$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98a21c25-1db0-328b-bc09-edca32ee2b9a.roa File: 98a21c25-1db0-328b-bc09-edca32ee2b9a.roa (raw, json) Hash identifier: R/wxgYxcwlVoeaVruxZsYk68H4VTX32LPzoZEuJ3QQ0= Subject key identifier: 00:82:57:01:13:38:7D:21:80:5B:73:F3:4C:9A:8D:3A:73:45:FD:6B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9E5010B49A4372B40ED9A200 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98a21c25-1db0-328b-bc09-edca32ee2b9a.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 157.137.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:10:b4:9a:43:72:b4:0e:d9:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=cd037727-84fc-4c0a-b51c-8c5e2e8dbb02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:dd:41:ca:ef:fc:01:c4:57:e6:ac:c3:32:b8: 4a:e5:4b:84:49:a8:01:d5:3b:b5:94:73:68:07:63: e6:02:8f:5b:f4:43:29:f5:26:fd:94:39:ea:e3:d1: 1d:af:41:4b:03:d2:a2:ca:a1:45:c3:c4:e8:13:e4: a7:31:09:f4:98:4f:9c:48:c9:04:f9:79:ee:d2:78: 5c:e4:07:84:c6:0b:3a:47:82:3c:d2:a8:ea:59:eb: be:2b:2e:37:6e:24:db:42:bc:e7:8a:06:b5:d6:a1: 93:e7:14:0b:13:8b:e5:a1:1a:2b:ab:da:0a:3a:a8: bb:22:a2:ad:e7:86:83:ad:2a:90:94:f1:b6:38:ba: dc:bf:41:b0:a3:f1:5a:ff:bf:0e:6b:c3:fb:95:a4: d2:44:8e:3e:a5:42:7d:12:98:e1:36:1c:32:02:bc: ad:2c:e3:90:43:1b:0c:1e:e3:18:7f:a7:12:74:7c: 9b:ba:3a:3c:4b:6f:30:e1:6c:ca:97:cc:e8:87:cf: 78:02:a8:d5:3b:78:59:71:74:c8:3b:0a:93:64:19: cc:ab:8e:d3:18:1b:30:bc:15:a4:53:82:c9:04:04: 2e:53:cd:c7:4d:b9:7b:d4:ec:dc:11:9e:57:00:11: 25:32:63:e3:13:1c:ed:4a:91:20:8e:34:36:46:6d: 48:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:82:57:01:13:38:7D:21:80:5B:73:F3:4C:9A:8D:3A:73:45:FD:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98a21c25-1db0-328b-bc09-edca32ee2b9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.137.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:fc:ce:9a:96:42:93:a3:26:31:e1:14:39:3e:89:6c:55:cd: 01:37:7c:60:50:22:96:4a:01:08:6b:13:aa:b0:b0:25:a6:f1: 70:bb:64:c9:44:da:8c:dd:1c:0b:cd:0b:02:9f:97:0f:0a:1a: e3:7e:f3:26:f1:36:21:4d:ea:82:4b:73:91:1d:f5:57:e3:ac: 38:0d:ca:c2:a2:cf:a7:7a:75:09:c1:3c:36:64:4f:83:3b:96: ed:ec:d3:44:1c:75:9c:d4:8c:8a:35:ad:88:94:6c:aa:c8:5d: fa:63:2a:18:62:cb:8c:3a:0d:67:3c:d8:04:09:77:a0:d3:55: 83:9f:fa:22:db:7e:62:a7:e2:cd:a7:39:67:a5:81:68:b6:56: f2:b3:95:91:74:88:8d:77:a0:5b:a0:49:90:1a:50:0e:cd:ad: 3b:d6:93:77:bc:27:de:41:34:46:be:df:4f:d1:5f:39:17:a5: 37:16:38:77:59:0b:99:6c:50:85:47:0a:4f:d6:f7:b7:01:2b: d6:65:6a:ec:c3:73:a1:e7:2a:d2:d4:92:30:02:39:6c:38:20: bf:ae:11:db:75:ad:cc:23:25:21:d4:77:81:96:94:1f:8d:18: 54:8b:9a:ce:02:cf:81:2c:9c:52:72:e8:55:bb:85:db:2d:16: 92:d3:7f:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUBC0mkNytA7ZogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk Y2QwMzc3MjctODRmYy00YzBhLWI1MWMtOGM1ZTJlOGRiYjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgt1Byu/8AcRX5qzDMrhK5UuESagB1Tu1lHNo B2PmAo9b9EMp9Sb9lDnq49Edr0FLA9KiyqFFw8ToE+SnMQn0mE+cSMkE+Xnu0nhc 5AeExgs6R4I80qjqWeu+Ky43biTbQrzniga11qGT5xQLE4vloRorq9oKOqi7IqKt 54aDrSqQlPG2OLrcv0Gwo/Fa/78Oa8P7laTSRI4+pUJ9EpjhNhwyArytLOOQQxsM HuMYf6cSdHybujo8S28w4WzKl8zoh894AqjVO3hZcXTIOwqTZBnMq47TGBswvBWk U4LJBAQuU83HTbl71OzcEZ5XABElMmPjExztSpEgjjQ2Rm1IQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACCVwETOH0hgFtz80yajTpzRf1rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOThhMjFjMjUtMWRiMC0z MjhiLWJjMDktZWRjYTMyZWUyYjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnYn1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB78zpqWQpOjJjHhFDk+iWxVzQE3fGBQIpZKAQhrE6qwsCWm8XC7ZMlE 2ozdHAvNCwKflw8KGuN+8ybxNiFN6oJLc5Ed9VfjrDgNysKiz6d6dQnBPDZkT4M7 lu3s00QcdZzUjIo1rYiUbKrIXfpjKhhiy4w6DWc82AQJd6DTVYOf+iLbfmKn4s2n OWelgWi2VvKzlZF0iI13oFugSZAaUA7NrTvWk3e8J95BNEa+30/RXzkXpTcWOHdZ C5lsUIVHCk/W97cBK9ZlauzDc6HnKtLUkjACOWw4IL+uEdt1rcwjJSHUd4GWlB+N GFSLms4Cz4EsnFJy6FW7hdstFpLTf4k= -----END CERTIFICATE-----Generated at Wed May 13 07:28:10 2026 by rpki-client