$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4d10efa7-5af8-3e26-93cd-4782abdaa2c2.roa File: 4d10efa7-5af8-3e26-93cd-4782abdaa2c2.roa (raw, json) Hash identifier: qnKpgp8Okdk7xFmRHvHmTfEHcgnkzkHQIl1Fzzv/kDI= Subject key identifier: DB:02:C8:9F:E1:8E:E6:32:17:8A:3B:96:AB:D0:FF:89:1E:22:13:8A Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4FAD9A30D3BD9620AFC980 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4d10efa7-5af8-3e26-93cd-4782abdaa2c2.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 170.85.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:ad:9a:30:d3:bd:96:20:af:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=1e030688-0684-409c-b271-886d48bb1786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b9:52:6f:e1:da:1d:14:49:16:83:21:e6:0f: 7a:62:1f:fa:c9:27:2f:57:90:d2:5a:5c:b2:7b:44: 67:a4:cb:36:ed:c1:74:e5:5f:ae:bc:47:26:fd:db: ac:7a:d7:94:8e:3b:21:21:4f:5e:18:99:ca:6c:0e: 5e:c6:df:04:43:11:f3:76:51:5a:07:79:b6:d8:07: 7f:21:48:5a:e4:72:58:94:b1:87:1c:f4:53:c1:f7: 5d:16:89:4a:2e:33:a2:f1:94:e8:d4:db:8f:48:9d: 39:73:29:08:70:4b:26:e3:d5:9c:fa:30:d6:9c:cd: 39:f4:fc:2d:28:cc:d9:aa:d2:9e:70:1c:eb:18:77: 51:4d:44:d7:7a:71:12:23:00:b3:7d:53:0d:1e:1a: 67:57:55:4f:a4:ca:78:4d:de:f3:b1:a5:f5:96:df: 4e:06:a4:8f:2c:ee:0a:81:f5:82:d4:16:89:37:e4: 64:d9:f6:23:a7:c0:53:17:f8:f6:e3:8e:a3:d2:55: 89:fd:10:04:8c:20:cf:f5:9b:31:61:8e:fd:41:b5: 81:b9:0a:f8:27:0a:af:ab:e1:b2:d6:96:a5:d7:13: 10:55:70:e0:2c:2d:31:80:22:fc:37:63:be:ce:26: d7:fc:18:f2:8a:40:5d:e2:73:a7:c2:b1:9d:90:fe: 06:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:02:C8:9F:E1:8E:E6:32:17:8A:3B:96:AB:D0:FF:89:1E:22:13:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4d10efa7-5af8-3e26-93cd-4782abdaa2c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:2c:ee:24:fe:06:b5:ae:74:eb:ba:eb:2f:50:6a:79:36:dd: b9:a4:58:fa:b7:b7:b7:f2:f8:cf:2b:65:e1:1f:68:f7:b2:3e: 7c:08:b5:dc:33:82:11:08:55:57:99:0e:3d:04:e3:87:dd:ae: 45:5c:35:e7:39:60:ed:24:f6:6b:af:00:e7:ab:76:5c:c5:43: 35:16:db:d2:42:fc:94:98:33:07:7d:3e:a1:51:27:f4:65:03: d6:a5:b4:fa:8f:1f:11:59:14:ec:e4:1f:b3:18:30:1b:9c:1e: 22:df:7d:04:26:36:61:24:fb:d4:17:fc:59:18:99:3f:99:2b: 31:16:58:f6:a5:04:80:eb:f5:d5:c1:d4:49:1e:9d:f2:bc:44: e9:7e:fe:59:c2:ff:5b:eb:66:d0:dc:be:af:e8:e3:e0:b8:61: b8:2e:80:85:30:ef:e4:f1:53:b7:a7:5f:c8:5a:9f:6f:0e:ba: 3f:7f:a6:7f:81:d3:ff:37:2d:57:5f:4b:86:1a:63:84:8d:6d: c2:05:b4:64:9f:4b:e4:dd:44:e7:8f:36:a4:09:13:61:24:4e: 74:b7:95:4e:d0:1a:88:e6:1c:75:eb:c5:da:7c:80:a2:7c:4b: f6:d8:b0:cb:9b:8c:49:ad:62:2c:22:0c:14:a1:78:11:2d:bd: 11:09:aa:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT62aMNO9liCvyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk MWUwMzA2ODgtMDY4NC00MDljLWIyNzEtODg2ZDQ4YmIxNzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrlSb+HaHRRJFoMh5g96Yh/6yScvV5DSWlyy e0RnpMs27cF05V+uvEcm/duseteUjjshIU9eGJnKbA5ext8EQxHzdlFaB3m22Ad/ IUha5HJYlLGHHPRTwfddFolKLjOi8ZTo1NuPSJ05cykIcEsm49Wc+jDWnM059Pwt KMzZqtKecBzrGHdRTUTXenESIwCzfVMNHhpnV1VPpMp4Td7zsaX1lt9OBqSPLO4K gfWC1BaJN+Rk2fYjp8BTF/j2446j0lWJ/RAEjCDP9ZsxYY79QbWBuQr4Jwqvq+Gy 1pal1xMQVXDgLC0xgCL8N2O+zibX/BjyikBd4nOnwrGdkP4GDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsCyJ/hjuYyF4o7lqvQ/4keIhOKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNGQxMGVmYTctNWFmOC0z ZTI2LTkzY2QtNDc4MmFiZGFhMmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlXMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUs7iT+BrWudOu66y9Qank23bmkWPq3t7fy+M8rZeEfaPeyPnwItdwz ghEIVVeZDj0E44fdrkVcNec5YO0k9muvAOerdlzFQzUW29JC/JSYMwd9PqFRJ/Rl A9altPqPHxFZFOzkH7MYMBucHiLffQQmNmEk+9QX/FkYmT+ZKzEWWPalBIDr9dXB 1EkenfK8ROl+/lnC/1vrZtDcvq/o4+C4YbgugIUw7+TxU7enX8han28Ouj9/pn+B 0/83LVdfS4YaY4SNbcIFtGSfS+TdROePNqQJE2EkTnS3lU7QGojmHHXrxdp8gKJ8 S/bYsMubjEmtYiwiDBSheBEtvREJqpQ= -----END CERTIFICATE-----Generated at Fri Apr 17 13:57:45 2026 by rpki-client