$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a38378ac-3414-304a-ba7c-5dd7bc6dab62.roa File: a38378ac-3414-304a-ba7c-5dd7bc6dab62.roa (raw, json) Hash identifier: Iei8G61YGgAzNHbMDyVxWxAWU2fbGTAkt92JRF8nE7w= Subject key identifier: 78:72:6B:8C:B0:CC:CB:30:3B:9A:BA:DC:2D:0D:6E:3F:50:CE:1F:6C Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D343A1A886D466F56C2347A60 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a38378ac-3414-304a-ba7c-5dd7bc6dab62.roa Signing time: Wed 18 Mar 2026 01:00:33 +0000 ROA not before: Wed 18 Mar 2026 01:00:33 +0000 ROA not after: Tue 16 Jun 2026 01:00:33 +0000 asID: 14618 IP address blocks: 170.85.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:3a:1a:88:6d:46:6f:56:c2:34:7a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Mar 18 01:00:33 2026 GMT Not After : Jun 16 01:00:33 2026 GMT Subject: CN=543b595e-aef3-4921-a85a-26835e54afc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d8:99:0f:1b:b7:b0:b1:f3:b4:04:b2:4a:28: f1:dd:7b:fa:2d:15:ba:4e:9c:f3:36:94:07:b9:15: f9:99:6a:9a:63:9a:6d:9a:b8:d1:ae:65:a7:e4:b0: 63:fe:5c:ca:70:47:a0:8e:4a:7f:05:67:f0:63:3b: 7d:73:f1:f3:c3:21:60:9c:e4:86:f4:bb:d3:9c:38: 80:59:6d:dd:d1:7e:06:f2:b3:49:c3:26:7d:f4:1a: 90:1d:84:e0:a0:05:5e:42:55:8d:5f:c7:8d:d6:e3: 6b:54:4b:1a:80:43:6f:af:74:db:1f:d9:a0:d9:9f: 99:5f:10:bf:b3:86:73:8e:4d:0f:de:29:d3:f7:5d: f2:67:2d:e4:ae:f9:65:01:02:3f:f3:bd:0d:4f:93: 6b:34:92:7a:d9:43:11:93:f0:16:eb:0d:3e:41:d9: 58:a4:8d:01:ca:4c:b4:3c:42:3a:87:bc:d5:cb:ae: 98:bd:0a:dc:b6:fb:c7:dc:bb:5f:3b:7e:95:e6:04: f3:6e:b4:14:da:dd:db:a1:e1:98:dd:b1:6b:ab:15: c2:7c:91:cd:d0:af:da:bc:a5:48:82:00:98:42:cd: 34:a0:86:e4:7d:ec:e1:cb:42:52:19:80:37:5a:bc: 82:18:73:6b:ea:83:e7:d4:1e:3c:9b:f3:4c:e1:08: aa:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:72:6B:8C:B0:CC:CB:30:3B:9A:BA:DC:2D:0D:6E:3F:50:CE:1F:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a38378ac-3414-304a-ba7c-5dd7bc6dab62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:cd:6e:cd:e3:88:b1:7c:97:f6:a6:7b:7c:5d:41:cd:5c:2b: 58:ac:86:17:70:d5:33:69:78:eb:3a:94:ba:86:cf:4f:1a:92: d6:5d:9f:3c:f5:bf:dd:ed:06:b2:a5:c7:1d:4b:25:f3:b6:47: 22:34:60:c5:a9:50:6f:6a:11:c3:1e:0e:25:1c:92:9c:5c:a7: df:35:5b:f3:10:a4:96:0c:e2:b9:7e:22:d9:a4:c7:7c:8f:06: 36:ac:68:4c:8b:df:ef:2f:f9:aa:42:de:53:fb:73:c7:b5:5c: 95:f5:fa:1c:ad:3e:74:c1:3a:63:74:e8:97:0c:de:3e:d9:15: 7a:b5:cc:6f:bc:cc:10:4a:c6:60:2c:2e:04:a1:02:1f:7d:09: d4:e3:17:18:b5:36:63:08:1b:b8:b2:b9:25:5c:5b:1a:93:d7: d3:42:05:c7:99:ed:b8:0a:10:53:4f:25:a4:11:cb:8a:a4:95: 66:5e:1a:14:b4:20:63:8e:9c:49:17:08:84:f0:d6:e7:02:11: 9d:2b:ed:78:ac:d2:6f:ca:bb:20:e4:a0:15:fa:5b:35:14:60: 7a:c6:6c:ce:f4:2b:36:41:a4:3e:89:48:45:2a:3b:40:69:71: 3b:22:f3:55:5e:dd:7e:3f:de:4c:02:31:c9:98:48:27:c6:e4: eb:51:e7:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE00OhqIbUZvVsI0emAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk NTQzYjU5NWUtYWVmMy00OTIxLWE4NWEtMjY4MzVlNTRhZmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNiZDxu3sLHztASySijx3Xv6LRW6TpzzNpQH uRX5mWqaY5ptmrjRrmWn5LBj/lzKcEegjkp/BWfwYzt9c/HzwyFgnOSG9LvTnDiA WW3d0X4G8rNJwyZ99BqQHYTgoAVeQlWNX8eN1uNrVEsagENvr3TbH9mg2Z+ZXxC/ s4Zzjk0P3inT913yZy3krvllAQI/870NT5NrNJJ62UMRk/AW6w0+QdlYpI0Byky0 PEI6h7zVy66YvQrctvvH3LtfO36V5gTzbrQU2t3boeGY3bFrqxXCfJHN0K/avKVI ggCYQs00oIbkfezhy0JSGYA3WryCGHNr6oPn1B48m/NM4QiqvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhya4ywzMswO5q63C0Nbj9Qzh9sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYTM4Mzc4YWMtMzQxNC0z MDRhLWJhN2MtNWRkN2JjNmRhYjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlV5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/Nbs3jiLF8l/ame3xdQc1cK1ishhdw1TNpeOs6lLqGz08aktZdnzz1 v93tBrKlxx1LJfO2RyI0YMWpUG9qEcMeDiUckpxcp981W/MQpJYM4rl+Itmkx3yP BjasaEyL3+8v+apC3lP7c8e1XJX1+hytPnTBOmN06JcM3j7ZFXq1zG+8zBBKxmAs LgShAh99CdTjFxi1NmMIG7iyuSVcWxqT19NCBceZ7bgKEFNPJaQRy4qklWZeGhS0 IGOOnEkXCITw1ucCEZ0r7Xis0m/KuyDkoBX6WzUUYHrGbM70KzZBpD6JSEUqO0Bp cTsi81Ve3X4/3kwCMcmYSCfG5OtR56E= -----END CERTIFICATE-----Generated at Thu Mar 26 18:29:15 2026 by rpki-client