$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3afb08d9-b761-3e41-a7fa-5a474eee1fc7.roa File: 3afb08d9-b761-3e41-a7fa-5a474eee1fc7.roa (raw, json) Hash identifier: 5kBXvDVOucOKF72k0e1oBLyXzAFrqCTHSBSiLqu/qAo= Subject key identifier: 9D:C8:53:95:21:7B:56:7D:1E:A4:0C:01:CF:DC:25:24:02:EE:16:BD Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4FA92850C9000982BAD880 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3afb08d9-b761-3e41-a7fa-5a474eee1fc7.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 170.85.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:a9:28:50:c9:00:09:82:ba:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=f4ef7e76-25b0-41ad-8ce8-490fdca45e8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1a:b8:cb:71:fa:7c:e3:9f:56:91:20:48:12: fc:e8:2d:1f:75:86:7b:68:f8:f9:c3:b7:20:61:80: b2:66:65:70:58:40:7e:7e:92:94:9c:0c:4a:58:fe: aa:d0:e9:69:10:2f:9f:2d:d6:e2:8d:b9:23:85:24: f8:72:74:64:5c:5d:45:65:79:80:80:92:f1:7d:81: dd:de:90:01:dd:e5:ba:51:d6:87:28:17:9b:2b:d4: 0b:56:09:77:6f:5a:d7:fa:cd:42:51:48:89:36:8f: d9:65:bb:ff:a8:53:71:c6:48:7a:69:e9:e6:21:cb: f1:79:d1:b7:53:8a:6d:9f:57:12:ca:e8:5d:bb:8d: ca:21:a4:83:ec:60:9e:81:10:5b:c5:da:29:a5:30: 97:89:e0:7a:b1:c3:7b:ea:c1:aa:d8:14:b9:c4:29: a7:f3:5a:79:28:30:57:97:6f:44:04:7e:1d:b9:4d: 9c:e6:91:95:5b:ff:83:eb:6f:cf:20:2d:76:43:7c: 9c:6e:7a:f2:4b:55:44:05:c2:8c:c9:b7:8c:27:49: 8b:e9:eb:e6:35:e1:e8:7f:33:9e:bb:98:43:b7:1d: ab:b0:1d:3b:e0:8c:c3:21:ce:e7:ea:3c:18:18:65: 5b:4e:3a:a2:54:69:50:2d:1e:cd:d8:a6:d4:11:ef: e2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C8:53:95:21:7B:56:7D:1E:A4:0C:01:CF:DC:25:24:02:EE:16:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3afb08d9-b761-3e41-a7fa-5a474eee1fc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:9d:4d:80:0e:54:9a:2c:29:2c:d9:38:53:65:4a:89:8e:cc: 2e:c6:b9:db:7e:ea:72:00:23:c5:c4:33:ff:71:7f:b3:74:f8: 18:32:1a:e8:46:8c:d0:b0:91:13:c3:a6:66:33:04:a4:6d:ce: 27:11:5c:61:c0:6b:95:1e:2a:ee:63:a2:bb:c1:1c:56:fc:f8: 38:f7:95:4d:99:33:b6:f2:ec:cc:5e:b1:b5:3d:df:2a:01:47: 52:ee:44:32:91:12:0d:d8:e7:e7:e2:ee:30:96:35:6a:d2:a9: 6f:74:cd:dd:a1:04:14:1d:25:a1:47:8f:61:07:90:c3:b1:aa: 61:38:7b:33:29:af:bc:61:00:65:24:46:43:08:20:98:12:a0: f4:fb:43:84:c3:96:a2:bd:0f:0a:95:d5:86:a7:4e:2b:d4:53: a9:d7:dd:f1:e0:63:be:92:c8:28:b3:48:e6:f4:79:b7:7e:7c: 08:0a:50:14:1d:5f:a8:7a:53:15:16:55:08:c4:30:ba:2b:33: 4d:c3:3b:26:0b:59:49:8b:06:3f:2d:4f:c4:ef:fa:cb:d3:f6: e4:b4:8a:65:69:7b:b6:9f:9c:9f:cb:ef:0a:a2:50:46:85:d7: fe:7e:0e:61:4a:58:00:d7:e7:2c:5f:24:2e:8c:73:58:8a:22: 52:64:c8:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT6koUMkACYK62IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk ZjRlZjdlNzYtMjViMC00MWFkLThjZTgtNDkwZmRjYTQ1ZThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRq4y3H6fOOfVpEgSBL86C0fdYZ7aPj5w7cg YYCyZmVwWEB+fpKUnAxKWP6q0OlpEC+fLdbijbkjhST4cnRkXF1FZXmAgJLxfYHd 3pAB3eW6UdaHKBebK9QLVgl3b1rX+s1CUUiJNo/ZZbv/qFNxxkh6aenmIcvxedG3 U4ptn1cSyuhdu43KIaSD7GCegRBbxdoppTCXieB6scN76sGq2BS5xCmn81p5KDBX l29EBH4duU2c5pGVW/+D62/PIC12Q3ycbnryS1VEBcKMybeMJ0mL6evmNeHofzOe u5hDtx2rsB074IzDIc7n6jwYGGVbTjqiVGlQLR7N2KbUEe/i0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3IU5Uhe1Z9HqQMAc/cJSQC7ha9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvM2FmYjA4ZDktYjc2MS0z ZTQxLWE3ZmEtNWE0NzRlZWUxZmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlWuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK+dTYAOVJosKSzZOFNlSomOzC7Gudt+6nIAI8XEM/9xf7N0+BgyGuhG jNCwkRPDpmYzBKRtzicRXGHAa5UeKu5jorvBHFb8+Dj3lU2ZM7by7MxesbU93yoB R1LuRDKREg3Y5+fi7jCWNWrSqW90zd2hBBQdJaFHj2EHkMOxqmE4ezMpr7xhAGUk RkMIIJgSoPT7Q4TDlqK9DwqV1YanTivUU6nX3fHgY76SyCizSOb0ebd+fAgKUBQd X6h6UxUWVQjEMLorM03DOyYLWUmLBj8tT8Tv+svT9uS0imVpe7afnJ/L7wqiUEaF 1/5+DmFKWADX5yxfJC6Mc1iKIlJkyCc= -----END CERTIFICATE-----Generated at Fri Apr 17 12:38:55 2026 by rpki-client