$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/cf8fe52f-57a2-3bc7-b251-d772218a8f6a.roa File: cf8fe52f-57a2-3bc7-b251-d772218a8f6a.roa (raw, json) Hash identifier: jmmgTKLz8eZIOMLTVI+lQTHyyQxOpNSiR/WpHnRDJfQ= Subject key identifier: 37:5D:4E:06:08:0F:E5:91:BB:23:24:DC:A6:DF:23:8B:ED:6A:B0:F9 Certificate issuer: /CN=4bb89156-2bd6-49be-a0a3-c532a34922e6 Certificate serial: 010D0C9F4328584D44FA3253C5BB77292AA53120 Authority key identifier: D7:57:AB:9D:18:95:02:3C:1C:E4:17:5D:9D:27:79:3E:D7:28:DD:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/cf8fe52f-57a2-3bc7-b251-d772218a8f6a.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 16509 IP address blocks: 147.160.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/4bb89156-2bd6-49be-a0a3-c532a34922e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/4bb89156-2bd6-49be-a0a3-c532a34922e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:32:53:c5:bb:77:29:2a:a5:31:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bb89156-2bd6-49be-a0a3-c532a34922e6 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=f67cf40d-c1e4-48de-81e0-d344fdd08093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ed:d6:2c:5c:19:63:7b:16:99:d1:8c:6d:4b: 01:2a:c3:ba:68:3a:8f:66:57:5a:2e:da:34:25:56: c6:3a:24:51:24:75:7a:86:1e:fd:d6:aa:b6:76:80: 5a:a6:f2:d6:e6:6a:c5:05:dc:61:dd:12:5d:63:8f: 44:af:52:aa:76:ce:e5:c7:05:ea:0e:6d:26:0c:4f: 2f:f7:71:59:50:e8:3f:9c:43:cb:8e:c6:34:d0:b2: 20:72:f3:0d:cb:a6:cf:70:24:a3:66:0f:32:8e:71: 81:87:7c:6b:34:3a:c2:7e:da:4b:65:70:80:3b:6b: 8a:7f:b4:66:69:5a:45:b7:26:92:40:71:53:72:0d: 67:70:e0:2a:d9:84:a9:6d:a3:ae:de:d7:2c:81:30: 7b:da:cd:6e:8e:21:bf:cd:fe:0a:ec:a9:cc:fd:e3: 30:14:ca:65:41:a1:19:a0:b1:87:0d:26:a5:b1:25: 87:b7:7d:27:eb:53:0d:39:dc:05:2a:f5:f0:68:de: c5:bc:e1:96:68:39:52:f2:0e:55:ab:78:be:53:b4: 38:f0:68:79:c7:3b:01:ab:3f:da:34:e5:4e:17:fb: a1:2c:d6:a7:9f:7d:20:ca:b6:fc:14:e8:66:fb:8f: d6:d0:20:00:d7:f5:10:aa:6c:6c:99:9b:db:c7:4f: 73:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:5D:4E:06:08:0F:E5:91:BB:23:24:DC:A6:DF:23:8B:ED:6A:B0:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/cf8fe52f-57a2-3bc7-b251-d772218a8f6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/4bb89156-2bd6-49be-a0a3-c532a34922e6.crl X509v3 Authority Key Identifier: keyid:D7:57:AB:9D:18:95:02:3C:1C:E4:17:5D:9D:27:79:3E:D7:28:DD:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6.cer sbgp-ipAddrBlock: critical IPv4: 147.160.