$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bc675c9e-190a-3426-b908-1d5809a4a3a2.roa File: bc675c9e-190a-3426-b908-1d5809a4a3a2.roa (raw, json) Hash identifier: J2/SYY0Kpo6Afr7526+WfA+nAHZ8ElcpKA6b6Z3YWzU= Subject key identifier: 46:C7:7F:0B:AD:FA:22:17:E4:E9:3A:55:04:EE:42:10:02:9E:63:DF Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4F8FBB45B2296542A6FBC0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bc675c9e-190a-3426-b908-1d5809a4a3a2.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 170.85.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:8f:bb:45:b2:29:65:42:a6:fb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=3f42b165-0419-4a18-a983-7919b1c6850c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f1:60:69:03:0e:3a:cc:16:27:c0:44:86:8b: 22:c7:ff:08:60:78:84:91:5e:f5:7e:62:b8:52:c2: 8b:b1:a8:76:4e:05:fb:78:4b:e7:2a:77:6a:41:fa: 32:8a:26:da:ec:6e:de:dd:d4:56:3e:a2:a4:89:cb: 82:94:81:c8:ab:c4:a3:83:4c:d8:0b:f3:bb:54:1b: 24:61:3c:24:e4:50:ef:a5:4d:e5:18:c1:7f:4c:85: 50:10:44:65:ad:06:40:8e:87:9e:7d:ad:fe:49:72: 94:23:8a:cd:b9:8c:68:58:05:04:67:fe:76:f5:57: 93:6d:b5:11:18:f9:cf:5a:43:a5:3e:c2:fb:19:71: 9c:08:81:84:9e:88:d2:32:86:40:fa:9c:e4:11:76: ad:c7:9b:df:4b:bb:a2:9c:a1:25:a5:45:54:94:70: 2f:94:a6:63:85:91:de:f5:b8:45:24:8a:3b:d1:3d: 71:cb:87:b3:06:8b:12:68:e9:30:55:77:e9:e9:8d: ec:c7:01:30:67:40:f2:a0:1d:d0:7a:3c:94:4f:1d: 80:11:7c:f7:ad:4e:62:e9:83:40:99:05:f4:ad:b6: 0a:ed:2b:d3:d8:fb:c7:a3:b3:cc:94:69:11:53:7a: cd:d9:de:f8:05:e3:a7:cf:82:03:60:48:96:f2:c3: 6c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C7:7F:0B:AD:FA:22:17:E4:E9:3A:55:04:EE:42:10:02:9E:63:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bc675c9e-190a-3426-b908-1d5809a4a3a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:e1:d4:5c:eb:60:66:6e:9a:c3:08:bb:3b:8a:9c:74:a9:67: f9:0b:9a:71:cf:de:95:90:73:b9:5f:15:8b:cf:a5:27:cd:44: 72:8e:d8:50:9d:b9:ee:71:0e:08:2e:57:90:10:bf:f9:b4:45: d1:78:63:0f:55:4e:c5:e6:ba:48:2a:a9:1a:9a:23:80:72:0d: 7b:2a:8c:62:fd:2a:38:a9:9a:03:36:7f:2d:ff:80:4d:82:eb: 70:06:01:21:7c:86:0c:61:ee:4a:6b:14:e4:65:5e:8f:9e:4f: b7:6f:9c:7b:cf:ae:59:ef:d5:01:a9:58:fa:c2:e0:92:53:ae: 84:cd:f3:95:12:fa:b5:98:74:45:d0:46:9d:52:02:f7:ea:d4: 3f:4c:53:c3:75:eb:1c:03:95:86:4b:9a:4a:1f:9e:c9:a3:cc: 38:3b:5c:e4:f3:c8:8d:b7:ec:cb:f7:37:b5:5a:5f:17:d6:8c: 5e:35:5f:fa:04:bc:79:b5:fb:63:bd:a2:17:33:d7:7c:da:6c: b1:57:82:4b:59:10:0d:58:a5:84:5c:e6:5d:b9:1c:4a:e0:bc: ca:8d:3f:bd:0b:21:06:c7:4b:72:40:df:1c:e3:59:0c:df:5f: ab:48:b8:37:dd:fd:00:a6:af:12:51:68:ba:dc:db:7e:01:23: 11:59:83:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT4+7RbIpZUKm+8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk M2Y0MmIxNjUtMDQxOS00YTE4LWE5ODMtNzkxOWIxYzY4NTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/FgaQMOOswWJ8BEhosix/8IYHiEkV71fmK4 UsKLsah2TgX7eEvnKndqQfoyiiba7G7e3dRWPqKkicuClIHIq8Sjg0zYC/O7VBsk YTwk5FDvpU3lGMF/TIVQEERlrQZAjoeefa3+SXKUI4rNuYxoWAUEZ/529VeTbbUR GPnPWkOlPsL7GXGcCIGEnojSMoZA+pzkEXatx5vfS7uinKElpUVUlHAvlKZjhZHe 9bhFJIo70T1xy4ezBosSaOkwVXfp6Y3sxwEwZ0DyoB3QejyUTx2AEXz3rU5i6YNA mQX0rbYK7SvT2PvHo7PMlGkRU3rN2d74BeOnz4IDYEiW8sNszQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbHfwut+iIX5Ok6VQTuQhACnmPfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYmM2NzVjOWUtMTkwYS0z NDI2LWI5MDgtMWQ1ODA5YTRhM2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlWEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvh1FzrYGZumsMIuzuKnHSpZ/kLmnHP3pWQc7lfFYvPpSfNRHKO2FCd ue5xDgguV5AQv/m0RdF4Yw9VTsXmukgqqRqaI4ByDXsqjGL9KjipmgM2fy3/gE2C 63AGASF8hgxh7kprFORlXo+eT7dvnHvPrlnv1QGpWPrC4JJTroTN85US+rWYdEXQ Rp1SAvfq1D9MU8N16xwDlYZLmkofnsmjzDg7XOTzyI237Mv3N7VaXxfWjF41X/oE vHm1+2O9ohcz13zabLFXgktZEA1YpYRc5l25HErgvMqNP70LIQbHS3JA3xzjWQzf X6tIuDfd/QCmrxJRaLrc234BIxFZg8Q= -----END CERTIFICATE-----Generated at Fri Apr 17 14:34:07 2026 by rpki-client