$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/ffe4fb56-35e6-3f12-99f0-b1139d28e4e4.roa File: ffe4fb56-35e6-3f12-99f0-b1139d28e4e4.roa (raw, json) Hash identifier: 9Z2uKnBn1+NT8h83sYk+C3Cl8LDc74KQzglVyco91Fw= Subject key identifier: E5:D0:8C:21:5C:3A:05:B1:38:03:22:0A:6F:91:D8:58:A1:0C:A6:DE Certificate issuer: /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Certificate serial: 010D0C9F4328584C9536F92FEAB006D8FC10ECA0 Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/ffe4fb56-35e6-3f12-99f0-b1139d28e4e4.roa Signing time: Tue 20 Jan 2026 02:00:29 +0000 ROA not before: Tue 20 Jan 2026 02:00:29 +0000 ROA not after: Mon 20 Apr 2026 01:00:29 +0000 asID: 27183 IP address blocks: 152.157.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:95:36:f9:2f:ea:b0:06:d8:fc:10:ec:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Validity Not Before: Jan 20 02:00:29 2026 GMT Not After : Apr 20 01:00:29 2026 GMT Subject: CN=039aaa90-5f59-4a29-b214-0d82f27b3cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:34:03:d1:3c:e2:2e:d5:99:4c:1c:a8:84:70: f4:ee:9c:39:45:62:aa:a4:6c:ba:aa:ed:d0:78:17: 81:c5:bd:c8:3c:5a:92:62:ae:b8:33:0e:9f:f5:12: 54:d7:08:57:62:23:ba:0a:ef:dc:4e:aa:91:7e:b3: 1c:ea:24:30:a9:ed:8d:bb:40:ee:09:b3:77:52:46: 05:03:cb:a5:70:73:47:ed:df:fb:b8:dd:3a:df:15: de:e1:1c:87:15:82:55:75:b7:35:46:35:71:55:52: 76:ff:3f:39:ea:20:51:39:77:6a:ca:53:c7:fb:bf: 38:26:db:47:ea:9c:97:ec:0d:1f:e0:d0:cf:df:2b: 47:d5:34:fd:4b:a2:e4:c4:a9:de:5e:4e:12:6e:ba: 52:d9:ea:09:8c:c0:d3:4f:c7:d9:81:58:a2:f1:d6: a6:fd:bc:a2:ef:06:ab:6a:20:0b:0b:b2:f1:9a:e5: 6b:d7:db:ec:76:d3:a3:bc:33:e2:cd:4b:9c:d5:27: 17:8e:14:b3:25:9e:3d:4c:d1:a1:20:8d:2f:7c:8d: 4a:49:ae:86:b9:06:9f:34:fc:47:66:5e:c3:4d:28: a0:5c:c9:10:59:a3:98:23:bb:3c:82:0d:4c:59:c1: 61:f8:da:44:95:91:22:b3:f7:98:05:0a:09:77:03: 25:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D0:8C:21:5C:3A:05:B1:38:03:22:0A:6F:91:D8:58:A1:0C:A6:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/ffe4fb56-35e6-3f12-99f0-b1139d28e4e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl X509v3 Authority Key Identifier: keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer sbgp-ipAddrBlock: critical IPv4: 152.157.