$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/3e0dfc89-0865-3433-a7dd-a589567527ea.roa File: 3e0dfc89-0865-3433-a7dd-a589567527ea.roa (raw, json) Hash identifier: v2Je3V31pkdiLwUfVsK0LrmB2PPU+iQk68mBDdpCmj0= Subject key identifier: 7C:10:EF:4A:A3:EA:D7:CB:14:5E:03:9D:64:DC:93:5A:0F:5B:1B:5D Certificate issuer: /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f Certificate serial: 010D0C9F4328584D91C012CB6B130FBEF9C5C0C0 Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/3e0dfc89-0865-3433-a7dd-a589567527ea.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 398787 IP address blocks: 160.153.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:12:cb:6b:13:0f:be:f9:c5:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=29d98619-3be9-4e00-9b5b-b81a5ea2b369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e3:a4:f6:be:37:26:ba:3a:9b:49:f8:b9:fb: 6a:4c:ff:10:ac:ef:57:02:e3:39:65:05:01:70:7d: 47:44:6f:26:64:a8:c9:0f:37:5b:41:b1:40:94:96: da:12:6c:8a:55:a7:17:9e:9e:9c:25:ee:e9:3d:02: 60:bf:ab:73:6c:a0:dd:ef:59:57:51:f8:c0:98:86: 06:08:d9:40:b2:b0:49:aa:44:5b:80:79:fb:cf:3f: 42:9c:16:e6:c8:79:58:2f:97:c6:18:b6:da:26:d5: ce:7f:f1:b3:29:3e:f2:53:27:89:b6:20:d9:65:ce: 0c:23:6b:9b:6b:89:55:ee:a8:a4:f9:8e:3a:83:80: 0e:2b:16:64:a2:ce:a4:ba:be:0a:38:33:0f:21:9b: 6e:5c:70:71:b4:0f:ca:6c:33:57:7f:d0:77:df:cc: 97:c4:1a:a6:cb:c6:54:6a:da:65:29:3c:ed:7e:57: e8:87:a2:ad:5a:50:ca:9d:e0:8c:9a:e1:c4:3a:9d: 8f:71:fc:70:31:ad:9a:e9:3d:ed:75:13:06:1f:bd: a0:3b:59:6a:ef:d1:7c:1e:92:31:2f:be:27:e2:c3: 62:e6:df:e2:ba:48:44:0d:ba:62:c3:52:47:72:d0: f0:2d:82:e3:ea:f8:43:e9:31:5f:6f:23:34:d3:37: a6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:10:EF:4A:A3:EA:D7:CB:14:5E:03:9D:64:DC:93:5A:0F:5B:1B:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/3e0dfc89-0865-3433-a7dd-a589567527ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl X509v3 Authority Key Identifier: keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer sbgp-ipAddrBlock: critical IPv4: 160.153.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:3e:72:36:b6:6f:80:8f:14:43:8b:94:1d:43:53:9b:5e:1d: 4d:74:76:b5:0d:dc:54:4e:f2:6c:cc:14:f2:b3:3b:a5:f8:ea: c3:f1:03:e4:c8:f8:fd:ec:60:fb:9e:b6:53:f3:7d:7a:f2:51: bc:c9:23:a0:f9:1b:f3:da:11:26:bd:05:c3:c8:e9:52:40:50: 47:e2:5a:5a:67:48:a1:76:32:dc:11:13:8f:ca:ac:36:78:8b: 73:62:a0:a9:17:70:10:a2:f0:4d:b0:1d:1d:55:b8:ee:75:49: b4:b5:cc:94:2c:0c:e2:3b:38:93:2f:d3:41:12:0f:d8:49:b6: 38:f5:91:08:be:61:54:48:45:31:b5:f3:34:ed:f7:52:74:1b: 5c:18:8b:c1:02:95:c4:16:79:7e:be:85:22:a7:48:93:8c:56: d4:af:4d:ee:54:6a:5b:a0:d7:b3:f4:a6:34:05:89:9d:5c:44: 51:b6:0c:7a:28:fe:46:9b:00:6e:66:0b:2c:e9:0f:98:6f:ba: 68:bc:fa:22:cb:03:71:a8:df:4b:26:31:67:45:38:cb:06:0c: aa:f5:12:9e:ed:12:81:27:8e:97:29:7e:cd:73:90:46:14:d3: ef:9d:8d:c7:23:60:e4:d9:18:33:03:10:50:94:ea:25:b5:46: d9:8a:44:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwBLLaxMPvvnFwMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWVkNWNlODAtMjI0ZS00NmFiLTk0ZjEtMWFmY2U4Y2Nm MTNmMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk MjlkOTg2MTktM2JlOS00ZTAwLTliNWItYjgxYTVlYTJiMzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOOk9r43Jro6m0n4uftqTP8QrO9XAuM5ZQUB cH1HRG8mZKjJDzdbQbFAlJbaEmyKVacXnp6cJe7pPQJgv6tzbKDd71lXUfjAmIYG CNlAsrBJqkRbgHn7zz9CnBbmyHlYL5fGGLbaJtXOf/GzKT7yUyeJtiDZZc4MI2ub a4lV7qik+Y46g4AOKxZkos6kur4KODMPIZtuXHBxtA/KbDNXf9B338yXxBqmy8ZU atplKTztflfoh6KtWlDKneCMmuHEOp2PcfxwMa2a6T3tdRMGH72gO1lq79F8HpIx L74n4sNi5t/iukhEDbpiw1JHctDwLYLj6vhD6TFfbyM00zem6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHwQ70qj6tfLFF4DnWTck1oPWxtdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1 Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZjZThjY2YxM2YvM2UwZGZjODktMDg2NS0z NDMzLWE3ZGQtYTU4OTU2NzUyN2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWVkNWNlODAtMjI0ZS00NmFiLTk0 ZjEtMWFmY2U4Y2NmMTNmLzllZDVjZTgwLTIyNGUtNDZhYi05NGYxLTFhZmNlOGNj ZjEzZi5jcmwwHwYDVR0jBBgwFoAUOB2fprp8wahErgn+WgCWnTv84Q8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZj ZThjY2YxM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoJkBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABw+cja2b4CPFEOLlB1DU5teHU10drUN3FRO8mzMFPKzO6X46sPxA+TI +P3sYPuetlPzfXryUbzJI6D5G/PaESa9BcPI6VJAUEfiWlpnSKF2MtwRE4/KrDZ4 i3NioKkXcBCi8E2wHR1VuO51SbS1zJQsDOI7OJMv00ESD9hJtjj1kQi+YVRIRTG1 8zTt91J0G1wYi8EClcQWeX6+hSKnSJOMVtSvTe5Ualug17P0pjQFiZ1cRFG2DHoo /kabAG5mCyzpD5hvumi8+iLLA3Go30smMWdFOMsGDKr1Ep7tEoEnjpcpfs1zkEYU 0++djccjYOTZGDMDEFCU6iW1RtmKRKU= -----END CERTIFICATE-----Generated at Wed May 13 14:45:53 2026 by rpki-client