$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ce140d2d-4f24-3ba3-8491-41c722344e49.roa File: ce140d2d-4f24-3ba3-8491-41c722344e49.roa (raw, json) Hash identifier: wPcjfMyvO3z7W89LfPx0hRrY66aCoxW64t6dN5U3V9I= Subject key identifier: BA:15:BC:93:F8:ED:56:9A:E5:EA:F2:16:D5:E5:F6:E9:F6:92:58:D6 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584DF0AB4747E1BC1AD4F25345A0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ce140d2d-4f24-3ba3-8491-41c722344e49.roa Signing time: Sun 24 May 2026 13:00:30 +0000 ROA not before: Sun 24 May 2026 13:00:30 +0000 ROA not after: Sat 22 Aug 2026 13:00:30 +0000 asID: 8987 IP address blocks: 170.85.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f0:ab:47:47:e1:bc:1a:d4:f2:53:45:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: May 24 13:00:30 2026 GMT Not After : Aug 22 13:00:30 2026 GMT Subject: CN=efd1c130-b561-4f8e-971a-994c6d85a7c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a0:26:04:8f:6f:f6:56:4f:48:a2:a0:de:a5: 9a:6f:72:40:52:63:90:5b:ac:33:e5:4a:25:40:03: 13:4a:11:9c:06:11:e5:e5:10:11:21:5b:2f:68:e6: 14:a3:89:35:a1:fc:07:4e:d1:6b:f3:fb:0e:28:9c: b4:fb:d4:26:db:21:fe:79:05:64:83:46:e6:ab:d3: 99:66:a9:eb:31:74:88:a1:d9:71:a7:cc:2b:80:fc: 3f:df:93:b6:e0:a6:b7:75:f6:60:11:07:62:dd:a7: 06:bc:b7:a2:f1:bc:48:16:29:07:46:94:d0:ff:ca: 6d:0c:ee:21:e8:69:90:49:a3:d7:7c:d3:50:94:c4: 00:de:aa:f2:9c:40:74:2a:60:e4:38:28:f6:f8:84: f5:78:d9:6f:2d:94:fa:b3:a1:60:83:8d:bb:b3:6b: 02:1a:57:20:72:b8:71:f6:83:37:cd:e1:90:cf:69: 85:3d:e0:17:bb:14:24:bc:82:ab:cb:d4:a5:02:c2: 0c:02:49:ab:15:3a:c7:0d:b5:75:88:c5:99:1b:4f: 8c:f3:51:cb:01:56:af:56:c0:21:18:e5:94:d7:bc: 0c:01:c5:1c:14:9b:d0:7a:c3:b8:6f:08:34:80:70: e5:3b:19:59:48:10:6e:c4:27:5b:00:68:7e:a2:59: 8f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:15:BC:93:F8:ED:56:9A:E5:EA:F2:16:D5:E5:F6:E9:F6:92:58:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ce140d2d-4f24-3ba3-8491-41c722344e49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:2f:11:c1:09:20:08:1e:10:f9:6b:99:76:ff:44:87:33:55: 58:e9:41:c3:47:d4:47:53:70:b3:0a:1a:80:9e:2b:6d:cb:5a: b6:1f:bf:ae:ff:a0:ef:f8:e9:a3:fc:ff:51:05:3e:aa:ab:0f: 03:d3:ef:c0:19:11:f6:38:b9:fc:10:56:d9:8e:8d:2c:7b:9f: 8e:9b:23:cf:9b:bc:0e:71:b8:30:36:bd:47:a7:22:ca:62:89: 43:72:45:f7:47:3f:ac:f7:2c:99:0c:0e:fd:b3:57:22:43:a7: 33:16:06:b0:ad:1b:78:07:3e:b2:6e:37:6c:c9:e3:91:29:7c: 6b:ae:3c:67:28:d1:55:73:c1:66:1d:c4:55:54:f6:30:3b:4b: 57:a9:4b:95:4c:f5:dd:23:9b:d9:64:5b:c7:66:71:cc:0f:e5: 4e:b1:61:4d:c1:21:4f:74:2f:16:6a:3e:12:3d:42:47:1c:0d: 2e:6e:d1:81:83:cf:92:f5:1e:f8:40:79:ab:2f:ea:38:34:78: bb:7b:31:8d:5e:e3:92:5e:2f:84:b5:9c:f0:3b:e7:96:e0:3b: 5a:12:dd:b9:85:c2:f2:d9:cd:9c:65:09:42:29:5f:70:b1:44: 86:01:ab:7d:e5:c7:d3:87:df:86:bd:4e:8a:60:4a:e6:74:bd: 52:6f:ea:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3wq0dH4bwa1PJTRaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDUyNDEzMDAzMFoXDTI2MDgyMjEzMDAzMFowLzEtMCsGA1UEAxMk ZWZkMWMxMzAtYjU2MS00ZjhlLTk3MWEtOTk0YzZkODVhN2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6AmBI9v9lZPSKKg3qWab3JAUmOQW6wz5Uol QAMTShGcBhHl5RARIVsvaOYUo4k1ofwHTtFr8/sOKJy0+9Qm2yH+eQVkg0bmq9OZ ZqnrMXSIodlxp8wrgPw/35O24Ka3dfZgEQdi3acGvLei8bxIFikHRpTQ/8ptDO4h 6GmQSaPXfNNQlMQA3qrynEB0KmDkOCj2+IT1eNlvLZT6s6Fgg427s2sCGlcgcrhx 9oM3zeGQz2mFPeAXuxQkvIKry9SlAsIMAkmrFTrHDbV1iMWZG0+M81HLAVavVsAh GOWU17wMAcUcFJvQesO4bwg0gHDlOxlZSBBuxCdbAGh+olmPJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoVvJP47Vaa5eryFtXl9un2kljWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvY2UxNDBkMmQtNGYyNC0z YmEzLTg0OTEtNDFjNzIyMzQ0ZTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsvEcEJIAgeEPlrmXb/RIczVVjpQcNH1EdTcLMKGoCeK23LWrYfv67/ oO/46aP8/1EFPqqrDwPT78AZEfY4ufwQVtmOjSx7n46bI8+bvA5xuDA2vUenIspi iUNyRfdHP6z3LJkMDv2zVyJDpzMWBrCtG3gHPrJuN2zJ45EpfGuuPGco0VVzwWYd xFVU9jA7S1epS5VM9d0jm9lkW8dmccwP5U6xYU3BIU90LxZqPhI9QkccDS5u0YGD z5L1HvhAeasv6jg0eLt7MY1e45JeL4S1nPA755bgO1oS3bmFwvLZzZxlCUIpX3Cx RIYBq33lx9OH34a9TopgSuZ0vVJv6nE= -----END CERTIFICATE-----Generated at Sat Jun 13 22:32:37 2026 by rpki-client