$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0b59eb2f-742f-3792-a865-a0be40f1e3ed.roa File: 0b59eb2f-742f-3792-a865-a0be40f1e3ed.roa (raw, json) Hash identifier: NQy8ZYMKPSBW3F+KEBICCj1fi5gt4CiWqfeFUR5qIxo= Subject key identifier: A3:83:BF:31:56:28:2A:B8:93:F8:96:40:39:4D:3C:EE:89:6F:D1:EF Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584D3F64D75EB22E042A99ED32A0 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0b59eb2f-742f-3792-a865-a0be40f1e3ed.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 33442 IP address blocks: 157.235.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:d7:5e:b2:2e:04:2a:99:ed:32:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=d16ee013-ecd1-428f-95ef-312761dfb326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2c:51:ef:51:6c:5e:d5:8c:ba:75:27:4e:aa: a4:1e:c4:28:13:77:65:03:a4:ed:e0:a2:55:85:e9: 2a:1d:d8:6d:91:d8:07:0d:da:c5:29:dd:01:0b:a1: d0:19:72:39:67:cb:89:4d:0d:44:2a:1f:d6:65:4e: 14:a8:c9:e9:93:e4:17:dd:dc:af:5d:8f:be:ca:e3: 05:75:ca:6e:f9:cf:85:c1:d0:60:f3:ef:66:1f:53: 77:af:7d:65:cc:6f:87:21:06:8f:cb:3c:b2:66:3c: 0d:d8:77:59:a6:79:51:ce:76:f3:8f:4e:53:07:fb: 1e:51:83:bf:8d:f5:e6:fc:9c:81:9f:ae:e8:f1:7d: 59:3e:52:b1:56:2c:28:53:df:34:49:d9:15:af:2b: bf:d2:36:39:e6:f3:8d:f4:5a:81:72:ae:64:b1:6b: bc:9d:7c:95:8b:81:a4:63:af:03:85:4a:09:d1:77: 1f:bf:71:c3:c1:37:44:c0:b4:f8:1a:8f:7f:66:05: 09:69:94:0a:b5:3a:b8:87:8e:9c:d8:fb:20:d3:1f: 27:04:a3:13:ae:82:37:af:e2:e2:6f:c6:36:26:da: 55:5a:00:e1:1d:26:ec:cc:70:78:ec:99:34:51:49: d0:ae:4e:89:c6:8e:94:48:15:a1:89:f1:69:f9:25: d9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:83:BF:31:56:28:2A:B8:93:F8:96:40:39:4D:3C:EE:89:6F:D1:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0b59eb2f-742f-3792-a865-a0be40f1e3ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 157.235.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:31:b9:ce:8c:68:69:20:29:5e:fe:df:57:4f:b0:57:8b:a4: 75:7c:2e:db:bd:56:a3:6f:4c:e2:72:1b:23:8b:50:31:23:f3: bc:c9:44:5d:25:75:59:c9:12:b2:7b:7f:09:18:4d:70:bc:fb: 11:0f:56:4b:65:21:5e:10:da:02:6e:9b:6e:4f:b5:e4:15:47: 38:a0:4f:4d:6e:1b:41:b2:11:4d:dc:34:49:75:1a:ae:ef:56: 3c:ce:33:b8:df:98:bc:e4:e4:c4:06:1a:8a:6e:dd:39:55:51: 16:e5:38:36:15:31:76:9b:00:17:b7:1f:0b:77:eb:1b:7e:30: ba:08:3a:ac:3c:46:d7:84:d3:c2:22:2d:4c:cd:37:af:05:10: ca:65:90:89:41:65:cd:c4:72:22:71:9e:f8:53:54:37:1c:70: c1:9e:f5:07:df:33:37:60:c3:f1:b2:66:fe:94:39:77:0f:04: d1:b1:b7:a6:0f:c6:18:ee:46:49:0d:c9:4d:e9:2e:77:ab:77: 52:fd:0a:7c:da:96:41:95:bb:cb:60:91:97:03:6f:e4:41:4e: da:a7:25:b3:bf:ae:5a:e6:6e:37:db:71:87:c9:63:28:97:2d: c2:a8:1a:59:01:38:d5:46:43:fd:79:c3:6f:8f:e5:f6:96:40: ac:44:2d:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZNdesi4EKpntMqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk ZDE2ZWUwMTMtZWNkMS00MjhmLTk1ZWYtMzEyNzYxZGZiMzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCxR71FsXtWMunUnTqqkHsQoE3dlA6Tt4KJV hekqHdhtkdgHDdrFKd0BC6HQGXI5Z8uJTQ1EKh/WZU4UqMnpk+QX3dyvXY++yuMF dcpu+c+FwdBg8+9mH1N3r31lzG+HIQaPyzyyZjwN2HdZpnlRznbzj05TB/seUYO/ jfXm/JyBn67o8X1ZPlKxViwoU980SdkVryu/0jY55vON9FqBcq5ksWu8nXyVi4Gk Y68DhUoJ0Xcfv3HDwTdEwLT4Go9/ZgUJaZQKtTq4h46c2Psg0x8nBKMTroI3r+Li b8Y2JtpVWgDhHSbszHB47Jk0UUnQrk6Jxo6USBWhifFp+SXZwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKODvzFWKCq4k/iWQDlNPO6Jb9HvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvMGI1OWViMmYtNzQyZi0z NzkyLWE4NjUtYTBiZTQwZjFlM2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnevzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIxuc6MaGkgKV7+31dPsFeLpHV8Ltu9VqNvTOJyGyOLUDEj87zJRF0l dVnJErJ7fwkYTXC8+xEPVktlIV4Q2gJum25PteQVRzigT01uG0GyEU3cNEl1Gq7v VjzOM7jfmLzk5MQGGopu3TlVURblODYVMXabABe3Hwt36xt+MLoIOqw8RteE08Ii LUzNN68FEMplkIlBZc3EciJxnvhTVDcccMGe9QffMzdgw/GyZv6UOXcPBNGxt6YP xhjuRkkNyU3pLnerd1L9CnzalkGVu8tgkZcDb+RBTtqnJbO/rlrmbjfbcYfJYyiX LcKoGlkBONVGQ/15w2+P5faWQKxELXE= -----END CERTIFICATE-----Generated at Thu Mar 26 20:38:27 2026 by rpki-client