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:56:e3:cd:5f:4f:87:ec:b1:e5:2f:f0:c9:4f:57:12:bc:1a: bf:45:2b:61:30:89:d3:22:d1:d8:d0:2d:a8:df:9b:ca:33:00: 3b:06:7a:50:e7:a5:44:8b:d6:1e:56:90:50:c1:9a:16:77:e4: f1:c4:4f:2b:07:7e:c3:c0:52:18:84:a1:c9:6b:2d:b2:da:68: 13:cf:3d:64:8b:69:f4:58:c8:08:cd:fe:79:82:bf:f6:d4:25: 84:02:7c:7c:ba:ca:a6:18:c9:36:3f:d8:33:c4:20:24:8e:44: 33:b0:17:6a:01:4b:aa:aa:62:39:04:b2:78:0c:e6:09:25:aa: f8:fb:17:3f:20:83:82:23:7d:8d:df:7f:59:d9:d0:f3:88:2a: 39:bd:76:d9:2c:df:8d:cb:af:68:cf:33:18:fa:e4:0a:16:a0: 36:6f:3b:b9:5a:e4:ff:98:e9:8d:6e:b6:93:3e:39:cf:f4:e2: ba:aa:ea:60:ce:57:0c:80:6f:71:52:47:82:d6:fa:0a:9d:cd: 62:c1:01:50:3f:37:c1:09:21:70:ab:f1:83:d2:c3:67:e6:db: b4:96:00:a5:bf:e8:61:33:51:93:40:78:c3:12:84:4a:da:ad: ab:9f:27:6d:5b:e9:6c:77:36:79:2e:51:18:06:1f:a3:e0:d8: c8:8f:0e:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+jJTxbt3KSqlMSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJiODkxNTYtMmJkNi00OWJlLWEwYTMtYzUzMmEzNDky MmU2MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk ZjY3Y2Y0MGQtYzFlNC00OGRlLTgxZTAtZDM0NGZkZDA4MDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuO3WLFwZY3sWmdGMbUsBKsO6aDqPZldaLto0 JVbGOiRRJHV6hh791qq2doBapvLW5mrFBdxh3RJdY49Er1Kqds7lxwXqDm0mDE8v 93FZUOg/nEPLjsY00LIgcvMNy6bPcCSjZg8yjnGBh3xrNDrCftpLZXCAO2uKf7Rm aVpFtyaSQHFTcg1ncOAq2YSpbaOu3tcsgTB72s1ujiG/zf4K7KnM/eMwFMplQaEZ oLGHDSalsSWHt30n61MNOdwFKvXwaN7FvOGWaDlS8g5Vq3i+U7Q48Gh5xzsBqz/a NOVOF/uhLNann30gyrb8FOhm+4/W0CAA1/UQqmxsmZvbx09zwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDddTgYID+WRuyMk3KbfI4vtarD5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80YmI4 OTE1Ni0yYmQ2LTQ5YmUtYTBhMy1jNTMyYTM0OTIyZTYvY2Y4ZmU1MmYtNTdhMi0z YmM3LWIyNTEtZDc3MjIxOGE4ZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGJiODkxNTYtMmJkNi00OWJlLWEw YTMtYzUzMmEzNDkyMmU2LzRiYjg5MTU2LTJiZDYtNDliZS1hMGEzLWM1MzJhMzQ5 MjJlNi5jcmwwHwYDVR0jBBgwFoAU11ernRiVAjwc5BddnSd5Ptco3fEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80YmI4OTE1Ni0yYmQ2LTQ5YmUtYTBhMy1jNTMy YTM0OTIyZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk6CFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMFW481fT4fsseUv8MlPVxK8Gr9FK2EwidMi0djQLajfm8ozADsGelDn pUSL1h5WkFDBmhZ35PHETysHfsPAUhiEoclrLbLaaBPPPWSLafRYyAjN/nmCv/bU JYQCfHy6yqYYyTY/2DPEICSORDOwF2oBS6qqYjkEsngM5gklqvj7Fz8gg4IjfY3f f1nZ0POIKjm9dtks343Lr2jPMxj65AoWoDZvO7la5P+Y6Y1utpM+Oc/04rqq6mDO VwyAb3FSR4LW+gqdzWLBAVA/N8EJIXCr8YPSw2fm27SWAKW/6GEzUZNAeMMShEra raufJ21b6Wx3NnkuURgGH6Pg2MiPDnQ= -----END CERTIFICATE-----Generated at Thu Mar 26 03:44:02 2026 by rpki-client