$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ab23d51f-ab3a-339b-b5c4-569f948252ec.roa File: ab23d51f-ab3a-339b-b5c4-569f948252ec.roa (raw, json) Hash identifier: mXEbnHvBsJUJXZgnbV/tBJZLjtuUJNwlkqoE8UYC9qs= Subject key identifier: F5:BF:90:C9:A3:AD:08:73:68:A0:58:37:67:9F:EE:9B:36:88:73:6C Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4F934494ECC0527BE73080 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ab23d51f-ab3a-339b-b5c4-569f948252ec.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 170.85.130.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:93:44:94:ec:c0:52:7b:e7:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=33fe0827-7335-4c8d-9c3c-b792831d22f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f1:8a:68:5c:b5:57:2f:66:da:33:ac:35:89: 66:ac:bc:63:20:6f:80:62:33:29:c3:2c:b5:a8:a8: 0c:1c:46:40:fd:0f:64:b5:16:04:2d:45:f9:ae:a5: 2c:46:df:cc:b3:c8:38:c3:92:68:e7:ff:e9:7a:71: 0a:0a:cf:c0:37:7d:42:b6:05:e6:31:df:99:81:92: ca:ed:fd:39:24:db:77:10:76:88:f3:75:07:94:1c: 9b:11:17:c7:7d:4f:cb:51:1f:53:0d:3f:92:17:19: 5f:67:cc:77:ad:e1:9c:1b:82:29:51:0f:51:1b:21: eb:f5:6d:84:7b:d3:58:9b:22:0e:00:6b:c7:28:60: 6d:20:61:a7:73:6b:8d:d0:c6:95:6c:09:77:7e:c6: 77:3e:76:8c:90:86:7a:dc:fb:ff:93:40:00:e4:12: 46:2f:2e:6e:5b:8e:9f:be:af:6d:18:38:60:f7:3b: 49:d2:67:1c:a1:65:59:5e:46:8e:74:5c:ce:e9:e5: 21:da:ae:c1:f1:7c:f3:a1:2c:c1:c5:37:a8:d3:74: 5b:7c:63:c3:e5:5b:b3:24:59:7a:ee:8a:ea:49:72: c9:04:c2:73:e3:d8:41:80:79:cf:0e:31:74:41:16: 37:07:b8:ff:2d:f7:b2:a5:35:30:8f:e4:b4:6a:57: 73:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:BF:90:C9:A3:AD:08:73:68:A0:58:37:67:9F:EE:9B:36:88:73:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ab23d51f-ab3a-339b-b5c4-569f948252ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:57:2b:5c:34:b6:e7:44:98:f4:00:78:6a:08:72:9f:10:92: 56:32:0a:28:c0:31:97:c1:35:30:5e:c4:cd:2d:0e:e4:ed:e5: 51:0f:6d:13:66:c4:28:51:ac:81:06:bf:b1:2f:1f:e9:99:00: 03:b6:9b:22:18:7f:73:69:47:22:e4:9b:74:5b:e5:33:2a:92: 47:ae:69:30:da:de:d9:d0:a9:9f:36:47:6b:02:9d:f2:a4:b7: 6f:b8:df:56:1e:2d:60:95:e8:b0:91:32:b5:74:9b:41:9d:33: 12:e6:dd:49:bf:b8:3b:38:c3:39:bc:07:5b:22:42:b8:89:8d: 94:8b:80:97:29:6d:49:29:8a:fd:35:f3:16:5e:4b:bf:35:26: 83:8a:b4:35:84:e2:76:66:43:1b:7c:a5:cb:04:fc:77:cc:e6: b3:31:3d:21:ab:73:68:8f:db:25:0c:00:8f:90:8d:72:46:e9: 64:82:a5:07:3c:7a:81:99:b4:7d:94:3a:8f:af:f4:52:f1:90: ab:91:1b:87:7f:d9:22:d8:dc:91:00:06:9a:a8:6e:ab:aa:fd: 23:a6:97:b1:ac:f5:ad:6b:cc:b3:48:49:95:0b:ff:ba:02:19: df:f8:15:78:56:2d:a9:d4:65:a4:71:6b:5c:f1:68:10:11:1b: 21:75:c8:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT5NElOzAUnvnMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk MzNmZTA4MjctNzMzNS00YzhkLTljM2MtYjc5MjgzMWQyMmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfGKaFy1Vy9m2jOsNYlmrLxjIG+AYjMpwyy1 qKgMHEZA/Q9ktRYELUX5rqUsRt/Ms8g4w5Jo5//penEKCs/AN31CtgXmMd+ZgZLK 7f05JNt3EHaI83UHlBybERfHfU/LUR9TDT+SFxlfZ8x3reGcG4IpUQ9RGyHr9W2E e9NYmyIOAGvHKGBtIGGnc2uN0MaVbAl3fsZ3PnaMkIZ63Pv/k0AA5BJGLy5uW46f vq9tGDhg9ztJ0mccoWVZXkaOdFzO6eUh2q7B8XzzoSzBxTeo03RbfGPD5VuzJFl6 7orqSXLJBMJz49hBgHnPDjF0QRY3B7j/LfeypTUwj+S0aldz+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPW/kMmjrQhzaKBYN2ef7ps2iHNsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYWIyM2Q1MWYtYWIzYS0z MzliLWI1YzQtNTY5Zjk0ODI1MmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlWCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJXK1w0tudEmPQAeGoIcp8QklYyCijAMZfBNTBexM0tDuTt5VEPbRNm xChRrIEGv7EvH+mZAAO2myIYf3NpRyLkm3Rb5TMqkkeuaTDa3tnQqZ82R2sCnfKk t2+431YeLWCV6LCRMrV0m0GdMxLm3Um/uDs4wzm8B1siQriJjZSLgJcpbUkpiv01 8xZeS781JoOKtDWE4nZmQxt8pcsE/HfM5rMxPSGrc2iP2yUMAI+QjXJG6WSCpQc8 eoGZtH2UOo+v9FLxkKuRG4d/2SLY3JEABpqobquq/SOml7Gs9a1rzLNISZUL/7oC Gd/4FXhWLanUZaRxa1zxaBARGyF1yA4= -----END CERTIFICATE-----Generated at Fri Apr 17 15:56:21 2026 by rpki-client