$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/53980d1b-3b4a-367a-9e31-f2cbe04316db.roa File: 53980d1b-3b4a-367a-9e31-f2cbe04316db.roa (raw, json) Hash identifier: u7Q8Dkj78OQzRP3jfqpr+sQr9GT8OWDkrIM76Q/GFCE= Subject key identifier: FB:09:7C:F6:B7:D3:66:F6:AF:CA:BD:E3:DE:8F:A8:AC:A1:8D:C4:14 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D8EF581057CB33DF4F0DF8680 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/53980d1b-3b4a-367a-9e31-f2cbe04316db.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 8987 IP address blocks: 170.85.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:81:05:7c:b3:3d:f4:f0:df:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=731d44d7-dd7b-4618-b6ff-e047d932ca45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:09:b5:aa:09:b7:da:a4:63:0e:95:dd:9c:f9: 05:24:46:50:4b:26:db:a2:72:c0:2f:c2:75:2b:52: 27:42:db:8e:70:a0:8f:d7:c7:8e:d2:c9:2b:5a:fd: 80:47:f2:31:a4:6b:09:00:cd:3e:86:44:79:fe:16: 50:e4:f7:3d:92:5c:05:91:76:e6:4e:97:8c:f7:5d: c4:70:a5:f3:8e:b3:dc:da:68:db:1f:a5:0a:ca:53: 02:4c:7f:40:4b:a3:f2:02:10:f0:d1:3e:34:b0:22: a0:47:35:92:4d:89:f3:4f:6e:14:22:d0:d9:08:59: 1f:94:98:b4:69:28:cb:d8:90:cf:ae:e9:08:e9:26: ba:e0:66:8d:13:b5:f4:b3:90:dd:74:bd:ea:1b:0e: 22:90:75:de:4e:70:9d:95:dd:0c:74:14:c8:30:2c: cc:7e:ca:39:0e:5d:86:64:17:08:f7:b9:49:78:02: b3:74:a2:8b:4a:f8:90:0d:32:f2:fe:04:2f:ce:56: 16:8b:d6:b6:ee:7e:a3:85:83:b9:98:e3:99:89:0a: 8c:83:16:1a:2e:7e:a5:4e:2b:b0:bb:6e:d9:50:c2: e3:92:0c:b1:d2:3d:bf:50:4d:21:82:38:2b:8d:a0: 83:5e:0c:a2:31:62:6d:08:85:05:24:87:e1:fd:90: c9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:09:7C:F6:B7:D3:66:F6:AF:CA:BD:E3:DE:8F:A8:AC:A1:8D:C4:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/53980d1b-3b4a-367a-9e31-f2cbe04316db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:42:0b:44:2b:28:b5:f4:8b:a4:9b:50:c2:0b:5f:2a:1b:7f: 34:75:fb:a4:b2:52:c9:66:73:e1:ba:3e:85:74:2a:f3:5f:12: 8d:b7:cb:af:8f:41:e0:ec:f0:e4:27:40:63:bf:49:07:b7:50: c5:ba:f2:24:b3:ec:56:43:90:b9:b4:bc:4c:95:d7:27:aa:45: 8e:dc:89:18:01:a4:04:e1:e8:04:10:1e:4c:ff:c7:d5:d7:4f: ce:f6:ee:f7:96:10:32:b1:71:93:cd:70:fb:81:2d:59:f2:da: a7:6b:47:11:52:ed:cb:ae:d9:ff:ec:d5:07:91:f1:5b:f9:6d: c8:6e:a7:ba:d8:16:17:59:27:e3:87:d9:6d:fe:34:d4:8d:22: 5e:84:fa:5a:72:be:b0:9c:25:2a:bc:77:35:8e:bd:37:08:c2: 1a:35:7c:f9:cf:0f:3f:3c:92:52:66:94:fd:cc:5a:01:77:79: df:7d:88:5b:30:7b:7e:3d:dd:9b:05:5c:f0:8c:25:68:0a:d5: a6:c6:18:d3:98:ab:f5:31:2e:42:99:4c:35:f7:2d:a2:1d:57: 04:2e:04:bb:de:76:63:a3:39:c9:5d:1b:de:f5:b0:7e:d2:0f: 17:f1:7b:bd:d3:86:34:01:36:8a:b5:ef:f9:07:2a:ca:79:94: 72:be:38:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9YEFfLM99PDfhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NzMxZDQ0ZDctZGQ3Yi00NjE4LWI2ZmYtZTA0N2Q5MzJjYTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQm1qgm32qRjDpXdnPkFJEZQSybbonLAL8J1 K1InQtuOcKCP18eO0skrWv2AR/IxpGsJAM0+hkR5/hZQ5Pc9klwFkXbmTpeM913E cKXzjrPc2mjbH6UKylMCTH9AS6PyAhDw0T40sCKgRzWSTYnzT24UItDZCFkflJi0 aSjL2JDPrukI6Sa64GaNE7X0s5DddL3qGw4ikHXeTnCdld0MdBTIMCzMfso5Dl2G ZBcI97lJeAKzdKKLSviQDTLy/gQvzlYWi9a27n6jhYO5mOOZiQqMgxYaLn6lTiuw u27ZUMLjkgyx0j2/UE0hgjgrjaCDXgyiMWJtCIUFJIfh/ZDJiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPsJfPa302b2r8q9496PqKyhjcQUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNTM5ODBkMWItM2I0YS0z NjdhLTllMzEtZjJjYmUwNDMxNmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxCC0QrKLX0i6SbUMILXyobfzR1+6SyUslmc+G6PoV0KvNfEo23y6+P QeDs8OQnQGO/SQe3UMW68iSz7FZDkLm0vEyV1yeqRY7ciRgBpATh6AQQHkz/x9XX T8727veWEDKxcZPNcPuBLVny2qdrRxFS7cuu2f/s1QeR8Vv5bchup7rYFhdZJ+OH 2W3+NNSNIl6E+lpyvrCcJSq8dzWOvTcIwho1fPnPDz88klJmlP3MWgF3ed99iFsw e3493ZsFXPCMJWgK1abGGNOYq/UxLkKZTDX3LaIdVwQuBLvedmOjOcldG971sH7S Dxfxe73ThjQBNoq17/kHKsp5lHK+OJI= -----END CERTIFICATE-----Generated at Wed May 13 12:09:58 2026 by rpki-client