$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ce140d2d-4f24-3ba3-8491-41c722344e49.roa File: ce140d2d-4f24-3ba3-8491-41c722344e49.roa (raw, json) Hash identifier: yg+pjKGdRIPAG1A/lOhPg1NbRDaFoyek9yxCNVw7u2M= Subject key identifier: 94:D9:A7:0B:2B:FA:1C:CF:30:68:7E:B4:9D:50:DC:03:CE:7D:95:12 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D100D02559C21A98AA710C340 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ce140d2d-4f24-3ba3-8491-41c722344e49.roa Signing time: Thu 05 Mar 2026 02:00:32 +0000 ROA not before: Thu 05 Mar 2026 02:00:32 +0000 ROA not after: Wed 03 Jun 2026 01:00:32 +0000 asID: 8987 IP address blocks: 170.85.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:10:0d:02:55:9c:21:a9:8a:a7:10:c3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Mar 5 02:00:32 2026 GMT Not After : Jun 3 01:00:32 2026 GMT Subject: CN=5ad5d790-2fbe-4c19-9f14-1eb22ab19075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:05:1f:9a:4c:82:e8:a7:ca:8e:7a:7f:24:09: 8d:c2:99:03:ac:17:7d:64:38:6a:1c:45:15:98:dc: 98:5d:68:5e:99:c3:a2:8b:d2:a8:f7:05:2b:0a:f7: 11:d9:9f:d6:bc:04:aa:7c:02:fc:f0:2c:4b:f9:94: 5a:a3:fe:7f:b7:7c:38:e4:e0:1a:cb:d2:34:0c:41: 57:a7:32:08:20:81:01:71:54:28:85:4d:81:5e:bb: cd:ca:85:88:66:49:8a:f1:ac:ef:9e:d4:9d:f4:4b: 41:92:8f:a5:08:7a:a3:63:c8:6d:8a:1a:ac:1d:73: 86:a4:ee:d1:41:c3:bd:ed:92:3a:00:6e:57:59:a3: 4b:45:06:fc:89:20:08:57:65:49:97:6a:ae:1b:92: d8:e3:26:bc:b6:0d:e3:bf:ce:4f:5a:a1:87:df:28: cf:71:eb:d1:b5:be:89:51:31:af:d6:38:a0:8b:05: 28:c5:8f:01:8c:04:d4:fc:7b:d5:72:ea:2e:41:86: f0:63:d2:5f:9c:02:d4:f8:b0:31:57:0e:d1:72:84: 59:be:55:0a:b9:6e:c6:5e:32:3c:a1:47:a6:85:c0: b0:3f:a0:12:51:87:89:e6:25:e7:f3:5b:ed:21:b2: ad:34:f5:a0:56:10:48:f7:d3:85:69:70:3d:05:0a: e7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D9:A7:0B:2B:FA:1C:CF:30:68:7E:B4:9D:50:DC:03:CE:7D:95:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ce140d2d-4f24-3ba3-8491-41c722344e49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:70:0c:ad:46:d1:f9:cf:89:63:96:b7:4c:06:67:eb:e6:31: dd:ec:0a:77:cb:e0:2f:1c:24:a5:c6:c4:96:ad:5c:ee:fb:39: 1e:c0:48:3c:a2:a5:71:04:1d:b8:9f:1d:21:95:a3:55:23:4d: 83:3a:c9:80:83:3c:3f:6e:5a:3d:ac:9a:de:9a:cf:7c:7d:5a: 5c:c6:76:cb:ce:d1:4a:c0:12:16:e8:fe:b5:f1:78:12:3d:15: 51:66:87:93:25:5e:a6:0d:82:2f:24:fa:a4:67:0f:bf:38:c3: 6a:d1:f9:e0:ff:08:18:5e:9c:a7:3d:69:a8:c3:de:c0:a5:ee: 78:1d:3d:51:82:5c:62:bf:a2:1f:a0:e4:02:4f:39:63:a6:b6: 3d:12:aa:f8:80:39:75:c2:fd:2c:4e:53:d7:3a:90:09:88:e1: 4f:cc:31:fb:33:fd:6c:13:a5:cd:ba:ad:79:e5:be:23:65:84: 66:be:85:48:db:21:d5:0b:fd:b3:3a:76:d0:78:1e:ae:8b:96: 1d:0e:e2:64:6e:30:76:99:b7:bf:82:89:55:8c:df:fd:99:2b: c9:39:37:82:01:a6:b3:cb:f1:a5:07:31:c5:69:13:78:72:95: 13:18:09:d5:b8:5a:be:86:0d:89:e6:5b:33:18:71:a1:11:51: 06:14:ec:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0QDQJVnCGpiqcQw0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDMwNTAyMDAzMloXDTI2MDYwMzAxMDAzMlowLzEtMCsGA1UEAxMk NWFkNWQ3OTAtMmZiZS00YzE5LTlmMTQtMWViMjJhYjE5MDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAUfmkyC6KfKjnp/JAmNwpkDrBd9ZDhqHEUV mNyYXWhemcOii9Ko9wUrCvcR2Z/WvASqfAL88CxL+ZRao/5/t3w45OAay9I0DEFX pzIIIIEBcVQohU2BXrvNyoWIZkmK8azvntSd9EtBko+lCHqjY8htihqsHXOGpO7R QcO97ZI6AG5XWaNLRQb8iSAIV2VJl2quG5LY4ya8tg3jv85PWqGH3yjPcevRtb6J UTGv1jigiwUoxY8BjATU/HvVcuouQYbwY9JfnALU+LAxVw7RcoRZvlUKuW7GXjI8 oUemhcCwP6ASUYeJ5iXn81vtIbKtNPWgVhBI99OFaXA9BQrnkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJTZpwsr+hzPMGh+tJ1Q3APOfZUSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvY2UxNDBkMmQtNGYyNC0z YmEzLTg0OTEtNDFjNzIyMzQ0ZTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZwDK1G0fnPiWOWt0wGZ+vmMd3sCnfL4C8cJKXGxJatXO77OR7ASDyi pXEEHbifHSGVo1UjTYM6yYCDPD9uWj2smt6az3x9WlzGdsvO0UrAEhbo/rXxeBI9 FVFmh5MlXqYNgi8k+qRnD784w2rR+eD/CBhenKc9aajD3sCl7ngdPVGCXGK/oh+g 5AJPOWOmtj0SqviAOXXC/SxOU9c6kAmI4U/MMfsz/WwTpc26rXnlviNlhGa+hUjb IdUL/bM6dtB4Hq6Llh0O4mRuMHaZt7+CiVWM3/2ZK8k5N4IBprPL8aUHMcVpE3hy lRMYCdW4Wr6GDYnmWzMYcaERUQYU7Cw= -----END CERTIFICATE-----Generated at Thu Mar 5 15:02:07 2026 by rpki-client