$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/faefed5c-294e-3da1-9f92-2307a7d17e4d.roa File: faefed5c-294e-3da1-9f92-2307a7d17e4d.roa (raw, json) Hash identifier: bF1DlaH5puwWSUQXi5VXyCCXUCT6lroT6aG7lCD8ick= Subject key identifier: AE:17:6E:FA:A7:7C:C9:64:A3:DE:18:3E:28:BD:D5:6A:D9:20:61:44 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4FAB018B67D09B5BAB7C80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/faefed5c-294e-3da1-9f92-2307a7d17e4d.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 62044 IP address blocks: 137.83.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:ab:01:8b:67:d0:9b:5b:ab:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=1c1d2fbd-31fa-4834-953d-8e77a6873342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:21:15:50:05:79:30:7f:7b:37:2d:92:6d:d5: 78:2b:95:b1:9b:9a:f9:5b:0f:c8:5b:4a:12:f7:ff: dd:0d:6d:cd:ed:f9:b4:03:da:cb:9e:d6:5d:7e:0b: 8f:67:24:b0:9f:f3:a1:81:8f:e2:9f:44:5f:9b:e5: d2:f7:76:f6:9e:c7:e1:5e:83:5c:a7:e6:8c:54:17: 82:47:b9:68:15:67:46:21:60:ed:18:74:e6:0b:d9: 67:92:9a:fa:57:d2:ad:ec:d4:1a:53:81:72:aa:d2: 2c:db:e1:8b:c8:c2:e5:bd:2c:3a:85:03:18:ab:05: 01:dc:ea:0a:85:58:bf:91:bd:fb:24:39:14:ed:98: 91:ac:09:2b:8e:b7:c8:a8:9d:54:b4:dd:f5:95:e3: 3e:ba:48:ae:e6:91:bb:dc:43:d1:ca:99:aa:01:6e: 43:43:aa:14:7f:40:66:36:3d:9d:7d:cc:a5:c7:1b: e9:24:38:4d:96:be:5d:af:67:ee:28:99:93:f4:d2: 27:81:c9:1c:9d:ff:ca:c6:6f:ae:c3:90:2f:06:60: 07:2d:65:c3:a5:0c:eb:50:b5:40:65:9b:e3:17:de: a1:02:40:45:d2:23:2e:bb:38:0a:7c:8f:db:8c:29: 60:6a:24:6c:55:22:b5:c6:51:0f:40:19:53:07:c7: a7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:17:6E:FA:A7:7C:C9:64:A3:DE:18:3E:28:BD:D5:6A:D9:20:61:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/faefed5c-294e-3da1-9f92-2307a7d17e4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 137.83.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:de:45:6e:3a:89:5b:77:f3:fa:34:26:cb:57:9e:cf:f6:f1: b8:1f:c0:68:52:35:8a:6c:88:fa:c7:93:db:23:fa:d9:ba:83: ae:ac:b5:89:50:de:88:4a:8d:db:6f:ff:a2:d7:62:d8:41:39: cc:ac:b2:94:63:bf:be:01:d5:d7:c5:6d:16:49:ca:78:bc:72: 4d:b6:f6:d1:d1:35:b1:a8:d1:b7:17:e8:6c:c6:d3:da:72:6a: 5b:69:83:a0:35:42:42:cd:9b:ff:62:7c:50:b4:ea:06:9d:93: ca:4a:d6:0e:f2:95:7e:ee:76:22:9a:51:42:46:67:17:e9:fb: 46:81:6d:5d:ed:e3:78:88:d5:6f:07:a8:93:f9:4a:12:ff:db: 97:0c:65:8c:f5:28:e1:39:5d:f8:c1:34:38:c4:29:34:43:df: 58:52:a7:78:f5:77:f0:70:a9:ed:49:d4:ba:50:aa:e7:c8:01: d0:6d:3c:af:32:13:53:fb:99:9b:0c:2d:a9:44:90:21:e3:6b: 34:b8:fb:e6:d4:82:a1:fe:a3:7e:8a:f5:32:db:db:aa:af:2b: 76:3a:84:8c:84:3f:d0:e5:2c:e1:af:8b:6c:16:bd:24:15:0d: 28:35:f5:e1:53:ba:41:0a:f3:92:74:30:60:52:48:80:39:a3: e2:f0:58:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT6sBi2fQm1urfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk MWMxZDJmYmQtMzFmYS00ODM0LTk1M2QtOGU3N2E2ODczMzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCEVUAV5MH97Ny2SbdV4K5Wxm5r5Ww/IW0oS 9//dDW3N7fm0A9rLntZdfguPZySwn/OhgY/in0Rfm+XS93b2nsfhXoNcp+aMVBeC R7loFWdGIWDtGHTmC9lnkpr6V9Kt7NQaU4FyqtIs2+GLyMLlvSw6hQMYqwUB3OoK hVi/kb37JDkU7ZiRrAkrjrfIqJ1UtN31leM+ukiu5pG73EPRypmqAW5DQ6oUf0Bm Nj2dfcylxxvpJDhNlr5dr2fuKJmT9NIngckcnf/Kxm+uw5AvBmAHLWXDpQzrULVA ZZvjF96hAkBF0iMuuzgKfI/bjClgaiRsVSK1xlEPQBlTB8enMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4XbvqnfMlko94YPii91WrZIGFEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZmFlZmVkNWMtMjk0ZS0z ZGExLTlmOTItMjMwN2E3ZDE3ZTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiVOjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7eRW46iVt38/o0JstXns/28bgfwGhSNYpsiPrHk9sj+tm6g66stYlQ 3ohKjdtv/6LXYthBOcysspRjv74B1dfFbRZJyni8ck229tHRNbGo0bcX6GzG09py altpg6A1QkLNm/9ifFC06gadk8pK1g7ylX7udiKaUUJGZxfp+0aBbV3t43iI1W8H qJP5ShL/25cMZYz1KOE5XfjBNDjEKTRD31hSp3j1d/Bwqe1J1LpQqufIAdBtPK8y E1P7mZsMLalEkCHjazS4++bUgqH+o36K9TLb26qvK3Y6hIyEP9DlLOGvi2wWvSQV DSg19eFTukEK85J0MGBSSIA5o+LwWEk= -----END CERTIFICATE-----Generated at Fri Apr 17 13:57:37 2026 by rpki-client