$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/43c9e6fd-c717-3fc9-b8a9-0d5bbaca973b.roa File: 43c9e6fd-c717-3fc9-b8a9-0d5bbaca973b.roa (raw, json) Hash identifier: FMVYdDTRyICIho2rTvPYTrJTdXiSn+1oXVs50dgCuCE= Subject key identifier: 01:CD:89:F1:E6:33:2A:4B:B0:19:1E:4C:7C:60:AD:87:76:9A:79:81 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4F9FE63D97B50034FDAA80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/43c9e6fd-c717-3fc9-b8a9-0d5bbaca973b.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 137.83.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:9f:e6:3d:97:b5:00:34:fd:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=3e1f99e7-e2c7-4f17-8670-6bdf901a5587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:94:c3:b0:7b:a4:94:4c:d7:13:b9:62:94:9f: fd:db:4a:2c:a6:a6:d5:93:1f:c0:19:bd:ef:35:4c: db:48:a9:83:da:48:43:be:c7:8a:7c:2f:f2:e6:eb: 51:3d:99:df:33:81:32:3f:ba:63:2e:c8:3b:00:11: 68:d5:77:a0:2e:8e:a7:0a:af:7d:34:36:f0:a2:1d: 9b:e5:d8:4f:c7:6e:9b:e3:c1:5c:4f:ea:2e:04:d0: da:fa:f1:cf:b6:6b:18:3e:5d:b3:60:39:67:f4:e9: 11:33:dd:12:ac:95:4e:24:f7:fc:da:e7:71:3f:cc: 22:1d:62:63:d7:93:b3:58:48:77:62:39:aa:b1:c2: b0:dc:0e:c2:20:e8:18:a3:aa:7a:32:22:19:63:e4: a8:a6:4d:48:de:1f:b6:d5:d3:d5:23:2a:61:58:a0: 1c:e3:83:02:48:bf:4c:48:7b:7d:ec:f7:73:6a:3e: 42:a6:be:53:0b:7e:fd:12:ac:92:7a:23:25:70:36: b8:4e:20:e3:4c:72:ff:23:61:f6:8b:01:db:8c:d4: 16:18:18:b7:df:c0:da:fd:ae:fe:26:5e:4b:a7:62: e9:e7:e2:66:c0:88:ce:8c:a5:2f:ba:f9:0e:29:01: cf:57:13:93:10:df:f9:1f:0e:c9:53:c6:34:6a:86: cf:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:CD:89:F1:E6:33:2A:4B:B0:19:1E:4C:7C:60:AD:87:76:9A:79:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/43c9e6fd-c717-3fc9-b8a9-0d5bbaca973b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 137.83.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:dc:e9:86:87:e0:9d:9a:79:70:c5:d3:69:58:db:4d:90:81: b8:e7:cd:bd:15:3b:90:3a:61:19:35:c4:f4:67:ca:02:19:88: d7:dc:cf:88:81:3e:2c:34:ec:33:e4:5f:35:a1:87:62:19:86: 7d:c8:ff:f5:71:6e:15:05:a1:59:85:f9:42:f9:e3:9b:66:44: 72:ec:74:ae:65:68:3f:b2:0c:ef:3d:8f:6a:0f:3f:7a:8d:e8: b4:d8:47:94:df:7e:38:88:fd:ed:da:b6:b4:b9:a0:60:fa:66: b9:39:44:8b:be:80:16:86:cf:36:c2:a1:64:cb:84:06:79:12: a4:8d:8a:04:4e:63:94:cb:b8:97:08:c2:10:bf:26:d6:f7:07: e6:7a:24:8f:86:59:23:6b:14:9d:5f:ec:5d:10:02:6e:9f:36: 59:7e:4a:44:ad:8a:da:83:ac:f5:e8:65:2e:a1:c7:48:30:b9: 09:36:d1:e0:59:d8:13:6a:b6:c2:50:40:01:04:04:58:58:bd: 17:5f:ad:f2:47:db:d5:e5:e0:32:73:41:51:96:ef:26:7f:ee: 50:7a:ff:8c:25:39:da:a3:71:f4:85:e1:fc:9f:55:9f:38:50: 88:cf:47:39:e5:11:d4:8a:ec:a9:15:65:2d:ec:2a:30:4c:d0: 6a:59:7f:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT5/mPZe1ADT9qoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk M2UxZjk5ZTctZTJjNy00ZjE3LTg2NzAtNmJkZjkwMWE1NTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJTDsHuklEzXE7lilJ/920ospqbVkx/AGb3v NUzbSKmD2khDvseKfC/y5utRPZnfM4EyP7pjLsg7ABFo1XegLo6nCq99NDbwoh2b 5dhPx26b48FcT+ouBNDa+vHPtmsYPl2zYDln9OkRM90SrJVOJPf82udxP8wiHWJj 15OzWEh3YjmqscKw3A7CIOgYo6p6MiIZY+Sopk1I3h+21dPVIyphWKAc44MCSL9M SHt97Pdzaj5Cpr5TC379EqySeiMlcDa4TiDjTHL/I2H2iwHbjNQWGBi338Da/a7+ Jl5Lp2Lp5+JmwIjOjKUvuvkOKQHPVxOTEN/5Hw7JU8Y0aobPOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHNifHmMypLsBkeTHxgrYd2mnmBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNDNjOWU2ZmQtYzcxNy0z ZmM5LWI4YTktMGQ1YmJhY2E5NzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiVOpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLc6YaH4J2aeXDF02lY202Qgbjnzb0VO5A6YRk1xPRnygIZiNfcz4iB Piw07DPkXzWhh2IZhn3I//VxbhUFoVmF+UL545tmRHLsdK5laD+yDO89j2oPP3qN 6LTYR5TffjiI/e3atrS5oGD6Zrk5RIu+gBaGzzbCoWTLhAZ5EqSNigROY5TLuJcI whC/Jtb3B+Z6JI+GWSNrFJ1f7F0QAm6fNll+SkStitqDrPXoZS6hx0gwuQk20eBZ 2BNqtsJQQAEEBFhYvRdfrfJH29Xl4DJzQVGW7yZ/7lB6/4wlOdqjcfSF4fyfVZ84 UIjPRznlEdSK7KkVZS3sKjBM0GpZfwY= -----END CERTIFICATE-----Generated at Fri Apr 17 20:40:01 2026 by rpki-client