$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a604cff9-0e0a-3fef-b07e-b2083da639ef.roa File: a604cff9-0e0a-3fef-b07e-b2083da639ef.roa (raw, json) Hash identifier: mcfYFSbohkgMFZtJVhzx8tkqETHJaiLk+k1WQLACeT0= Subject key identifier: AA:E0:A0:E9:34:14:6E:95:96:23:2A:B9:0B:5B:6F:38:B3:59:52:EA Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D67DFF7213C6058B26DB01180 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a604cff9-0e0a-3fef-b07e-b2083da639ef.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 22616 IP address blocks: 170.85.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:f7:21:3c:60:58:b2:6d:b0:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=9ca05ac1-575c-41b2-8075-0d00aef9ea91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:06:3b:1f:a5:b9:9d:f2:18:c9:e8:80:e3:1f: de:55:74:30:f2:13:fa:42:da:85:c2:19:5d:5c:15: 58:d8:1a:a8:57:90:17:25:4c:0c:42:da:19:df:c7: 45:80:91:cb:28:26:ee:94:6e:38:c5:24:71:30:63: 10:79:c3:c4:d2:31:ca:66:c4:38:36:2a:44:6e:70: dd:e4:9d:35:78:05:4e:66:ab:79:d5:52:a8:4b:0a: 36:f9:ef:33:17:5b:98:eb:86:ba:c2:95:8c:b1:cf: 32:db:92:76:8a:b2:06:2a:01:18:1c:05:be:9f:0e: 32:78:8c:c8:58:b1:40:ed:0d:1b:5c:ac:28:cc:05: b1:e0:cc:12:1e:95:75:53:e7:db:4a:b9:b9:aa:0f: 3c:77:14:2d:e0:07:55:b5:db:dd:3c:fa:37:1b:f2: 81:3e:e0:62:83:59:55:27:8e:54:ed:e0:cb:4d:be: 1a:9b:d1:e7:70:16:46:c1:7f:75:f1:e9:9a:c0:a1: 2a:94:b7:97:da:6d:59:47:63:ea:a2:c0:d6:61:c1: a8:6a:47:9c:a9:c3:03:01:2f:af:b1:0c:c0:1a:70: 04:1b:83:66:1b:d6:26:05:93:0f:c7:de:1d:de:ac: e2:b6:5e:98:4b:b4:75:6d:b8:89:f9:b6:0a:ed:55: e8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E0:A0:E9:34:14:6E:95:96:23:2A:B9:0B:5B:6F:38:B3:59:52:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a604cff9-0e0a-3fef-b07e-b2083da639ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:20:9e:80:ed:4e:83:5e:a8:60:94:f9:0a:3a:33:e4:18:d9: 11:96:44:df:77:bd:c1:96:63:de:86:4a:2e:fc:9e:4f:78:6e: e5:ed:fc:d8:5f:b9:c9:a4:a3:70:fa:df:8f:9e:c7:53:1d:fa: e5:d6:a7:1d:4c:aa:1d:b3:00:ab:ec:b3:ac:6f:ef:f2:d0:e9: ec:8e:7a:32:c9:0c:6b:91:c2:6e:7c:d7:29:6e:d0:64:f4:22: db:9d:10:ca:00:92:e0:8d:af:2e:6e:17:5d:96:4b:a6:49:ba: 4c:b9:bb:45:ee:22:90:3b:1b:de:90:20:f5:36:27:5c:b3:24: f3:f0:8b:67:17:81:ac:68:06:23:69:3e:84:18:ba:2b:5a:67: 89:fd:c1:62:ac:65:97:22:b2:ce:6a:40:d0:59:24:16:a9:2b: 6f:7b:88:55:26:1b:f3:7d:4e:5c:07:98:7e:98:ed:79:7a:63: df:c6:c3:a6:22:4d:f7:c7:e9:1b:99:b2:cf:04:2c:24:c8:ba: 52:1f:17:f8:8f:1a:43:27:4e:b7:26:bd:bf:3e:2f:44:91:40: 7b:f1:06:6a:78:57:b2:09:90:fa:68:e4:cb:f6:1f:66:0b:9b: c2:7d:50:27:ab:ad:9d:2d:cc:64:c9:43:2e:f0:f3:e6:66:08: 4e:68:18:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n3/chPGBYsm2wEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk OWNhMDVhYzEtNTc1Yy00MWIyLTgwNzUtMGQwMGFlZjllYTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswY7H6W5nfIYyeiA4x/eVXQw8hP6QtqFwhld XBVY2BqoV5AXJUwMQtoZ38dFgJHLKCbulG44xSRxMGMQecPE0jHKZsQ4NipEbnDd 5J01eAVOZqt51VKoSwo2+e8zF1uY64a6wpWMsc8y25J2irIGKgEYHAW+nw4yeIzI WLFA7Q0bXKwozAWx4MwSHpV1U+fbSrm5qg88dxQt4AdVtdvdPPo3G/KBPuBig1lV J45U7eDLTb4am9HncBZGwX918emawKEqlLeX2m1ZR2PqosDWYcGoakecqcMDAS+v sQzAGnAEG4NmG9YmBZMPx94d3qzitl6YS7R1bbiJ+bYK7VXoRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrgoOk0FG6VliMquQtbbzizWVLqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYTYwNGNmZjktMGUwYS0z ZmVmLWIwN2UtYjIwODNkYTYzOWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlX/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKcgnoDtToNeqGCU+Qo6M+QY2RGWRN93vcGWY96GSi78nk94buXt/Nhf ucmko3D634+ex1Md+uXWpx1Mqh2zAKvss6xv7/LQ6eyOejLJDGuRwm581ylu0GT0 ItudEMoAkuCNry5uF12WS6ZJuky5u0XuIpA7G96QIPU2J1yzJPPwi2cXgaxoBiNp PoQYuitaZ4n9wWKsZZciss5qQNBZJBapK297iFUmG/N9TlwHmH6Y7Xl6Y9/Gw6Yi TffH6RuZss8ELCTIulIfF/iPGkMnTrcmvb8+L0SRQHvxBmp4V7IJkPpo5Mv2H2YL m8J9UCerrZ0tzGTJQy7w8+ZmCE5oGJ0= -----END CERTIFICATE-----Generated at Fri Apr 17 15:20:31 2026 by rpki-client