$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3faf91e5-6c81-3d67-b498-f913437fa73a.roa File: 3faf91e5-6c81-3d67-b498-f913437fa73a.roa (raw, json) Hash identifier: TdYK1VW3IjfruxlgNM4rDZ/OPS4DWS8WOFXeBrPYKDM= Subject key identifier: C6:B0:36:FB:2B:78:A1:C9:D0:55:23:F6:D3:8D:73:32:57:EB:1D:01 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4F9C2E53521D75F52B2300 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3faf91e5-6c81-3d67-b498-f913437fa73a.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 170.85.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:9c:2e:53:52:1d:75:f5:2b:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=42007462-a31d-4441-af53-cfce993bb97b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:be:fe:0d:21:e3:88:cd:a8:32:0b:6f:3f:35: c7:0d:ba:b6:30:5a:7f:c7:55:80:a7:d4:32:f2:cc: 76:00:b0:ea:bf:82:4a:07:5f:75:7c:ae:20:9d:e5: 73:d5:b6:4b:bf:6f:8f:1a:7e:dc:db:ca:46:88:7a: 8d:50:59:fd:a4:28:b0:59:b8:18:85:d3:bd:58:dd: 9a:a7:8f:8f:c9:5b:57:92:10:85:2b:b6:45:82:6d: 2f:57:f8:6f:ca:eb:80:2c:7a:08:c4:db:02:35:91: 44:0e:c4:94:97:f5:02:d5:dc:2d:75:fb:ca:77:f2: 78:bb:61:b7:da:15:33:8c:9a:cd:25:b2:26:bb:a3: 2a:84:73:89:49:28:0e:9d:fb:c0:0d:b1:04:a0:bc: 24:1b:d0:f6:1b:06:94:a2:81:06:2f:e2:7d:41:e0: 83:e7:01:4a:88:ba:e5:1a:db:78:e0:67:ff:8b:46: 5e:3a:4f:c3:7a:f3:d6:88:62:35:91:5f:de:b8:ef: 22:f3:8a:c5:bb:83:3f:9b:bc:c6:b3:a2:a4:c5:6b: 40:ae:94:3d:ef:c7:42:44:70:74:d5:13:45:83:44: 8c:20:b9:dc:16:b6:32:fe:ac:ae:f4:f7:ab:6f:fc: b8:ff:b3:f8:b9:6e:f3:ad:25:8f:be:4b:28:96:32: c3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B0:36:FB:2B:78:A1:C9:D0:55:23:F6:D3:8D:73:32:57:EB:1D:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3faf91e5-6c81-3d67-b498-f913437fa73a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:95:34:cc:a8:0b:c7:1c:ab:7c:03:1d:f1:b9:70:b8:71:0b: 93:73:d8:18:9e:2b:11:dc:54:1e:36:9b:f9:8b:29:d6:4d:c0: 20:fc:79:46:b3:21:ad:c1:34:3c:fe:4a:aa:00:5b:04:64:48: e6:21:8a:8e:0f:4e:91:68:28:90:d9:5d:41:df:86:58:8d:f9: 3e:8d:75:03:8c:62:ad:30:28:34:0e:41:a1:ae:0b:a6:24:a6: e3:3e:24:06:e1:44:87:3d:ca:ae:d0:52:61:03:ca:40:02:46: 4b:f0:9b:b1:7d:18:ca:88:70:6b:da:30:af:da:cf:d9:4b:0d: 4b:6d:97:75:a2:30:cc:b7:a6:75:d2:b4:b1:0f:47:d2:55:59: 50:6b:22:72:10:19:e4:fc:72:e2:cc:3c:ec:f2:0a:30:52:08: b9:ac:bb:57:4a:c2:c5:8c:fa:01:26:d0:03:eb:c7:eb:30:3e: e7:36:fa:11:f1:88:70:9d:2e:8a:6b:08:17:50:66:4c:b9:22: c7:76:35:c8:c3:ef:10:8a:25:d0:e2:24:85:b5:f9:ef:e1:4a: b1:e8:19:13:bc:c9:4b:aa:6c:8e:c8:7b:bf:90:c9:56:29:46: 2c:34:01:c7:2d:1b:18:88:68:51:09:2f:84:17:fc:f5:1c:44: ef:34:7d:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT5wuU1IddfUrIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk NDIwMDc0NjItYTMxZC00NDQxLWFmNTMtY2ZjZTk5M2JiOTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhb7+DSHjiM2oMgtvPzXHDbq2MFp/x1WAp9Qy 8sx2ALDqv4JKB191fK4gneVz1bZLv2+PGn7c28pGiHqNUFn9pCiwWbgYhdO9WN2a p4+PyVtXkhCFK7ZFgm0vV/hvyuuALHoIxNsCNZFEDsSUl/UC1dwtdfvKd/J4u2G3 2hUzjJrNJbImu6MqhHOJSSgOnfvADbEEoLwkG9D2GwaUooEGL+J9QeCD5wFKiLrl Gtt44Gf/i0ZeOk/DevPWiGI1kV/euO8i84rFu4M/m7zGs6KkxWtArpQ978dCRHB0 1RNFg0SMILncFrYy/qyu9Perb/y4/7P4uW7zrSWPvksoljLD6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMawNvsreKHJ0FUj9tONczJX6x0BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvM2ZhZjkxZTUtNmM4MS0z ZDY3LWI0OTgtZjkxMzQzN2ZhNzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlWvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqVNMyoC8ccq3wDHfG5cLhxC5Nz2BieKxHcVB42m/mLKdZNwCD8eUaz Ia3BNDz+SqoAWwRkSOYhio4PTpFoKJDZXUHfhliN+T6NdQOMYq0wKDQOQaGuC6Yk puM+JAbhRIc9yq7QUmEDykACRkvwm7F9GMqIcGvaMK/az9lLDUttl3WiMMy3pnXS tLEPR9JVWVBrInIQGeT8cuLMPOzyCjBSCLmsu1dKwsWM+gEm0APrx+swPuc2+hHx iHCdLoprCBdQZky5Isd2NcjD7xCKJdDiJIW1+e/hSrHoGRO8yUuqbI7Ie7+QyVYp Riw0AcctGxiIaFEJL4QX/PUcRO80fVs= -----END CERTIFICATE-----Generated at Sat Apr 18 09:15:11 2026 by rpki-client