$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/69d027f3-e219-3ed4-b781-5d29a1ca26a7.roa File: 69d027f3-e219-3ed4-b781-5d29a1ca26a7.roa (raw, json) Hash identifier: b5THZZ+45mB0fjwJO9OAO79ZPK+lAsD0Zv5H3k2OBFE= Subject key identifier: 6B:3E:45:33:DF:EA:A3:94:09:53:89:3B:71:18:EE:96:A6:6A:B9:14 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4F9E53FCEC252B88C8F580 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/69d027f3-e219-3ed4-b781-5d29a1ca26a7.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 170.85.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:9e:53:fc:ec:25:2b:88:c8:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=cf237e3d-4768-4ab8-8497-930f61bf416d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:94:6e:05:2d:3b:b5:2e:bf:6f:92:b3:64:11: 62:92:06:39:03:89:8e:56:d4:f5:72:b2:7b:55:97: 64:db:75:3f:ad:45:f2:9e:5b:0b:32:7d:5f:d3:3a: 9d:4c:a9:80:24:a1:38:24:1b:62:a9:82:b0:bc:b4: e3:fe:1c:88:14:10:13:0b:77:29:f8:a9:25:8f:0d: 1a:13:ee:d5:c5:45:32:12:d4:89:df:7f:70:53:f5: 49:44:f9:d6:fc:0a:c0:44:c6:74:35:ca:d2:e9:e8: f2:59:bb:f8:30:e0:d6:d4:c2:45:97:35:bb:b9:7c: 83:69:0d:d0:a9:13:d1:d5:c2:df:f3:a1:f9:3f:19: 74:9b:7e:30:a8:45:5c:f5:46:59:0c:6a:1f:4d:65: 93:b4:4b:ee:0e:8b:59:88:5e:46:66:82:81:7e:eb: 65:c6:3a:fa:f7:eb:ac:57:6c:fc:89:0d:36:18:91: c2:73:10:17:f2:33:d8:b4:8e:08:2f:07:61:5c:8f: f6:d7:ef:3d:c0:d1:03:45:37:81:2f:0a:a3:58:cb: 8d:f3:0b:5d:ed:00:ed:03:82:b4:a4:33:e6:b3:10: 0c:b1:f6:4b:c1:e4:b0:55:69:15:03:15:a7:33:6a: 0c:51:7a:9b:85:97:81:2f:33:b7:22:b8:c4:a7:5d: 93:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:3E:45:33:DF:EA:A3:94:09:53:89:3B:71:18:EE:96:A6:6A:B9:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/69d027f3-e219-3ed4-b781-5d29a1ca26a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.244.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:0c:5e:52:c7:b7:48:73:14:52:62:32:d6:1e:1e:65:2c:61: 1a:99:d2:c6:a9:eb:b2:19:5f:3c:6e:b9:fa:d5:0f:82:2b:40: 82:d3:b2:97:58:c7:60:91:86:75:f3:8f:db:0d:54:72:33:b1: 24:8f:7f:da:c6:2e:b8:bb:1c:2c:f5:1d:24:b1:e9:fe:d5:b5: 7a:84:2d:67:57:29:b2:2d:ea:f2:90:c4:45:08:9c:d4:59:4c: 91:8b:a2:ba:30:24:85:61:84:fc:00:4a:9e:a2:ad:86:c1:c9: 4f:df:e0:5e:e4:b3:82:49:e7:30:fa:05:30:47:9f:05:d0:09: 03:8f:90:1c:82:d7:a4:21:b2:d2:a5:23:3c:e4:46:d8:a5:cb: ed:ed:80:27:38:f6:2d:0b:9d:45:7c:2a:22:a1:22:83:c0:fa: 93:2e:b5:a4:d1:6f:44:eb:f1:b5:d1:31:c2:48:3c:d2:ef:e6: 9d:15:27:e6:91:73:a9:f8:e7:f4:12:34:5e:9f:eb:5a:b8:96: 4e:41:fd:df:cd:b6:ba:f0:bf:e0:72:0a:cf:80:8b:76:07:1e: cd:67:54:3e:71:0d:d3:62:d7:cc:22:4b:92:61:2b:b8:32:f5: 84:05:40:8d:4c:62:fd:73:9a:b9:a8:bb:01:d4:73:b6:a8:80: a4:35:6a:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT55T/OwlK4jI9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk Y2YyMzdlM2QtNDc2OC00YWI4LTg0OTctOTMwZjYxYmY0MTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpRuBS07tS6/b5KzZBFikgY5A4mOVtT1crJ7 VZdk23U/rUXynlsLMn1f0zqdTKmAJKE4JBtiqYKwvLTj/hyIFBATC3cp+Kkljw0a E+7VxUUyEtSJ339wU/VJRPnW/ArARMZ0NcrS6ejyWbv4MODW1MJFlzW7uXyDaQ3Q qRPR1cLf86H5Pxl0m34wqEVc9UZZDGofTWWTtEvuDotZiF5GZoKBfutlxjr69+us V2z8iQ02GJHCcxAX8jPYtI4ILwdhXI/21+89wNEDRTeBLwqjWMuN8wtd7QDtA4K0 pDPmsxAMsfZLweSwVWkVAxWnM2oMUXqbhZeBLzO3IrjEp12TUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGs+RTPf6qOUCVOJO3EY7pamarkUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNjlkMDI3ZjMtZTIxOS0z ZWQ0LWI3ODEtNWQyOWExY2EyNmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlX0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAMXlLHt0hzFFJiMtYeHmUsYRqZ0sap67IZXzxuufrVD4IrQILTspdY x2CRhnXzj9sNVHIzsSSPf9rGLri7HCz1HSSx6f7VtXqELWdXKbIt6vKQxEUInNRZ TJGLorowJIVhhPwASp6irYbByU/f4F7ks4JJ5zD6BTBHnwXQCQOPkByC16QhstKl IzzkRtily+3tgCc49i0LnUV8KiKhIoPA+pMutaTRb0Tr8bXRMcJIPNLv5p0VJ+aR c6n45/QSNF6f61q4lk5B/d/Ntrrwv+ByCs+Ai3YHHs1nVD5xDdNi18wiS5JhK7gy 9YQFQI1MYv1zmrmouwHUc7aogKQ1ang= -----END CERTIFICATE-----Generated at Fri Apr 17 15:18:46 2026 by rpki-client