$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/515d493f-9f08-392f-8aa2-cc0f5adc905c.roa File: 515d493f-9f08-392f-8aa2-cc0f5adc905c.roa (raw, json) Hash identifier: 3eM2g4eOFcXfmhVBwZc9HdKjLDNE+lqQtn+I5G4HZTA= Subject key identifier: 3C:47:5A:F3:7E:D7:68:EB:38:FD:DD:31:CD:2D:31:54:AE:99:54:64 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9E5001F8A4878B5E57BA7770 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/515d493f-9f08-392f-8aa2-cc0f5adc905c.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 157.151.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:01:f8:a4:87:8b:5e:57:ba:77:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=1d833909-d04d-49ec-aff4-7bd678e02147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ab:37:5d:72:1a:ad:4f:23:ac:bc:57:a7:71: dd:51:4f:6a:9f:00:04:01:5c:0a:9e:be:79:99:52: 9a:29:27:3c:8a:5f:1b:85:0e:a0:7d:32:8d:ed:d0: 5c:84:2c:95:05:c6:35:c1:16:8e:1b:23:96:0e:cc: 74:60:56:88:23:81:02:4b:5d:a9:0e:cd:f8:5a:63: c2:2b:0f:81:41:b1:19:a7:20:29:c3:01:d0:24:8c: c5:4b:a1:03:17:aa:82:4e:21:5b:f3:64:a4:72:ed: 07:77:61:ae:c8:f4:eb:c4:47:5f:99:04:ae:47:ed: 54:e9:83:0a:df:72:7e:88:60:61:92:6b:f8:73:b0: e3:58:e1:ab:f5:a4:95:2d:d0:2b:4b:81:d9:2e:19: 43:99:c0:43:35:f0:1c:e8:2a:9d:99:dd:bb:eb:a2: c0:9d:ad:9a:53:08:11:e5:4f:66:80:b4:43:20:e8: ed:00:bf:f0:5c:a3:c2:1f:a2:cf:03:dc:b4:e7:2f: 63:a6:2f:93:68:c3:d4:42:45:aa:ca:0d:81:f7:91: 40:30:c3:14:32:3c:b3:0f:8b:6f:aa:68:f5:02:1a: 43:8e:29:41:75:4c:1d:f3:2b:98:b4:40:3f:1f:44: 57:f0:5e:17:e9:8d:ff:59:fb:ae:b2:32:63:4a:1a: 9f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:47:5A:F3:7E:D7:68:EB:38:FD:DD:31:CD:2D:31:54:AE:99:54:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/515d493f-9f08-392f-8aa2-cc0f5adc905c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.151.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:3d:7b:f1:46:d7:97:a4:e2:5e:71:f9:6f:92:0e:52:ca:98: 5e:97:2c:a1:90:a3:2d:cc:c5:fd:18:d9:0c:d3:29:e7:a7:82: d9:7c:b4:a9:19:2f:eb:90:bd:99:82:d4:ba:8a:c2:b4:1e:c8: 8a:12:0c:a8:07:20:2b:32:36:88:3d:48:5f:54:61:72:85:33: 1f:48:79:56:5f:d6:eb:21:4d:b2:42:d5:1f:25:83:ca:66:59: 77:a1:4f:4a:a9:a0:fa:7e:de:36:56:44:68:3a:94:f2:39:63: d6:58:b0:95:ac:41:8d:af:47:d8:1a:3c:4a:a8:8c:4c:f0:79: 34:1c:60:5b:87:bf:86:e1:f3:56:27:89:51:40:5e:65:92:52: 10:7a:95:95:15:49:97:52:15:f0:6e:f6:e7:a6:7e:65:dc:16: 0f:d4:f9:31:40:f2:62:f0:2e:a3:0b:55:ce:ea:63:db:1a:c9: ea:a5:9d:6d:1f:cd:6d:69:12:c3:1e:9a:98:9e:f9:5f:2b:2c: c0:26:95:72:1c:58:dc:14:c7:77:3b:80:b4:86:e6:e4:c0:fa: b6:0e:c0:0c:74:33:11:4c:f9:d2:4a:1c:c4:1c:2c:33:a0:ea: 08:5c:5e:36:49:2b:92:50:50:db:5c:b6:b3:f2:bd:1e:ae:35: c7:3e:7e:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUAH4pIeLXle6d3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk MWQ4MzM5MDktZDA0ZC00OWVjLWFmZjQtN2JkNjc4ZTAyMTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqs3XXIarU8jrLxXp3HdUU9qnwAEAVwKnr55 mVKaKSc8il8bhQ6gfTKN7dBchCyVBcY1wRaOGyOWDsx0YFaII4ECS12pDs34WmPC Kw+BQbEZpyApwwHQJIzFS6EDF6qCTiFb82Skcu0Hd2GuyPTrxEdfmQSuR+1U6YMK 33J+iGBhkmv4c7DjWOGr9aSVLdArS4HZLhlDmcBDNfAc6Cqdmd2766LAna2aUwgR 5U9mgLRDIOjtAL/wXKPCH6LPA9y05y9jpi+TaMPUQkWqyg2B95FAMMMUMjyzD4tv qmj1AhpDjilBdUwd8yuYtEA/H0RX8F4X6Y3/WfuusjJjShqf/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxHWvN+12jrOP3dMc0tMVSumVRkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNTE1ZDQ5M2YtOWYwOC0z OTJmLThhYTItY2MwZjVhZGM5MDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnZcwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHg9e/FG15ek4l5x+W+SDlLKmF6XLKGQoy3Mxf0Y2QzTKeengtl8tKkZ L+uQvZmC1LqKwrQeyIoSDKgHICsyNog9SF9UYXKFMx9IeVZf1ushTbJC1R8lg8pm WXehT0qpoPp+3jZWRGg6lPI5Y9ZYsJWsQY2vR9gaPEqojEzweTQcYFuHv4bh81Yn iVFAXmWSUhB6lZUVSZdSFfBu9uemfmXcFg/U+TFA8mLwLqMLVc7qY9sayeqlnW0f zW1pEsMempie+V8rLMAmlXIcWNwUx3c7gLSG5uTA+rYOwAx0MxFM+dJKHMQcLDOg 6ghcXjZJK5JQUNtctrPyvR6uNcc+fsw= -----END CERTIFICATE-----Generated at Wed May 13 08:47:10 2026 by rpki-client