$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3f55e722-9371-3246-8ecf-83ad16b69b2e.roa File: 3f55e722-9371-3246-8ecf-83ad16b69b2e.roa (raw, json) Hash identifier: 54Dqewj1iaBa4rWbbRgL6Zum/xXjxulN0jTNojXALTI= Subject key identifier: A6:44:82:F3:B1:F2:BF:FF:5E:3B:18:0F:D4:10:F8:92:E4:0F:81:4F Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584D3F64D7734EEB532A90BBCC40 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3f55e722-9371-3246-8ecf-83ad16b69b2e.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 33442 IP address blocks: 157.235.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:d7:73:4e:eb:53:2a:90:bb:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=74a31b55-68d3-4604-8f76-13cc9fa66bf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7b:c3:d3:25:0b:0f:2e:e3:17:de:29:28:4b: f6:23:b4:cd:0b:10:d7:d2:a3:cc:46:c7:8d:82:83: 16:c3:60:87:3a:59:56:cb:41:cd:68:cf:fa:75:b5: 53:30:52:bf:04:98:d6:47:f3:ee:98:34:f1:93:47: 4f:13:14:c5:30:8b:4f:11:c7:e0:23:44:44:5b:0e: ab:6b:d8:b8:da:40:01:97:46:f0:01:93:d4:f3:86: fc:a6:54:ab:4c:49:69:fe:57:82:25:0d:91:91:b9: f2:0d:0b:54:eb:c2:8d:8f:6e:09:57:7f:83:cc:21: b0:05:23:5c:cf:10:42:3a:34:94:72:64:e4:49:9d: 1e:f6:40:35:19:0b:7e:7f:6d:da:fc:00:89:10:bd: 5c:f7:1a:9d:77:56:1a:99:f1:af:e1:00:e7:a0:e9: 9c:09:3d:5d:3a:5a:37:3a:af:a1:02:ca:1e:d4:f5: ec:05:73:84:dc:3d:5b:b4:78:63:24:c1:9d:16:c2: 56:a2:a1:25:83:f6:ab:de:22:b4:a6:ef:86:0a:78: 3c:7b:cf:1f:c4:88:b2:21:b7:30:90:81:db:4c:29: 01:12:55:ec:31:a8:71:a6:4e:86:31:0a:5f:74:bd: bc:ae:cb:c0:2a:05:35:7a:52:f5:2b:64:26:fb:30: 8b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:44:82:F3:B1:F2:BF:FF:5E:3B:18:0F:D4:10:F8:92:E4:0F:81:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3f55e722-9371-3246-8ecf-83ad16b69b2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 157.235.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:57:a5:20:c4:5a:d4:95:75:59:24:b3:b5:4e:5d:b6:69:50: 5e:89:f1:bb:63:51:5d:ef:e8:50:fb:0f:31:f9:b4:37:ff:68: 04:6a:52:71:44:fd:a0:cc:88:63:48:13:8f:20:eb:72:af:8e: cd:79:af:5c:3f:7c:2e:26:84:f9:56:f4:30:45:cd:ab:b8:c9: 5b:7e:47:af:41:d4:72:5c:7d:0a:77:ac:63:c7:5d:ca:1a:7b: 92:fe:e0:d4:c2:20:3d:d4:b6:3d:54:43:11:da:9d:e2:e9:c2: 9d:13:88:9f:a2:bf:b0:81:69:cd:91:84:c7:6c:bf:a5:a9:c0: fd:00:88:8c:03:79:7b:a2:29:f9:96:55:8a:6a:8e:cf:a1:57: c8:75:b2:de:f1:a1:86:cd:87:41:0f:5a:59:e7:24:9e:bd:58: ba:c6:ac:82:d5:0f:08:62:37:c3:a5:29:23:49:83:34:35:2f: 14:a8:c6:ca:85:8d:80:b4:ce:c8:bd:63:65:31:f2:fd:dd:ce: d3:fc:6b:ef:37:14:4d:5e:0b:54:04:54:d2:5c:97:3a:af:a7: d6:1f:20:7f:5f:46:d5:34:c4:55:0c:83:16:ac:27:0e:b0:a0: d8:24:fa:81:75:06:36:72:a4:d9:b1:e7:73:bf:69:58:3e:46: aa:48:b3:fa -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0/ZNdzTutTKpC7zEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk NzRhMzFiNTUtNjhkMy00NjA0LThmNzYtMTNjYzlmYTY2YmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnvD0yULDy7jF94pKEv2I7TNCxDX0qPMRseN goMWw2CHOllWy0HNaM/6dbVTMFK/BJjWR/PumDTxk0dPExTFMItPEcfgI0REWw6r a9i42kABl0bwAZPU84b8plSrTElp/leCJQ2RkbnyDQtU68KNj24JV3+DzCGwBSNc zxBCOjSUcmTkSZ0e9kA1GQt+f23a/ACJEL1c9xqdd1YamfGv4QDnoOmcCT1dOlo3 Oq+hAsoe1PXsBXOE3D1btHhjJMGdFsJWoqElg/ar3iK0pu+GCng8e88fxIiyIbcw kIHbTCkBElXsMahxpk6GMQpfdL28rsvAKgU1elL1K2Qm+zCLiwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKZEgvOx8r//XjsYD9QQ+JLkD4FPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvM2Y1NWU3MjItOTM3MS0z MjQ2LThlY2YtODNhZDE2YjY5YjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAneswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAgFelIMRa1JV1WSSztU5dtmlQXonxu2NRXe/oUPsPMfm0N/9oBGpScUT9 oMyIY0gTjyDrcq+OzXmvXD98LiaE+Vb0MEXNq7jJW35Hr0HUclx9CnesY8ddyhp7 kv7g1MIgPdS2PVRDEdqd4unCnROIn6K/sIFpzZGEx2y/panA/QCIjAN5e6Ip+ZZV imqOz6FXyHWy3vGhhs2HQQ9aWecknr1YusasgtUPCGI3w6UpI0mDNDUvFKjGyoWN gLTOyL1jZTHy/d3O0/xr7zcUTV4LVARU0lyXOq+n1h8gf19G1TTEVQyDFqwnDrCg 2CT6gXUGNnKk2bHnc79pWD5Gqkiz+g== -----END CERTIFICATE-----Generated at Thu Mar 26 20:59:51 2026 by rpki-client