$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d3b57844-aff2-371b-b21e-b8211257dadb.roa File: d3b57844-aff2-371b-b21e-b8211257dadb.roa (raw, json) Hash identifier: MZ0NArDu2jqJPKlFR5+QqHBCuUUY+HPYp5UuDHbV9wg= Subject key identifier: E5:AA:6A:63:18:67:25:11:B4:CB:85:1C:5E:09:CD:38:8E:7B:46:92 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4F9D341C3319BA7A059440 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d3b57844-aff2-371b-b21e-b8211257dadb.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 170.85.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:9d:34:1c:33:19:ba:7a:05:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=4177723b-1b78-4169-bec6-bab7802f56e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:86:e7:3d:0e:89:31:df:9e:04:f9:d0:22:0a: 17:96:2a:12:37:66:c4:51:32:0b:65:8c:6d:c0:e9: 99:f8:68:9f:81:0f:b4:3c:82:da:15:82:3a:d0:de: 21:4a:c9:90:ed:f2:68:ee:09:c5:e6:67:7d:e5:6b: 39:05:e5:79:9d:c0:50:85:81:45:34:88:f4:57:42: f4:e5:3f:8f:9e:f7:2d:52:6a:a1:ce:56:97:a1:6c: b0:65:25:74:b5:01:cd:81:47:4c:65:3e:dc:9e:11: e3:4a:57:9c:e0:08:24:ff:4f:71:58:18:a3:b4:1a: 29:39:fe:14:7b:47:97:19:f1:f6:7f:82:df:1c:9b: 5c:b4:d5:e5:b3:a3:31:ba:ac:30:a5:76:4c:a5:ba: 32:89:20:09:94:47:96:44:8e:ac:ac:fa:5f:41:08: 50:72:17:3f:3d:2d:06:e6:53:e6:eb:0b:30:55:32: 4b:ae:c2:4c:58:32:42:08:4d:7c:0f:70:95:56:b4: 11:09:18:9d:b7:9d:d0:eb:8f:d6:b7:b9:35:17:48: 20:e6:68:b7:43:93:22:db:e3:b9:63:c3:c0:16:46: 26:73:9d:ba:3e:71:fd:cf:a6:c4:e3:58:db:2a:23: 7d:93:0b:71:00:de:fe:83:72:ef:34:c7:af:cc:42: 97:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:AA:6A:63:18:67:25:11:B4:CB:85:1C:5E:09:CD:38:8E:7B:46:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d3b57844-aff2-371b-b21e-b8211257dadb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:48:e4:e3:6c:54:ba:58:57:53:e5:10:09:58:86:5f:4b:2f: 50:2c:e2:81:8c:93:da:a1:07:88:5a:a1:e9:b1:4f:2a:a9:69: 7a:09:cb:a0:68:bc:b3:9d:9f:81:93:e4:ea:1e:80:ea:82:13: 8b:c9:bb:b7:c9:48:68:6b:1d:54:87:1a:0d:13:12:66:06:6c: 06:22:01:42:ce:b6:37:1c:21:75:9a:4c:0a:06:40:7d:a9:5f: 10:e6:29:2d:a1:63:d4:43:1e:81:8c:69:aa:fd:44:76:77:ce: 6d:89:4e:c6:dd:fa:dc:d0:3a:ab:34:3e:b5:12:60:7a:ba:3e: 0f:08:04:1f:58:ad:97:fb:86:36:e7:16:a7:29:ce:3b:98:0b: 41:df:cc:30:61:1e:5f:a0:f6:8c:05:be:82:98:4d:66:10:dd: fb:b5:80:12:30:05:0e:85:ba:0b:97:36:a0:20:fd:b6:3e:e0: 62:5f:32:eb:8c:61:ce:65:e2:77:a6:25:68:1f:5f:3c:72:1e: 07:1f:a5:9e:f1:4e:5e:7d:86:bf:14:19:04:3e:19:f9:14:b6: 8a:6e:f5:39:85:9e:93:b6:67:a3:2a:0b:e9:85:a6:e2:36:b5: 83:0c:24:97:9a:a4:83:7a:9b:92:8c:52:0a:ea:55:8e:4a:f0: 5e:d3:d2:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT500HDMZunoFlEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk NDE3NzcyM2ItMWI3OC00MTY5LWJlYzYtYmFiNzgwMmY1NmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIbnPQ6JMd+eBPnQIgoXlioSN2bEUTILZYxt wOmZ+GifgQ+0PILaFYI60N4hSsmQ7fJo7gnF5md95Ws5BeV5ncBQhYFFNIj0V0L0 5T+PnvctUmqhzlaXoWywZSV0tQHNgUdMZT7cnhHjSlec4Agk/09xWBijtBopOf4U e0eXGfH2f4LfHJtctNXls6MxuqwwpXZMpboyiSAJlEeWRI6srPpfQQhQchc/PS0G 5lPm6wswVTJLrsJMWDJCCE18D3CVVrQRCRidt53Q64/Wt7k1F0gg5mi3Q5Mi2+O5 Y8PAFkYmc526PnH9z6bE41jbKiN9kwtxAN7+g3LvNMevzEKXCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWqamMYZyURtMuFHF4JzTiOe0aSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZDNiNTc4NDQtYWZmMi0z NzFiLWIyMWUtYjgyMTEyNTdkYWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlWKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlI5ONsVLpYV1PlEAlYhl9LL1As4oGMk9qhB4haoemxTyqpaXoJy6Bo vLOdn4GT5OoegOqCE4vJu7fJSGhrHVSHGg0TEmYGbAYiAULOtjccIXWaTAoGQH2p XxDmKS2hY9RDHoGMaar9RHZ3zm2JTsbd+tzQOqs0PrUSYHq6Pg8IBB9YrZf7hjbn FqcpzjuYC0HfzDBhHl+g9owFvoKYTWYQ3fu1gBIwBQ6FuguXNqAg/bY+4GJfMuuM Yc5l4nemJWgfXzxyHgcfpZ7xTl59hr8UGQQ+GfkUtopu9TmFnpO2Z6MqC+mFpuI2 tYMMJJeapIN6m5KMUgrqVY5K8F7T0uw= -----END CERTIFICATE-----Generated at Fri Apr 17 16:24:02 2026 by rpki-client