$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5767e3ab-488c-3d3a-8f9e-1d0595c4db3a.roa File: 5767e3ab-488c-3d3a-8f9e-1d0595c4db3a.roa (raw, json) Hash identifier: jNx+ALTlz1SpjC8h4IgasOD731LHTW+8sUD49jZ2zHM= Subject key identifier: 2B:F5:B8:F4:BA:FD:BA:97:B2:69:CF:C1:5D:09:F7:95:4C:5A:C9:8E Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4FAA2C7EC1CF030F69A3C0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5767e3ab-488c-3d3a-8f9e-1d0595c4db3a.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 170.85.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:aa:2c:7e:c1:cf:03:0f:69:a3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=c9a1f9d3-eee9-406a-9a56-2ac4935e9d69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b2:b8:8e:d9:79:b1:e8:07:66:95:57:dc:ee: 5b:70:5a:de:7d:f9:18:3c:b3:27:d7:fd:8d:fb:40: 3c:73:68:98:35:fc:aa:35:32:c8:20:f8:ac:b5:68: 94:da:82:9a:20:0a:af:02:c7:cd:16:a0:70:ae:9c: 7a:17:78:14:3a:3c:71:fd:2b:88:4b:4f:40:23:d8: a1:c4:dd:eb:fd:14:2f:8a:da:cd:49:98:76:af:4b: d6:10:97:be:60:6c:e0:b1:12:dc:38:f0:d8:b0:2b: ae:5a:66:b7:fa:c9:17:78:54:46:ab:8d:03:96:42: 2b:5f:fd:31:54:c9:67:38:9c:80:6c:3d:04:05:20: 8d:3c:47:e4:96:e6:f6:01:7f:97:1a:51:1a:d7:a2: 60:a0:d8:f5:c8:7f:f1:24:9e:ff:c2:e6:68:fe:07: cb:f0:0c:e6:85:91:70:c4:dc:80:d6:29:cc:62:73: 5d:32:37:d3:33:49:87:6e:12:3d:22:6f:4d:4d:43: 6a:03:7e:b1:96:21:7a:58:49:fb:19:91:9e:33:2b: e4:8f:2f:9d:c9:c8:50:23:d7:b5:a4:d4:19:1f:c0: a0:ed:6f:f9:4c:c2:6d:5b:aa:68:96:a9:a2:dc:54: 1e:11:4f:1d:22:d4:37:70:dc:d7:56:82:a0:51:ab: 62:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F5:B8:F4:BA:FD:BA:97:B2:69:CF:C1:5D:09:F7:95:4C:5A:C9:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5767e3ab-488c-3d3a-8f9e-1d0595c4db3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:84:ae:89:1a:25:e9:8d:7b:10:41:60:2a:bd:b1:ca:61:b8: 72:64:0c:02:91:ce:1e:2c:a7:d8:d2:09:fd:11:1e:98:dd:05: f7:cc:e7:47:c2:98:08:5a:cc:f6:24:72:70:76:06:06:e0:95: de:85:05:3d:7e:aa:8c:ab:c4:9f:79:11:c7:c2:8e:a4:53:0d: df:d7:66:1c:0e:4e:4f:89:5f:42:73:cb:86:c0:a7:73:2c:ca: c2:e4:6e:d4:e7:56:3d:c7:ea:e3:d5:13:29:51:95:5d:01:bf: 17:22:b5:31:df:40:84:de:51:f5:1a:7c:82:a0:7e:75:ed:f3: 58:3e:7e:ea:2a:fa:4f:b2:70:1a:1c:7b:a2:98:be:6b:e5:6d: c0:d1:f7:25:34:59:61:ac:73:51:96:7c:05:cc:d9:68:d1:8c: 41:ac:1f:97:8a:49:67:6b:8c:1a:6e:60:34:fe:5d:07:c8:4e: a0:96:66:b1:31:a1:98:93:38:99:ab:39:3b:42:ae:27:92:82: 62:a5:d2:bb:42:62:36:3a:b3:6a:6c:c3:56:d8:05:5e:b6:7f: aa:6c:e4:26:f9:53:93:ef:38:66:29:fd:ed:a5:b1:4c:70:55: d5:46:b9:1a:32:26:51:cb:6f:1f:ef:1c:09:a4:34:6b:0a:79: d8:1f:ca:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT6osfsHPAw9po8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk YzlhMWY5ZDMtZWVlOS00MDZhLTlhNTYtMmFjNDkzNWU5ZDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrK4jtl5segHZpVX3O5bcFreffkYPLMn1/2N +0A8c2iYNfyqNTLIIPistWiU2oKaIAqvAsfNFqBwrpx6F3gUOjxx/SuIS09AI9ih xN3r/RQvitrNSZh2r0vWEJe+YGzgsRLcOPDYsCuuWma3+skXeFRGq40DlkIrX/0x VMlnOJyAbD0EBSCNPEfklub2AX+XGlEa16JgoNj1yH/xJJ7/wuZo/gfL8AzmhZFw xNyA1inMYnNdMjfTM0mHbhI9Im9NTUNqA36xliF6WEn7GZGeMyvkjy+dychQI9e1 pNQZH8Cg7W/5TMJtW6polqmi3FQeEU8dItQ3cNzXVoKgUati8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCv1uPS6/bqXsmnPwV0J95VMWsmOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNTc2N2UzYWItNDg4Yy0z ZDNhLThmOWUtMWQwNTk1YzRkYjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlUmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaErokaJemNexBBYCq9scphuHJkDAKRzh4sp9jSCf0RHpjdBffM50fC mAhazPYkcnB2Bgbgld6FBT1+qoyrxJ95EcfCjqRTDd/XZhwOTk+JX0Jzy4bAp3Ms ysLkbtTnVj3H6uPVEylRlV0BvxcitTHfQITeUfUafIKgfnXt81g+fuoq+k+ycBoc e6KYvmvlbcDR9yU0WWGsc1GWfAXM2WjRjEGsH5eKSWdrjBpuYDT+XQfITqCWZrEx oZiTOJmrOTtCrieSgmKl0rtCYjY6s2psw1bYBV62f6ps5Cb5U5PvOGYp/e2lsUxw VdVGuRoyJlHLbx/vHAmkNGsKedgfyg0= -----END CERTIFICATE-----Generated at Fri Apr 17 16:42:04 2026 by rpki-client