$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/3e9f3944-0079-3bac-8692-466114e9cf63.roa File: 3e9f3944-0079-3bac-8692-466114e9cf63.roa (raw, json) Hash identifier: eqY91qjnErvV8TZT2sX7v2e1JNl2TPoiutfzQS4sSzA= Subject key identifier: A9:4E:66:3B:70:B5:B1:C3:58:ED:47:35:F9:E2:81:20:98:2D:18:AA Certificate issuer: /CN=b5de9249-f707-4392-b43f-d406dfb20aee Certificate serial: 010D0C9F4328584DC6CAFDCD59B6B59D9B934280 Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/3e9f3944-0079-3bac-8692-466114e9cf63.roa Signing time: Sat 09 May 2026 13:00:31 +0000 ROA not before: Sat 09 May 2026 13:00:31 +0000 ROA not after: Fri 07 Aug 2026 13:00:31 +0000 asID: 16504 IP address blocks: 157.96.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c6:ca:fd:cd:59:b6:b5:9d:9b:93:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee Validity Not Before: May 9 13:00:31 2026 GMT Not After : Aug 7 13:00:31 2026 GMT Subject: CN=dff5d27d-f175-4a93-bdd7-4a44ad3290b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5d:8b:e3:43:d3:ae:5b:64:e5:22:5e:97:f4: 9c:ce:78:95:c2:5f:15:10:37:60:76:0f:23:95:9e: 58:7b:b6:d5:66:08:82:2f:b8:c0:0f:c4:e8:e0:3c: 9f:d6:a3:6c:55:94:80:33:1a:63:a0:45:09:cf:4b: d0:8d:fe:cd:f2:dc:49:39:02:5b:20:f1:41:fc:4f: 90:c9:62:22:c9:fb:e8:ec:89:6a:04:05:7b:99:af: c3:63:eb:13:a1:84:9c:1f:29:7c:4b:47:3e:d9:8c: 5c:67:8d:82:8f:24:fa:f4:40:73:02:42:9a:b2:a9: 04:b1:72:53:e9:4d:8d:17:f5:d8:33:0f:f4:6c:8c: 75:06:dd:1a:37:16:63:8d:11:9c:07:d4:bc:81:3f: 3a:37:80:58:46:82:be:ae:07:de:04:32:08:7d:5c: e0:bb:95:ac:d8:b3:a5:e9:15:78:b5:a7:83:27:b4: 97:c3:2d:44:64:5a:fa:78:4a:e9:18:9a:90:96:33: 3a:33:da:7d:b1:45:12:56:db:c0:a3:25:39:35:3d: 37:5d:57:a5:d9:5c:79:02:03:0f:10:51:74:44:7d: 02:32:18:58:cd:36:a1:16:0d:44:bc:15:b3:9a:be: f7:c1:3f:dd:86:04:fc:c6:88:b8:5b:32:48:94:6d: 65:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:4E:66:3B:70:B5:B1:C3:58:ED:47:35:F9:E2:81:20:98:2D:18:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/3e9f3944-0079-3bac-8692-466114e9cf63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl X509v3 Authority Key Identifier: keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer sbgp-ipAddrBlock: critical IPv4: 157.96.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:a4:c6:6b:97:e2:30:44:07:f6:78:6a:75:24:3a:10:6f:2e: 63:7c:9e:9f:47:26:b4:29:bb:68:76:e4:50:73:84:40:2e:bd: 04:b3:08:26:7b:46:02:34:07:e8:59:0e:63:98:7c:21:67:2f: e5:7d:84:7b:60:99:75:b8:45:15:a4:7e:3e:08:41:c4:18:21: 7e:73:d5:a2:80:ee:c2:9e:0f:55:44:ae:b4:b5:bb:6b:db:33: a4:f0:14:57:c6:c9:8c:14:af:92:b5:ed:c0:08:89:07:03:c3: a2:5c:23:52:6d:32:3b:e7:ff:16:bc:32:12:e7:c7:7b:6f:92: eb:0c:ba:49:73:1f:8d:c1:74:99:11:ab:fd:70:56:49:ca:c1: 8c:e8:33:fd:35:7a:bd:d6:9f:4f:15:aa:2a:b1:b7:17:7b:29: 0d:ad:91:22:ed:61:64:48:78:e4:54:ba:45:96:99:70:c9:06: 3e:f3:c8:62:31:5f:7d:ea:fd:da:48:6a:93:c7:df:9d:0f:81: 0c:7a:8d:0b:45:c3:c5:af:b5:e3:9d:c9:88:9b:25:06:a9:f9: e1:7c:b2:0c:35:73:d5:7d:e8:00:46:f6:de:af:02:6f:67:a9: 54:e2:f4:a5:19:33:d6:d6:b3:8e:cc:04:b8:06:ed:19:1e:d0: fd:65:dd:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Gyv3NWba1nZuTQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVkZTkyNDktZjcwNy00MzkyLWI0M2YtZDQwNmRmYjIw YWVlMB4XDTI2MDUwOTEzMDAzMVoXDTI2MDgwNzEzMDAzMVowLzEtMCsGA1UEAxMk ZGZmNWQyN2QtZjE3NS00YTkzLWJkZDctNGE0NGFkMzI5MGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF2L40PTrltk5SJel/SczniVwl8VEDdgdg8j lZ5Ye7bVZgiCL7jAD8To4Dyf1qNsVZSAMxpjoEUJz0vQjf7N8txJOQJbIPFB/E+Q yWIiyfvo7IlqBAV7ma/DY+sToYScHyl8S0c+2YxcZ42CjyT69EBzAkKasqkEsXJT 6U2NF/XYMw/0bIx1Bt0aNxZjjRGcB9S8gT86N4BYRoK+rgfeBDIIfVzgu5Ws2LOl 6RV4taeDJ7SXwy1EZFr6eErpGJqQljM6M9p9sUUSVtvAoyU5NT03XVel2Vx5AgMP EFF0RH0CMhhYzTahFg1EvBWzmr73wT/dhgT8xoi4WzJIlG1lhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlOZjtwtbHDWO1HNfnigSCYLRiqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRl OTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2ZGZiMjBhZWUvM2U5ZjM5NDQtMDA3OS0z YmFjLTg2OTItNDY2MTE0ZTljZjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYjVkZTkyNDktZjcwNy00MzkyLWI0 M2YtZDQwNmRmYjIwYWVlL2I1ZGU5MjQ5LWY3MDctNDM5Mi1iNDNmLWQ0MDZkZmIy MGFlZS5jcmwwHwYDVR0jBBgwFoAUBQwgTZ1GgdH5HArYCUuvUKm259UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRlOTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2 ZGZiMjBhZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnWD0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALOkxmuX4jBEB/Z4anUkOhBvLmN8np9HJrQpu2h25FBzhEAuvQSzCCZ7 RgI0B+hZDmOYfCFnL+V9hHtgmXW4RRWkfj4IQcQYIX5z1aKA7sKeD1VErrS1u2vb M6TwFFfGyYwUr5K17cAIiQcDw6JcI1JtMjvn/xa8MhLnx3tvkusMuklzH43BdJkR q/1wVknKwYzoM/01er3Wn08Vqiqxtxd7KQ2tkSLtYWRIeORUukWWmXDJBj7zyGIx X33q/dpIapPH350PgQx6jQtFw8WvteOdyYibJQap+eF8sgw1c9V96ABG9t6vAm9n qVTi9KUZM9bWs47MBLgG7Rke0P1l3Xs= -----END CERTIFICATE-----Generated at Wed May 13 16:44:55 2026 by rpki-client