$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d3e9ccf3-1bdc-3ca2-8956-1983756ddc98.roa File: d3e9ccf3-1bdc-3ca2-8956-1983756ddc98.roa (raw, json) Hash identifier: j3toburw+NB5llEcDghvZU9AevlYHpKHk++lzPESXlo= Subject key identifier: 9D:D1:35:7C:51:E5:12:23:CF:F8:6C:5D:A9:2C:D9:50:4F:37:8B:09 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D624A5D5550ADBA733426CD00 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d3e9ccf3-1bdc-3ca2-8956-1983756ddc98.roa Signing time: Fri 03 Apr 2026 13:00:30 +0000 ROA not before: Fri 03 Apr 2026 13:00:30 +0000 ROA not after: Thu 02 Jul 2026 13:00:30 +0000 asID: 53813 IP address blocks: 170.85.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:62:4a:5d:55:50:ad:ba:73:34:26:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 3 13:00:30 2026 GMT Not After : Jul 2 13:00:30 2026 GMT Subject: CN=c1c7dbae-086a-4177-98ff-f575b2fd92f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:76:6a:46:4d:cd:d2:50:89:94:4f:09:e3:87: d9:2a:4d:b1:6c:5a:40:7d:d3:49:cd:05:b6:e9:c7: 42:fa:ec:81:42:ab:9d:8f:86:dd:1e:0c:24:fc:bc: 41:34:3d:5f:e2:9b:c6:42:f0:4d:b0:c4:41:67:95: b9:82:14:c9:58:0a:2b:32:25:7e:0c:7a:b1:77:e8: fc:cb:30:9f:5c:a3:6a:a2:7c:71:a0:82:33:c5:84: 79:a6:3c:a4:61:b2:3c:1e:8d:3e:e5:7f:2d:64:44: 7f:de:31:55:c6:f8:42:4e:ce:0a:5d:f9:23:7c:fe: 41:34:0f:df:73:cc:f7:95:eb:75:b6:e3:7a:c3:83: 19:70:0f:6d:e8:78:6d:bf:91:9b:40:b2:69:3d:c1: f0:d1:88:00:90:d9:1e:7f:9b:10:07:d0:c8:0f:4e: 96:d6:a5:d8:08:06:ed:39:9d:ad:b0:a7:fd:30:95: 52:53:9b:34:e1:a0:75:45:0c:38:4c:80:ef:e2:01: 3e:bd:0e:7a:6e:1b:09:99:61:e8:f8:7f:0c:17:75: 35:3e:4b:b9:10:86:f5:86:85:5f:da:95:28:25:6b: 5c:14:06:e0:58:eb:5e:4a:70:2d:7c:98:8c:0b:f3: fe:63:69:ae:e4:07:56:48:37:c8:08:50:97:65:24: 47:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D1:35:7C:51:E5:12:23:CF:F8:6C:5D:A9:2C:D9:50:4F:37:8B:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d3e9ccf3-1bdc-3ca2-8956-1983756ddc98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:e3:a2:bf:50:98:d3:7b:4a:fc:f0:4e:0b:4a:81:dd:f3:a4: 34:79:cb:47:0f:06:6e:30:71:f1:5e:08:a7:b7:ed:64:ef:7f: df:50:78:48:1a:b5:f1:11:28:53:9a:38:9b:1c:e4:2d:06:7a: e6:b7:05:b2:75:c7:95:4e:fa:77:83:02:7c:6f:7b:40:49:6c: ad:4f:9c:26:47:90:7e:6e:8b:e1:92:f8:1f:62:9e:95:1c:2c: 0a:6e:9d:96:db:f2:bd:44:22:b1:d7:3f:18:c3:74:7a:82:dd: b8:66:ff:f9:1e:75:d7:d4:0f:2c:9b:eb:0e:23:05:43:c8:a1: 41:f2:c5:e3:26:d9:14:7e:40:93:fc:e2:d0:76:78:3f:c6:62: ef:5d:0b:9c:f6:6c:60:32:2d:98:cf:bf:bd:93:93:f7:42:1d: 8f:fd:c8:66:65:ca:0a:38:45:6c:42:71:e9:88:38:bd:4e:6b: 31:ee:55:f7:6e:98:c2:0e:d8:ff:fb:2f:ef:d8:ef:92:34:f8: f3:5c:5e:02:80:5c:80:9f:6b:dd:29:1a:c5:ac:f1:f5:4d:d8: a1:ca:c8:0e:46:37:ca:4b:e9:88:9f:ad:37:7d:9c:23:b0:81: e9:06:66:71:f6:34:28:25:11:b1:10:ae:98:13:90:c2:96:e8: 87:a4:d7:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1iSl1VUK26czQmzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMzEzMDAzMFoXDTI2MDcwMjEzMDAzMFowLzEtMCsGA1UEAxMk YzFjN2RiYWUtMDg2YS00MTc3LTk4ZmYtZjU3NWIyZmQ5MmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnZqRk3N0lCJlE8J44fZKk2xbFpAfdNJzQW2 6cdC+uyBQqudj4bdHgwk/LxBND1f4pvGQvBNsMRBZ5W5ghTJWAorMiV+DHqxd+j8 yzCfXKNqonxxoIIzxYR5pjykYbI8Ho0+5X8tZER/3jFVxvhCTs4KXfkjfP5BNA/f c8z3let1tuN6w4MZcA9t6Hhtv5GbQLJpPcHw0YgAkNkef5sQB9DID06W1qXYCAbt OZ2tsKf9MJVSU5s04aB1RQw4TIDv4gE+vQ56bhsJmWHo+H8MF3U1Pku5EIb1hoVf 2pUoJWtcFAbgWOteSnAtfJiMC/P+Y2mu5AdWSDfICFCXZSRH0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3RNXxR5RIjz/hsXaks2VBPN4sJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZDNlOWNjZjMtMWJkYy0z Y2EyLTg5NTYtMTk4Mzc1NmRkYzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlX6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHjor9QmNN7SvzwTgtKgd3zpDR5y0cPBm4wcfFeCKe37WTvf99QeEga tfERKFOaOJsc5C0Geua3BbJ1x5VO+neDAnxve0BJbK1PnCZHkH5ui+GS+B9inpUc LApunZbb8r1EIrHXPxjDdHqC3bhm//keddfUDyyb6w4jBUPIoUHyxeMm2RR+QJP8 4tB2eD/GYu9dC5z2bGAyLZjPv72Tk/dCHY/9yGZlygo4RWxCcemIOL1OazHuVfdu mMIO2P/7L+/Y75I0+PNcXgKAXICfa90pGsWs8fVN2KHKyA5GN8pL6YifrTd9nCOw gekGZnH2NCglEbEQrpgTkMKW6Iek1/o= -----END CERTIFICATE-----Generated at Fri Apr 17 16:42:13 2026 by rpki-client