$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/85befa1b-cd80-3af9-861d-226b5949597f.roa File: 85befa1b-cd80-3af9-861d-226b5949597f.roa (raw, json) Hash identifier: ojIbtyCNTXAcqA3ZbiRWpdjjNRHL+x8lwjrUBMTK2bc= Subject key identifier: E7:0F:DC:92:F1:13:BF:39:22:8D:9A:FE:36:87:C6:41:9C:2C:35:87 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584D20AF587BE338BDEB98ED3CDC Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/85befa1b-cd80-3af9-861d-226b5949597f.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 213122 IP address blocks: 170.39.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:58:7b:e3:38:bd:eb:98:ed:3c:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=03cd74b8-7c0c-4a2b-9771-63be85dc9a27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cd:9a:6b:35:cd:b4:e1:37:69:4a:18:95:42: de:94:77:d7:9e:12:01:87:fd:23:cb:b6:24:62:43: 96:b6:7a:48:56:8e:47:a4:78:ab:52:e5:4a:4b:65: 0f:e1:4f:34:bc:92:58:d9:2d:f6:79:0a:91:ec:04: c7:63:08:14:93:b9:be:24:7e:40:8c:ae:ba:ed:82: e5:34:60:e6:9a:59:39:8e:ee:97:77:6d:36:ff:62: 49:8c:e3:07:13:69:26:87:c8:79:55:39:f9:7f:c2: 39:a1:18:f3:4a:75:9c:9d:e0:fb:d1:00:59:40:8b: 5e:66:54:d1:94:50:c6:a1:a2:84:75:c4:51:5f:b3: 03:ee:b3:8d:d3:36:08:01:b6:fb:27:42:e3:b4:b5: fb:05:68:7e:a5:25:3d:18:ea:19:f3:96:16:00:66: 47:b6:fb:52:35:b1:38:b2:0a:a4:62:04:8d:62:fe: a7:2f:54:52:64:0b:2e:5c:1d:52:ee:3e:97:41:9b: b1:11:13:c3:fa:e7:35:71:52:33:d4:d5:e7:5a:cc: ae:40:17:9b:36:15:8b:07:7c:b4:14:e6:2c:d8:ec: 15:3d:7f:b6:9a:a6:a3:a8:60:1b:cd:6f:16:14:40: 22:9a:d8:f3:0b:1c:ce:c4:3b:3b:31:d9:99:49:00: 3d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:0F:DC:92:F1:13:BF:39:22:8D:9A:FE:36:87:C6:41:9C:2C:35:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/85befa1b-cd80-3af9-861d-226b5949597f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 170.39.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:19:21:d4:8b:98:1b:08:d0:c5:a5:9a:05:48:c7:79:66:ba: b3:7b:52:d2:1f:1b:77:31:41:cd:fd:68:f9:c2:89:f1:7a:de: 2a:fa:a4:74:ba:96:39:bf:72:82:89:70:8e:0c:cf:8e:1e:4c: 73:81:c6:78:68:09:0b:79:be:20:73:40:de:45:b2:c8:6a:92: 27:81:e6:60:e0:c8:5d:d7:66:c8:dd:d2:1d:23:75:95:8c:ab: f3:6a:cb:d9:ba:e1:33:21:6c:ae:be:4c:8a:4d:98:46:9b:48: 51:76:d3:55:2d:27:93:26:8d:93:9d:ea:59:3b:c6:4b:a5:57: 09:bc:b9:5d:06:60:c9:39:66:83:fa:87:8f:d2:01:be:cc:4b: 41:a5:28:65:6c:bd:5c:d2:15:52:eb:9a:31:c6:2a:22:bf:5e: 3c:3e:a6:5b:82:e4:f1:7d:62:a8:f9:29:26:b9:17:0d:3c:bb: 5e:3d:6e:95:ec:07:02:e8:42:25:1a:57:01:d5:4e:f2:b4:60: 9f:5d:71:93:7e:e4:16:54:85:de:a5:c1:b2:ba:d3:d2:26:94: c8:a9:6d:91:61:2b:0d:dd:05:35:f7:88:b8:6f:43:be:8b:20: 12:27:ce:e9:32:10:78:fd:98:0a:26:85:77:fa:d8:89:b1:cd: d4:68:7b:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr1h74zi965jtPNwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk MDNjZDc0YjgtN2MwYy00YTJiLTk3NzEtNjNiZTg1ZGM5YTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus2aazXNtOE3aUoYlULelHfXnhIBh/0jy7Yk YkOWtnpIVo5HpHirUuVKS2UP4U80vJJY2S32eQqR7ATHYwgUk7m+JH5AjK667YLl NGDmmlk5ju6Xd202/2JJjOMHE2kmh8h5VTn5f8I5oRjzSnWcneD70QBZQIteZlTR lFDGoaKEdcRRX7MD7rON0zYIAbb7J0LjtLX7BWh+pSU9GOoZ85YWAGZHtvtSNbE4 sgqkYgSNYv6nL1RSZAsuXB1S7j6XQZuxERPD+uc1cVIz1NXnWsyuQBebNhWLB3y0 FOYs2OwVPX+2mqajqGAbzW8WFEAimtjzCxzOxDs7MdmZSQA9QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcP3JLxE785Io2a/jaHxkGcLDWHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvODViZWZhMWItY2Q4MC0z YWY5LTg2MWQtMjI2YjU5NDk1OTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqie7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoZIdSLmBsI0MWlmgVIx3lmurN7UtIfG3cxQc39aPnCifF63ir6pHS6 ljm/coKJcI4Mz44eTHOBxnhoCQt5viBzQN5FsshqkieB5mDgyF3XZsjd0h0jdZWM q/Nqy9m64TMhbK6+TIpNmEabSFF201UtJ5MmjZOd6lk7xkulVwm8uV0GYMk5ZoP6 h4/SAb7MS0GlKGVsvVzSFVLrmjHGKiK/Xjw+pluC5PF9Yqj5KSa5Fw08u149bpXs BwLoQiUaVwHVTvK0YJ9dcZN+5BZUhd6lwbK609ImlMipbZFhKw3dBTX3iLhvQ76L IBInzukyEHj9mAomhXf62ImxzdRoe30= -----END CERTIFICATE-----Generated at Fri Mar 13 13:32:13 2026 by rpki-client