$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/81e84a73-b92b-4f3f-96ca-1c70561af28d/2af4c51e-95d7-352e-8fea-fdb5eb0c21f1.roa File: 2af4c51e-95d7-352e-8fea-fdb5eb0c21f1.roa (raw, json) Hash identifier: vMzbSgG5dradaM5mOEYd9frcJC2VW5hvOunir3AuCrE= Subject key identifier: 21:94:B4:13:86:C7:56:AF:B7:C7:85:2C:74:BE:54:DC:09:23:D5:7F Certificate issuer: /CN=81e84a73-b92b-4f3f-96ca-1c70561af28d Certificate serial: 010D0C9F4328584D5234F47D461BD1B9EA57C0C4 Authority key identifier: 48:32:A1:9A:C8:25:16:7A:3C:A1:1C:B2:2B:B2:24:7D:E6:3F:27:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/81e84a73-b92b-4f3f-96ca-1c70561af28d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/81e84a73-b92b-4f3f-96ca-1c70561af28d/2af4c51e-95d7-352e-8fea-fdb5eb0c21f1.roa Signing time: Sat 28 Mar 2026 18:44:33 +0000 ROA not before: Sat 28 Mar 2026 18:44:33 +0000 ROA not after: Mon 18 May 2026 19:28:25 +0000 asID: 10879 IP address blocks: 170.174.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/81e84a73-b92b-4f3f-96ca-1c70561af28d/81e84a73-b92b-4f3f-96ca-1c70561af28d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/81e84a73-b92b-4f3f-96ca-1c70561af28d/81e84a73-b92b-4f3f-96ca-1c70561af28d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/81e84a73-b92b-4f3f-96ca-1c70561af28d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:34:f4:7d:46:1b:d1:b9:ea:57:c0:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81e84a73-b92b-4f3f-96ca-1c70561af28d Validity Not Before: Mar 28 18:44:33 2026 GMT Not After : May 18 19:28:25 2026 GMT Subject: CN=e62aa125-ab27-46c8-9ebb-425b78fdb4e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f7:51:cc:e3:56:74:9b:bc:d3:85:ff:aa:0b: 1a:2b:35:da:43:1f:2f:69:79:b1:6f:9b:75:03:a3: 02:c3:d4:10:dd:b6:24:07:5f:79:50:bd:52:3f:3c: a1:ca:f5:12:99:e5:b1:de:3c:f4:7c:61:ae:ff:c1: cd:21:e0:0a:71:f6:78:0a:17:65:fb:66:31:43:ac: 6d:ca:32:28:09:99:f5:ef:ac:6f:69:86:75:a7:67: 0f:3f:b8:65:d3:f2:84:ca:36:b6:86:1f:12:f1:81: ce:59:0a:46:66:c0:f3:38:f6:7a:36:93:d0:43:03: 2f:f8:0b:92:06:fb:dc:4a:00:8a:a0:a9:76:21:ca: 34:a9:a4:43:ac:b1:c3:b9:cd:95:5e:94:74:3d:51: 6b:77:16:99:9e:68:d2:5a:5a:83:9d:2a:12:f6:10: f0:74:76:db:72:e0:48:f3:fd:4a:6b:7c:66:3f:e9: 01:f3:40:b3:39:e0:e2:86:ae:17:fe:ec:37:7f:46: 1f:2d:55:9b:37:27:67:e6:1d:75:24:6a:59:5d:3d: e9:5b:10:dc:b7:3d:87:22:7b:62:c9:10:44:f7:74: 75:1d:58:7a:3c:9b:3b:d5:e5:61:cf:49:e6:dd:03: bd:79:b9:b8:59:f5:32:38:e7:25:c0:c5:04:64:52: 0c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:94:B4:13:86:C7:56:AF:B7:C7:85:2C:74:BE:54:DC:09:23:D5:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/81e84a73-b92b-4f3f-96ca-1c70561af28d/2af4c51e-95d7-352e-8fea-fdb5eb0c21f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/81e84a73-b92b-4f3f-96ca-1c70561af28d/81e84a73-b92b-4f3f-96ca-1c70561af28d.crl X509v3 Authority Key Identifier: keyid:48:32:A1:9A:C8:25:16:7A:3C:A1:1C:B2:2B:B2:24:7D:E6:3F:27:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/81e84a73-b92b-4f3f-96ca-1c70561af28d.cer sbgp-ipAddrBlock: critical IPv4: 170.174.