$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/89eb4a2e-99f2-3a78-bf19-ad260014a446.roa File: 89eb4a2e-99f2-3a78-bf19-ad260014a446.roa (raw, json) Hash identifier: xvG66NbTmArhZJ6CJLzJcrTVV+Tw40wAYaW/lQDUJKI= Subject key identifier: 2E:A6:FA:DF:D9:4D:46:F7:C9:91:B2:84:91:4F:66:D5:32:8B:61:4C Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D343A1AA27692FC844644CD40 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/89eb4a2e-99f2-3a78-bf19-ad260014a446.roa Signing time: Wed 18 Mar 2026 01:00:33 +0000 ROA not before: Wed 18 Mar 2026 01:00:33 +0000 ROA not after: Tue 16 Jun 2026 01:00:33 +0000 asID: 16509 IP address blocks: 170.85.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:3a:1a:a2:76:92:fc:84:46:44:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Mar 18 01:00:33 2026 GMT Not After : Jun 16 01:00:33 2026 GMT Subject: CN=f1386119-dc03-4ee4-9ad3-7157fcfa1f5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:80:14:7a:42:7f:8a:dc:24:89:d6:ed:6e:f3: 31:60:76:20:9b:83:57:96:27:25:d7:29:d5:3a:a6: fc:c3:db:c0:d9:9a:7c:18:42:ab:30:aa:04:6f:f5: 5a:0e:f8:fc:22:34:64:ba:51:dd:00:d3:ba:23:2c: 75:6c:c9:93:e2:33:ad:bd:90:94:2e:34:ee:0d:d6: 07:c4:31:4f:e9:af:ed:c0:ea:c3:64:00:41:20:d2: ee:c3:66:95:6d:20:00:ed:73:f9:1b:f9:d2:a8:59: 82:66:57:22:ce:6c:40:2d:0c:ae:33:40:1c:69:a1: 19:31:43:36:b7:53:59:a4:53:60:3b:4a:be:c6:4b: 4e:53:cb:87:91:a8:8f:bb:f4:ad:cb:82:f5:4f:67: 29:42:f9:91:44:53:25:00:cb:3f:65:a8:6a:2c:ea: aa:65:d5:bd:7b:56:65:1e:b1:fc:ff:98:74:dd:14: fd:9a:98:4f:d3:ce:07:f3:f6:c3:10:f2:f1:1b:d6: 02:ec:f2:bb:0c:89:d1:fa:fc:67:dc:c4:59:d8:94: 37:18:63:9b:02:c9:9d:10:54:b6:bb:df:b7:98:c7: 83:52:8e:95:0a:ee:2a:e5:2c:84:39:89:e6:2c:02: fc:9c:c6:31:fc:9f:dc:0f:6c:a4:45:d0:87:66:44: dc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A6:FA:DF:D9:4D:46:F7:C9:91:B2:84:91:4F:66:D5:32:8B:61:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/89eb4a2e-99f2-3a78-bf19-ad260014a446.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:51:f2:5d:e0:c8:63:6d:ea:66:f6:c3:3c:30:ec:e4:ee:17: 1f:8a:82:58:f4:7f:2c:b7:d4:dd:0c:ac:46:c8:95:f7:5d:e8: a7:73:53:6e:39:a4:be:89:ca:1d:a6:ce:1d:cc:a0:0e:44:51: af:b7:54:7a:42:48:73:00:2d:8a:01:6b:3d:5d:0d:3f:a0:a6: fe:2f:a9:5e:f8:cd:2f:79:9a:2f:ec:32:b4:2e:ed:9f:62:7c: c8:53:1c:77:45:d8:9f:aa:96:42:cd:59:c5:68:0e:97:49:ca: 2a:d7:9a:fc:88:15:7c:03:aa:ee:e2:cd:6a:91:2d:76:40:25: 27:de:b5:00:6b:63:4e:9f:8c:5f:1f:a9:6a:29:4d:ca:b8:17: 05:8b:8f:ea:83:70:56:01:d8:1e:5b:2b:16:c7:43:fe:72:c0: d5:fc:7b:7a:75:22:38:03:17:74:61:aa:24:b4:0f:e0:aa:36: 88:0e:a3:2d:dc:14:1a:a6:a1:69:bb:62:e5:90:e5:c1:fe:c1: 6e:c8:49:af:7e:4b:29:25:87:63:a0:4e:0d:7f:00:b3:d6:ac: cb:77:42:80:70:3d:e7:e1:92:7b:17:a6:19:73:4e:85:a4:94: c3:bd:f8:89:6d:23:7b:ee:16:9c:e3:0f:ac:70:87:8a:61:36: 4d:7e:3a:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE00OhqidpL8hEZEzUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk ZjEzODYxMTktZGMwMy00ZWU0LTlhZDMtNzE1N2ZjZmExZjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoAUekJ/itwkidbtbvMxYHYgm4NXlicl1ynV Oqb8w9vA2Zp8GEKrMKoEb/VaDvj8IjRkulHdANO6Iyx1bMmT4jOtvZCULjTuDdYH xDFP6a/twOrDZABBINLuw2aVbSAA7XP5G/nSqFmCZlcizmxALQyuM0AcaaEZMUM2 t1NZpFNgO0q+xktOU8uHkaiPu/Sty4L1T2cpQvmRRFMlAMs/ZahqLOqqZdW9e1Zl HrH8/5h03RT9mphP084H8/bDEPLxG9YC7PK7DInR+vxn3MRZ2JQ3GGObAsmdEFS2 u9+3mMeDUo6VCu4q5SyEOYnmLAL8nMYx/J/cD2ykRdCHZkTc1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6m+t/ZTUb3yZGyhJFPZtUyi2FMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvODllYjRhMmUtOTlmMi0z YTc4LWJmMTktYWQyNjAwMTRhNDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlV5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElR8l3gyGNt6mb2wzww7OTuFx+Kglj0fyy31N0MrEbIlfdd6KdzU245 pL6Jyh2mzh3MoA5EUa+3VHpCSHMALYoBaz1dDT+gpv4vqV74zS95mi/sMrQu7Z9i fMhTHHdF2J+qlkLNWcVoDpdJyirXmvyIFXwDqu7izWqRLXZAJSfetQBrY06fjF8f qWopTcq4FwWLj+qDcFYB2B5bKxbHQ/5ywNX8e3p1IjgDF3RhqiS0D+CqNogOoy3c FBqmoWm7YuWQ5cH+wW7ISa9+Syklh2OgTg1/ALPWrMt3QoBwPefhknsXphlzToWk lMO9+IltI3vuFpzjD6xwh4phNk1+OnE= -----END CERTIFICATE-----Generated at Thu Mar 19 12:33:18 2026 by rpki-client