$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/2aa2052c-0244-32d0-aae9-fdec2c39019a.roa File: 2aa2052c-0244-32d0-aae9-fdec2c39019a.roa (raw, json) Hash identifier: USak+Vs+QF/EVGstjNGQt0yRxh9Vc7wbhXwjz99C07E= Subject key identifier: 3A:62:E6:07:2E:70:C6:E1:D9:F6:46:70:02:D9:82:78:24:A7:EE:19 Certificate issuer: /CN=0699cec8-3851-41f8-aee8-2e225865699c Certificate serial: 010D0C9F4328584D297E32D15C48360A23669170 Authority key identifier: 04:3A:13:A4:9A:F1:19:6C:60:B7:74:79:3E:AA:82:F6:12:4B:E6:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/2aa2052c-0244-32d0-aae9-fdec2c39019a.roa Signing time: Sat 14 Mar 2026 04:43:59 +0000 ROA not before: Sat 14 Mar 2026 04:43:59 +0000 ROA not after: Fri 12 Jun 2026 04:43:59 +0000 asID: 11911 IP address blocks: 170.61.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:29:7e:32:d1:5c:48:36:0a:23:66:91:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0699cec8-3851-41f8-aee8-2e225865699c Validity Not Before: Mar 14 04:43:59 2026 GMT Not After : Jun 12 04:43:59 2026 GMT Subject: CN=31e1b69a-2222-493c-9032-cd08071bab3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c2:77:9d:7a:8a:ad:99:45:25:ea:d4:1f:d7: 2e:b9:24:d0:8d:62:6b:b6:60:63:b1:98:de:4b:7b: 0f:ea:89:91:3b:df:c0:7e:c0:eb:35:67:1f:02:ed: e3:7b:cb:a1:f1:8d:f2:40:34:4c:8a:a5:54:30:e8: 9c:30:d0:a9:cf:a9:04:7a:de:c3:a5:50:36:b9:ec: b1:f7:7a:50:b9:b2:59:9c:4d:91:7e:ad:99:76:2a: c0:f7:6c:66:fc:b2:03:c0:e1:39:f6:21:7e:eb:cb: 3a:d0:5a:ea:01:07:fe:ea:79:1d:15:0d:be:14:b6: 03:e1:56:6f:c4:37:7d:3f:d8:0a:64:88:eb:4a:23: ed:75:42:be:d0:71:84:2e:6a:c8:40:ad:fe:66:21: e4:bb:5d:a9:b2:30:68:1f:95:c1:02:5f:a4:86:c3: 8a:97:6e:d9:8d:5d:77:ca:6f:79:71:dd:f4:cb:90: 63:ea:5d:d1:37:f6:53:75:30:50:9f:23:5c:7c:6f: 8d:58:e9:a0:23:c3:d1:9a:ac:62:8a:ea:89:bd:69: 85:7d:cd:0d:2b:e6:85:ec:ec:3a:e6:f7:3b:7c:d5: 05:bc:4a:f9:55:25:b3:9d:22:a6:8d:48:d9:79:4a: cc:e8:03:61:28:29:3c:b2:41:b6:5f:e2:7b:1d:92: 35:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:62:E6:07:2E:70:C6:E1:D9:F6:46:70:02:D9:82:78:24:A7:EE:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/2aa2052c-0244-32d0-aae9-fdec2c39019a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.crl X509v3 Authority Key Identifier: keyid:04:3A:13:A4:9A:F1:19:6C:60:B7:74:79:3E:AA:82:F6:12:4B:E6:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer sbgp-ipAddrBlock: critical IPv4: 170.61.