$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f347370e-9cff-360b-b4f4-bfa4a1a5b8c0.roa File: f347370e-9cff-360b-b4f4-bfa4a1a5b8c0.roa (raw, json) Hash identifier: TiZgvP2RpAavxd6DNg7Ll4Qin8KshyQMFd1PXVxOtMg= Subject key identifier: 0C:2F:CC:E9:A5:3C:0D:5A:FD:6C:1B:D6:4E:CA:89:B8:03:AB:EF:21 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4F98F87E277ED213764500 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f347370e-9cff-360b-b4f4-bfa4a1a5b8c0.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 170.85.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:98:f8:7e:27:7e:d2:13:76:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=767c10ad-2b1f-4f1a-8210-0c111187f7eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:49:93:a4:c1:a6:9b:21:2b:d4:0c:51:89:58: 24:b1:17:92:96:8f:57:2a:31:d4:af:e3:ae:d9:18: 20:ad:ec:ea:a8:4b:cf:cb:b7:2f:2c:7e:ce:3f:44: e4:37:c1:0b:dd:60:5b:c8:a1:7b:ee:cd:43:ee:e9: 71:c2:92:0c:f2:b7:8c:fe:83:a5:4a:c9:4a:ef:09: fd:f7:6b:bf:63:1b:e8:4d:2d:37:cc:ef:78:61:d2: 2b:5f:db:0e:fc:0c:c7:d8:b4:2b:5d:08:8f:2d:de: 2d:d6:51:8e:dd:5a:e2:4e:d5:a0:09:14:a7:f5:66: f9:2e:32:e9:a7:a1:99:97:c4:db:95:6e:d5:49:5a: 1b:bf:d6:23:0f:38:ca:50:82:8e:27:82:cc:6b:be: 4b:05:01:2c:33:90:23:60:69:93:e3:4e:20:e7:f1: 52:48:b6:c0:c1:b2:6c:ab:e7:46:b4:06:78:fa:e4: 07:51:44:e7:9a:a9:67:04:64:2a:de:de:45:6a:df: c7:c0:95:50:33:a8:ca:d5:f3:e8:fc:45:56:5c:fd: d8:b0:a2:6a:9e:e9:c6:74:90:92:88:ce:b4:e5:13: 81:c9:50:e1:2f:76:45:18:9e:f8:ea:19:8e:04:cf: a2:5c:06:3c:9b:7f:6f:1b:b0:a5:42:10:c0:c2:2a: af:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2F:CC:E9:A5:3C:0D:5A:FD:6C:1B:D6:4E:CA:89:B8:03:AB:EF:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f347370e-9cff-360b-b4f4-bfa4a1a5b8c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:c2:78:5b:1d:18:79:26:f4:2a:75:b3:6b:8c:6e:3c:d4:29: 1c:fe:0f:02:c5:3e:63:60:c0:8b:00:60:79:78:f9:f3:30:89: 68:5a:89:6f:80:db:85:19:43:da:23:46:2f:89:55:a1:7b:1a: 19:4b:84:d8:cf:d1:d0:0b:2e:ed:3a:07:1b:83:33:e4:01:b0: 31:bf:43:31:09:0d:c1:3d:09:98:38:86:26:8c:cb:0d:57:0e: 3d:51:c5:40:38:f0:c7:9d:3c:e8:33:06:5c:4e:fc:fb:f9:db: 4b:56:87:cf:20:81:54:9d:ff:8b:54:e7:0d:63:6c:53:36:a0: bb:57:10:bf:80:9a:52:d0:7b:34:db:ec:04:60:fe:a8:73:c5: 7b:23:0d:92:a0:29:0e:1b:df:bc:76:d3:52:4f:51:00:56:47: dc:13:98:62:55:3e:6c:03:c1:54:40:d2:0c:22:dc:6c:09:a3: 5e:e0:41:c2:9b:db:32:e4:73:60:4c:e3:1a:65:a2:f4:a9:43: c8:e2:f2:fb:54:7f:15:f8:40:9f:d6:a5:b3:ba:88:2b:2e:58: 95:50:c1:54:e5:e8:19:75:e2:20:31:c0:f5:70:7e:64:e7:e8: 01:aa:ea:a0:da:ca:62:7e:de:95:94:0d:15:f5:08:8e:76:94: e8:f1:c7:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT5j4fid+0hN2RQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk NzY3YzEwYWQtMmIxZi00ZjFhLTgyMTAtMGMxMTExODdmN2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUmTpMGmmyEr1AxRiVgksReSlo9XKjHUr+Ou 2RggrezqqEvPy7cvLH7OP0TkN8EL3WBbyKF77s1D7ulxwpIM8reM/oOlSslK7wn9 92u/YxvoTS03zO94YdIrX9sO/AzH2LQrXQiPLd4t1lGO3VriTtWgCRSn9Wb5LjLp p6GZl8TblW7VSVobv9YjDzjKUIKOJ4LMa75LBQEsM5AjYGmT404g5/FSSLbAwbJs q+dGtAZ4+uQHUUTnmqlnBGQq3t5Fat/HwJVQM6jK1fPo/EVWXP3YsKJqnunGdJCS iM605ROByVDhL3ZFGJ746hmOBM+iXAY8m39vG7ClQhDAwiqvIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwvzOmlPA1a/Wwb1k7KibgDq+8hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZjM0NzM3MGUtOWNmZi0z NjBiLWI0ZjQtYmZhNGExYTViOGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKnCeFsdGHkm9Cp1s2uMbjzUKRz+DwLFPmNgwIsAYHl4+fMwiWhaiW+A 24UZQ9ojRi+JVaF7GhlLhNjP0dALLu06BxuDM+QBsDG/QzEJDcE9CZg4hiaMyw1X Dj1RxUA48MedPOgzBlxO/Pv520tWh88ggVSd/4tU5w1jbFM2oLtXEL+AmlLQezTb 7ARg/qhzxXsjDZKgKQ4b37x201JPUQBWR9wTmGJVPmwDwVRA0gwi3GwJo17gQcKb 2zLkc2BM4xplovSpQ8ji8vtUfxX4QJ/WpbO6iCsuWJVQwVTl6Bl14iAxwPVwfmTn 6AGq6qDaymJ+3pWUDRX1CI52lOjxx68= -----END CERTIFICATE-----Generated at Fri Apr 17 13:48:34 2026 by rpki-client