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:b3:21:77:02:f2:42:88:eb:fc:e0:7b:ec:bc:92:73:09:7f: de:b3:7a:26:cb:a1:33:48:25:8f:e3:92:b1:f1:78:9c:e6:13: cb:79:4b:a5:15:25:40:00:8d:30:d5:2e:74:e0:1a:c7:44:c6: 75:f2:14:5c:30:b3:c8:c8:62:52:33:21:d6:a7:8f:c1:9c:72: 4f:44:d2:a6:7d:b7:83:f9:b1:2d:20:9c:aa:b2:1a:73:3d:0e: 12:34:4f:c1:ab:e0:0b:c6:9c:fd:21:a0:3a:18:79:9a:f6:00: b6:f7:f0:7f:a3:5c:e5:17:db:20:9d:38:34:26:2b:a2:c0:7b: b5:9f:7a:81:e7:09:ed:81:ab:a4:63:8d:c1:8a:a5:82:01:12: dd:af:fd:00:2f:ee:db:d0:f7:58:d7:57:e6:7d:93:63:a9:78: 80:46:fd:26:d0:73:93:04:df:06:2f:31:84:c6:48:86:a6:2a: 32:f7:c0:c4:22:d9:3f:d6:a2:ed:ac:25:d6:b0:36:49:15:4e: e7:8d:c3:00:84:6e:8b:b5:b0:bc:22:5f:b6:0e:03:24:ba:3f: 18:34:ff:cf:8c:2b:b1:37:ca:c6:ee:c5:de:90:3d:2c:3d:ba: c7:fc:68:57:5d:0d:72:21:2b:a6:48:ff:f2:e1:bc:20:8c:64: 3b:83:a4:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyVNvkv6rAG2PwQ7KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMzOTlkOTctNjRmNi00ZTEyLThjYmUtNGQxMTQ5MWFk ODE2MB4XDTI2MDEyMDAyMDAyOVoXDTI2MDQyMDAxMDAyOVowLzEtMCsGA1UEAxMk MDM5YWFhOTAtNWY1OS00YTI5LWIyMTQtMGQ4MmYyN2IzY2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojQD0TziLtWZTByohHD07pw5RWKqpGy6qu3Q eBeBxb3IPFqSYq64Mw6f9RJU1whXYiO6Cu/cTqqRfrMc6iQwqe2Nu0DuCbN3UkYF A8ulcHNH7d/7uN063xXe4RyHFYJVdbc1RjVxVVJ2/z856iBROXdqylPH+784JttH 6pyX7A0f4NDP3ytH1TT9S6LkxKneXk4SbrpS2eoJjMDTT8fZgVii8dam/byi7war aiALC7LxmuVr19vsdtOjvDPizUuc1ScXjhSzJZ49TNGhII0vfI1KSa6GuQafNPxH Zl7DTSigXMkQWaOYI7s8gg1MWcFh+NpElZEis/eYBQoJdwMloQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXQjCFcOgWxOAMiCm+R2FihDKbeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5 OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDExNDkxYWQ4MTYvZmZlNGZiNTYtMzVlNi0z ZjEyLTk5ZjAtYjExMzlkMjhlNGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzMzOTlkOTctNjRmNi00ZTEyLThj YmUtNGQxMTQ5MWFkODE2L2MzMzk5ZDk3LTY0ZjYtNGUxMi04Y2JlLTRkMTE0OTFh ZDgxNi5jcmwwHwYDVR0jBBgwFoAUrp/EGCd8p/rBPxdlxtTMgg4WXiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDEx NDkxYWQ4MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmJ1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOzIXcC8kKI6/zge+y8knMJf96zeibLoTNIJY/jkrHxeJzmE8t5S6UV JUAAjTDVLnTgGsdExnXyFFwws8jIYlIzIdanj8Gcck9E0qZ9t4P5sS0gnKqyGnM9 DhI0T8Gr4AvGnP0hoDoYeZr2ALb38H+jXOUX2yCdODQmK6LAe7WfeoHnCe2Bq6Rj jcGKpYIBEt2v/QAv7tvQ91jXV+Z9k2OpeIBG/SbQc5ME3wYvMYTGSIamKjL3wMQi 2T/Wou2sJdawNkkVTueNwwCEbou1sLwiX7YOAyS6Pxg0/8+MK7E3ysbuxd6QPSw9 usf8aFddDXIhK6ZI//LhvCCMZDuDpJU= -----END CERTIFICATE-----Generated at Sun Mar 1 22:26:15 2026 by rpki-client