$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cf96671a-6a74-3e65-a838-71e0e3f6e68c.roa File: cf96671a-6a74-3e65-a838-71e0e3f6e68c.roa (raw, json) Hash identifier: rFo5aLRwbdZj3g9Kwlic7HZK7lHRNKq5UJtXd9UdNgk= Subject key identifier: 10:32:98:68:29:13:AC:0B:2B:ED:5C:36:48:AD:F6:EF:AA:C7:30:60 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4F9E9D29F5BD68CE49F740 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cf96671a-6a74-3e65-a838-71e0e3f6e68c.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 170.85.76.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:9e:9d:29:f5:bd:68:ce:49:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=5d949aef-62ea-441e-91e8-1fe892217896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c7:e6:82:07:b3:72:d7:40:cd:7b:37:c5:8d: bb:b2:84:80:dd:82:5e:e3:92:81:0d:ba:b5:01:59: 2e:18:1e:60:e2:03:fc:23:95:ad:c2:cb:e4:4b:88: 64:de:59:22:61:b4:3a:3a:0d:24:66:a9:9c:37:24: 45:6c:19:74:9a:3e:3e:c5:e6:df:48:d2:2f:3b:fc: 14:6a:0a:46:48:ec:b4:50:1f:11:9f:a0:da:e3:97: 5e:63:61:56:db:17:79:c1:92:9b:ef:b1:4c:d9:99: 62:f5:5c:6d:17:2e:e9:1e:53:fa:46:80:a1:6d:ab: e9:2e:8d:58:5f:5f:43:cc:30:a4:37:01:b4:20:0d: 03:f8:07:46:f9:5f:1f:23:8b:03:a2:99:e0:26:41: a7:40:f1:19:26:2c:16:95:49:46:39:90:e6:9d:32: 9d:7e:8e:d7:37:fb:6f:aa:8b:59:c9:a9:b4:35:55: 66:43:3b:ac:fe:42:e4:da:2f:74:03:e3:9d:15:91: c5:0d:c0:b1:81:0d:58:c9:62:eb:98:d1:13:65:c9: 5a:1f:62:b4:58:26:46:d7:8b:ac:52:e0:21:a6:72: 7d:56:6b:dd:62:fd:31:6f:46:17:77:21:35:83:d8: 79:43:09:cd:3f:24:a8:a4:f7:57:28:68:01:a7:65: 77:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:32:98:68:29:13:AC:0B:2B:ED:5C:36:48:AD:F6:EF:AA:C7:30:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cf96671a-6a74-3e65-a838-71e0e3f6e68c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.76.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:28:2b:9c:5c:82:ca:a9:7c:19:8c:40:b7:f0:3f:f1:f7:ae: cc:b4:2b:fa:c3:6e:08:90:ab:3c:e3:18:30:7d:e9:f7:43:90: a1:85:4a:8e:66:5b:9f:87:c5:1d:35:85:d7:9f:d3:bd:34:2e: d6:69:89:a1:64:2f:a3:92:3b:b6:31:d9:18:0a:11:ae:01:08: ab:0d:52:18:6c:8d:15:82:35:f6:34:ae:3a:42:00:0a:ca:15: 4a:4e:8f:4c:4d:4a:a9:fc:97:db:68:5d:4a:dc:7c:62:4d:b4: a8:d6:15:4a:27:60:d3:70:12:6c:fb:51:9e:fa:3e:ca:f1:24: a2:08:64:b2:dc:a8:fc:87:3d:51:fa:8a:0a:5c:49:de:42:c1: 4b:53:b4:fe:f4:3b:01:e2:8b:26:99:9a:a7:93:dc:be:85:80: bf:fd:4b:0e:e7:3f:e9:c6:3b:ae:cd:f7:35:3b:81:6f:cf:a4: 55:1e:e3:3e:31:58:2e:d9:3b:ef:0f:e0:5d:3d:97:ee:d0:9f: 7b:0a:4f:0b:e2:c1:6b:2b:37:e6:0f:d8:af:ab:b7:09:26:d2: 52:24:69:29:8b:d4:28:92:af:14:e8:e8:0c:0c:a3:41:b5:b5: f8:21:8c:03:ad:96:54:1d:e8:90:54:cf:91:13:c1:58:90:7e: 37:91:0c:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT56dKfW9aM5J90AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk NWQ5NDlhZWYtNjJlYS00NDFlLTkxZTgtMWZlODkyMjE3ODk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMfmggezctdAzXs3xY27soSA3YJe45KBDbq1 AVkuGB5g4gP8I5WtwsvkS4hk3lkiYbQ6Og0kZqmcNyRFbBl0mj4+xebfSNIvO/wU agpGSOy0UB8Rn6Da45deY2FW2xd5wZKb77FM2Zli9VxtFy7pHlP6RoChbavpLo1Y X19DzDCkNwG0IA0D+AdG+V8fI4sDopngJkGnQPEZJiwWlUlGOZDmnTKdfo7XN/tv qotZyam0NVVmQzus/kLk2i90A+OdFZHFDcCxgQ1YyWLrmNETZclaH2K0WCZG14us UuAhpnJ9VmvdYv0xb0YXdyE1g9h5QwnNPySopPdXKGgBp2V3BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAymGgpE6wLK+1cNkit9u+qxzBgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvY2Y5NjY3MWEtNmE3NC0z ZTY1LWE4MzgtNzFlMGUzZjZlNjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlVMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgoK5xcgsqpfBmMQLfwP/H3rsy0K/rDbgiQqzzjGDB96fdDkKGFSo5m W5+HxR01hdef0700LtZpiaFkL6OSO7Yx2RgKEa4BCKsNUhhsjRWCNfY0rjpCAArK FUpOj0xNSqn8l9toXUrcfGJNtKjWFUonYNNwEmz7UZ76PsrxJKIIZLLcqPyHPVH6 igpcSd5CwUtTtP70OwHiiyaZmqeT3L6FgL/9Sw7nP+nGO67N9zU7gW/PpFUe4z4x WC7ZO+8P4F09l+7Qn3sKTwviwWsrN+YP2K+rtwkm0lIkaSmL1CiSrxTo6AwMo0G1 tfghjAOtllQd6JBUz5ETwViQfjeRDAY= -----END CERTIFICATE-----Generated at Fri Apr 17 15:36:09 2026 by rpki-client