$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e948d3bc-c692-3677-89d4-6047cb10b6d7.roa File: e948d3bc-c692-3677-89d4-6047cb10b6d7.roa (raw, json) Hash identifier: JCnfrcFo/UFTyPEzxnmr9Qp5WFRb2IqtcPmxQiqZzB4= Subject key identifier: 3C:7E:EB:F6:AD:43:FC:72:CC:C4:8D:9B:40:E9:67:EE:08:40:E4:05 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584CAE572309F1616D078ED44580 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e948d3bc-c692-3677-89d4-6047cb10b6d7.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 14618 IP address blocks: 170.85.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:23:09:f1:61:6d:07:8e:d4:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=93bb38f0-fd94-4250-ae92-41535e6583a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3f:d3:71:d7:ae:73:09:b1:95:ad:6c:8f:3d: ab:01:0d:e2:fd:6d:e6:d5:1c:1a:f4:15:8d:b6:5d: c3:c4:99:6d:a7:53:d3:96:80:3f:62:5f:80:84:05: 37:cf:08:3d:29:17:7d:aa:63:b1:b2:0a:1b:24:12: 05:67:ea:42:b1:2e:21:68:b1:60:79:66:82:24:95: ca:4d:f6:96:23:cf:cf:46:94:7c:38:58:c4:92:2a: 9c:c6:35:09:a3:57:9d:e8:73:81:09:b9:a7:2c:4b: 6a:15:6e:fb:91:d2:91:c5:67:65:81:d4:f8:17:b9: 68:c9:92:ad:6d:29:43:d5:3b:d8:d8:40:2e:e4:49: 96:20:0d:dd:ab:90:8a:cd:80:97:e6:e0:e7:37:2a: 5e:71:bb:38:6a:3b:75:ab:c4:c3:70:2a:37:df:a9: ca:eb:65:80:c5:b8:5f:74:46:6e:b8:c0:72:fa:66: 04:6b:28:75:d5:8f:ab:0f:15:ea:c8:06:bb:01:88: 4f:fa:0e:85:ef:5f:35:d1:39:64:94:a3:6f:85:76: f1:e8:18:30:b5:21:3e:f7:bd:56:c8:c1:89:21:e8: ca:cc:9a:fb:24:d8:51:08:94:61:5f:8f:29:dc:8a: c2:97:21:42:da:69:9a:29:7b:4f:ee:32:23:c9:c7: 29:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:7E:EB:F6:AD:43:FC:72:CC:C4:8D:9B:40:E9:67:EE:08:40:E4:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e948d3bc-c692-3677-89d4-6047cb10b6d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:8e:04:c3:2b:f9:86:e8:4d:65:96:52:cc:06:d2:23:64:ab: fa:71:2e:f0:e7:97:d1:42:9d:05:a4:05:6a:16:b8:fe:bc:ad: 43:09:63:11:3a:05:81:59:12:42:3d:78:60:0f:34:d0:c9:8a: fe:8b:50:80:b4:19:d6:69:19:51:9c:57:64:cd:a6:20:1a:27: a7:06:8c:ca:f6:18:06:01:5b:70:1d:35:35:04:59:dd:92:6d: 23:35:fe:d8:30:77:71:7a:bf:13:1a:05:57:62:f1:95:6c:16: 34:4c:52:17:20:b9:f5:b0:ed:e3:54:eb:d3:88:08:c7:5a:69: 6f:6f:bc:50:67:03:3f:fa:25:29:b8:28:80:6f:61:f4:9f:95: 98:c3:94:18:4b:c9:18:57:83:10:76:3c:19:8a:3a:32:f2:7c: 5b:42:e5:d6:b7:47:a5:e9:0f:60:c2:22:8f:e1:aa:0e:76:4a: 05:cc:13:d9:7a:1e:ca:cc:30:52:1b:b2:8e:08:af:36:a2:80: dd:7a:e9:42:b4:0f:21:9f:b5:c0:54:fb:d6:f2:b4:16:69:0f: a3:23:d3:53:91:3a:4a:45:bf:16:6c:07:3e:47:ce:0d:13:d5: 59:ea:ff:20:fb:b2:6c:28:9d:73:aa:6b:16:67:b8:5a:1a:42: 10:82:bf:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVyMJ8WFtB47URYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk OTNiYjM4ZjAtZmQ5NC00MjUwLWFlOTItNDE1MzVlNjU4M2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT/Tcdeucwmxla1sjz2rAQ3i/W3m1Rwa9BWN tl3DxJltp1PTloA/Yl+AhAU3zwg9KRd9qmOxsgobJBIFZ+pCsS4haLFgeWaCJJXK TfaWI8/PRpR8OFjEkiqcxjUJo1ed6HOBCbmnLEtqFW77kdKRxWdlgdT4F7loyZKt bSlD1TvY2EAu5EmWIA3dq5CKzYCX5uDnNypecbs4ajt1q8TDcCo336nK62WAxbhf dEZuuMBy+mYEayh11Y+rDxXqyAa7AYhP+g6F71810TlklKNvhXbx6BgwtSE+971W yMGJIejKzJr7JNhRCJRhX48p3IrClyFC2mmaKXtP7jIjyccpjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDx+6/atQ/xyzMSNm0DpZ+4IQOQFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZTk0OGQzYmMtYzY5Mi0z Njc3LTg5ZDQtNjA0N2NiMTBiNmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlUyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaOBMMr+YboTWWWUswG0iNkq/pxLvDnl9FCnQWkBWoWuP68rUMJYxE6 BYFZEkI9eGAPNNDJiv6LUIC0GdZpGVGcV2TNpiAaJ6cGjMr2GAYBW3AdNTUEWd2S bSM1/tgwd3F6vxMaBVdi8ZVsFjRMUhcgufWw7eNU69OICMdaaW9vvFBnAz/6JSm4 KIBvYfSflZjDlBhLyRhXgxB2PBmKOjLyfFtC5da3R6XpD2DCIo/hqg52SgXME9l6 HsrMMFIbso4IrzaigN166UK0DyGftcBU+9bytBZpD6Mj01OROkpFvxZsBz5Hzg0T 1Vnq/yD7smwonXOqaxZnuFoaQhCCv1M= -----END CERTIFICATE-----Generated at Mon Mar 2 08:05:49 2026 by rpki-client