$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2dce6000-c112-3dbd-a403-c351462057df.roa File: 2dce6000-c112-3dbd-a403-c351462057df.roa (raw, json) Hash identifier: wS8Ua+QpGgNziT3uKvIvqJBDW5f2CeS0QUeaPjWnZ1E= Subject key identifier: 0F:57:38:B2:5E:C7:8C:13:6B:C5:66:91:CD:AB:BE:DD:AC:8E:EA:0C Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D343A20025815C77E6C48E480 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2dce6000-c112-3dbd-a403-c351462057df.roa Signing time: Wed 18 Mar 2026 01:00:33 +0000 ROA not before: Wed 18 Mar 2026 01:00:33 +0000 ROA not after: Tue 16 Jun 2026 01:00:33 +0000 asID: 14618 IP address blocks: 170.85.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:3a:20:02:58:15:c7:7e:6c:48:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Mar 18 01:00:33 2026 GMT Not After : Jun 16 01:00:33 2026 GMT Subject: CN=d31b41be-4061-4969-926e-5280523eb1e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4c:0d:21:52:50:f3:b9:61:f9:65:83:09:50: d8:27:58:7d:74:ca:a1:f5:41:6f:89:f6:1c:bb:36: 9f:d3:db:b4:51:ae:0f:62:23:2c:87:f1:7a:40:98: ad:d3:ef:23:c9:e5:3a:f0:37:d9:2a:f7:2d:96:ad: 84:57:51:55:e6:8e:50:8f:52:d9:28:57:f9:d9:ef: b2:1b:c7:a1:f4:4e:40:d3:22:0e:e6:14:01:34:65: 32:01:46:02:26:7a:d1:7f:6f:6a:44:73:b4:0f:6b: 4f:41:27:80:57:1f:7d:32:6a:78:29:5c:e4:60:12: 2e:7f:82:16:fc:12:59:3a:31:dd:ca:c2:58:91:45: fe:19:d0:d3:8b:ae:29:39:71:64:bd:71:38:04:19: a9:fa:65:62:22:cb:18:63:d0:8b:dc:28:7b:3a:03: bc:9c:83:d6:59:fe:10:82:70:86:79:60:4c:0d:56: ef:99:f8:12:e0:a6:f8:01:a9:43:d5:44:85:64:01: c4:92:24:c4:a7:bd:59:45:fb:c8:9a:2b:ec:d9:f7: 1a:09:87:dc:00:2d:b0:88:2b:b7:00:fe:0a:5d:d9: 18:9b:c9:be:2e:d2:60:bb:89:83:e1:c7:a0:9f:a5: bd:25:d8:c7:35:5c:25:3e:39:05:a7:1a:12:37:14: 64:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:57:38:B2:5E:C7:8C:13:6B:C5:66:91:CD:AB:BE:DD:AC:8E:EA:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2dce6000-c112-3dbd-a403-c351462057df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:6d:eb:8c:88:d4:26:9d:c4:c5:ba:29:ed:a9:67:db:5f:44: 49:64:51:24:b6:b2:34:e8:a3:65:a4:8e:e1:87:b7:6c:f3:1a: 5d:7c:c0:44:04:14:f6:8a:d1:82:4e:99:48:a0:15:3b:8b:87: 88:b7:da:95:3e:12:fe:e5:11:69:34:e8:8f:5c:7d:a1:1f:e5: 23:8c:12:8b:2d:92:26:69:63:96:1d:f7:fc:97:2a:ac:fd:6c: db:fa:75:8a:95:87:d2:98:07:fc:de:d2:db:2b:ba:54:a2:b0: 14:7e:a4:3e:c1:f3:a4:60:03:a2:f6:3f:2c:27:a0:2a:2b:e5: 2b:68:73:3a:95:6a:34:0b:50:ab:68:5a:5b:94:c1:21:d2:05: f5:77:f5:d2:00:d2:dc:04:41:db:a1:36:19:74:b3:87:c7:ce: 84:14:25:af:f6:5a:74:0d:8a:51:8c:45:d5:af:64:df:36:b0: ef:1d:ca:c4:48:8f:b3:b3:ce:41:53:9e:18:09:8c:56:a9:e2: e2:db:1b:21:6e:68:58:6f:68:8f:74:c3:1b:39:d4:17:c0:5f: 75:55:e6:03:a5:67:7f:c7:e5:8e:36:e1:83:3a:d6:45:6f:1b: 87:9a:5f:a8:d4:7c:6d:d4:d5:6f:7f:7e:4f:d3:c4:ad:40:2b: 6c:4c:51:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE00OiACWBXHfmxI5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk ZDMxYjQxYmUtNDA2MS00OTY5LTkyNmUtNTI4MDUyM2ViMWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkwNIVJQ87lh+WWDCVDYJ1h9dMqh9UFvifYc uzaf09u0Ua4PYiMsh/F6QJit0+8jyeU68DfZKvctlq2EV1FV5o5Qj1LZKFf52e+y G8eh9E5A0yIO5hQBNGUyAUYCJnrRf29qRHO0D2tPQSeAVx99Mmp4KVzkYBIuf4IW /BJZOjHdysJYkUX+GdDTi64pOXFkvXE4BBmp+mViIssYY9CL3Ch7OgO8nIPWWf4Q gnCGeWBMDVbvmfgS4Kb4AalD1USFZAHEkiTEp71ZRfvImivs2fcaCYfcAC2wiCu3 AP4KXdkYm8m+LtJgu4mD4cegn6W9JdjHNVwlPjkFpxoSNxRkLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9XOLJex4wTa8Vmkc2rvt2sjuoMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMmRjZTYwMDAtYzExMi0z ZGJkLWE0MDMtYzM1MTQ2MjA1N2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5t64yI1CadxMW6Ke2pZ9tfRElkUSS2sjToo2WkjuGHt2zzGl18wEQE FPaK0YJOmUigFTuLh4i32pU+Ev7lEWk06I9cfaEf5SOMEostkiZpY5Yd9/yXKqz9 bNv6dYqVh9KYB/ze0tsrulSisBR+pD7B86RgA6L2PywnoCor5StoczqVajQLUKto WluUwSHSBfV39dIA0twEQduhNhl0s4fHzoQUJa/2WnQNilGMRdWvZN82sO8dysRI j7OzzkFTnhgJjFap4uLbGyFuaFhvaI90wxs51BfAX3VV5gOlZ3/H5Y424YM61kVv G4eaX6jUfG3U1W9/fk/TxK1AK2xMURo= -----END CERTIFICATE-----Generated at Thu Mar 26 02:02:43 2026 by rpki-client