$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/05198722-f522-345f-a506-ef6cca90a62d.roa File: 05198722-f522-345f-a506-ef6cca90a62d.roa (raw, json) Hash identifier: ZmI1OLMOEd4/BdcQ24Cm4yeZwtgmA7UA5cYmzPeamao= Subject key identifier: 74:3C:50:03:D5:B9:25:C1:0D:C1:D8:4F:26:C3:ED:17:7E:D8:EA:77 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D300A3FAD5BD7DE6F5C039AC0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/05198722-f522-345f-a506-ef6cca90a62d.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 8987 IP address blocks: 170.85.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:3f:ad:5b:d7:de:6f:5c:03:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=8540da93-89ec-44bf-93e1-2a3a36ee8d93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d7:50:69:b4:2b:06:bb:79:ba:4c:f7:d0:6b: 0a:1a:6c:2d:b1:75:ca:d4:56:0d:5f:94:c0:1d:ea: f3:5b:11:88:67:36:5e:55:7d:e5:e8:7c:7e:a9:c9: 3e:d8:f2:0e:8f:82:87:ed:6b:50:e0:4a:bb:d1:54: 48:17:5e:8f:a6:4e:30:3e:95:70:54:00:02:5e:2b: bf:55:37:60:8f:55:e7:83:02:ee:66:95:70:d9:cc: d1:f8:1b:2c:31:07:1c:4f:dd:6a:f7:4c:c3:74:d6: b4:d8:58:91:4b:d1:d9:3d:72:1b:b1:01:29:63:f8: ea:ca:3c:23:49:37:15:c3:88:13:29:3e:2a:4b:5e: 5a:c0:a9:fc:3c:3c:09:1d:d4:6d:55:fd:f7:15:66: ff:9f:39:9d:c6:f4:96:9c:18:21:bd:aa:6d:56:12: a2:e1:e1:d6:b9:83:df:6e:dd:a4:5d:61:c9:14:1a: ee:97:2d:40:3d:4f:78:6a:51:52:c2:32:3f:da:0c: 9b:4b:ab:c3:6c:58:89:54:fc:fb:77:6f:8c:a2:a4: 38:a8:2a:19:de:d2:b5:99:dd:bc:83:81:01:9c:21: ad:0f:1d:2d:ae:07:c8:2d:4f:e7:64:12:46:9d:c8: 01:29:03:c8:dd:38:5c:de:64:89:24:d3:93:12:78: f8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:3C:50:03:D5:B9:25:C1:0D:C1:D8:4F:26:C3:ED:17:7E:D8:EA:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/05198722-f522-345f-a506-ef6cca90a62d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:75:8d:c0:4f:6c:1d:86:8d:4f:12:67:f2:06:09:33:22:57: d9:69:48:fb:0d:15:3a:07:ce:1e:1d:12:5a:b9:e2:1f:e9:54: 83:a7:89:00:4c:a7:24:4c:9f:65:4f:a5:d6:d0:90:89:51:92: c6:3d:47:9b:c5:78:af:a0:0c:24:e4:3c:67:00:8b:4f:7c:1a: 22:5c:87:1d:6c:d7:c5:98:8f:60:3b:bb:18:38:87:01:d4:5e: 5f:05:11:4d:f0:33:c0:28:25:99:ef:70:52:6b:3f:99:5f:61: f9:45:71:13:61:6c:78:2d:7b:97:ac:e3:d7:d1:b9:f3:c2:6b: 86:28:15:f9:32:e0:06:f3:e8:ce:b7:be:e0:2d:82:f2:be:52: 05:e3:59:17:8b:12:5c:61:c9:b5:d1:9f:30:36:54:46:8d:f6: e3:87:c4:3b:d1:a5:33:48:df:47:1a:04:5c:f8:77:83:15:92: 0d:27:5e:3f:f9:00:b8:23:4c:ff:69:b7:81:fe:b8:59:dd:d0: 98:87:ce:a8:cc:d7:06:c4:c5:d3:b4:fd:96:60:3d:80:11:36: d8:3c:85:36:34:38:f3:51:30:f1:4c:ab:4b:1c:3b:5a:8f:b7: 60:2b:f9:91:00:d1:f2:b5:cd:5c:de:25:97:32:92:c9:04:71: 33:fc:24:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCj+tW9feb1wDmsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ODU0MGRhOTMtODllYy00NGJmLTkzZTEtMmEzYTM2ZWU4ZDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9dQabQrBrt5ukz30GsKGmwtsXXK1FYNX5TA HerzWxGIZzZeVX3l6Hx+qck+2PIOj4KH7WtQ4Eq70VRIF16Ppk4wPpVwVAACXiu/ VTdgj1XngwLuZpVw2czR+BssMQccT91q90zDdNa02FiRS9HZPXIbsQEpY/jqyjwj STcVw4gTKT4qS15awKn8PDwJHdRtVf33FWb/nzmdxvSWnBghvaptVhKi4eHWuYPf bt2kXWHJFBruly1APU94alFSwjI/2gybS6vDbFiJVPz7d2+MoqQ4qCoZ3tK1md28 g4EBnCGtDx0trgfILU/nZBJGncgBKQPI3Thc3mSJJNOTEnj4jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQ8UAPVuSXBDcHYTybD7Rd+2Op3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMDUxOTg3MjItZjUyMi0z NDVmLWE1MDYtZWY2Y2NhOTBhNjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADl1jcBPbB2GjU8SZ/IGCTMiV9lpSPsNFToHzh4dElq54h/pVIOniQBM pyRMn2VPpdbQkIlRksY9R5vFeK+gDCTkPGcAi098GiJchx1s18WYj2A7uxg4hwHU Xl8FEU3wM8AoJZnvcFJrP5lfYflFcRNhbHgte5es49fRufPCa4YoFfky4Abz6M63 vuAtgvK+UgXjWReLElxhybXRnzA2VEaN9uOHxDvRpTNI30caBFz4d4MVkg0nXj/5 ALgjTP9pt4H+uFnd0JiHzqjM1wbExdO0/ZZgPYARNtg8hTY0OPNRMPFMq0scO1qP t2Ar+ZEA0fK1zVzeJZcykskEcTP8JMk= -----END CERTIFICATE-----Generated at Thu Mar 26 21:40:04 2026 by rpki-client