$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3a425c88-ba25-3e5b-b799-440902e10224.roa File: 3a425c88-ba25-3e5b-b799-440902e10224.roa (raw, json) Hash identifier: ledZxj77cMyniDZr9Hukt+dXXPKo2eyWPB2/PF12U74= Subject key identifier: 0A:32:A4:BC:51:F8:62:3A:F0:F3:40:7A:69:EE:30:9E:A9:D7:01:7F Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4F8EEDD165045AB21CBA80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3a425c88-ba25-3e5b-b799-440902e10224.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 170.85.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:8e:ed:d1:65:04:5a:b2:1c:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=7b71f114-9a88-4d6a-9cd7-f757e017ea90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:60:7f:5a:b1:39:37:99:f1:78:cc:5d:7b:cc: 99:03:98:1d:47:26:b3:e5:e2:76:d4:f5:6c:74:e0: 47:f8:ec:d3:c0:33:70:e2:a1:a1:9d:83:28:31:5b: 88:bd:fb:26:68:30:90:b9:37:3e:ee:93:28:e5:d3: a7:86:ff:4e:ad:c3:64:97:46:f9:a1:91:94:fc:c8: d6:a7:05:e5:68:0a:01:12:56:2b:fc:7a:b1:95:5f: 0e:e5:5d:fd:21:a3:cf:d7:47:11:97:8a:ea:fe:e0: ec:da:9e:b2:3b:15:58:f0:dc:85:14:e7:fd:d6:63: f5:89:e8:5e:51:96:82:7d:8b:ae:e5:2f:d5:1c:a0: 56:93:3e:cc:91:92:4a:1c:34:2c:93:2f:23:1e:9c: 5b:a9:9f:2d:b3:79:a5:f9:95:86:76:e5:c4:3a:84: 8a:3f:6c:3f:0d:f6:a9:50:a9:f8:fe:2d:07:e4:a0: af:59:b0:90:54:ba:7f:99:ec:f0:94:13:9b:b6:6f: 90:b8:79:06:51:ff:41:04:0a:63:c9:56:de:86:be: aa:10:62:5f:ab:8a:81:33:f5:bd:cd:72:c4:8e:f7: 1c:00:2e:94:bb:f3:a2:c0:61:1c:69:07:06:50:1f: d1:27:4e:61:5a:1d:20:3c:2a:34:93:21:2d:95:a7: ac:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:32:A4:BC:51:F8:62:3A:F0:F3:40:7A:69:EE:30:9E:A9:D7:01:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3a425c88-ba25-3e5b-b799-440902e10224.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:f1:65:d0:96:be:66:64:8f:81:65:9e:95:16:6e:8e:b6:8e: 61:2a:01:7e:86:57:21:cb:c2:df:b8:dd:ab:31:6a:34:bc:90: 82:3e:be:92:af:b9:da:ba:15:4a:83:e4:27:c6:83:90:66:5c: e7:6c:2f:48:03:55:e9:fb:f3:30:3a:93:c3:b8:58:60:ee:54: 89:57:81:e3:46:38:7f:dc:6c:5b:c3:53:fb:08:a8:ba:cd:ae: 1f:82:5a:7d:45:93:7b:1c:19:84:aa:ac:43:8b:28:a9:27:d3: 86:f4:95:df:96:c6:2d:f6:57:a5:4a:aa:3d:97:f2:6f:42:f4: d2:86:db:c7:21:1a:c3:cc:b0:12:28:0f:18:cd:c9:50:c3:01: a6:d8:b9:2e:a1:b0:b0:3c:dd:8a:a9:ab:b7:1b:c6:b8:ff:27: 88:28:35:dc:14:d4:66:df:c5:92:4b:9f:33:18:63:71:c0:70: f7:2d:8b:12:0d:89:26:ef:d7:3e:f7:69:c6:4a:0b:99:91:ad: b8:5d:a7:dd:8d:e1:ca:1a:6b:59:e6:21:c1:86:50:55:88:ff: 61:5d:1f:5c:69:bc:c5:9d:7e:e3:a4:47:c4:b5:94:6f:ca:ae: a7:0b:4a:4d:18:e7:e8:be:0a:a7:4d:55:58:90:1d:87:3f:1a: 02:ff:d2:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT47t0WUEWrIcuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk N2I3MWYxMTQtOWE4OC00ZDZhLTljZDctZjc1N2UwMTdlYTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWB/WrE5N5nxeMxde8yZA5gdRyaz5eJ21PVs dOBH+OzTwDNw4qGhnYMoMVuIvfsmaDCQuTc+7pMo5dOnhv9OrcNkl0b5oZGU/MjW pwXlaAoBElYr/HqxlV8O5V39IaPP10cRl4rq/uDs2p6yOxVY8NyFFOf91mP1iehe UZaCfYuu5S/VHKBWkz7MkZJKHDQsky8jHpxbqZ8ts3ml+ZWGduXEOoSKP2w/Dfap UKn4/i0H5KCvWbCQVLp/mezwlBObtm+QuHkGUf9BBApjyVbehr6qEGJfq4qBM/W9 zXLEjvccAC6Uu/OiwGEcaQcGUB/RJ05hWh0gPCo0kyEtlaes4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoypLxR+GI68PNAemnuMJ6p1wF/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvM2E0MjVjODgtYmEyNS0z ZTViLWI3OTktNDQwOTAyZTEwMjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvxZdCWvmZkj4FlnpUWbo62jmEqAX6GVyHLwt+43asxajS8kII+vpKv udq6FUqD5CfGg5BmXOdsL0gDVen78zA6k8O4WGDuVIlXgeNGOH/cbFvDU/sIqLrN rh+CWn1Fk3scGYSqrEOLKKkn04b0ld+Wxi32V6VKqj2X8m9C9NKG28chGsPMsBIo DxjNyVDDAabYuS6hsLA83Yqpq7cbxrj/J4goNdwU1GbfxZJLnzMYY3HAcPctixIN iSbv1z73acZKC5mRrbhdp92N4coaa1nmIcGGUFWI/2FdH1xpvMWdfuOkR8S1lG/K rqcLSk0Y5+i+CqdNVViQHYc/GgL/0vI= -----END CERTIFICATE-----Generated at Fri Apr 17 17:26:01 2026 by rpki-client