$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/aefe6227-5bdf-3289-9c23-07574b13293f.roa File: aefe6227-5bdf-3289-9c23-07574b13293f.roa (raw, json) Hash identifier: 9OrwOzGURD3vPBJR4Ht1kqLu3EJBK8qAnvla/Q8VDc0= Subject key identifier: 5A:20:AA:B9:12:47:BB:B5:68:0F:85:4D:CF:2D:0E:0F:92:0B:5C:CA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8C2A99D66DC0AF07D46C3B00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/aefe6227-5bdf-3289-9c23-07574b13293f.roa Signing time: Sat 18 Apr 2026 13:00:30 +0000 ROA not before: Sat 18 Apr 2026 13:00:30 +0000 ROA not after: Fri 17 Jul 2026 13:00:30 +0000 asID: 31898 IP address blocks: 157.137.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:2a:99:d6:6d:c0:af:07:d4:6c:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 18 13:00:30 2026 GMT Not After : Jul 17 13:00:30 2026 GMT Subject: CN=54bf4866-4ecd-469a-a70a-13661339044f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6e:a3:65:9a:b3:24:b5:e0:e8:6a:58:51:b2: ac:7d:25:0a:5c:72:b8:5b:e5:7d:79:bf:ef:fd:3f: 69:02:62:3e:f4:38:84:d5:24:15:db:76:41:91:85: fc:db:50:4b:8e:b2:16:00:25:05:3f:0f:62:7a:71: ec:05:e1:d0:86:9d:b7:6c:7d:05:59:2a:24:a0:64: 42:de:ef:11:0d:4c:08:a7:93:c6:42:f1:cb:73:08: 81:9b:c0:a3:94:f6:67:98:3b:af:5c:0b:e8:24:ec: b1:ae:20:0d:b1:3b:8b:7d:bc:bb:9f:00:c9:8e:a8: 45:d6:5f:95:2f:ed:3d:ee:47:63:15:2b:4a:4b:e8: 7d:89:78:b7:08:de:09:65:1f:a8:0a:6c:bb:ea:df: f9:5c:51:f9:c6:2b:3a:4c:e4:29:e1:1b:4c:c4:43: 5f:e8:59:11:90:a6:33:83:47:49:38:fa:6b:8e:80: bb:ab:ec:17:70:4c:e9:2b:f6:12:2c:22:39:f1:f4: fe:ab:3e:ed:1d:3a:62:ac:d4:ca:7e:05:c7:bf:cd: db:0f:a1:3e:b8:3b:39:6c:d6:f4:c1:1a:9c:e4:ef: 35:27:ae:f0:17:1c:1a:68:65:00:bd:9a:95:56:87: 85:81:4d:cd:f4:ce:7d:59:30:e2:f8:e0:92:f5:25: 20:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:20:AA:B9:12:47:BB:B5:68:0F:85:4D:CF:2D:0E:0F:92:0B:5C:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/aefe6227-5bdf-3289-9c23-07574b13293f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.137.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:6e:25:6b:c5:fe:3e:ab:87:65:0e:e2:fa:11:5d:86:b6:d1: 7e:60:54:76:d9:8e:a4:58:e5:b1:24:c7:65:a0:e5:e7:60:88: 89:2b:17:6f:8d:37:cc:0c:19:51:d8:cb:d4:fd:0c:23:6d:b1: c0:b4:42:2e:f6:86:56:fc:26:30:9d:24:fa:31:b2:05:d3:46: b7:1c:ca:d1:20:7c:9a:31:d7:ab:0f:58:35:1b:e9:8e:ef:3d: 92:8f:34:ff:af:42:b8:f1:32:e5:66:a3:cf:b5:f2:d5:6e:4f: 1a:b4:45:23:d5:a9:50:04:ef:7d:07:b3:ef:7d:d8:66:fc:b8: 97:06:6f:74:33:c0:49:4d:e2:66:4d:cc:61:ca:66:68:98:e6: 56:85:e2:19:16:57:0b:29:c6:05:95:6b:c3:af:43:c8:59:c8: 30:e0:1f:7b:ec:c4:e5:57:b5:92:9c:73:65:71:91:d3:52:4e: 6e:05:c4:12:fa:c0:58:36:90:ba:28:bf:43:01:3b:a5:a3:f4: d8:52:2a:5a:17:d8:ff:59:36:d8:c6:ad:2c:13:05:71:0c:c2: 56:bc:00:41:84:87:89:27:b0:99:bf:8c:d9:7c:1c:a4:dc:e8: 74:9f:5e:50:95:58:e1:1a:b7:8f:4e:51:83:ab:3f:64:ca:8e: df:86:fc:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2MKpnWbcCvB9RsOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk NTRiZjQ4NjYtNGVjZC00NjlhLWE3MGEtMTM2NjEzMzkwNDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl26jZZqzJLXg6GpYUbKsfSUKXHK4W+V9eb/v /T9pAmI+9DiE1SQV23ZBkYX821BLjrIWACUFPw9ienHsBeHQhp23bH0FWSokoGRC 3u8RDUwIp5PGQvHLcwiBm8CjlPZnmDuvXAvoJOyxriANsTuLfby7nwDJjqhF1l+V L+097kdjFStKS+h9iXi3CN4JZR+oCmy76t/5XFH5xis6TOQp4RtMxENf6FkRkKYz g0dJOPprjoC7q+wXcEzpK/YSLCI58fT+qz7tHTpirNTKfgXHv83bD6E+uDs5bNb0 wRqc5O81J67wFxwaaGUAvZqVVoeFgU3N9M59WTDi+OCS9SUgfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFogqrkSR7u1aA+FTc8tDg+SC1zKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYWVmZTYyMjctNWJkZi0z Mjg5LTljMjMtMDc1NzRiMTMyOTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnYmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExuJWvF/j6rh2UO4voRXYa20X5gVHbZjqRY5bEkx2Wg5edgiIkrF2+N N8wMGVHYy9T9DCNtscC0Qi72hlb8JjCdJPoxsgXTRrccytEgfJox16sPWDUb6Y7v PZKPNP+vQrjxMuVmo8+18tVuTxq0RSPVqVAE730Hs+992Gb8uJcGb3QzwElN4mZN zGHKZmiY5laF4hkWVwspxgWVa8OvQ8hZyDDgH3vsxOVXtZKcc2VxkdNSTm4FxBL6 wFg2kLoov0MBO6Wj9NhSKloX2P9ZNtjGrSwTBXEMwla8AEGEh4knsJm/jNl8HKTc 6HSfXlCVWOEat49OUYOrP2TKjt+G/MQ= -----END CERTIFICATE-----Generated at Wed May 13 11:16:28 2026 by rpki-client