$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/16c6600b-9a9a-3c9b-90b2-d5cbffd48227.roa File: 16c6600b-9a9a-3c9b-90b2-d5cbffd48227.roa (raw, json) Hash identifier: 7trM0xZ/371PRq8Lk2Rmp5CWrEa9ibO3hkqR0grdk78= Subject key identifier: 31:B7:46:85:27:7E:1D:C0:39:B7:9D:25:3D:7C:35:2C:30:81:4B:7A Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4FAA38FB666F0FDB68F480 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/16c6600b-9a9a-3c9b-90b2-d5cbffd48227.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 137.83.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:aa:38:fb:66:6f:0f:db:68:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=043f89ea-b9a2-486c-b322-2268a30be0a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fd:fc:66:2a:e7:c7:ea:74:a2:99:a6:d4:6f: b9:d7:4a:4e:96:ff:21:a1:90:f1:93:fd:5b:01:c6: 51:5a:c9:3a:06:56:87:0e:e1:34:97:f7:85:56:4e: 1d:96:47:0a:20:11:42:ac:63:3c:5d:fd:5b:fc:0e: 66:b3:66:50:2d:bb:1d:c1:23:a7:d6:ac:c4:c7:49: 6c:73:c6:cb:87:79:21:8e:7d:69:0b:fc:35:b0:e5: e6:bb:49:b0:63:9b:9c:cd:af:5c:cd:0c:60:d2:a3: 63:b3:93:56:24:86:dd:69:c0:fb:41:c3:60:86:1f: 85:71:76:b0:fb:d0:fa:3f:c8:e4:31:a9:b9:75:8e: 15:ca:f5:a4:74:08:98:a1:ae:53:a1:4b:1d:79:2a: 62:ef:c0:b8:d8:2d:2f:0d:c8:f6:d5:b5:f8:33:7b: fb:e6:79:e7:22:7d:58:98:34:10:6c:39:5c:53:9f: 4a:e0:0c:b5:a6:3a:0a:8a:95:c8:c7:7f:20:cf:48: fc:06:74:ea:17:f8:e8:d1:05:24:71:25:b2:ca:a1: 33:e1:c3:c9:f2:58:1d:a0:37:20:ce:5a:e0:52:ef: c7:a7:24:09:97:dd:7d:41:72:90:dc:6d:ab:22:87: 04:0c:ae:36:6c:5b:9f:2f:57:0c:23:c4:09:4d:0b: de:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B7:46:85:27:7E:1D:C0:39:B7:9D:25:3D:7C:35:2C:30:81:4B:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/16c6600b-9a9a-3c9b-90b2-d5cbffd48227.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 137.83.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:a4:05:9a:2c:1d:4f:af:35:01:c7:43:ee:2d:49:0c:08:70: 08:77:4a:b1:93:b0:67:01:eb:c7:83:4f:e4:c8:d3:b7:22:57: a6:93:ee:10:b3:6f:96:5e:5b:a0:0c:ae:b2:98:4b:ae:fe:82: 4e:af:0f:ac:fe:91:33:e5:ee:fb:b0:09:c2:05:96:6a:e4:7d: f8:d2:14:18:b1:9a:83:6b:25:dc:44:34:1f:2e:e9:4b:24:bd: 71:43:31:aa:26:db:40:5b:f3:c3:11:02:9b:bb:b3:08:db:75: 4c:6b:fd:1b:76:6d:4f:49:09:3f:f1:b3:b4:80:c6:35:25:02: 15:61:36:bc:29:21:f6:be:a6:b6:74:2a:5e:cc:bd:9c:ab:53: d8:a4:52:a3:31:ed:4b:ee:8a:f1:a0:54:ed:ae:03:4d:b0:57: f2:6c:41:34:f9:41:a4:bc:76:d1:94:17:a2:92:31:73:10:fa: e3:72:21:a9:ee:89:fa:88:f6:ae:17:38:2c:b3:5a:93:da:71: 1a:b0:a2:d2:98:d9:1e:25:18:b9:ea:25:4f:64:40:b1:10:67: 8c:cf:9e:d0:60:ad:e3:5c:49:9f:1e:e5:b0:5f:c9:bd:85:e0: ce:98:c7:64:99:dd:5c:43:f7:d0:6c:6a:11:93:2a:56:4a:f9: 17:8d:94:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT6o4+2ZvD9to9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk MDQzZjg5ZWEtYjlhMi00ODZjLWIzMjItMjI2OGEzMGJlMGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqP38Zirnx+p0opmm1G+510pOlv8hoZDxk/1b AcZRWsk6BlaHDuE0l/eFVk4dlkcKIBFCrGM8Xf1b/A5ms2ZQLbsdwSOn1qzEx0ls c8bLh3khjn1pC/w1sOXmu0mwY5ucza9czQxg0qNjs5NWJIbdacD7QcNghh+FcXaw +9D6P8jkMam5dY4VyvWkdAiYoa5ToUsdeSpi78C42C0vDcj21bX4M3v75nnnIn1Y mDQQbDlcU59K4Ay1pjoKipXIx38gz0j8BnTqF/jo0QUkcSWyyqEz4cPJ8lgdoDcg zlrgUu/HpyQJl919QXKQ3G2rIocEDK42bFufL1cMI8QJTQvewwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDG3RoUnfh3AObedJT18NSwwgUt6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMTZjNjYwMGItOWE5YS0z YzliLTkwYjItZDVjYmZmZDQ4MjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiVOuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGkBZosHU+vNQHHQ+4tSQwIcAh3SrGTsGcB68eDT+TI07ciV6aT7hCz b5ZeW6AMrrKYS67+gk6vD6z+kTPl7vuwCcIFlmrkffjSFBixmoNrJdxENB8u6Usk vXFDMaom20Bb88MRApu7swjbdUxr/Rt2bU9JCT/xs7SAxjUlAhVhNrwpIfa+prZ0 Kl7MvZyrU9ikUqMx7UvuivGgVO2uA02wV/JsQTT5QaS8dtGUF6KSMXMQ+uNyIanu ifqI9q4XOCyzWpPacRqwotKY2R4lGLnqJU9kQLEQZ4zPntBgreNcSZ8e5bBfyb2F 4M6Yx2SZ3VxD99BsahGTKlZK+ReNlAQ= -----END CERTIFICATE-----Generated at Fri Apr 17 12:40:59 2026 by rpki-client