$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bcf0604d-2a98-3cf7-bf1f-f1fe764f2f61.roa File: bcf0604d-2a98-3cf7-bf1f-f1fe764f2f61.roa (raw, json) Hash identifier: DHEV3/Ns0bj4vSOVOniJlPUmA5vKMedJvDexagfNjGA= Subject key identifier: 01:E9:07:0A:E5:5D:D2:8E:89:B2:54:DA:6C:8C:C2:5A:8D:E8:94:37 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4F95D7CB5AE9909C6DA4C0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bcf0604d-2a98-3cf7-bf1f-f1fe764f2f61.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 170.85.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:95:d7:cb:5a:e9:90:9c:6d:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=4aa19e5c-34e9-49f3-b911-cf854868fca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6a:8b:c5:53:e6:3f:a7:70:7b:c3:cf:1d:5f: 75:07:79:b2:c3:5c:36:c2:9a:b6:d7:cd:ed:1b:2e: a3:b2:f7:f9:4b:09:76:f6:52:a4:68:f1:6d:8a:9c: f8:7d:68:c2:3b:a8:0f:c3:93:b6:5d:00:34:6d:53: 76:79:ca:be:be:56:46:f2:1f:57:9d:23:b8:79:49: 22:74:6d:f9:dc:4f:c5:57:1e:e2:35:ca:3e:bf:88: 8c:62:9c:98:95:5a:48:0d:1b:fb:98:10:10:7e:be: bc:da:ec:76:f3:23:cc:44:09:c4:7c:c6:17:61:93: b8:f2:4a:56:8f:a2:ec:b3:1e:8b:e4:d8:91:45:d8: 98:8f:7e:94:b8:f2:9f:e8:ad:1a:25:9d:81:9f:39: 51:99:2e:ba:1a:ba:74:5c:f5:c7:dc:7b:fe:07:58: c8:a2:e6:19:42:e4:bb:df:80:bd:09:eb:d2:5a:36: 29:d0:ac:b1:71:8e:81:d0:08:c0:2b:02:5e:b3:a6: ad:39:1e:d4:3a:2b:51:89:3e:31:86:b6:a2:75:b7: 98:34:fd:b4:97:1a:1b:9d:9a:e1:33:e8:fa:aa:0b: c8:60:b8:89:68:76:8c:5b:d9:47:ab:96:44:0e:4c: cf:cf:43:87:cc:08:21:75:fa:f6:09:0e:c4:7f:6a: d5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E9:07:0A:E5:5D:D2:8E:89:B2:54:DA:6C:8C:C2:5A:8D:E8:94:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bcf0604d-2a98-3cf7-bf1f-f1fe764f2f61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:38:68:d5:60:15:a8:1a:53:7e:f6:29:1c:f5:94:35:36:80: f8:87:8b:5d:1e:33:62:4b:1b:41:48:59:b8:b9:a1:67:f0:18: cc:f5:65:db:6a:df:18:96:8d:68:15:1e:b1:ad:13:8f:37:68: cc:06:f2:21:4f:5d:cb:11:3e:25:ee:a1:93:e8:65:f1:5c:a4: 6b:4a:0a:bf:06:37:50:e8:4a:9c:21:3d:1d:57:31:7d:c6:89: c1:61:70:0a:97:b9:f1:0f:fc:5a:15:49:60:c1:50:d1:f6:89: 83:0b:c2:0f:03:44:15:89:30:05:88:31:ee:82:93:46:38:29: 92:21:68:1a:81:95:0f:42:88:da:1e:f2:a8:f5:66:02:b3:77: 4a:2c:8e:b3:ae:ca:7f:b0:7f:5d:4c:3c:90:15:b1:df:39:0b: ef:4e:0b:7d:bb:2d:ff:a1:78:a1:fe:e7:d4:c6:7c:1a:b7:5c: 6f:ec:c9:7f:5a:28:e5:5a:8b:3d:49:cd:83:83:04:8c:6f:f5: 7d:2b:87:56:11:16:43:ee:4c:12:99:81:90:ac:e9:32:11:28: 35:97:91:b8:b9:31:20:64:16:16:d3:7c:84:e1:0c:3b:d6:fa: 67:20:b7:ed:f6:fc:0b:bd:ed:b4:6c:bd:18:24:2b:89:e0:f3: df:25:bb:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT5XXy1rpkJxtpMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk NGFhMTllNWMtMzRlOS00OWYzLWI5MTEtY2Y4NTQ4NjhmY2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2qLxVPmP6dwe8PPHV91B3myw1w2wpq2183t Gy6jsvf5Swl29lKkaPFtipz4fWjCO6gPw5O2XQA0bVN2ecq+vlZG8h9XnSO4eUki dG353E/FVx7iNco+v4iMYpyYlVpIDRv7mBAQfr682ux28yPMRAnEfMYXYZO48kpW j6Lssx6L5NiRRdiYj36UuPKf6K0aJZ2BnzlRmS66Grp0XPXH3Hv+B1jIouYZQuS7 34C9CevSWjYp0KyxcY6B0AjAKwJes6atOR7UOitRiT4xhraidbeYNP20lxobnZrh M+j6qgvIYLiJaHaMW9lHq5ZEDkzPz0OHzAghdfr2CQ7Ef2rVPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHpBwrlXdKOibJU2myMwlqN6JQ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYmNmMDYwNGQtMmE5OC0z Y2Y3LWJmMWYtZjFmZTc2NGYyZjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlWIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJo4aNVgFagaU372KRz1lDU2gPiHi10eM2JLG0FIWbi5oWfwGMz1Zdtq 3xiWjWgVHrGtE483aMwG8iFPXcsRPiXuoZPoZfFcpGtKCr8GN1DoSpwhPR1XMX3G icFhcAqXufEP/FoVSWDBUNH2iYMLwg8DRBWJMAWIMe6Ck0Y4KZIhaBqBlQ9CiNoe 8qj1ZgKzd0osjrOuyn+wf11MPJAVsd85C+9OC327Lf+heKH+59TGfBq3XG/syX9a KOVaiz1JzYODBIxv9X0rh1YRFkPuTBKZgZCs6TIRKDWXkbi5MSBkFhbTfIThDDvW +mcgt+32/Au97bRsvRgkK4ng898luxg= -----END CERTIFICATE-----Generated at Fri Apr 17 12:40:30 2026 by rpki-client