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:eb:f4:b7:85:3e:66:62:94:39:d7:9a:4d:8a:51:38:a0:c4: 91:ff:e9:a2:b7:bc:17:ae:5c:b8:9b:4f:78:e7:f7:82:7c:d9: e1:2a:05:d5:83:52:81:da:13:aa:10:2d:e8:3f:cd:eb:3e:a0: 2b:39:18:2e:de:79:46:f1:e9:29:62:f1:8c:5a:fc:20:92:82: 99:ad:b6:78:21:dd:fd:d4:88:81:8e:bc:5f:7f:36:bb:1f:d2: 20:ff:d5:b1:87:41:f6:2c:78:cb:53:89:c7:19:ec:e7:83:7b: be:ad:f8:2f:4f:b4:b1:41:16:09:68:a6:22:0c:2e:d5:6a:18: a7:cb:f2:5f:6a:ab:cd:b3:b2:84:01:b7:c5:8c:99:b6:26:4b: 04:1e:ec:0e:c1:33:f0:dc:50:24:f2:5f:d4:43:f4:72:57:dc: 27:0f:2d:d0:f0:68:2b:54:6d:1f:7f:9c:6f:6d:03:09:bd:bc: 78:b3:2f:d1:f1:1a:01:b9:d3:a4:7a:1f:1c:83:f6:79:20:50: 63:f2:ab:2e:c9:4f:31:2f:57:d1:07:e7:7e:fe:7a:38:52:8d: af:f8:90:d3:2c:47:18:2c:2a:fb:35:6c:17:16:df:fa:3d:bb: ed:de:e2:d2:96:b8:08:d6:9f:70:cb:c7:90:fd:78:33:21:64: 7c:ec:38:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0pfjLRXEg2CiNmkXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY5OWNlYzgtMzg1MS00MWY4LWFlZTgtMmUyMjU4NjU2 OTljMB4XDTI2MDMxNDA0NDM1OVoXDTI2MDYxMjA0NDM1OVowLzEtMCsGA1UEAxMk MzFlMWI2OWEtMjIyMi00OTNjLTkwMzItY2QwODA3MWJhYjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsJ3nXqKrZlFJerUH9cuuSTQjWJrtmBjsZje S3sP6omRO9/AfsDrNWcfAu3je8uh8Y3yQDRMiqVUMOicMNCpz6kEet7DpVA2ueyx 93pQubJZnE2Rfq2ZdirA92xm/LIDwOE59iF+68s60FrqAQf+6nkdFQ2+FLYD4VZv xDd9P9gKZIjrSiPtdUK+0HGELmrIQK3+ZiHku12psjBoH5XBAl+khsOKl27ZjV13 ym95cd30y5Bj6l3RN/ZTdTBQnyNcfG+NWOmgI8PRmqxiiuqJvWmFfc0NK+aF7Ow6 5vc7fNUFvEr5VSWznSKmjUjZeUrM6ANhKCk8skG2X+J7HZI1mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpi5gcucMbh2fZGcALZgngkp+4ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wNjk5 Y2VjOC0zODUxLTQxZjgtYWVlOC0yZTIyNTg2NTY5OWMvMmFhMjA1MmMtMDI0NC0z MmQwLWFhZTktZmRlYzJjMzkwMTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDY5OWNlYzgtMzg1MS00MWY4LWFl ZTgtMmUyMjU4NjU2OTljLzA2OTljZWM4LTM4NTEtNDFmOC1hZWU4LTJlMjI1ODY1 Njk5Yy5jcmwwHwYDVR0jBBgwFoAUBDoTpJrxGWxgt3R5PqqC9hJL5p0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wNjk5Y2VjOC0zODUxLTQxZjgtYWVlOC0yZTIy NTg2NTY5OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqj3TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXr9LeFPmZilDnXmk2KUTigxJH/6aK3vBeuXLibT3jn94J82eEqBdWD UoHaE6oQLeg/zes+oCs5GC7eeUbx6Sli8Yxa/CCSgpmttngh3f3UiIGOvF9/Nrsf 0iD/1bGHQfYseMtTiccZ7OeDe76t+C9PtLFBFglopiIMLtVqGKfL8l9qq82zsoQB t8WMmbYmSwQe7A7BM/DcUCTyX9RD9HJX3CcPLdDwaCtUbR9/nG9tAwm9vHizL9Hx GgG506R6HxyD9nkgUGPyqy7JTzEvV9EH537+ejhSja/4kNMsRxgsKvs1bBcW3/o9 u+3e4tKWuAjWn3DLx5D9eDMhZHzsOIA= -----END CERTIFICATE-----Generated at Thu Mar 26 08:36:43 2026 by rpki-client