$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/dc5174f3-2558-30f1-8293-a4290ef2c3ad.roa File: dc5174f3-2558-30f1-8293-a4290ef2c3ad.roa (raw, json) Hash identifier: qHvL4ceddDtTAnFHwvbvtm5G/EM0/Ngo13bi5aSKGn8= Subject key identifier: FA:9D:DA:03:A6:41:3A:DD:7C:8F:3C:5E:F2:EC:B3:B2:05:B3:8D:3D Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4F91D50B65C24EA10DBAC0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/dc5174f3-2558-30f1-8293-a4290ef2c3ad.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 170.85.160.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:91:d5:0b:65:c2:4e:a1:0d:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=94b663c6-582f-4fd5-b88b-0e2bda8ea470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fe:38:ec:c6:33:7a:48:50:ab:8d:c9:4f:a0: 2f:c6:9c:74:7e:b7:75:b5:46:42:43:3f:f6:04:5c: 8f:1e:89:5d:ec:b2:9d:8e:12:10:6e:c7:5e:8e:74: fe:be:6d:39:bd:45:07:60:34:8a:aa:02:88:98:68: 76:30:aa:d1:c6:06:8c:44:5f:0b:50:42:03:e0:b5: d0:19:3f:9e:ba:c2:5f:e2:9b:8e:3f:10:64:6f:8c: 59:fb:74:4a:30:7f:8a:b0:bb:b7:6b:5b:28:27:83: 3e:f7:bf:8a:ed:99:13:c5:2f:a7:d6:99:84:2d:44: 7d:d2:c5:4d:3a:df:0d:5b:93:ac:3b:d5:ea:2f:3b: be:bb:13:e6:5a:bb:eb:1c:17:e4:34:a3:e0:b8:51: 35:d8:a7:26:12:aa:44:70:c6:18:d5:bc:84:23:45: 45:ca:82:dd:a3:1f:e1:78:65:04:da:3d:b0:72:99: 44:08:e6:ec:fc:cd:23:ad:38:4d:31:eb:30:4c:05: b2:a4:a3:35:60:e9:95:f9:b4:97:ee:12:6b:12:7d: b3:98:3b:ff:46:77:21:68:4a:fa:e8:81:c0:8d:ea: 71:3d:8f:2b:ea:c1:1a:dc:9e:3e:b1:9c:85:d8:c3: 40:be:e5:8b:a5:a5:b8:4c:c8:f1:71:0d:a5:6a:1c: 6e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9D:DA:03:A6:41:3A:DD:7C:8F:3C:5E:F2:EC:B3:B2:05:B3:8D:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/dc5174f3-2558-30f1-8293-a4290ef2c3ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:e5:0f:5f:6f:04:eb:90:06:6d:41:78:39:5c:db:c2:a6:bc: 46:55:a2:15:56:50:19:88:2c:e8:99:08:e4:26:9b:5f:45:0c: 82:19:3f:99:0c:58:58:0d:70:0a:59:7c:36:59:e8:b3:34:12: e3:fb:d1:05:f5:72:65:f9:5b:f6:8f:5f:aa:a5:62:ab:40:a8: 53:6b:25:73:f7:97:4e:ce:ab:f7:fc:89:a2:54:aa:c8:a7:4e: 25:99:74:fb:31:c2:04:d8:f5:fb:21:11:3b:8a:0e:95:db:5a: 6a:c0:22:e5:8e:b9:ec:24:07:52:73:c6:d7:bd:16:b5:ee:a8: fd:ad:23:d2:29:79:71:d9:6e:14:ec:9a:41:4e:8c:6e:f7:4a: b0:25:a0:bd:b3:ee:70:ba:ea:e7:bb:e5:de:86:6b:68:96:34: 84:d1:b5:94:8b:64:89:83:70:bb:fa:62:dc:ac:38:4d:73:4b: dc:06:15:bf:8f:4d:17:62:64:bd:95:6a:b5:86:c2:67:41:b7: e1:ee:24:fe:09:c2:fa:47:d5:40:45:4c:2c:6b:51:b2:cc:2e: 01:59:e2:23:16:4c:e7:e3:89:7e:a8:32:59:c1:17:98:78:b0: c3:9d:8e:41:46:4a:03:81:3a:fc:43:f6:94:f1:38:3e:14:04: a7:16:b0:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT5HVC2XCTqENusAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk OTRiNjYzYzYtNTgyZi00ZmQ1LWI4OGItMGUyYmRhOGVhNDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlP447MYzekhQq43JT6Avxpx0frd1tUZCQz/2 BFyPHold7LKdjhIQbsdejnT+vm05vUUHYDSKqgKImGh2MKrRxgaMRF8LUEID4LXQ GT+eusJf4puOPxBkb4xZ+3RKMH+KsLu3a1soJ4M+97+K7ZkTxS+n1pmELUR90sVN Ot8NW5OsO9XqLzu+uxPmWrvrHBfkNKPguFE12KcmEqpEcMYY1byEI0VFyoLdox/h eGUE2j2wcplECObs/M0jrThNMeswTAWypKM1YOmV+bSX7hJrEn2zmDv/RnchaEr6 6IHAjepxPY8r6sEa3J4+sZyF2MNAvuWLpaW4TMjxcQ2lahxuEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqd2gOmQTrdfI88XvLss7IFs409MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZGM1MTc0ZjMtMjU1OC0z MGYxLTgyOTMtYTQyOTBlZjJjM2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK/lD19vBOuQBm1BeDlc28KmvEZVohVWUBmILOiZCOQmm19FDIIZP5kM WFgNcApZfDZZ6LM0EuP70QX1cmX5W/aPX6qlYqtAqFNrJXP3l07Oq/f8iaJUqsin TiWZdPsxwgTY9fshETuKDpXbWmrAIuWOuewkB1Jzxte9FrXuqP2tI9IpeXHZbhTs mkFOjG73SrAloL2z7nC66ue75d6Ga2iWNITRtZSLZImDcLv6YtysOE1zS9wGFb+P TRdiZL2VarWGwmdBt+HuJP4JwvpH1UBFTCxrUbLMLgFZ4iMWTOfjiX6oMlnBF5h4 sMOdjkFGSgOBOvxD9pTxOD4UBKcWsNg= -----END CERTIFICATE-----Generated at Fri Apr 17 17:55:12 2026 by rpki-client