$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3651f220-6b03-3e15-a101-139beaa52674.roa File: 3651f220-6b03-3e15-a101-139beaa52674.roa (raw, json) Hash identifier: j75YmAZWauKVxhTqz1FyrxCw8b0vowbTOwskIZsZ0R0= Subject key identifier: 02:15:FA:BE:51:E6:1A:0F:C3:17:E3:7B:24:A2:35:1D:34:DF:07:B3 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9E500D4B477E7C0964E98A00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3651f220-6b03-3e15-a101-139beaa52674.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 157.151.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:0d:4b:47:7e:7c:09:64:e9:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=7f1e83ab-f53d-4e9d-aec3-dc5ddfc841c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c3:7d:52:9a:de:fd:3a:40:9a:a9:bd:40:19: 8b:02:fe:3a:81:ae:6b:d2:68:0f:94:f6:bf:e2:0e: fd:68:76:62:76:49:eb:5e:e1:9d:9f:6f:62:06:39: 99:5f:5c:2d:65:40:a2:3e:9a:23:2a:d5:9b:c0:d1: e3:73:e3:ad:58:40:a9:6a:bc:41:86:f5:e1:ab:21: 41:ba:43:48:75:a5:5b:a5:2c:47:6a:05:61:1d:e4: 55:d6:c0:c9:1a:96:9d:78:41:92:fe:1e:d9:a4:42: 12:5f:66:5f:50:33:0d:11:2a:d1:cb:e2:52:83:cd: b6:6c:26:db:36:de:22:aa:78:9e:28:d6:1a:39:02: 93:55:c5:7b:da:98:be:63:d9:a0:9d:63:1e:c0:87: 32:37:91:9f:f8:a6:9a:78:66:e3:0e:db:2f:a3:7b: 34:43:19:5f:81:3c:22:be:fc:a2:b8:27:ae:1f:11: e7:58:df:d9:d6:57:76:64:a0:03:3a:34:fb:5a:18: f7:cb:5d:2e:b7:6f:1e:4e:47:d8:fa:ca:01:99:63: 25:a8:d5:f8:1e:b2:82:d3:e0:72:66:87:0e:91:90: 97:2c:df:fe:b2:bc:fc:54:4a:b9:b9:e2:27:9c:4f: 42:19:2e:82:66:7a:4a:c9:21:c0:b4:0d:a5:fe:23: 85:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:15:FA:BE:51:E6:1A:0F:C3:17:E3:7B:24:A2:35:1D:34:DF:07:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3651f220-6b03-3e15-a101-139beaa52674.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.151.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:6b:7c:15:2a:7b:1e:0b:f6:19:93:d2:90:28:58:6f:75:34: 5b:d6:cd:2d:b8:d9:31:fd:49:db:37:f1:33:74:21:ec:e0:67: b1:89:eb:89:0a:e6:3f:ee:3f:ee:d7:ee:b6:88:fd:97:f0:e0: b1:2b:03:4d:3e:39:94:36:a5:64:18:47:74:08:24:a9:e9:72: 2b:f9:e7:fb:84:59:aa:58:ef:5f:dc:4d:ac:68:65:24:3c:15: 64:fe:38:63:7a:0c:f4:3b:5e:34:83:08:b5:66:10:a9:ce:ad: c8:69:17:11:f3:71:e9:ee:bf:f0:29:3a:96:b1:bc:72:8a:ad: 2b:ad:69:9a:ef:b7:72:65:58:0f:18:bd:33:cd:15:60:ac:96: 38:8d:a2:a2:50:81:f5:cf:75:bb:68:b8:df:65:3b:1c:3b:22: 68:52:cf:2a:71:a0:13:98:cb:57:13:75:b6:55:82:23:c7:09: ca:7f:85:28:35:01:2b:5a:45:99:3a:53:2d:92:63:a7:49:b3: 5b:8e:3d:c9:74:3e:ac:d2:37:ef:18:45:f6:5f:87:39:23:4f: 13:72:49:dc:8e:80:8b:dd:61:9d:0d:e3:52:8b:51:c0:82:ad: 4c:a6:12:53:85:1d:cf:6f:c6:26:cb:43:af:2c:cc:88:da:a8: 3d:cc:11:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUA1LR358CWTpigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk N2YxZTgzYWItZjUzZC00ZTlkLWFlYzMtZGM1ZGRmYzg0MWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMN9Upre/TpAmqm9QBmLAv46ga5r0mgPlPa/ 4g79aHZidknrXuGdn29iBjmZX1wtZUCiPpojKtWbwNHjc+OtWECparxBhvXhqyFB ukNIdaVbpSxHagVhHeRV1sDJGpadeEGS/h7ZpEISX2ZfUDMNESrRy+JSg822bCbb Nt4iqnieKNYaOQKTVcV72pi+Y9mgnWMewIcyN5Gf+KaaeGbjDtsvo3s0QxlfgTwi vvyiuCeuHxHnWN/Z1ld2ZKADOjT7Whj3y10ut28eTkfY+soBmWMlqNX4HrKC0+By ZocOkZCXLN/+srz8VEq5ueInnE9CGS6CZnpKySHAtA2l/iOFuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIV+r5R5hoPwxfjeySiNR003wezMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzY1MWYyMjAtNmIwMy0z ZTE1LWExMDEtMTM5YmVhYTUyNjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnZc2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJrfBUqex4L9hmT0pAoWG91NFvWzS242TH9Sds38TN0IezgZ7GJ64kK 5j/uP+7X7raI/Zfw4LErA00+OZQ2pWQYR3QIJKnpciv55/uEWapY71/cTaxoZSQ8 FWT+OGN6DPQ7XjSDCLVmEKnOrchpFxHzcenuv/ApOpaxvHKKrSutaZrvt3JlWA8Y vTPNFWCsljiNoqJQgfXPdbtouN9lOxw7ImhSzypxoBOYy1cTdbZVgiPHCcp/hSg1 AStaRZk6Uy2SY6dJs1uOPcl0PqzSN+8YRfZfhzkjTxNySdyOgIvdYZ0N41KLUcCC rUymElOFHc9vxibLQ68szIjaqD3MERk= -----END CERTIFICATE-----Generated at Wed May 13 11:32:07 2026 by rpki-client