$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ea0d9e27-ca72-3c32-aa06-fd6a11460215.roa File: ea0d9e27-ca72-3c32-aa06-fd6a11460215.roa (raw, json) Hash identifier: Apf5Bxl0sfom7II163Ia484yReFhJ/msRA62SHJVHJ8= Subject key identifier: 03:AF:5A:39:75:60:78:96:7A:3D:1C:A4:49:DE:1C:96:CE:8B:7B:8B Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584D86954802DEE0ECE39A98F180 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ea0d9e27-ca72-3c32-aa06-fd6a11460215.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 14061 IP address blocks: 157.245.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:48:02:de:e0:ec:e3:9a:98:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=024a75d2-d5df-4874-b1e0-eadba95c8001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e7:b5:cb:92:65:85:da:35:df:7f:76:e7:8c: 84:0e:88:d1:2e:80:01:95:eb:cb:8e:ed:ac:3c:95: b1:7f:a7:58:cd:4a:ea:44:89:a4:44:23:ba:43:36: 72:ae:40:2e:75:eb:4d:c2:a8:13:1e:ac:0d:5a:2b: 50:d0:0c:fa:e2:76:eb:86:11:5d:33:b6:58:97:73: f2:97:23:7d:60:1f:5a:de:f2:49:48:e7:e6:ed:34: fc:ab:1d:d2:14:e0:cc:bc:cc:db:85:6b:d0:3d:c8: 8a:f7:e9:92:1f:7e:c7:5f:95:18:fd:69:f6:db:83: a7:a0:95:87:ca:d1:cd:0f:62:5d:20:8e:df:f1:85: de:0e:36:a0:1d:68:46:1e:bb:bc:34:ca:b3:0c:5b: 85:e0:fa:d0:09:17:44:7f:2e:bb:b1:21:69:db:29: 18:85:69:b6:15:c5:26:80:ff:b2:f6:fb:17:02:5f: f8:06:8e:2b:40:4a:39:d4:26:07:68:77:7d:15:71: a5:95:3a:aa:10:b1:82:f4:aa:9f:5d:70:3a:cd:e5: 77:58:f5:ba:00:39:5a:c3:65:c3:6f:64:8b:53:d4: 66:ec:82:76:7a:7b:d2:f1:79:ca:1f:7e:63:e5:70: 06:c6:f6:02:74:d4:3e:c1:14:fb:c5:4b:9b:ba:09: d1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:AF:5A:39:75:60:78:96:7A:3D:1C:A4:49:DE:1C:96:CE:8B:7B:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ea0d9e27-ca72-3c32-aa06-fd6a11460215.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 157.245.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:25:e9:4a:e4:4b:67:78:3a:62:e7:3a:3c:60:0f:10:c2:ab: 02:bf:0c:1a:d7:22:79:16:d8:90:ac:6a:8a:c0:7f:3c:03:c4: b5:42:49:19:85:09:4a:a2:f4:78:93:93:75:63:67:9d:d3:4b: 6e:26:fe:10:f5:51:9e:e4:e3:fb:fe:6f:62:a9:9c:93:69:13: 1c:df:4b:2c:78:e9:66:d7:52:24:5c:27:1e:17:08:42:a3:fb: cd:05:27:ac:88:1b:b8:47:6e:5b:da:e3:f0:27:52:fb:12:42: df:f3:06:6e:74:b9:3c:a3:d7:14:fc:5a:dd:36:09:a5:e7:4d: d3:a8:8a:bb:6d:ca:76:c0:9f:6e:6e:92:e7:6d:35:a5:ac:83: 3e:96:0f:58:8f:a5:0e:a4:cc:a9:d6:fe:f7:32:1f:71:64:fd: 90:6c:dd:df:d5:ff:06:76:66:db:20:cf:80:65:2e:17:8f:e4: 4d:26:cc:ee:26:82:de:0b:fd:c7:2d:5d:1e:b9:d8:b7:d9:ce: 5e:b3:d5:80:d9:3b:5f:e7:5f:a5:45:e3:94:3e:ae:cb:18:d4: 57:ff:ee:72:44:dc:ee:80:23:fc:26:33:dc:d7:9c:45:75:20: 4a:2a:1d:dd:3b:a7:63:aa:a1:65:70:0a:19:6a:93:9e:cb:76: f9:20:20:18 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE2GlUgC3uDs45qY8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk MDI0YTc1ZDItZDVkZi00ODc0LWIxZTAtZWFkYmE5NWM4MDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxue1y5Jlhdo1339254yEDojRLoABlevLju2s PJWxf6dYzUrqRImkRCO6QzZyrkAudetNwqgTHqwNWitQ0Az64nbrhhFdM7ZYl3Py lyN9YB9a3vJJSOfm7TT8qx3SFODMvMzbhWvQPciK9+mSH37HX5UY/Wn224OnoJWH ytHND2JdII7f8YXeDjagHWhGHru8NMqzDFuF4PrQCRdEfy67sSFp2ykYhWm2FcUm gP+y9vsXAl/4Bo4rQEo51CYHaHd9FXGllTqqELGC9KqfXXA6zeV3WPW6ADlaw2XD b2SLU9Rm7IJ2envS8XnKH35j5XAGxvYCdNQ+wRT7xUubugnRFQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFAOvWjl1YHiWej0cpEneHJbOi3uLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvZWEwZDllMjctY2E3Mi0z YzMyLWFhMDYtZmQ2YTExNDYwMjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnfUwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAaiXpSuRLZ3g6Yuc6PGAPEMKrAr8MGtcieRbYkKxqisB/PAPEtUJJGYUJ SqL0eJOTdWNnndNLbib+EPVRnuTj+/5vYqmck2kTHN9LLHjpZtdSJFwnHhcIQqP7 zQUnrIgbuEduW9rj8CdS+xJC3/MGbnS5PKPXFPxa3TYJpedN06iKu23KdsCfbm6S 5201payDPpYPWI+lDqTMqdb+9zIfcWT9kGzd39X/BnZm2yDPgGUuF4/kTSbM7iaC 3gv9xy1dHrnYt9nOXrPVgNk7X+dfpUXjlD6uyxjUV//uckTc7oAj/CYz3NecRXUg Siod3TunY6qhZXAKGWqTnst2+SAgGA== -----END CERTIFICATE-----Generated at Fri Apr 17 14:26:51 2026 by rpki-client