$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/35f69044-5811-389f-995a-dbb1f6465b9e.roa File: 35f69044-5811-389f-995a-dbb1f6465b9e.roa (raw, json) Hash identifier: 2DQgERYUBi2g0JAxI+bUFg+0AbffCKbLzhoZk1PRHB0= Subject key identifier: A8:1A:ED:E3:21:0A:46:92:45:0C:C9:2F:58:54:2D:AD:38:E2:19:81 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D2A74F84586F5405D23F28880 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/35f69044-5811-389f-995a-dbb1f6465b9e.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 22616 IP address blocks: 170.85.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:f8:45:86:f5:40:5d:23:f2:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=47674e94-2d7b-4bbb-85db-69d4708dd1fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:bf:1d:8f:9f:fc:70:4f:45:50:4c:9d:c1:35: 71:ca:08:8b:83:11:78:f0:8a:0c:93:16:0c:01:4d: 53:4b:27:a2:d8:22:41:ca:8b:1b:39:28:6b:ea:c9: b8:c9:c3:3d:7a:eb:99:44:8a:61:fc:2d:40:6a:db: 6f:c4:b4:da:8a:e8:16:24:84:48:aa:6b:27:89:19: 5c:be:2a:a7:f7:f4:bb:0f:3c:3a:0d:90:be:10:8c: 0c:da:2b:94:da:63:d6:27:e3:4a:2f:fb:c4:ce:d7: 03:75:1f:23:2b:c1:c3:cb:17:e8:b0:8e:5c:eb:25: 8d:a7:ca:03:ca:50:87:aa:d2:6b:a6:f3:0a:db:6d: 53:7f:2a:81:cb:05:7b:80:35:b3:1c:c9:10:95:63: e3:47:ff:32:8e:2e:c5:89:cf:1f:77:b1:9f:dd:ed: 74:78:00:b3:94:0f:15:fd:8b:ee:27:ca:8b:70:d1: b4:12:20:19:d1:e9:b2:c3:f4:f1:cf:3b:47:c6:0e: 39:17:6b:af:53:3f:a9:be:4a:bf:05:58:82:74:3b: a6:fe:b6:02:7a:36:9f:64:67:05:5a:2d:a4:c6:02: 14:a3:5d:39:a8:55:98:1e:0f:81:4b:5a:37:56:b1: 01:13:45:24:ca:b6:b5:e5:b2:5d:9b:dd:d5:e9:3c: c0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:1A:ED:E3:21:0A:46:92:45:0C:C9:2F:58:54:2D:AD:38:E2:19:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/35f69044-5811-389f-995a-dbb1f6465b9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:af:19:65:6e:60:a6:8d:9a:56:5c:98:b7:06:9d:2d:b1:68: a2:bf:34:a8:fb:e3:8f:ee:57:06:42:a9:62:d7:15:ef:53:60: d0:4b:53:40:f2:95:98:e2:2f:e6:00:00:af:5b:a7:0a:ab:9b: 06:9f:cd:1b:5b:47:f6:65:b0:9b:78:56:55:44:ed:c3:05:2d: 66:04:92:35:3d:ff:91:a9:b0:54:6c:a1:52:86:b5:59:70:27: 43:c6:e4:04:a1:d1:81:74:81:56:eb:de:b5:a7:b0:2d:5b:c9: 67:12:e3:1b:f2:b3:31:cd:af:60:70:ee:2d:b1:fc:d6:40:e2: eb:36:f0:10:88:bb:91:f6:9d:2f:26:c3:13:cd:1e:09:c9:28: 25:f1:94:92:a9:ee:ea:c6:d5:57:d1:7c:f4:5f:46:fe:2d:ee: 58:ce:86:74:b4:2d:b7:57:79:b8:b8:cf:be:b6:fa:d8:bc:a7: e8:69:b1:f0:6b:52:4d:96:84:6d:12:94:a2:f4:fe:d2:39:59: 92:4c:40:3b:b0:2e:84:47:f9:ad:15:77:85:a6:fc:96:c2:00: 03:84:04:fd:50:ef:4a:60:60:af:fa:1b:4a:ec:91:48:35:9d: 77:8d:3e:1e:64:99:6b:34:a3:77:14:3e:05:fb:5f:e2:63:2c: f4:83:a4:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdPhFhvVAXSPyiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk NDc2NzRlOTQtMmQ3Yi00YmJiLTg1ZGItNjlkNDcwOGRkMWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6r8dj5/8cE9FUEydwTVxygiLgxF48IoMkxYM AU1TSyei2CJByosbOShr6sm4ycM9euuZRIph/C1AattvxLTaiugWJIRIqmsniRlc viqn9/S7Dzw6DZC+EIwM2iuU2mPWJ+NKL/vEztcDdR8jK8HDyxfosI5c6yWNp8oD ylCHqtJrpvMK221TfyqBywV7gDWzHMkQlWPjR/8yji7Fic8fd7Gf3e10eACzlA8V /YvuJ8qLcNG0EiAZ0emyw/TxzztHxg45F2uvUz+pvkq/BViCdDum/rYCejafZGcF Wi2kxgIUo105qFWYHg+BS1o3VrEBE0Ukyra15bJdm93V6TzATQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKga7eMhCkaSRQzJL1hULa044hmBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMzVmNjkwNDQtNTgxMS0z ODlmLTk5NWEtZGJiMWY2NDY1YjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALGvGWVuYKaNmlZcmLcGnS2xaKK/NKj744/uVwZCqWLXFe9TYNBLU0Dy lZjiL+YAAK9bpwqrmwafzRtbR/ZlsJt4VlVE7cMFLWYEkjU9/5GpsFRsoVKGtVlw J0PG5ASh0YF0gVbr3rWnsC1byWcS4xvyszHNr2Bw7i2x/NZA4us28BCIu5H2nS8m wxPNHgnJKCXxlJKp7urG1VfRfPRfRv4t7ljOhnS0LbdXebi4z762+ti8p+hpsfBr Uk2WhG0SlKL0/tI5WZJMQDuwLoRH+a0Vd4Wm/JbCAAOEBP1Q70pgYK/6G0rskUg1 nXeNPh5kmWs0o3cUPgX7X+JjLPSDpIk= -----END CERTIFICATE-----Generated at Thu Mar 26 16:58:29 2026 by rpki-client