$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/fed4d553-b226-3992-8d8c-3294f2fe7668.roa File: fed4d553-b226-3992-8d8c-3294f2fe7668.roa (raw, json) Hash identifier: eCJS9ve+ImRfoa+ULG6o28r2a6x76KQTYoPGAmOmxh4= Subject key identifier: 3B:24:C9:48:1C:D5:98:9D:45:C5:F4:22:02:60:29:25:CF:DC:11:BE Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D6AAAAD3A64BDFA63CE14B080 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/fed4d553-b226-3992-8d8c-3294f2fe7668.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 14618 IP address blocks: 170.85.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:ad:3a:64:bd:fa:63:ce:14:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=84988212-b572-4df3-a6f4-e8813c55f084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:68:a8:13:d0:ee:e8:b4:8e:1e:ba:9b:f7:33: 8c:ea:22:9d:35:bc:89:51:a5:ed:88:37:29:f6:ed: 09:d5:81:08:06:7a:57:08:a7:36:90:1a:da:5e:94: 4a:c8:31:7c:72:ae:1c:80:c6:4a:ba:b4:50:a7:50: 54:ce:a2:d3:9e:89:6e:d6:13:ad:db:18:bc:6b:49: d0:94:b2:13:95:d4:d6:bf:55:d8:7e:92:f2:e2:06: 79:99:5c:77:82:56:51:64:f2:de:49:f1:07:ab:73: 2e:ef:cc:fe:3c:64:e5:41:4a:8c:e5:20:8d:18:90: 53:f0:81:dc:7d:f2:b7:39:c5:63:e0:9f:d6:3d:65: 63:2f:49:14:f7:97:be:b4:92:71:a7:c3:36:b6:c5: 92:25:e6:ec:70:99:6d:1d:0f:93:68:84:96:35:93: 57:e6:71:08:f9:cf:ac:82:37:0a:46:e7:76:d8:d2: 7d:6f:ff:46:0d:a9:e8:15:cf:91:85:94:ae:fb:3a: 16:63:ef:36:c2:f4:d8:c2:ea:47:07:ee:70:a7:70: 1a:a1:54:4d:99:79:be:9d:4a:53:81:0d:f7:75:d3: ec:7b:32:28:81:77:69:ee:2a:88:24:1a:de:6d:39: 09:74:c5:4c:ca:c1:ca:ad:fe:1a:fd:39:c4:7c:df: 84:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:24:C9:48:1C:D5:98:9D:45:C5:F4:22:02:60:29:25:CF:DC:11:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/fed4d553-b226-3992-8d8c-3294f2fe7668.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:0c:72:65:e3:c8:ef:2f:c9:85:b8:a4:bd:27:47:a1:f9:34: 48:ba:a4:0b:ac:8a:90:6b:8f:95:1e:0d:83:5b:83:be:2d:a9: ab:ee:0f:54:18:e1:57:c2:85:65:51:5b:a3:d0:6a:81:85:1c: ad:1e:63:97:7d:e7:7e:5c:a9:a7:47:ce:41:89:c4:30:80:67: 7d:e6:ee:2a:2e:3f:3d:d5:d2:06:9b:c5:62:7c:62:bc:53:dd: 62:1d:b6:d4:1e:96:ee:45:45:c4:43:8b:01:8e:03:b7:4f:a7: bf:72:5d:3e:cb:34:ec:e7:e3:4f:41:c6:d3:d1:5e:c4:ac:eb: 86:04:7a:53:af:04:af:fe:59:96:25:d9:d4:d3:7f:d2:93:b6: 63:6f:7b:b8:d1:6b:6a:7b:c3:cd:3c:bb:27:d0:ee:e1:08:00: e4:5c:a3:b5:ad:68:1f:9b:25:24:1d:61:a8:1a:6c:6c:d1:4b: 6d:12:88:de:57:0d:c1:5c:65:80:bf:7e:15:ff:fe:f2:a3:4b: 31:9f:f7:09:05:4a:02:aa:f0:67:f7:68:78:d9:52:b9:35:d6: c9:52:61:f4:16:67:51:9c:af:f3:ea:fa:b7:ca:f1:aa:30:14: cb:2e:0d:2b:f0:6b:ec:69:70:6b:d2:a1:33:39:a7:ef:f5:f3: 76:5a:4b:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqq06ZL36Y84UsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk ODQ5ODgyMTItYjU3Mi00ZGYzLWE2ZjQtZTg4MTNjNTVmMDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2ioE9Du6LSOHrqb9zOM6iKdNbyJUaXtiDcp 9u0J1YEIBnpXCKc2kBraXpRKyDF8cq4cgMZKurRQp1BUzqLTnolu1hOt2xi8a0nQ lLITldTWv1XYfpLy4gZ5mVx3glZRZPLeSfEHq3Mu78z+PGTlQUqM5SCNGJBT8IHc ffK3OcVj4J/WPWVjL0kU95e+tJJxp8M2tsWSJebscJltHQ+TaISWNZNX5nEI+c+s gjcKRud22NJ9b/9GDanoFc+RhZSu+zoWY+82wvTYwupHB+5wp3AaoVRNmXm+nUpT gQ33ddPsezIogXdp7iqIJBrebTkJdMVMysHKrf4a/TnEfN+EbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDskyUgc1ZidRcX0IgJgKSXP3BG+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZmVkNGQ1NTMtYjIyNi0z OTkyLThkOGMtMzI5NGYyZmU3NjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0McmXjyO8vyYW4pL0nR6H5NEi6pAusipBrj5UeDYNbg74tqavuD1QY 4VfChWVRW6PQaoGFHK0eY5d9535cqadHzkGJxDCAZ33m7iouPz3V0gabxWJ8YrxT 3WIdttQelu5FRcRDiwGOA7dPp79yXT7LNOzn409BxtPRXsSs64YEelOvBK/+WZYl 2dTTf9KTtmNve7jRa2p7w808uyfQ7uEIAORco7WtaB+bJSQdYagabGzRS20SiN5X DcFcZYC/fhX//vKjSzGf9wkFSgKq8Gf3aHjZUrk11slSYfQWZ1Gcr/Pq+rfK8aow FMsuDSvwa+xpcGvSoTM5p+/183ZaS6Q= -----END CERTIFICATE-----Generated at Tue Apr 7 10:35:14 2026 by rpki-client