$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/43dec2fc-ae4f-380f-84ae-6aac08229b24.roa File: 43dec2fc-ae4f-380f-84ae-6aac08229b24.roa (raw, json) Hash identifier: RYSUgzB0PtgCGrqRRVrnfCbwsyHRxn8xqCywKly6szY= Subject key identifier: B6:E7:7C:A3:48:C6:A5:80:CB:88:F9:C5:36:19:8A:08:F1:03:EB:42 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4FA47D7BC9C966FE1BAC30 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/43dec2fc-ae4f-380f-84ae-6aac08229b24.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 62044 IP address blocks: 137.83.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:a4:7d:7b:c9:c9:66:fe:1b:ac:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=aa28da9b-db03-4dcb-b49b-c12c82b03341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fb:28:0b:6b:d7:9b:aa:7b:ab:3d:93:14:c5: 91:b7:cc:53:28:fc:8a:48:ea:c0:19:f1:fc:b2:2f: 87:d2:29:ed:1d:bf:ee:95:43:42:a6:f2:12:99:82: 61:f6:67:74:d9:99:80:20:03:dc:0c:d7:83:5d:c0: 55:55:a8:27:e7:0e:ff:12:f4:76:28:70:fa:0b:40: e0:76:13:03:0e:a9:6e:2c:68:a5:07:d4:17:fc:1d: 2b:29:e3:fc:00:16:e8:c8:80:e5:33:6c:11:5a:fc: 7a:fa:b5:95:5f:4b:3f:c7:3a:5b:d6:14:59:0a:e2: f1:98:9f:65:17:8b:8d:09:0d:4c:82:6c:a4:4c:a1: 6b:ab:51:b5:67:2a:e3:97:f5:76:28:83:db:89:56: f7:5a:ba:86:6f:95:0f:44:d4:f0:cd:21:1e:13:07: 65:57:1f:cb:e1:3f:c7:2a:61:49:f4:9f:62:81:df: 75:a2:98:36:da:25:f4:32:3b:7c:7c:5e:3a:ca:be: 8f:f1:26:82:b2:cb:3b:31:b6:66:10:07:93:ee:7e: 76:a8:4b:6c:4b:a8:88:ce:c8:71:50:c7:19:bb:c9: 17:7b:59:8c:3c:2a:5c:19:0c:7a:9d:17:18:78:a6: 64:7d:eb:75:89:72:e9:64:67:c4:c0:2f:60:b7:14: 08:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:E7:7C:A3:48:C6:A5:80:CB:88:F9:C5:36:19:8A:08:F1:03:EB:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/43dec2fc-ae4f-380f-84ae-6aac08229b24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 137.83.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:d6:2d:f9:bd:75:3e:4b:95:c6:06:09:ef:bd:d3:aa:ed:fa: 6e:20:01:cd:6b:e4:05:1f:3e:e7:7d:68:02:65:72:53:50:40: 2e:00:b4:88:d7:e3:3f:56:ef:a8:2f:c5:9d:31:56:da:77:32: 94:45:5f:a0:54:72:f4:d5:99:81:a4:e2:d6:1b:68:90:ab:b9: 50:65:9a:30:2b:0a:39:3f:3a:1c:9c:da:06:7f:65:4d:36:f6: ae:c5:87:05:86:12:37:53:71:39:98:55:08:57:c0:87:66:9c: 0b:ef:ed:80:7b:77:39:27:59:cf:29:b7:06:82:81:80:98:45: 21:2a:59:b5:0d:6c:2b:03:1d:6d:06:21:99:5e:64:92:7e:77: 8e:6a:64:f8:5a:ad:43:53:0e:32:0e:92:47:34:f9:02:07:9a: e3:f0:e7:9f:e7:5e:d0:08:ac:8f:b8:05:e0:47:ac:f7:38:18: 99:e5:4a:a7:1c:b6:05:82:d1:1e:8d:e0:a1:9e:8c:75:d3:4e: 9e:f9:cc:be:c6:d9:bf:23:94:de:46:35:40:89:01:c1:24:29: e6:69:86:5a:de:47:3d:fc:a0:ac:3c:b2:99:7f:97:a6:9a:df: 66:e6:84:0d:fb:01:66:47:b3:1b:36:5c:57:39:06:9f:ba:b3: 26:7c:d6:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT6R9e8nJZv4brDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk YWEyOGRhOWItZGIwMy00ZGNiLWI0OWItYzEyYzgyYjAzMzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvsoC2vXm6p7qz2TFMWRt8xTKPyKSOrAGfH8 si+H0intHb/ulUNCpvISmYJh9md02ZmAIAPcDNeDXcBVVagn5w7/EvR2KHD6C0Dg dhMDDqluLGilB9QX/B0rKeP8ABboyIDlM2wRWvx6+rWVX0s/xzpb1hRZCuLxmJ9l F4uNCQ1MgmykTKFrq1G1Zyrjl/V2KIPbiVb3WrqGb5UPRNTwzSEeEwdlVx/L4T/H KmFJ9J9igd91opg22iX0Mjt8fF46yr6P8SaCsss7MbZmEAeT7n52qEtsS6iIzshx UMcZu8kXe1mMPCpcGQx6nRcYeKZkfet1iXLpZGfEwC9gtxQIVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbnfKNIxqWAy4j5xTYZigjxA+tCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNDNkZWMyZmMtYWU0Zi0z ODBmLTg0YWUtNmFhYzA4MjI5YjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiVOGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3WLfm9dT5LlcYGCe+906rt+m4gAc1r5AUfPud9aAJlclNQQC4AtIjX 4z9W76gvxZ0xVtp3MpRFX6BUcvTVmYGk4tYbaJCruVBlmjArCjk/Ohyc2gZ/ZU02 9q7FhwWGEjdTcTmYVQhXwIdmnAvv7YB7dzknWc8ptwaCgYCYRSEqWbUNbCsDHW0G IZleZJJ+d45qZPharUNTDjIOkkc0+QIHmuPw55/nXtAIrI+4BeBHrPc4GJnlSqcc tgWC0R6N4KGejHXTTp75zL7G2b8jlN5GNUCJAcEkKeZphlreRz38oKw8spl/l6aa 32bmhA37AWZHsxs2XFc5Bp+6syZ81v8= -----END CERTIFICATE-----Generated at Fri Apr 17 12:41:41 2026 by rpki-client