$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e8d52976-1af5-3ee3-a528-24bbbd940160.roa File: e8d52976-1af5-3ee3-a528-24bbbd940160.roa (raw, json) Hash identifier: RGyBIlpTu5pztLY4xHVtttXwlRo+UH/uWsIcYQ8unvc= Subject key identifier: 9D:61:5E:66:D7:00:8B:28:5A:47:EF:78:8E:D0:D9:69:27:24:4C:A8 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D300A28C5FAD36A9C3AB413E0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e8d52976-1af5-3ee3-a528-24bbbd940160.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 8987 IP address blocks: 170.85.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:28:c5:fa:d3:6a:9c:3a:b4:13:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=035bf499-9d43-4a52-8124-bb80d36d42ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:61:59:42:d3:34:73:9a:be:3e:0d:c7:66:c0: bf:fa:73:30:70:2a:51:1c:c3:89:a4:f3:07:a7:8a: a9:d5:05:e0:15:f0:01:16:40:8c:0c:ee:5f:2f:a7: f6:9a:7d:aa:b9:e1:b2:99:5b:ef:f3:0d:6a:bc:a6: 09:e2:37:9c:8a:5b:88:ec:52:df:10:d7:b3:9e:25: db:a1:a0:cc:be:93:7a:62:07:4b:7b:1d:55:58:e3: 1b:f4:64:f5:12:50:6b:f1:5f:d7:94:fd:a7:26:d1: ae:e0:0f:44:15:e4:c0:45:81:a7:a2:cf:3b:61:56: 92:55:53:38:50:2a:65:bd:a3:85:ea:81:93:f4:7c: 22:83:fe:a2:7c:94:5d:2a:49:06:a9:ec:85:27:d3: 33:83:65:d3:38:5b:2c:1c:a9:6c:3e:4e:90:df:41: 48:34:bb:f4:e3:ec:52:ac:43:8a:b5:e1:c2:cb:d0: d3:ba:7e:5b:fa:61:7b:d7:66:54:b7:64:51:47:e4: 7b:13:f9:89:99:51:23:33:24:8a:24:36:03:77:93: 60:b6:fc:64:82:08:e3:85:4e:ca:ae:8e:dd:29:7d: aa:5d:e0:3d:84:ca:fe:0c:a5:c8:8a:07:d9:8d:09: 4b:06:40:e9:3c:42:a8:2c:16:be:0e:91:55:fb:48: da:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:61:5E:66:D7:00:8B:28:5A:47:EF:78:8E:D0:D9:69:27:24:4C:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e8d52976-1af5-3ee3-a528-24bbbd940160.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:5b:76:3a:51:d5:3d:12:fa:5d:1f:61:49:f9:fd:c1:81:b2: fc:53:15:3f:7b:bc:05:b4:c1:65:56:17:f8:d4:25:b3:e7:a1: 74:5e:2d:ec:de:6c:c9:84:14:6e:16:19:a1:92:f3:68:cf:c4: 87:e2:ee:09:1e:7e:1d:4b:8d:de:16:a7:c4:d3:fa:77:2c:f5: ef:d7:cc:09:1e:12:58:6b:11:93:40:81:1b:0b:7a:32:da:dc: 84:1d:f4:4f:33:3b:47:e6:d5:37:ea:d7:e6:61:33:72:dc:3c: 8b:dd:54:f1:07:46:cb:4d:14:05:76:a7:f1:3b:5c:3e:ff:73: 5b:ec:83:d6:3e:b5:3e:7d:e3:1d:e1:19:de:93:57:40:57:5c: 65:ae:5c:37:92:f7:50:20:0d:43:04:ab:fe:fc:0a:c2:66:01: a1:40:b5:dd:a2:cf:dd:c2:96:62:17:e7:ac:4e:ad:14:03:78: 67:61:ff:8a:a0:42:3d:9a:be:00:45:58:9b:d1:98:50:a7:56: 2d:b6:4f:8c:55:04:9a:ff:7e:23:f1:ef:33:e8:13:8c:f1:b3: 9d:b4:d9:15:b4:44:5c:e1:44:f9:df:dc:72:ce:fc:84:45:ea: 81:da:44:ca:37:2e:33:d9:f3:ef:ae:48:6c:af:38:f3:49:f0: 1e:ed:dd:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCijF+tNqnDq0E+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MDM1YmY0OTktOWQ0My00YTUyLTgxMjQtYmI4MGQzNmQ0MmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGFZQtM0c5q+Pg3HZsC/+nMwcCpRHMOJpPMH p4qp1QXgFfABFkCMDO5fL6f2mn2queGymVvv8w1qvKYJ4jeciluI7FLfENezniXb oaDMvpN6YgdLex1VWOMb9GT1ElBr8V/XlP2nJtGu4A9EFeTARYGnos87YVaSVVM4 UCplvaOF6oGT9Hwig/6ifJRdKkkGqeyFJ9Mzg2XTOFssHKlsPk6Q30FINLv04+xS rEOKteHCy9DTun5b+mF712ZUt2RRR+R7E/mJmVEjMySKJDYDd5NgtvxkggjjhU7K ro7dKX2qXeA9hMr+DKXIigfZjQlLBkDpPEKoLBa+DpFV+0jaqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1hXmbXAIsoWkfveI7Q2WknJEyoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZThkNTI5NzYtMWFmNS0z ZWUzLWE1MjgtMjRiYmJkOTQwMTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL5bdjpR1T0S+l0fYUn5/cGBsvxTFT97vAW0wWVWF/jUJbPnoXReLeze bMmEFG4WGaGS82jPxIfi7gkefh1Ljd4Wp8TT+ncs9e/XzAkeElhrEZNAgRsLejLa 3IQd9E8zO0fm1Tfq1+ZhM3LcPIvdVPEHRstNFAV2p/E7XD7/c1vsg9Y+tT594x3h Gd6TV0BXXGWuXDeS91AgDUMEq/78CsJmAaFAtd2iz93ClmIX56xOrRQDeGdh/4qg Qj2avgBFWJvRmFCnVi22T4xVBJr/fiPx7zPoE4zxs5202RW0RFzhRPnf3HLO/IRF 6oHaRMo3LjPZ8++uSGyvOPNJ8B7t3do= -----END CERTIFICATE-----Generated at Thu Mar 26 18:19:57 2026 by rpki-client