$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/68dd23fb-5b51-3aa4-94d1-7a98b076d124.roa File: 68dd23fb-5b51-3aa4-94d1-7a98b076d124.roa (raw, json) Hash identifier: PesrUvhOyQy2fXH+NGtAvKwHd8Dcd7BUjwK9WxPkSrU= Subject key identifier: 71:97:E1:5C:60:AC:2B:0B:7F:08:F2:67:8F:D4:24:AA:9B:FA:44:DA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9E5027169CB511825E412280 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/68dd23fb-5b51-3aa4-94d1-7a98b076d124.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 157.151.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:27:16:9c:b5:11:82:5e:41:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=41548b90-1b7e-4d6f-8c49-a1b21960e65c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:bc:e8:4c:0c:25:60:c9:3a:68:7b:13:39:3f: 72:42:7e:e6:05:e0:f1:a9:df:5e:dd:51:ca:99:55: 57:7b:21:75:6b:7b:0f:82:da:d3:5c:7d:e7:c4:73: 3b:e7:ba:e9:eb:ff:27:d1:4b:8e:fa:fc:0d:ed:74: a8:5c:bf:9c:21:d3:2f:7b:c6:6e:e0:b7:ec:1b:c3: da:51:7a:a5:ab:82:24:5d:b1:10:cc:69:02:a4:81: 9b:70:73:94:60:5d:f8:74:55:96:3c:52:c2:05:d6: 21:79:57:ad:83:06:0b:b6:b7:88:72:f2:c6:47:4f: 15:d0:51:c9:49:07:81:5c:83:82:e4:63:3d:fa:8d: 46:84:5b:c3:68:b1:ae:4c:b8:a2:a6:b5:96:7e:01: d9:e3:44:bc:5b:aa:79:6f:07:01:de:c5:ef:6e:49: 06:83:2f:93:3d:71:3f:80:9f:cb:bd:09:ab:25:34: 99:5f:69:56:41:fe:09:a3:e9:3d:22:7e:a7:27:c7: 22:e6:fa:a4:3f:ef:0c:5d:1a:c0:4b:26:2c:02:ca: 62:5b:16:0c:59:2f:05:53:b4:89:34:48:54:d4:24: 4d:77:d9:16:0c:05:20:e8:b6:5a:63:96:47:a1:2e: c2:9c:71:f7:10:ce:8f:97:ab:b3:2a:58:31:e7:62: ea:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:97:E1:5C:60:AC:2B:0B:7F:08:F2:67:8F:D4:24:AA:9B:FA:44:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/68dd23fb-5b51-3aa4-94d1-7a98b076d124.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.151.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:ee:0b:7c:26:fd:c3:c1:07:52:fb:fb:53:8d:87:75:20:dc: ec:f6:54:ca:fc:02:96:5a:89:f3:84:6f:d9:33:93:45:f1:28: 7e:e4:c0:18:09:5b:51:74:5d:d9:35:e8:8c:9a:0d:a6:d6:c3: 71:7a:7e:54:c7:5a:0c:7c:07:59:3d:36:a1:11:38:8d:8c:48: 86:54:62:17:08:1b:7f:68:51:b9:b8:54:f8:f7:88:e5:78:36: b3:c7:58:e0:17:86:0f:a1:49:90:69:88:82:8a:98:e4:07:a9: 3b:ca:79:c8:7a:b5:85:0c:bb:dd:42:f8:30:19:8a:36:fd:b4: 9e:4c:8e:c8:f2:f6:40:50:2e:f4:55:cd:4d:3d:82:9e:0d:84: 84:df:b4:c6:42:5f:87:16:6d:08:1c:6e:3a:57:38:71:41:e6: 94:23:99:fd:10:69:fb:f4:91:75:19:e0:15:14:e0:81:9d:24: 69:50:d0:b2:1a:6d:6e:c6:42:7e:b9:df:16:bc:0f:cf:8e:9d: fe:bf:79:3c:da:87:24:57:e6:c7:d9:a9:7e:cb:d0:21:f2:17: bb:37:e3:0b:c3:7a:5f:8a:b7:14:23:6b:b8:d4:4b:99:76:1e: b8:4d:3e:74:ed:ac:4e:99:3f:76:e9:6a:20:89:37:a4:de:5c: d2:da:f2:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUCcWnLURgl5BIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk NDE1NDhiOTAtMWI3ZS00ZDZmLThjNDktYTFiMjE5NjBlNjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbzoTAwlYMk6aHsTOT9yQn7mBeDxqd9e3VHK mVVXeyF1a3sPgtrTXH3nxHM757rp6/8n0UuO+vwN7XSoXL+cIdMve8Zu4LfsG8Pa UXqlq4IkXbEQzGkCpIGbcHOUYF34dFWWPFLCBdYheVetgwYLtreIcvLGR08V0FHJ SQeBXIOC5GM9+o1GhFvDaLGuTLiiprWWfgHZ40S8W6p5bwcB3sXvbkkGgy+TPXE/ gJ/LvQmrJTSZX2lWQf4Jo+k9In6nJ8ci5vqkP+8MXRrASyYsAspiWxYMWS8FU7SJ NEhU1CRNd9kWDAUg6LZaY5ZHoS7CnHH3EM6Pl6uzKlgx52LqbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGX4VxgrCsLfwjyZ4/UJKqb+kTaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjhkZDIzZmItNWI1MS0z YWE0LTk0ZDEtN2E5OGIwNzZkMTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnZczMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfuC3wm/cPBB1L7+1ONh3Ug3Oz2VMr8ApZaifOEb9kzk0XxKH7kwBgJ W1F0Xdk16IyaDabWw3F6flTHWgx8B1k9NqEROI2MSIZUYhcIG39oUbm4VPj3iOV4 NrPHWOAXhg+hSZBpiIKKmOQHqTvKech6tYUMu91C+DAZijb9tJ5Mjsjy9kBQLvRV zU09gp4NhITftMZCX4cWbQgcbjpXOHFB5pQjmf0Qafv0kXUZ4BUU4IGdJGlQ0LIa bW7GQn653xa8D8+Onf6/eTzahyRX5sfZqX7L0CHyF7s34wvDel+KtxQja7jUS5l2 HrhNPnTtrE6ZP3bpaiCJN6TeXNLa8qc= -----END CERTIFICATE-----Generated at Wed May 13 13:10:03 2026 by rpki-client