$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b9d4483c-4854-3052-bbca-160206d7c741.roa File: b9d4483c-4854-3052-bbca-160206d7c741.roa (raw, json) Hash identifier: GbdRqI2ndJ7kcq31WGLZ71wUzG4h+f5xiE52PKTpI54= Subject key identifier: B1:8F:7B:DB:CC:51:48:5B:4E:AE:6F:2B:6C:C1:EB:D3:24:8E:72:DF Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5F7FAE09EC179E543DA69300 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b9d4483c-4854-3052-bbca-160206d7c741.roa Signing time: Thu 02 Apr 2026 13:00:30 +0000 ROA not before: Thu 02 Apr 2026 13:00:30 +0000 ROA not after: Wed 01 Jul 2026 13:00:30 +0000 asID: 8987 IP address blocks: 170.85.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:7f:ae:09:ec:17:9e:54:3d:a6:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 2 13:00:30 2026 GMT Not After : Jul 1 13:00:30 2026 GMT Subject: CN=ef653cce-4634-4dde-9b91-2b55647d2670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ee:1d:59:37:1d:18:cd:02:f0:e2:b0:ac:fe: 00:4e:4d:b5:21:b6:a6:8e:0f:a0:4a:81:06:7b:e7: 6c:9f:60:e3:40:84:a6:41:38:76:80:22:83:ea:da: 68:4d:77:4c:df:6e:c0:b4:47:0f:fd:f5:99:c6:ea: d5:67:4a:27:3b:e5:64:8a:55:3a:3f:10:f9:52:4e: ff:34:71:1d:63:e0:55:13:1d:62:8f:b1:6b:d9:1d: 53:32:0b:84:6b:f5:6b:5e:14:23:04:d6:86:42:88: aa:17:00:9a:32:25:4a:a7:c4:eb:6a:7b:93:f0:85: 01:ec:1b:9a:10:58:80:1f:93:91:0d:24:6f:42:ae: 90:12:72:65:36:86:65:78:3d:3d:00:e4:34:f6:47: c3:ea:ec:cf:6b:51:f8:0c:22:9c:c1:1d:f3:57:bc: eb:e3:24:00:cd:9b:15:44:ce:75:5f:ea:56:9a:f5: 7a:d8:54:a1:d4:fd:9a:90:e9:50:56:49:b0:92:c7: 97:c6:22:70:dc:dd:ff:3b:5a:9e:9f:64:73:fe:81: 00:f9:4c:c4:dd:05:74:e5:ea:6c:c3:fa:f9:8d:11: ae:88:e2:e2:5d:09:27:c5:91:c0:0d:c5:e1:c5:79: 94:de:ab:f8:65:2f:78:d2:e0:2c:10:3c:79:9a:2e: 57:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:8F:7B:DB:CC:51:48:5B:4E:AE:6F:2B:6C:C1:EB:D3:24:8E:72:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b9d4483c-4854-3052-bbca-160206d7c741.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:8e:c4:b7:be:b3:d2:10:04:85:c1:28:c2:0b:d1:a4:4b:c5: 4b:89:9e:e8:44:ec:62:3b:8a:91:3f:9f:9d:05:fd:81:40:6f: d0:b0:bb:3b:68:a6:14:ea:85:f7:73:a8:9e:e0:a0:84:58:4e: dd:33:c5:e5:15:4f:bd:b7:18:f9:e4:34:7d:40:e6:1a:f0:26: 78:c9:d4:dd:17:34:65:24:39:6a:a2:0b:08:ad:17:62:0f:ba: 4f:33:14:db:d3:92:9f:5a:d3:87:0f:20:68:79:e2:82:03:46: ec:b2:21:fe:61:13:03:42:2e:b6:f9:02:5d:52:91:29:15:d0: 32:76:c0:7b:93:bc:4b:f7:b7:25:df:0f:67:08:8d:6e:16:95: 37:61:ce:df:af:cc:d5:0a:9f:72:d2:f9:ca:b7:17:b7:0e:26: 5c:d8:c4:7f:17:d5:33:a3:68:87:16:82:b9:db:f4:d3:0a:96: 53:d1:d9:04:f2:13:87:df:46:43:f5:97:20:20:c0:71:02:e9: 4e:c7:46:0f:69:d5:c0:37:78:8f:ce:8f:70:3a:1e:69:8e:2f: bc:e3:a9:60:f5:92:23:a7:ff:3d:32:fc:4a:c4:d3:73:03:81: 9f:b8:38:aa:7f:57:39:f1:b4:dd:48:91:be:83:e8:be:6d:78: 24:a9:29:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1ff64J7BeeVD2mkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMjEzMDAzMFoXDTI2MDcwMTEzMDAzMFowLzEtMCsGA1UEAxMk ZWY2NTNjY2UtNDYzNC00ZGRlLTliOTEtMmI1NTY0N2QyNjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgO4dWTcdGM0C8OKwrP4ATk21Ibamjg+gSoEG e+dsn2DjQISmQTh2gCKD6tpoTXdM327AtEcP/fWZxurVZ0onO+VkilU6PxD5Uk7/ NHEdY+BVEx1ij7Fr2R1TMguEa/VrXhQjBNaGQoiqFwCaMiVKp8TranuT8IUB7Bua EFiAH5ORDSRvQq6QEnJlNoZleD09AOQ09kfD6uzPa1H4DCKcwR3zV7zr4yQAzZsV RM51X+pWmvV62FSh1P2akOlQVkmwkseXxiJw3N3/O1qen2Rz/oEA+UzE3QV05eps w/r5jRGuiOLiXQknxZHADcXhxXmU3qv4ZS940uAsEDx5mi5XtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGPe9vMUUhbTq5vK2zB69MkjnLfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYjlkNDQ4M2MtNDg1NC0z MDUyLWJiY2EtMTYwMjA2ZDdjNzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlX7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6OxLe+s9IQBIXBKMIL0aRLxUuJnuhE7GI7ipE/n50F/YFAb9Cwuzto phTqhfdzqJ7goIRYTt0zxeUVT723GPnkNH1A5hrwJnjJ1N0XNGUkOWqiCwitF2IP uk8zFNvTkp9a04cPIGh54oIDRuyyIf5hEwNCLrb5Al1SkSkV0DJ2wHuTvEv3tyXf D2cIjW4WlTdhzt+vzNUKn3LS+cq3F7cOJlzYxH8X1TOjaIcWgrnb9NMKllPR2QTy E4ffRkP1lyAgwHEC6U7HRg9p1cA3eI/Oj3A6HmmOL7zjqWD1kiOn/z0y/ErE03MD gZ+4OKp/VznxtN1Ikb6D6L5teCSpKfs= -----END CERTIFICATE-----Generated at Fri Apr 17 19:38:51 2026 by rpki-client