:e7:97:99:25:98:ab:81:fb:c6:61:18:a3: 76:45:73:96:f2:7a:b0:57:36:94:23:26:0d:dd:65: 90:7d:f7:f5:32:39:eb:32:05:9d:89:50:33:9b:3c: 0a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:74:B5:34:F6:60:75:B2:5B:88:C5:A4:F9:A1:46:35:06:42:C3:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/33e08937-4f17-30a4-a5e7-7341d6901d42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:d5:58:35:6c:71:23:65:46:14:ee:4e:d9:2e:b0:ed:c9:b6: 42:8e:8b:f2:c5:fa:94:a3:e3:1e:03:ba:b9:1f:80:e3:4c:db: 01:01:d6:cc:a6:f0:c6:4b:fc:32:ff:e0:06:86:f6:bf:7f:73: bb:b3:18:03:c0:97:10:e2:c6:fc:ff:96:e9:16:df:11:2b:10: 72:9d:ce:76:b6:21:9a:eb:11:b1:7f:85:b4:99:9b:52:e7:b5: e3:f4:2d:58:7a:15:60:9b:e2:6e:1f:06:4a:40:70:ea:8c:06: cf:67:48:f7:7e:ea:6d:9b:4e:3d:00:db:ec:09:b0:90:48:94: 5b:37:8a:9c:03:2e:20:52:dc:2f:07:ad:82:0e:cb:7a:02:e7: fc:f5:0c:30:a5:66:b6:17:be:7a:5c:cc:0a:12:07:44:13:0b: 2d:68:7c:75:2a:8c:81:a2:8c:44:0a:7b:a8:11:28:22:6b:6a: 1c:c4:25:4c:ee:1b:40:87:f4:e1:36:dd:ba:a0:9a:e6:91:2b: 4f:3e:59:4c:98:c0:bb:20:7e:0a:67:6e:16:a2:9b:8b:81:02: a9:00:75:86:33:d1:e1:b1:b3:d9:64:49:1c:70:24:1d:ef:ce: 04:a5:3b:9d:98:4e:be:61:c6:22:51:04:96:a8:2d:8f:52:a6: 82:97:88:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT5ui9HEJpWOabTQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk OTAwMGU1ZWYtOWFlNi00NDVhLWEyNTQtMDczNmRkZDZlMTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmttYvWgEajzfJoR//Qsc5foXdNSzpS+YF7d cm1xWzTZdLnFbS896HF8xKg1NDovJI5bfh/0m+pn7T8TvOp5HrmS+tjY0FMDMWKC 0uWHoJW0OzgFDwIDQHrdV9xUh9dGVQQbKNXdBiPuHN4ELnfeK/FwX9+AWYg3g1fE rYZCtSJMknO+qWsEpWZ/1+HXV3MaAZ3c16nKnJhdeSon4C82uptSAozEc9KRTLWX yFiWFZ96VnaaRN0T9EAzyGW1z8Z75INR0bAHXrcrEjKsc3GtX2bswOTnl5klmKuB +8ZhGKN2RXOW8nqwVzaUIyYN3WWQfff1MjnrMgWdiVAzmzwKEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA90tTT2YHWyW4jFpPmhRjUGQsMjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMzNlMDg5MzctNGYxNy0z MGE0LWE1ZTctNzM0MWQ2OTAxZDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlVYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3VWDVscSNlRhTuTtkusO3JtkKOi/LF+pSj4x4DurkfgONM2wEB1sym 8MZL/DL/4AaG9r9/c7uzGAPAlxDixvz/lukW3xErEHKdzna2IZrrEbF/hbSZm1Ln teP0LVh6FWCb4m4fBkpAcOqMBs9nSPd+6m2bTj0A2+wJsJBIlFs3ipwDLiBS3C8H rYIOy3oC5/z1DDClZrYXvnpczAoSB0QTCy1ofHUqjIGijEQKe6gRKCJrahzEJUzu G0CH9OE23bqgmuaRK08+WUyYwLsgfgpnbhaim4uBAqkAdYYz0eGxs9lkSRxwJB3v zgSlO52YTr5hxiJRBJaoLY9SpoKXiPA= -----END CERTIFICATE-----Generated at Fri Apr 17 14:34:41 2026 by rpki-client