$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/9d6a98a8-c579-38f2-9fa0-eb90a2842b0e.roa File: 9d6a98a8-c579-38f2-9fa0-eb90a2842b0e.roa (raw, json) Hash identifier: K3Bi4v2DPKFJLjjK7Pz4SfWx74AhXHxA1aErTst0yVM= Subject key identifier: 88:D0:18:DF:43:F4:C0:F2:62:30:87:54:4D:3C:DA:E0:99:97:DE:48 Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F4328584DA54ABEAC264EBB89C14D9460 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/9d6a98a8-c579-38f2-9fa0-eb90a2842b0e.roa Signing time: Mon 27 Apr 2026 13:00:30 +0000 ROA not before: Mon 27 Apr 2026 13:00:30 +0000 ROA not after: Sun 26 Jul 2026 13:00:30 +0000 asID: 2631 IP address blocks: 157.166.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a5:4a:be:ac:26:4e:bb:89:c1:4d:94:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Apr 27 13:00:30 2026 GMT Not After : Jul 26 13:00:30 2026 GMT Subject: CN=4f2eaf35-8bf8-439b-87b1-dbf292a8b9c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:89:95:d6:2a:86:2c:4a:9e:e8:92:ee:21:21: aa:c8:ba:37:c2:f7:1a:0a:6d:87:e4:b1:6f:de:92: 61:41:e0:42:8a:e1:b2:0b:8c:c3:b6:b3:13:ad:e9: 60:5a:24:d3:e6:74:5a:5d:22:4a:9c:62:7e:91:4e: 29:d9:cc:27:3c:3e:f5:b5:ce:43:0e:8a:12:78:da: 9e:21:aa:67:ba:db:37:6b:81:28:b8:ea:5e:a4:a1: 40:f5:be:97:65:54:f8:31:92:44:33:cd:4d:27:6e: fa:9d:42:ba:e1:02:39:a4:7b:08:07:51:76:c1:93: 06:03:25:ab:f4:47:88:24:0c:0d:ab:f3:45:ae:02: 53:6e:92:a9:ab:fb:f7:41:06:9b:01:5e:56:67:9c: 8d:bb:44:9c:9a:ef:7a:34:d2:b3:c6:50:6b:2d:2f: d2:93:21:45:63:87:35:09:17:0a:a0:46:89:28:fc: fe:71:49:85:8e:98:fa:5c:2e:9d:b4:55:40:bd:d8: 64:af:32:bf:cf:76:a5:75:d4:30:8f:fa:70:36:2f: 8a:91:93:e9:66:ea:35:b8:04:3e:a7:b6:a4:03:b4: c7:88:8d:da:46:fc:87:d9:03:a8:b3:87:63:bb:8a: 12:18:6e:d2:5b:56:ec:23:76:1c:84:4f:83:4c:3a: 8b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D0:18:DF:43:F4:C0:F2:62:30:87:54:4D:3C:DA:E0:99:97:DE:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/9d6a98a8-c579-38f2-9fa0-eb90a2842b0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:f6:1a:66:9d:c1:0e:a3:99:f4:df:8f:f7:67:0b:29:70:8a: d7:0e:ba:4d:e1:a0:f2:ed:3b:a7:c5:1c:5f:59:76:d1:4c:b9: 02:e3:19:50:c9:4f:00:39:d8:0f:c6:6d:b0:cd:8c:47:d3:6b: 2d:76:7e:03:6d:d3:bd:75:6f:35:37:23:59:0e:2f:fe:ad:54: 70:2e:49:cf:2f:39:b0:62:56:03:e1:d4:b2:21:c7:c7:7c:76: 55:75:27:1c:65:6b:df:f1:ad:3f:4a:51:17:89:33:36:0c:90: 09:62:54:3b:bd:4c:5f:80:ef:53:8b:6d:39:d0:4d:c3:f1:30: 85:1a:5c:45:3c:a9:12:ea:d6:4e:31:0b:c6:2e:0d:02:9c:54: e2:02:64:dd:65:7a:7f:ff:d1:da:c6:b9:3b:60:97:cd:58:f0: 8a:f6:ff:ed:ac:03:8e:91:c3:fd:4a:f9:56:57:49:1b:70:5b: a2:66:f6:07:65:3e:06:92:dc:da:f7:b7:25:4b:8f:d8:94:16: a8:8b:c7:66:f0:4d:32:38:b6:2c:d9:58:66:a8:9c:b6:ab:34: 1e:11:cb:92:93:0f:c1:6a:49:4b:0b:a2:2d:b6:f7:26:c8:af: 52:f7:99:ca:85:19:5f:d7:8c:12:2e:62:82:b4:e6:4c:bd:28: 5f:b5:58:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2lSr6sJk67icFNlGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI2MDQyNzEzMDAzMFoXDTI2MDcyNjEzMDAzMFowLzEtMCsGA1UEAxMk NGYyZWFmMzUtOGJmOC00MzliLTg3YjEtZGJmMjkyYThiOWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4omV1iqGLEqe6JLuISGqyLo3wvcaCm2H5LFv 3pJhQeBCiuGyC4zDtrMTrelgWiTT5nRaXSJKnGJ+kU4p2cwnPD71tc5DDooSeNqe Iapnuts3a4EouOpepKFA9b6XZVT4MZJEM81NJ276nUK64QI5pHsIB1F2wZMGAyWr 9EeIJAwNq/NFrgJTbpKpq/v3QQabAV5WZ5yNu0Scmu96NNKzxlBrLS/SkyFFY4c1 CRcKoEaJKPz+cUmFjpj6XC6dtFVAvdhkrzK/z3alddQwj/pwNi+KkZPpZuo1uAQ+ p7akA7THiI3aRvyH2QOos4dju4oSGG7SW1bsI3YchE+DTDqL5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjQGN9D9MDyYjCHVE082uCZl95IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvOWQ2YTk4YTgtYzU3OS0z OGYyLTlmYTAtZWI5MGEyODQyYjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnaaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGL2GmadwQ6jmfTfj/dnCylwitcOuk3hoPLtO6fFHF9ZdtFMuQLjGVDJ TwA52A/GbbDNjEfTay12fgNt0711bzU3I1kOL/6tVHAuSc8vObBiVgPh1LIhx8d8 dlV1Jxxla9/xrT9KUReJMzYMkAliVDu9TF+A71OLbTnQTcPxMIUaXEU8qRLq1k4x C8YuDQKcVOICZN1len//0drGuTtgl81Y8Ir2/+2sA46Rw/1K+VZXSRtwW6Jm9gdl PgaS3Nr3tyVLj9iUFqiLx2bwTTI4tizZWGaonLarNB4Ry5KTD8FqSUsLoi229ybI r1L3mcqFGV/XjBIuYoK05ky9KF+1WEg= -----END CERTIFICATE-----Generated at Wed May 13 08:43:30 2026 by rpki-client