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:87:3f:3b:aa:af:e1:39:3d:66:91:a8:ef:ed:22:8d:8a:1e: b6:41:fa:38:be:8a:81:d7:55:de:5a:dc:0a:e3:6e:84:02:af: ea:4a:ce:50:84:15:5c:24:d0:d1:1c:93:7e:64:2d:60:d2:f0: a9:6e:77:83:96:9c:52:4c:c2:87:9c:09:9b:05:17:7c:eb:9c: d9:02:88:3e:14:8c:d2:8b:53:2f:f7:e0:d5:7c:b6:86:99:b0: 3f:48:72:b9:8f:ab:f2:63:9e:e7:02:27:f4:8e:0e:f7:3a:0d: 69:13:79:a5:34:72:ae:89:81:1c:9b:d1:65:e0:30:2d:48:ae: 7b:5c:d1:93:1d:1f:1b:74:3e:14:5c:11:24:a9:75:bb:a1:f2: f1:4b:2f:e3:cd:63:9e:d6:06:b2:d3:25:d0:85:e8:4b:29:d9: 3e:da:14:d0:ec:21:35:12:2a:44:46:32:38:c2:c0:21:82:ba: d0:1d:44:13:52:01:28:29:1d:a3:7c:ff:a7:23:fe:f7:45:ae: c3:b5:23:60:69:8c:f2:50:6d:b2:27:63:31:3e:56:59:37:65: c1:b8:b8:39:c5:97:0e:fa:de:a9:0d:43:47:6b:18:77:d8:b5: 6b:5a:e9:a1:25:3d:ae:04:92:59:84:1e:7c:e1:b4:6d:6c:94: 9b:f5:fc:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SNPR9RhvRuepXwMQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODFlODRhNzMtYjkyYi00ZjNmLTk2Y2EtMWM3MDU2MWFm MjhkMB4XDTI2MDMyODE4NDQzM1oXDTI2MDUxODE5MjgyNVowLzEtMCsGA1UEAxMk ZTYyYWExMjUtYWIyNy00NmM4LTllYmItNDI1Yjc4ZmRiNGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfdRzONWdJu804X/qgsaKzXaQx8vaXmxb5t1 A6MCw9QQ3bYkB195UL1SPzyhyvUSmeWx3jz0fGGu/8HNIeAKcfZ4Chdl+2YxQ6xt yjIoCZn176xvaYZ1p2cPP7hl0/KEyja2hh8S8YHOWQpGZsDzOPZ6NpPQQwMv+AuS BvvcSgCKoKl2Ico0qaRDrLHDuc2VXpR0PVFrdxaZnmjSWlqDnSoS9hDwdHbbcuBI 8/1Ka3xmP+kB80CzOeDihq4X/uw3f0YfLVWbNydn5h11JGpZXT3pWxDctz2HInti yRBE93R1HVh6PJs71eVhz0nm3QO9ebm4WfUyOOclwMUEZFIMPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGUtBOGx1avt8eFLHS+VNwJI9V/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84MWU4 NGE3My1iOTJiLTRmM2YtOTZjYS0xYzcwNTYxYWYyOGQvMmFmNGM1MWUtOTVkNy0z NTJlLThmZWEtZmRiNWViMGMyMWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvODFlODRhNzMtYjkyYi00ZjNmLTk2 Y2EtMWM3MDU2MWFmMjhkLzgxZTg0YTczLWI5MmItNGYzZi05NmNhLTFjNzA1NjFh ZjI4ZC5jcmwwHwYDVR0jBBgwFoAUSDKhmsglFno8oRyyK7IkfeY/J+QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS84MWU4NGE3My1iOTJiLTRmM2YtOTZjYS0xYzcw NTYxYWYyOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqq4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiHPzuqr+E5PWaRqO/tIo2KHrZB+ji+ioHXVd5a3ArjboQCr+pKzlCE FVwk0NEck35kLWDS8Klud4OWnFJMwoecCZsFF3zrnNkCiD4UjNKLUy/34NV8toaZ sD9IcrmPq/JjnucCJ/SODvc6DWkTeaU0cq6JgRyb0WXgMC1Irntc0ZMdHxt0PhRc ESSpdbuh8vFLL+PNY57WBrLTJdCF6Esp2T7aFNDsITUSKkRGMjjCwCGCutAdRBNS ASgpHaN8/6cj/vdFrsO1I2BpjPJQbbInYzE+Vlk3ZcG4uDnFlw763qkNQ0drGHfY tWta6aElPa4EklmEHnzhtG1slJv1/Ko= -----END CERTIFICATE-----Generated at Fri Apr 17 18:55:56 2026 by rpki-client