$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3a1dad2c-2d3a-3061-9575-faf007fac428.roa File: 3a1dad2c-2d3a-3061-9575-faf007fac428.roa (raw, json) Hash identifier: yQlo+aORJQqkUSfOHVsJbTnfd+dvRWhh82vUlI2vul8= Subject key identifier: B1:BA:BD:F0:29:EF:75:A7:EE:C1:8B:DA:D5:32:B0:0D:C7:FA:D1:50 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4FA940AC2D4DBF56F6B460 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3a1dad2c-2d3a-3061-9575-faf007fac428.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 170.85.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:a9:40:ac:2d:4d:bf:56:f6:b4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=7cf148e6-42fa-483e-b40e-5c4e55d133b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:95:62:11:bf:b4:74:4d:67:a4:d5:c1:cc:fc: 8c:b9:62:bf:ac:c1:ac:6a:54:62:13:d3:d9:a0:e5: 01:c1:cb:9a:fa:b7:f2:98:51:17:6a:87:fd:29:59: 81:7c:1e:c2:d6:ad:cf:3a:ef:b0:04:07:d8:0b:29: c9:8f:2f:14:51:8b:9d:c8:eb:04:fa:a7:38:84:1e: 11:b9:1a:8e:1d:70:b8:a6:eb:1c:9c:08:d0:1a:b9: c3:2d:f0:df:79:ce:3b:d5:6b:80:7a:ef:a6:77:b0: d2:6a:84:14:32:72:f8:f7:34:01:87:12:e9:24:57: 94:f1:f6:f2:5b:f0:4c:12:4f:ac:c2:ae:c4:54:b6: 1a:b4:cd:89:01:85:b4:46:b0:99:aa:b0:12:3e:02: 06:2b:be:39:0c:73:cb:15:77:06:fb:32:13:8a:a4: 25:f8:67:cb:b2:de:f0:c5:cc:73:eb:87:3d:10:23: ac:89:95:08:51:7e:71:52:26:d0:c6:15:c1:b0:c8: 94:d7:28:b2:1a:5c:db:cd:b4:1d:fa:ac:db:50:f6: 78:46:8c:49:59:bf:0f:61:10:f8:6d:af:d3:15:01: c4:9b:91:dc:8c:78:41:b7:7c:28:a7:5f:fd:72:5d: 22:13:76:32:c4:36:37:bc:a5:38:da:fc:54:ed:87: 21:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:BA:BD:F0:29:EF:75:A7:EE:C1:8B:DA:D5:32:B0:0D:C7:FA:D1:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3a1dad2c-2d3a-3061-9575-faf007fac428.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:82:f7:76:8d:2c:d4:3e:69:9b:5a:e4:ca:2b:0e:12:ee:de: 0b:2d:cd:31:b4:bd:86:de:14:99:99:8c:fc:aa:ce:22:f7:dd: 3b:f3:af:a2:41:a7:67:3a:67:4c:e1:9e:6e:20:35:bb:d4:bf: 5f:4f:73:3c:75:59:e0:d8:b0:09:3a:55:78:8c:ec:dc:af:36: 9e:7f:e1:df:44:ef:47:2d:3b:5d:49:4d:28:a7:40:b1:e8:a8: ea:fe:4a:92:ba:b9:8f:18:0e:ba:c4:90:66:d2:ef:30:e9:02: 63:85:ed:c8:8a:9f:a0:09:8f:45:31:a4:fc:de:6f:07:99:40: eb:57:b3:0c:89:e1:f6:e7:0a:c1:86:99:ad:09:0f:6f:37:69: 5f:fe:1b:9b:60:fc:02:ca:7f:e8:83:7a:d0:0b:ee:2b:63:51: a5:b4:00:db:21:ff:d5:ea:05:ee:bb:00:4d:2a:8c:5c:60:70: c8:96:11:52:bf:76:23:cd:c4:70:45:fc:60:7f:46:6d:79:b9: fa:28:08:52:f0:48:3b:a2:60:38:b1:83:ca:d1:15:09:c7:f1: 19:ab:27:08:27:46:1a:04:e8:e8:8d:21:41:b5:bd:c2:f6:2a: c9:f2:b2:87:a4:3f:1c:58:62:4f:84:de:23:9e:a9:f2:b9:41: c0:29:aa:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT6lArC1Nv1b2tGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk N2NmMTQ4ZTYtNDJmYS00ODNlLWI0MGUtNWM0ZTU1ZDEzM2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5ViEb+0dE1npNXBzPyMuWK/rMGsalRiE9PZ oOUBwcua+rfymFEXaof9KVmBfB7C1q3POu+wBAfYCynJjy8UUYudyOsE+qc4hB4R uRqOHXC4puscnAjQGrnDLfDfec471WuAeu+md7DSaoQUMnL49zQBhxLpJFeU8fby W/BMEk+swq7EVLYatM2JAYW0RrCZqrASPgIGK745DHPLFXcG+zITiqQl+GfLst7w xcxz64c9ECOsiZUIUX5xUibQxhXBsMiU1yiyGlzbzbQd+qzbUPZ4RoxJWb8PYRD4 ba/TFQHEm5HcjHhBt3wop1/9cl0iE3YyxDY3vKU42vxU7Ych1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLG6vfAp73Wn7sGL2tUysA3H+tFQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvM2ExZGFkMmMtMmQzYS0z MDYxLTk1NzUtZmFmMDA3ZmFjNDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlWGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL+C93aNLNQ+aZta5MorDhLu3gstzTG0vYbeFJmZjPyqziL33Tvzr6JB p2c6Z0zhnm4gNbvUv19Pczx1WeDYsAk6VXiM7NyvNp5/4d9E70ctO11JTSinQLHo qOr+SpK6uY8YDrrEkGbS7zDpAmOF7ciKn6AJj0UxpPzebweZQOtXswyJ4fbnCsGG ma0JD283aV/+G5tg/ALKf+iDetAL7itjUaW0ANsh/9XqBe67AE0qjFxgcMiWEVK/ diPNxHBF/GB/Rm15ufooCFLwSDuiYDixg8rRFQnH8RmrJwgnRhoE6OiNIUG1vcL2 KsnysoekPxxYYk+E3iOeqfK5QcApqu0= -----END CERTIFICATE-----Generated at Fri Apr 17 19:07:09 2026 by rpki-client