$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b76d61cb-cbea-330c-81ec-1c971a851056.roa File: b76d61cb-cbea-330c-81ec-1c971a851056.roa (raw, json) Hash identifier: Z7fElNJXeB4/MyCC4aMxw6vz1Nae4TuGi9trnNVFoHE= Subject key identifier: 2A:F3:9F:A0:AD:42:6D:BF:04:78:EF:D2:C2:8F:A1:E0:56:4B:4E:19 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D624A5A011E857AEF3CCCB2C0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b76d61cb-cbea-330c-81ec-1c971a851056.roa Signing time: Fri 03 Apr 2026 13:00:30 +0000 ROA not before: Fri 03 Apr 2026 13:00:30 +0000 ROA not after: Thu 02 Jul 2026 13:00:30 +0000 asID: 22616 IP address blocks: 170.85.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:62:4a:5a:01:1e:85:7a:ef:3c:cc:b2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 3 13:00:30 2026 GMT Not After : Jul 2 13:00:30 2026 GMT Subject: CN=d99a72cc-a9de-4587-9544-644077d805ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9b:3e:11:ee:72:37:fa:04:38:bf:4b:fb:63: a2:59:01:29:99:74:a7:d5:a3:f5:06:84:42:7e:a4: 02:e4:60:7c:26:43:23:b5:ed:31:5b:14:dc:c6:e6: fb:87:62:bf:18:ca:34:bb:0b:49:8f:ab:1d:2b:c1: a0:a7:7d:cd:ac:07:b3:ba:14:26:6a:8e:99:44:d3: 14:28:62:21:55:7f:7b:d4:5b:83:91:51:1f:b8:90: 32:8f:88:69:d7:c9:7b:34:69:e0:f3:bc:42:30:a0: 33:fb:1b:55:22:7b:51:d4:14:30:98:d1:15:12:42: 8b:fe:cf:22:cb:de:53:bc:42:88:b6:a0:39:2f:91: 88:31:39:2f:e5:ae:78:57:f1:0f:90:f1:21:95:b8: b9:5c:32:8c:15:eb:95:43:77:e4:74:20:3c:cf:08: 05:31:3f:3e:b5:40:fb:0b:68:60:b1:41:d7:8d:44: 66:78:57:66:0f:ef:20:65:ab:29:ad:22:32:28:5c: 90:16:a8:8c:75:e6:e4:da:e3:e0:f6:f9:c8:b0:a7: bb:95:a9:12:ba:75:b8:0b:56:88:28:61:ed:59:b4: 7c:5a:1c:f1:87:39:c6:ed:d4:da:c8:75:20:c4:8a: 4a:24:c7:f4:0f:99:69:41:2d:95:57:03:69:1c:0a: 00:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F3:9F:A0:AD:42:6D:BF:04:78:EF:D2:C2:8F:A1:E0:56:4B:4E:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b76d61cb-cbea-330c-81ec-1c971a851056.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:57:f2:75:81:77:db:78:42:68:28:c2:a8:ca:25:d9:db:c1: d5:e1:89:11:34:ea:de:00:ba:1a:12:4a:41:5f:75:de:b1:ae: a9:81:b9:b5:68:3e:de:aa:07:9f:56:67:a6:78:c9:6d:db:71: 2d:28:29:58:fd:52:00:10:7f:32:3b:ce:ca:fa:c1:a9:88:44: f0:bb:42:47:5d:ef:f8:57:a7:f0:b3:a2:8f:11:5e:59:de:32: 80:24:4b:22:b8:1c:d6:b2:3c:ed:45:97:82:ea:2a:d0:e9:d6: a8:9f:3b:7a:52:ae:18:ae:87:08:19:15:b1:35:61:fc:cf:2c: 07:9d:16:82:a8:0b:87:24:e2:c0:f0:5a:83:63:60:48:26:8b: c9:4f:76:be:dd:7a:be:fe:a7:b3:1d:a4:e2:29:60:50:0c:95: c7:64:d0:85:7e:83:eb:af:27:81:ea:72:0f:a0:35:ba:ca:9e: 20:4f:62:55:bd:1a:7d:2d:4b:15:e8:03:f8:7f:03:6b:43:75: b7:ff:81:46:03:b9:ff:7e:cc:fb:41:06:cb:cc:1d:05:f2:1f: 29:97:b8:ef:6b:1e:6a:39:ae:e3:da:0e:56:8a:20:86:c2:41: bb:d3:84:46:68:c4:8d:19:47:6f:f7:21:f7:e5:c4:29:2c:05: 99:f3:6e:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1iSloBHoV67zzMssAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMzEzMDAzMFoXDTI2MDcwMjEzMDAzMFowLzEtMCsGA1UEAxMk ZDk5YTcyY2MtYTlkZS00NTg3LTk1NDQtNjQ0MDc3ZDgwNWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAops+Ee5yN/oEOL9L+2OiWQEpmXSn1aP1BoRC fqQC5GB8JkMjte0xWxTcxub7h2K/GMo0uwtJj6sdK8Ggp33NrAezuhQmao6ZRNMU KGIhVX971FuDkVEfuJAyj4hp18l7NGng87xCMKAz+xtVIntR1BQwmNEVEkKL/s8i y95TvEKItqA5L5GIMTkv5a54V/EPkPEhlbi5XDKMFeuVQ3fkdCA8zwgFMT8+tUD7 C2hgsUHXjURmeFdmD+8gZasprSIyKFyQFqiMdebk2uPg9vnIsKe7lakSunW4C1aI KGHtWbR8WhzxhznG7dTayHUgxIpKJMf0D5lpQS2VVwNpHAoALwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrzn6CtQm2/BHjv0sKPoeBWS04ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYjc2ZDYxY2ItY2JlYS0z MzBjLTgxZWMtMWM5NzFhODUxMDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlX9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFX8nWBd9t4QmgowqjKJdnbwdXhiRE06t4AuhoSSkFfdd6xrqmBubVo Pt6qB59WZ6Z4yW3bcS0oKVj9UgAQfzI7zsr6wamIRPC7Qkdd7/hXp/Czoo8RXlne MoAkSyK4HNayPO1Fl4LqKtDp1qifO3pSrhiuhwgZFbE1YfzPLAedFoKoC4ck4sDw WoNjYEgmi8lPdr7der7+p7MdpOIpYFAMlcdk0IV+g+uvJ4Hqcg+gNbrKniBPYlW9 Gn0tSxXoA/h/A2tDdbf/gUYDuf9+zPtBBsvMHQXyHymXuO9rHmo5ruPaDlaKIIbC QbvThEZoxI0ZR2/3IfflxCksBZnzbgo= -----END CERTIFICATE-----Generated at Fri Apr 17 13:57:13 2026 by rpki-client