$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/86496a16-88a9-3767-866b-3cfa90b5926b.roa File: 86496a16-88a9-3767-866b-3cfa90b5926b.roa (raw, json) Hash identifier: yKwraUrSZRiBTnQaAMAAJyzp/+YSbhB4T2Ifxi831g0= Subject key identifier: 67:CE:CE:82:EC:B8:71:B5:9B:6A:56:62:A4:CF:09:D1:DC:E5:7D:D9 Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F4328584D39CF8D4D6F5D9AE40D1B03C0 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/86496a16-88a9-3767-866b-3cfa90b5926b.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 5662 IP address blocks: 157.166.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:8d:4d:6f:5d:9a:e4:0d:1b:03:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=c1862e07-e48b-43db-b5c4-3a8f679c00be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6b:e7:0e:dd:e1:f9:95:1d:2e:13:72:4f:cf: 57:8e:75:2f:83:7c:59:e9:3f:93:44:1e:e5:68:ab: be:15:65:78:52:1a:19:fd:d3:be:75:66:32:24:ba: 84:f7:59:22:4d:cb:35:11:9c:ae:5c:a8:1b:7e:db: fc:3c:af:88:34:db:60:ea:f0:ed:16:9f:61:ed:8b: 5d:7f:8f:57:40:a5:45:7d:30:75:25:37:17:c8:87: 45:63:ea:f0:cf:58:64:20:0b:ed:db:05:10:69:fc: e2:09:6a:93:8e:1b:a1:83:ed:39:36:d0:c5:79:18: 48:b0:84:79:92:bf:d8:36:bc:a1:ea:f9:77:24:7f: c6:00:3c:a5:a6:36:ff:2b:91:a2:ac:12:3b:86:f1: d8:36:c4:ae:1c:22:81:39:53:a3:a5:40:bf:e6:e2: 8e:e1:b5:80:6c:5d:0f:b8:5b:37:7a:f8:5f:7c:1c: 4a:68:a9:7a:07:6b:51:ef:12:fe:6f:a6:d2:77:02: bc:53:a0:5b:7b:c5:5b:81:8f:f9:4e:b4:76:01:e0: 3e:1f:8c:7a:11:19:c6:2d:14:00:0a:df:4d:39:1b: 23:83:81:cd:00:43:8b:b2:28:d4:3d:99:53:7d:ae: 13:5f:c8:c7:c9:93:4b:da:5c:38:18:d6:0e:86:71: 74:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:CE:CE:82:EC:B8:71:B5:9B:6A:56:62:A4:CF:09:D1:DC:E5:7D:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/86496a16-88a9-3767-866b-3cfa90b5926b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:5d:65:a9:f2:09:4f:ae:ce:36:17:f6:dc:51:cd:cc:26:90: 83:fc:01:60:fe:5b:d9:e1:83:6d:ff:cf:37:b0:74:f0:e0:79: b3:9b:86:60:b0:07:05:4e:59:ee:5a:19:82:1d:56:26:4b:06: ce:15:90:5a:57:05:0c:d2:a4:55:75:66:a4:39:e8:01:00:e7: ff:e8:87:91:75:42:ed:7f:1d:be:6d:59:a4:db:57:08:c6:1e: 20:35:79:b4:dc:6b:2b:6c:c4:a5:9f:59:d9:03:cb:dc:d8:c6: 1c:bc:2e:38:82:b7:1a:9f:76:15:93:48:6e:15:8e:70:c2:dd: f9:e2:43:92:a3:78:7f:5e:f8:9b:6f:49:cd:82:52:cd:e0:01: ac:1d:4c:7b:ee:41:c0:c2:05:3a:91:54:3e:30:ff:63:6e:79: 10:24:05:f2:a1:1d:84:d8:b6:9c:9b:6d:fd:ad:5c:42:25:cf: 43:6d:24:64:bb:12:80:79:be:3f:3c:9a:94:3e:94:ad:10:71: 6a:ea:4e:fa:3e:cf:9f:88:92:66:2f:3e:84:a5:e9:cf:e0:69: a6:be:39:a5:83:ec:aa:d7:ff:e9:b3:42:2c:8b:fb:e9:b5:d1: 81:f2:74:2b:90:17:96:84:ca:c7:91:3d:0e:01:8b:74:20:9a: a5:1d:19:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z41Nb12a5A0bA8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk YzE4NjJlMDctZTQ4Yi00M2RiLWI1YzQtM2E4ZjY3OWMwMGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWvnDt3h+ZUdLhNyT89XjnUvg3xZ6T+TRB7l aKu+FWV4UhoZ/dO+dWYyJLqE91kiTcs1EZyuXKgbftv8PK+INNtg6vDtFp9h7Ytd f49XQKVFfTB1JTcXyIdFY+rwz1hkIAvt2wUQafziCWqTjhuhg+05NtDFeRhIsIR5 kr/YNryh6vl3JH/GADylpjb/K5GirBI7hvHYNsSuHCKBOVOjpUC/5uKO4bWAbF0P uFs3evhffBxKaKl6B2tR7xL+b6bSdwK8U6Bbe8VbgY/5TrR2AeA+H4x6ERnGLRQA Ct9NORsjg4HNAEOLsijUPZlTfa4TX8jHyZNL2lw4GNYOhnF0MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfOzoLsuHG1m2pWYqTPCdHc5X3ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvODY0OTZhMTYtODhhOS0z NzY3LTg2NmItM2NmYTkwYjU5MjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnabSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRdZanyCU+uzjYX9txRzcwmkIP8AWD+W9nhg23/zzewdPDgebObhmCw BwVOWe5aGYIdViZLBs4VkFpXBQzSpFV1ZqQ56AEA5//oh5F1Qu1/Hb5tWaTbVwjG HiA1ebTcaytsxKWfWdkDy9zYxhy8LjiCtxqfdhWTSG4VjnDC3fniQ5KjeH9e+Jtv Sc2CUs3gAawdTHvuQcDCBTqRVD4w/2NueRAkBfKhHYTYtpybbf2tXEIlz0NtJGS7 EoB5vj88mpQ+lK0QcWrqTvo+z5+IkmYvPoSl6c/gaaa+OaWD7KrX/+mzQiyL++m1 0YHydCuQF5aEyseRPQ4Bi3QgmqUdGYU= -----END CERTIFICATE-----Generated at Thu Mar 26 23:47:03 2026 by rpki-client