$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e9b8c2b2-24dc-3f31-99d5-662fa1b7246c.roa File: e9b8c2b2-24dc-3f31-99d5-662fa1b7246c.roa (raw, json) Hash identifier: RyRaMEKlhWcq6cWT1q0XL6DLjAGWMkMNAbQslXP9/DU= Subject key identifier: 4F:56:CB:3C:A5:2D:00:C0:35:53:73:38:71:7A:5F:BD:69:CD:EE:00 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9E5011078DB26B8812793080 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e9b8c2b2-24dc-3f31-99d5-662fa1b7246c.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 157.137.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:11:07:8d:b2:6b:88:12:79:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=d92ff011-6fa4-4e10-9357-f239402c7b1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f7:18:4c:3b:2d:9a:89:e3:1e:99:62:2e:af: 20:b7:26:e3:59:43:9f:d4:b3:0f:36:0a:67:89:ad: 6f:58:be:94:80:fa:ad:04:be:04:8f:44:ec:71:bf: 1d:7d:7f:06:c1:07:9c:c5:cf:60:b6:27:f4:5a:54: e7:35:d8:ca:bb:b0:39:5f:b5:4b:ee:df:46:94:76: 91:89:e2:2e:b3:52:35:4c:9b:e3:92:d0:e5:a6:a0: 13:15:e9:c7:6f:73:60:85:d8:4f:2d:24:17:98:89: 2a:e2:f5:22:63:1b:21:88:1d:3b:92:e5:8a:27:28: 81:f2:95:be:58:4e:0d:f5:db:49:ab:d0:f6:34:90: 0f:44:83:a4:e9:4d:0c:fc:84:07:e0:8a:c7:d0:52: 08:b7:64:c8:40:e7:98:34:59:45:60:86:5d:8b:9f: ea:73:ea:e2:8b:46:84:21:ba:6b:6a:ea:27:53:15: 7f:79:48:a3:a6:8b:ff:a0:d3:09:d5:5b:11:bc:d1: fa:ab:a1:29:5f:e9:40:a4:bb:99:ff:ce:81:14:f8: a2:a6:27:e7:8a:18:c5:45:0b:69:25:5d:a8:3f:67: 0c:1a:41:14:d8:a5:bf:f1:d5:28:01:af:4f:22:f2: ba:f9:5b:b3:b1:31:48:1b:ad:ee:36:a5:7e:82:69: ca:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:56:CB:3C:A5:2D:00:C0:35:53:73:38:71:7A:5F:BD:69:CD:EE:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e9b8c2b2-24dc-3f31-99d5-662fa1b7246c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.137.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:46:72:74:95:f7:c7:d4:bc:e6:7c:40:b8:09:d9:89:b1:40: a9:57:16:13:42:16:a7:10:e3:36:8f:1b:46:2f:d5:ac:1b:8c: c3:7c:71:40:0a:ee:48:98:52:b3:8c:ef:99:58:50:ef:7a:f6: e5:4a:0b:f0:64:c6:d6:c6:1d:05:1d:86:fb:be:2d:ae:bd:1f: 31:40:44:d9:aa:0b:56:79:cb:17:65:21:2b:23:4b:01:da:b6: 06:1a:b2:39:3c:60:16:f0:a1:02:4e:c4:3b:51:9b:c9:58:d2: 02:62:15:39:a8:14:7a:44:de:06:58:e1:47:0f:3c:53:36:e5: 81:d5:e0:75:ab:2c:5f:ac:41:f0:33:68:0b:1e:68:2f:28:97: 86:46:94:69:95:73:c1:63:37:78:5d:f1:7a:35:20:13:2b:33: 7e:64:a5:8a:ce:96:42:34:e4:11:28:77:5f:3f:b2:d0:b8:f2: 8c:f0:bc:1e:3a:b0:58:69:d6:0c:a4:09:09:b1:8d:9b:36:76: 9f:b6:61:bc:5b:96:94:62:17:87:2b:31:e5:66:ba:24:ba:da: 5c:b6:7c:8c:49:ab:96:f6:6b:b2:da:19:a0:05:11:bf:f5:17: e9:c6:49:35:a4:51:1c:74:47:df:33:79:33:1d:dc:37:6b:ef: df:eb:11:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUBEHjbJriBJ5MIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk ZDkyZmYwMTEtNmZhNC00ZTEwLTkzNTctZjIzOTQwMmM3YjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvcYTDstmonjHpliLq8gtybjWUOf1LMPNgpn ia1vWL6UgPqtBL4Ej0Tscb8dfX8GwQecxc9gtif0WlTnNdjKu7A5X7VL7t9GlHaR ieIus1I1TJvjktDlpqATFenHb3NghdhPLSQXmIkq4vUiYxshiB07kuWKJyiB8pW+ WE4N9dtJq9D2NJAPRIOk6U0M/IQH4IrH0FIIt2TIQOeYNFlFYIZdi5/qc+rii0aE IbprauonUxV/eUijpov/oNMJ1VsRvNH6q6EpX+lApLuZ/86BFPiipifnihjFRQtp JV2oP2cMGkEU2KW/8dUoAa9PIvK6+VuzsTFIG63uNqV+gmnKxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9WyzylLQDANVNzOHF6X71pze4AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTliOGMyYjItMjRkYy0z ZjMxLTk5ZDUtNjYyZmExYjcyNDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnYn6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANGcnSV98fUvOZ8QLgJ2YmxQKlXFhNCFqcQ4zaPG0Yv1awbjMN8cUAK 7kiYUrOM75lYUO969uVKC/BkxtbGHQUdhvu+La69HzFARNmqC1Z5yxdlISsjSwHa tgYasjk8YBbwoQJOxDtRm8lY0gJiFTmoFHpE3gZY4UcPPFM25YHV4HWrLF+sQfAz aAseaC8ol4ZGlGmVc8FjN3hd8Xo1IBMrM35kpYrOlkI05BEod18/stC48ozwvB46 sFhp1gykCQmxjZs2dp+2YbxblpRiF4crMeVmuiS62ly2fIxJq5b2a7LaGaAFEb/1 F+nGSTWkURx0R98zeTMd3Ddr79/rEco= -----END CERTIFICATE-----Generated at Wed May 13 05:09:01 2026 by rpki-client