$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2c9902ef-6d33-3e34-ae3f-43b7a02c1a09.roa File: 2c9902ef-6d33-3e34-ae3f-43b7a02c1a09.roa (raw, json) Hash identifier: wl4aZSR5Rf9RaA8PMwE0tmG109EBb7ZFepoDUYN1dos= Subject key identifier: A0:B1:A1:1B:98:63:DB:EE:C8:CE:3F:BC:A8:28:99:DA:EB:DD:E5:BD Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D8EF5723AEBE5584C397B5780 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2c9902ef-6d33-3e34-ae3f-43b7a02c1a09.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 16509 IP address blocks: 170.85.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:72:3a:eb:e5:58:4c:39:7b:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=984e9b8e-4604-41ad-97a2-bae4c1dfc34c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:99:d2:b6:fb:90:b9:10:a8:b3:ad:ba:ec:07: 4f:39:63:c5:2f:84:fe:5b:64:8c:8f:04:5c:57:ff: 4a:49:5a:02:15:4f:39:c7:40:d0:dd:9d:79:48:9c: 4f:1c:9b:65:22:aa:28:24:ea:f8:4a:29:a3:3b:f4: f1:5b:27:93:49:84:88:9d:b5:cd:f2:e3:70:8f:41: 15:71:05:a9:29:48:d7:e0:51:fe:3b:60:d8:bb:31: fe:18:78:01:58:eb:f5:44:94:cc:89:c4:fa:13:e7: 3e:33:e3:22:e7:9c:41:bb:c3:4f:71:77:0b:3f:b2: ed:e0:1d:11:0c:22:fb:73:ca:fc:ce:41:1a:d5:b3: 6e:30:60:66:fe:cc:ff:1b:d1:51:42:82:3e:de:ac: 70:7c:a1:07:9a:86:60:97:90:99:e1:3e:1f:e3:56: bc:53:b9:9f:44:ae:aa:cc:dd:24:40:7c:d6:ec:4a: 45:48:f6:8d:a6:dc:be:2d:47:22:76:5a:ed:ab:17: 49:ee:bb:0e:61:af:44:23:23:99:34:b3:8c:e0:7b: ae:b4:3f:61:55:05:f3:be:a1:5e:55:cd:b0:38:96: 82:a2:5a:e8:ab:bf:ca:16:bd:89:70:5c:fe:05:85: f7:34:6c:87:e3:52:22:cc:26:b7:74:98:b1:aa:ee: f6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B1:A1:1B:98:63:DB:EE:C8:CE:3F:BC:A8:28:99:DA:EB:DD:E5:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2c9902ef-6d33-3e34-ae3f-43b7a02c1a09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:d1:08:53:7c:96:2b:fe:21:1e:c7:4a:34:21:c3:b1:ae:b8: 4d:f1:36:4e:39:35:38:4f:4b:dd:7b:bd:8d:47:b6:28:8d:a2: da:dd:65:63:d2:90:ef:27:e4:7f:9a:f6:9b:19:01:2a:03:a9: 8b:e6:fa:e4:5c:8d:a7:8e:bd:3b:db:cb:0f:f6:31:92:50:8e: 41:81:1e:10:dd:24:5e:48:93:0c:19:ac:f9:06:11:ce:b4:5a: e6:cf:09:89:f8:fc:06:f2:36:b1:8e:ab:83:e0:80:9d:9f:1d: 43:53:37:96:5d:a6:4f:ca:57:29:87:62:25:28:bf:ef:04:82: 20:c1:d2:9b:67:29:c4:41:42:bb:9f:51:e5:4e:73:37:c0:fd: 4d:49:d4:52:02:40:e9:5f:61:b6:79:30:00:9d:46:34:85:cd: bc:93:9a:21:1b:24:30:00:51:14:38:8f:d0:87:aa:46:67:5a: 52:20:0a:92:4a:c7:40:d5:0c:4b:ff:d0:99:65:a8:8a:8a:2c: dd:f8:f0:b8:ac:9f:9e:d7:72:35:30:d8:2e:ff:eb:66:4c:b1: 3f:4d:0c:f8:61:94:90:e9:8f:bf:2e:40:12:36:47:58:f6:76: 8d:3c:7a:24:88:82:9d:16:60:7d:e7:d6:23:23:d2:06:8a:99: 15:ce:d7:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9XI66+VYTDl7V4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk OTg0ZTliOGUtNDYwNC00MWFkLTk3YTItYmFlNGMxZGZjMzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZnStvuQuRCos6267AdPOWPFL4T+W2SMjwRc V/9KSVoCFU85x0DQ3Z15SJxPHJtlIqooJOr4SimjO/TxWyeTSYSInbXN8uNwj0EV cQWpKUjX4FH+O2DYuzH+GHgBWOv1RJTMicT6E+c+M+Mi55xBu8NPcXcLP7Lt4B0R DCL7c8r8zkEa1bNuMGBm/sz/G9FRQoI+3qxwfKEHmoZgl5CZ4T4f41a8U7mfRK6q zN0kQHzW7EpFSPaNpty+LUcidlrtqxdJ7rsOYa9EIyOZNLOM4HuutD9hVQXzvqFe Vc2wOJaColroq7/KFr2JcFz+BYX3NGyH41IizCa3dJixqu72bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCxoRuYY9vuyM4/vKgomdrr3eW9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMmM5OTAyZWYtNmQzMy0z ZTM0LWFlM2YtNDNiN2EwMmMxYTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlU1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPRCFN8liv+IR7HSjQhw7GuuE3xNk45NThPS917vY1HtiiNotrdZWPS kO8n5H+a9psZASoDqYvm+uRcjaeOvTvbyw/2MZJQjkGBHhDdJF5IkwwZrPkGEc60 WubPCYn4/AbyNrGOq4PggJ2fHUNTN5Zdpk/KVymHYiUov+8EgiDB0ptnKcRBQruf UeVOczfA/U1J1FICQOlfYbZ5MACdRjSFzbyTmiEbJDAAURQ4j9CHqkZnWlIgCpJK x0DVDEv/0JllqIqKLN348Lisn57XcjUw2C7/62ZMsT9NDPhhlJDpj78uQBI2R1j2 do08eiSIgp0WYH3n1iMj0gaKmRXO1+Y= -----END CERTIFICATE-----Generated at Wed Apr 29 11:17:05 2026 by rpki-client