$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ec1b8336-f451-3652-aefc-ff559feaa568.roa File: ec1b8336-f451-3652-aefc-ff559feaa568.roa (raw, json) Hash identifier: 2+iZXOyG4Z5pGIRfX7GQWVyJkde2ePIaqoh5r43TwRY= Subject key identifier: 6E:62:18:F7:F2:79:C1:D8:11:C4:6E:06:5D:72:C9:B6:9A:AF:09:76 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D6AAAAF9390CDE823D2F88800 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ec1b8336-f451-3652-aefc-ff559feaa568.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 14618 IP address blocks: 170.85.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:af:93:90:cd:e8:23:d2:f8:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=c47d6e3c-bab2-469e-b99f-88fbc69cfaeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:63:94:ca:ab:6d:4c:30:f7:be:3a:e7:48:a6: da:09:02:b6:17:b2:83:d8:75:01:b2:20:a5:2b:75: dc:05:16:e8:ae:19:e6:5a:30:05:f2:1f:33:64:41: e9:4a:ec:4e:df:1e:e0:a5:3a:c6:38:3f:ad:ab:51: 6a:1d:b4:01:9d:14:68:c8:4a:2d:55:00:78:4f:1f: 67:04:8a:0a:86:4a:fb:8e:75:89:96:e9:9d:93:58: 28:5e:ed:59:20:c6:95:76:59:00:a0:25:fa:a8:3b: a7:e2:35:9f:5c:cc:66:4e:34:f9:e4:e2:36:aa:6a: b9:c6:0e:42:96:15:6f:2b:6a:1d:d8:4c:28:1a:8e: c0:e2:27:c2:86:d8:f9:32:e9:75:d3:51:6e:c8:4c: a5:5a:70:c6:39:14:0e:c7:0c:83:3a:14:70:fc:ed: 31:34:1a:e8:ff:19:d6:02:e4:76:55:48:53:21:8b: 88:2a:a7:50:a7:e3:8d:8a:fa:8b:e5:e8:b8:92:24: 82:89:b1:fe:d7:f0:87:83:4c:77:f0:41:9c:fa:bb: 54:1e:86:bb:44:7e:5d:d3:7c:c4:25:ec:2a:68:d8: fa:65:30:d0:e8:77:68:f0:51:5a:2d:4e:a5:01:01: a1:16:62:15:2d:d8:ca:76:ba:a5:57:a3:b6:95:21: d7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:62:18:F7:F2:79:C1:D8:11:C4:6E:06:5D:72:C9:B6:9A:AF:09:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ec1b8336-f451-3652-aefc-ff559feaa568.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:3c:8c:08:c1:2e:d8:8b:3e:a8:48:22:04:5b:02:e4:79:8e: d2:28:60:8a:34:2a:56:bc:89:f8:35:15:86:26:05:e0:46:2c: 42:b1:9b:b8:c8:d2:66:fd:c9:18:19:99:92:64:ea:60:f7:db: 2a:de:1c:ac:2f:38:79:8d:9c:77:11:0c:bf:0f:c0:be:cb:37: 40:3e:8f:b1:dc:1a:f9:20:08:2b:59:05:f0:c9:e5:7b:5f:f0: e5:bf:62:a9:bc:41:03:e8:c5:0e:7e:ed:79:0f:4a:69:f7:b4: 09:71:0e:19:b2:c6:91:01:a3:50:ac:fd:f4:c1:a1:3a:ab:07: 92:21:a3:9d:5b:85:4b:eb:b5:5e:49:e8:dc:7c:a0:f2:ba:69: 4f:dd:5e:85:e9:b0:2c:12:89:77:96:8e:e8:67:f3:53:f5:93: 7c:08:1e:ef:ea:c5:71:c5:54:da:46:bb:8e:28:af:db:84:8c: 03:87:6d:03:e6:63:7f:81:27:c8:46:13:a2:95:5d:92:08:30: 7e:73:87:bc:4f:f4:f7:26:1d:14:28:f7:43:a5:74:09:0d:61: 89:d0:4f:67:43:62:1a:5e:a1:b5:5d:8d:f2:71:b8:e6:b4:ec: 7a:0a:58:c2:2e:03:c0:86:71:17:53:44:1a:d9:68:58:f5:69: b0:28:c6:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqq+TkM3oI9L4iAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk YzQ3ZDZlM2MtYmFiMi00NjllLWI5OWYtODhmYmM2OWNmYWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2OUyqttTDD3vjrnSKbaCQK2F7KD2HUBsiCl K3XcBRborhnmWjAF8h8zZEHpSuxO3x7gpTrGOD+tq1FqHbQBnRRoyEotVQB4Tx9n BIoKhkr7jnWJlumdk1goXu1ZIMaVdlkAoCX6qDun4jWfXMxmTjT55OI2qmq5xg5C lhVvK2od2EwoGo7A4ifChtj5Mul101FuyEylWnDGORQOxwyDOhRw/O0xNBro/xnW AuR2VUhTIYuIKqdQp+ONivqL5ei4kiSCibH+1/CHg0x38EGc+rtUHoa7RH5d03zE JewqaNj6ZTDQ6Hdo8FFaLU6lAQGhFmIVLdjKdrqlV6O2lSHXwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5iGPfyecHYEcRuBl1yybaarwl2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZWMxYjgzMzYtZjQ1MS0z NjUyLWFlZmMtZmY1NTlmZWFhNTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH48jAjBLtiLPqhIIgRbAuR5jtIoYIo0Kla8ifg1FYYmBeBGLEKxm7jI 0mb9yRgZmZJk6mD32yreHKwvOHmNnHcRDL8PwL7LN0A+j7HcGvkgCCtZBfDJ5Xtf 8OW/Yqm8QQPoxQ5+7XkPSmn3tAlxDhmyxpEBo1Cs/fTBoTqrB5Iho51bhUvrtV5J 6Nx8oPK6aU/dXoXpsCwSiXeWjuhn81P1k3wIHu/qxXHFVNpGu44or9uEjAOHbQPm Y3+BJ8hGE6KVXZIIMH5zh7xP9PcmHRQo90OldAkNYYnQT2dDYhpeobVdjfJxuOa0 7HoKWMIuA8CGcRdTRBrZaFj1abAoxnk= -----END CERTIFICATE-----Generated at Tue Apr 7 10:36:13 2026 by rpki-client