$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/2aa91757-41a3-3878-bde1-4f11a5d770af.roa File: 2aa91757-41a3-3878-bde1-4f11a5d770af.roa (raw, json) Hash identifier: Sg6KxoPU040SO4IjdE/odL+t8s8ubXWYoMK0XZ6Hy0A= Subject key identifier: 3F:78:65:AA:1C:24:01:0A:85:2E:5F:EC:8A:2C:FF:FA:79:52:46:8A Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584D2D3F7C6487366C5DECB96D00 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/2aa91757-41a3-3878-bde1-4f11a5d770af.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 33442 IP address blocks: 157.235.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:7c:64:87:36:6c:5d:ec:b9:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=53ea7b9d-12e1-436a-9fed-1ed6c31aa53d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:eb:bc:35:05:a9:7a:9c:b3:42:04:73:b1:a6: 28:44:1f:cd:82:05:b4:f7:d0:4a:dd:fa:ea:1f:28: 80:d4:b0:81:4a:40:1c:79:0f:9e:45:bd:84:a3:a0: 2e:9f:b3:a4:c2:e8:e7:ec:f6:44:f8:ea:e4:17:26: d6:36:9d:65:5b:60:39:e0:7c:cc:84:bf:55:d4:34: f6:f3:c0:ca:c9:50:58:f1:63:f3:fd:f4:a9:0b:13: f4:f9:85:ba:93:de:fa:46:28:a6:d0:ba:7f:25:61: a4:1d:b8:fb:ae:8d:bb:1c:4c:87:65:a0:3d:3d:42: 6d:cc:fd:4d:7f:2b:d1:a0:d1:14:4d:b9:35:f6:c9: 7f:bf:fd:0b:35:ad:f9:44:b7:d8:c8:fe:d1:98:13: bc:28:38:d0:81:cf:87:56:f9:d1:6d:57:cb:d9:f3: e3:5c:90:2e:cf:2a:c7:f9:73:55:15:e0:f8:c2:3b: 52:37:18:ef:26:95:e3:22:7c:b4:25:7c:e7:57:23: 89:c0:3e:32:8b:5c:1e:cc:f2:c1:05:14:4f:e8:aa: c3:17:00:d8:8a:f0:46:e5:e0:f8:26:eb:b6:fd:61: 59:38:5d:0e:6f:7b:b4:b5:5b:d6:df:cc:66:64:12: 79:dd:0c:4f:fc:3f:62:c1:89:a4:f6:d3:7e:7a:29: aa:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:78:65:AA:1C:24:01:0A:85:2E:5F:EC:8A:2C:FF:FA:79:52:46:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/2aa91757-41a3-3878-bde1-4f11a5d770af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 157.235.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:e4:04:49:4a:20:f1:04:6d:bc:05:ed:c4:be:a7:d2:84:cf: c5:17:64:ec:0d:8c:e5:d9:f5:78:93:38:58:2d:f1:4b:9a:4f: 9c:6b:d0:12:cb:29:76:e6:1b:d8:e7:9a:52:23:62:d5:e9:ca: 42:9e:20:cc:de:d6:ff:11:6a:9d:ff:8d:43:ac:01:9e:2c:ca: 1d:59:bd:6e:b1:b3:31:14:64:17:99:59:41:df:02:be:1c:c4: e5:ec:0d:f7:a7:e7:37:16:8f:38:8c:79:d0:ae:79:3d:9f:f4: 49:e7:78:9d:43:7f:2b:8a:4d:ad:c6:c3:e2:2b:dc:24:78:e6: 80:93:6e:8a:9d:41:0f:24:22:89:d6:4c:ab:a7:e1:17:81:f2: 3b:3c:2c:66:0d:cc:6d:f5:32:99:ff:44:9d:18:24:1b:ba:bb: b7:1f:50:08:56:72:02:3f:b8:5b:a8:20:08:40:45:f1:d0:9d: 5e:2f:3d:c2:ac:41:32:1a:fc:2d:e8:41:3f:5c:73:79:d5:ef: 72:7c:f4:f4:68:79:e8:9f:97:b1:5b:8a:33:8d:e8:6c:6f:58: a2:e6:32:48:cb:29:11:6c:77:a7:2d:13:3e:7f:05:2b:34:a3: f8:47:ce:4d:68:80:8e:be:75:67:3d:2d:1d:f8:a1:7d:df:fd: c4:43:6e:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP3xkhzZsXey5bQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk NTNlYTdiOWQtMTJlMS00MzZhLTlmZWQtMWVkNmMzMWFhNTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueu8NQWpepyzQgRzsaYoRB/NggW099BK3frq HyiA1LCBSkAceQ+eRb2Eo6Aun7Okwujn7PZE+OrkFybWNp1lW2A54HzMhL9V1DT2 88DKyVBY8WPz/fSpCxP0+YW6k976Riim0Lp/JWGkHbj7ro27HEyHZaA9PUJtzP1N fyvRoNEUTbk19sl/v/0LNa35RLfYyP7RmBO8KDjQgc+HVvnRbVfL2fPjXJAuzyrH +XNVFeD4wjtSNxjvJpXjIny0JXznVyOJwD4yi1wezPLBBRRP6KrDFwDYivBG5eD4 Juu2/WFZOF0Ob3u0tVvW38xmZBJ53QxP/D9iwYmk9tN+eimqFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD94ZaocJAEKhS5f7Ios//p5UkaKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvMmFhOTE3NTctNDFhMy0z ODc4LWJkZTEtNGYxMWE1ZDc3MGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnesnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfkBElKIPEEbbwF7cS+p9KEz8UXZOwNjOXZ9XiTOFgt8UuaT5xr0BLL KXbmG9jnmlIjYtXpykKeIMze1v8Rap3/jUOsAZ4syh1ZvW6xszEUZBeZWUHfAr4c xOXsDfen5zcWjziMedCueT2f9EnneJ1DfyuKTa3Gw+Ir3CR45oCTboqdQQ8kIonW TKun4ReB8js8LGYNzG31Mpn/RJ0YJBu6u7cfUAhWcgI/uFuoIAhARfHQnV4vPcKs QTIa/C3oQT9cc3nV73J89PRoeeifl7FbijON6GxvWKLmMkjLKRFsd6ctEz5/BSs0 o/hHzk1ogI6+dWc9LR34oX3f/cRDbu4= -----END CERTIFICATE-----Generated at Thu Mar 26 16:19:32 2026 by rpki-client