$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/483e3b6b-303e-3d15-818d-dc789e50942b.roa File: 483e3b6b-303e-3d15-818d-dc789e50942b.roa (raw, json) Hash identifier: NaYuD+0kPCyy1JQajmGy9ryFNBgdYEmV9mp4Ehbo0uw= Subject key identifier: 7E:C9:DD:2A:C7:18:68:1C:84:E6:74:4C:7A:7F:74:31:8F:40:74:4C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9E500F3890C58D186EA053C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/483e3b6b-303e-3d15-818d-dc789e50942b.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 157.151.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:0f:38:90:c5:8d:18:6e:a0:53:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=5c8e88cf-cf2e-4a3b-8872-46661f1d44bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5a:f1:82:cc:f7:6b:d0:b1:ab:95:95:87:15: 3f:cd:fb:9a:54:ad:1d:7e:94:78:e8:69:d2:96:1e: eb:51:53:15:4f:64:2c:8f:ba:b3:4f:9d:cc:15:f2: 47:82:8c:32:ec:b0:98:5e:b1:cf:3f:59:c2:fd:71: d1:ed:9b:2a:6b:8f:e6:16:69:ac:d8:fa:e2:c2:d5: d9:0a:d2:04:ef:a9:59:d8:bb:f3:d1:70:11:15:7b: 2f:09:f1:51:ac:25:75:c2:02:8a:01:11:41:9c:ef: c1:ef:e6:a5:b7:32:38:5c:b3:02:00:c4:b6:27:67: f1:5b:a2:ca:55:77:95:99:9e:1f:88:41:82:89:71: 01:49:58:9b:c2:ce:7a:73:af:28:da:7d:dc:c0:b6: 05:a8:f7:49:a7:74:84:f1:91:03:01:65:9a:6f:87: c0:52:d3:ba:e0:60:87:c0:aa:48:33:cd:19:80:be: 87:5e:8e:fa:93:5a:47:21:9a:48:98:89:67:66:49: 97:fa:96:a3:b9:19:c7:2c:05:bd:5d:f5:4f:80:67: 66:4e:2b:0f:59:e0:56:41:47:3a:18:be:8b:81:08: 96:fa:9e:60:40:1e:02:36:71:8b:99:ad:97:bd:fe: df:ca:55:2c:31:9b:94:b9:9b:f9:b5:cb:2b:64:75: a1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C9:DD:2A:C7:18:68:1C:84:E6:74:4C:7A:7F:74:31:8F:40:74:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/483e3b6b-303e-3d15-818d-dc789e50942b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.151.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:43:d1:c1:13:36:8f:ac:cb:ad:b7:2c:0e:6f:92:84:92:8e: 13:9b:72:b5:88:7b:4d:d2:18:83:57:33:3c:0d:57:86:8d:43: 49:64:8f:d0:6f:99:76:76:1f:25:bf:a4:9a:4f:d2:21:80:a7: 30:0f:7f:a6:8c:b4:4a:af:bb:7f:ce:51:fb:8c:63:33:32:fb: 92:54:88:a6:24:26:8d:b9:e8:2a:13:85:b7:d5:ff:90:32:1c: d4:12:1e:bc:4c:35:18:f6:6e:7d:92:0c:6e:4c:37:db:62:1a: e3:da:f3:9a:d0:3b:c5:1e:09:ca:e1:c8:9a:33:a5:c6:3a:a9: 3b:e8:f7:d5:e1:06:ec:86:6d:2e:11:6e:ec:57:23:4a:dd:c5: 1c:e4:ca:b7:98:bb:7f:f6:f0:3e:dd:f4:38:48:72:dd:91:55: db:c6:13:d8:72:69:e2:0e:6e:9f:0c:c5:a0:06:04:42:5c:f3: 0f:17:70:c9:d1:99:ae:03:4f:52:d3:a5:65:67:85:48:ac:3b: 52:73:f9:73:d0:2c:bb:07:2c:6f:d8:28:07:b0:31:71:52:d1: 0a:97:90:10:47:0d:b9:b0:1c:45:db:3b:56:fb:96:3b:96:99: bb:54:ed:db:6a:88:30:75:bf:aa:4d:00:47:c8:5e:3b:81:62: f5:e0:d2:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUA84kMWNGG6gU8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk NWM4ZTg4Y2YtY2YyZS00YTNiLTg4NzItNDY2NjFmMWQ0NGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1rxgsz3a9Cxq5WVhxU/zfuaVK0dfpR46GnS lh7rUVMVT2Qsj7qzT53MFfJHgowy7LCYXrHPP1nC/XHR7Zsqa4/mFmms2PriwtXZ CtIE76lZ2Lvz0XARFXsvCfFRrCV1wgKKARFBnO/B7+altzI4XLMCAMS2J2fxW6LK VXeVmZ4fiEGCiXEBSVibws56c68o2n3cwLYFqPdJp3SE8ZEDAWWab4fAUtO64GCH wKpIM80ZgL6HXo76k1pHIZpImIlnZkmX+pajuRnHLAW9XfVPgGdmTisPWeBWQUc6 GL6LgQiW+p5gQB4CNnGLma2Xvf7fylUsMZuUuZv5tcsrZHWh3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7J3SrHGGgchOZ0THp/dDGPQHRMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDgzZTNiNmItMzAzZS0z ZDE1LTgxOGQtZGM3ODllNTA5NDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnZc5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACND0cETNo+sy623LA5vkoSSjhObcrWIe03SGINXMzwNV4aNQ0lkj9Bv mXZ2HyW/pJpP0iGApzAPf6aMtEqvu3/OUfuMYzMy+5JUiKYkJo256CoThbfV/5Ay HNQSHrxMNRj2bn2SDG5MN9tiGuPa85rQO8UeCcrhyJozpcY6qTvo99XhBuyGbS4R buxXI0rdxRzkyreYu3/28D7d9DhIct2RVdvGE9hyaeIObp8MxaAGBEJc8w8XcMnR ma4DT1LTpWVnhUisO1Jz+XPQLLsHLG/YKAewMXFS0QqXkBBHDbmwHEXbO1b7ljuW mbtU7dtqiDB1v6pNAEfIXjuBYvXg0kE= -----END CERTIFICATE-----Generated at Wed May 13 10:28:50 2026 by rpki-client