$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9759123c-ea49-3d9e-ba50-b8862cf11566.roa File: 9759123c-ea49-3d9e-ba50-b8862cf11566.roa (raw, json) Hash identifier: le80SjoAg5o2avU5DKcKURylRQmAL6rGKHaabQKjn5Q= Subject key identifier: 38:24:59:67:F0:E1:19:8D:06:9F:4C:51:38:32:AC:A7:5E:7C:46:BF Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D624A5FE428EDE6DE3E56AF40 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9759123c-ea49-3d9e-ba50-b8862cf11566.roa Signing time: Fri 03 Apr 2026 13:00:30 +0000 ROA not before: Fri 03 Apr 2026 13:00:30 +0000 ROA not after: Thu 02 Jul 2026 13:00:30 +0000 asID: 8987 IP address blocks: 170.85.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:62:4a:5f:e4:28:ed:e6:de:3e:56:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 3 13:00:30 2026 GMT Not After : Jul 2 13:00:30 2026 GMT Subject: CN=d9b94195-a09b-4e13-8f73-61fd9ba88b76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ad:2c:bd:09:90:f0:58:2a:d9:81:0d:7f:80: ce:1a:99:88:8d:08:5e:fc:f4:64:cc:56:f1:8b:2c: 0d:69:93:66:11:5a:1d:87:7e:37:7e:25:19:94:d0: ca:85:7a:fe:bc:ff:77:20:d1:b2:39:16:bd:eb:b4: 14:f4:98:1b:ae:65:6c:c9:f1:60:48:3c:45:53:75: 51:36:a7:dd:48:2d:9a:73:a0:0e:cd:bd:44:f9:15: 63:db:00:86:b1:ae:0e:0d:49:b8:95:87:a8:af:37: 01:14:28:37:ad:33:20:7f:e4:f0:7b:bb:14:96:19: fc:95:4c:28:a4:19:8c:61:91:d9:b2:c1:40:32:ee: 85:d5:b5:af:35:fd:8c:a2:9e:66:41:54:32:9b:4e: 7b:dc:bc:51:d8:28:a0:4a:5a:24:45:ac:3f:f5:7b: 38:1c:ce:be:b9:04:75:e2:0b:ab:a3:c9:03:18:61: 3c:7d:36:9b:b4:9e:a7:25:9f:bc:33:f5:4c:ea:7e: 68:a2:06:5c:49:f0:e9:d1:17:84:37:57:39:1b:94: 1a:42:e7:ff:a0:81:db:20:12:a0:91:0a:32:a4:38: 70:5e:cf:ff:17:02:86:5c:78:d2:d3:ea:40:a6:fe: 6d:db:b7:91:e7:7e:c6:e6:be:92:62:84:75:2c:cf: 11:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:24:59:67:F0:E1:19:8D:06:9F:4C:51:38:32:AC:A7:5E:7C:46:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9759123c-ea49-3d9e-ba50-b8862cf11566.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:c7:30:85:12:47:85:56:ae:f0:f1:7d:55:02:9d:e7:8c:d8: 75:7c:a3:95:41:8b:94:16:d2:78:d3:ec:f4:fc:3b:13:21:6b: f3:ac:cd:10:0a:94:7f:be:95:3b:8b:b0:01:a7:b5:f8:15:4e: 60:ef:61:41:cd:89:80:f0:cf:44:b4:30:3e:f3:97:25:cf:6c: d2:7b:43:d3:2e:3b:71:8c:61:2d:3c:35:e9:03:e2:93:1d:0e: 0d:53:77:ee:67:b1:20:21:f5:77:e7:12:d8:47:8d:40:fd:bd: cc:33:a3:15:2c:a8:ac:31:fe:28:47:c0:ea:a8:19:31:3a:cf: f2:2b:ba:ec:b8:74:94:73:f9:b9:22:2d:7b:70:6b:dd:db:46: 21:27:89:94:a0:3a:29:de:d4:56:78:b5:06:84:2f:53:a9:6f: 7b:9d:26:82:64:97:1d:10:1e:7a:4d:ef:4a:91:79:69:7b:4d: 6c:37:8e:67:e0:b0:22:d6:62:24:3e:c3:59:89:e1:b7:64:2e: 23:0e:bd:71:67:45:90:c2:3d:5e:37:15:dc:d6:e2:64:03:c9: c2:23:e9:89:63:8f:68:7c:54:cc:f3:ac:a9:24:c3:a5:b4:40: 8a:bc:ed:a9:68:46:11:59:e2:8c:79:26:14:86:a1:13:c1:4c: 26:aa:56:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1iSl/kKO3m3j5Wr0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMzEzMDAzMFoXDTI2MDcwMjEzMDAzMFowLzEtMCsGA1UEAxMk ZDliOTQxOTUtYTA5Yi00ZTEzLThmNzMtNjFmZDliYTg4Yjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4q0svQmQ8Fgq2YENf4DOGpmIjQhe/PRkzFbx iywNaZNmEVodh343fiUZlNDKhXr+vP93INGyORa967QU9JgbrmVsyfFgSDxFU3VR NqfdSC2ac6AOzb1E+RVj2wCGsa4ODUm4lYeorzcBFCg3rTMgf+Twe7sUlhn8lUwo pBmMYZHZssFAMu6F1bWvNf2Mop5mQVQym0573LxR2CigSlokRaw/9Xs4HM6+uQR1 4guro8kDGGE8fTabtJ6nJZ+8M/VM6n5oogZcSfDp0ReEN1c5G5QaQuf/oIHbIBKg kQoypDhwXs//FwKGXHjS0+pApv5t27eR537G5r6SYoR1LM8RbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgkWWfw4RmNBp9MUTgyrKdefEa/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvOTc1OTEyM2MtZWE0OS0z ZDllLWJhNTAtYjg4NjJjZjExNTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3HMIUSR4VWrvDxfVUCneeM2HV8o5VBi5QW0njT7PT8OxMha/OszRAK lH++lTuLsAGntfgVTmDvYUHNiYDwz0S0MD7zlyXPbNJ7Q9MuO3GMYS08NekD4pMd Dg1Td+5nsSAh9XfnEthHjUD9vcwzoxUsqKwx/ihHwOqoGTE6z/Iruuy4dJRz+bki LXtwa93bRiEniZSgOine1FZ4tQaEL1Opb3udJoJklx0QHnpN70qReWl7TWw3jmfg sCLWYiQ+w1mJ4bdkLiMOvXFnRZDCPV43FdzW4mQDycIj6Yljj2h8VMzzrKkkw6W0 QIq87aloRhFZ4ox5JhSGoRPBTCaqVmM= -----END CERTIFICATE-----Generated at Fri Apr 17 19:04:59 2026 by rpki-client