$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4590ea9f-c1f5-3505-beda-6bb73865e2b5.roa File: 4590ea9f-c1f5-3505-beda-6bb73865e2b5.roa (raw, json) Hash identifier: p6adaxuZa7TeGtxzeqZGcRaUI3xIfuQQwuWErRGP39o= Subject key identifier: 51:1E:B3:BD:6C:29:D5:40:13:57:B2:4A:E9:FD:9A:0A:DB:D9:77:74 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584CD4079355B14CC407E46B1100 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4590ea9f-c1f5-3505-beda-6bb73865e2b5.roa Signing time: Wed 11 Feb 2026 14:00:41 +0000 ROA not before: Wed 11 Feb 2026 14:00:41 +0000 ROA not after: Tue 12 May 2026 13:00:41 +0000 asID: 54113 IP address blocks: 157.52.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d4:07:93:55:b1:4c:c4:07:e4:6b:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Feb 11 14:00:41 2026 GMT Not After : May 12 13:00:41 2026 GMT Subject: CN=f6dcb409-78ea-499b-98e9-ba3cdad0f156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e9:ce:95:80:26:43:34:ee:c6:0c:b0:3e:7c: ae:be:87:a1:63:10:ed:b4:b8:fe:77:ea:d9:64:33: c4:a3:bb:ef:23:55:18:36:5c:81:15:22:ae:c7:dd: ee:87:04:86:96:c7:ff:df:44:8a:55:f0:01:62:24: 67:4a:76:42:65:a9:56:a6:c5:b6:1e:4c:42:0a:e6: 83:cb:b9:47:b6:be:a1:11:a2:e2:10:a8:64:87:af: c1:1f:b6:f4:2e:2a:b9:e4:36:1f:a5:03:c9:74:d1: 7f:bd:12:4d:3f:5a:aa:de:b8:5e:aa:84:f2:ef:7a: 69:5a:81:4d:78:31:0d:a1:3f:c8:87:00:0b:3e:f6: 31:6d:b0:e8:6d:75:8e:3b:10:02:e6:5e:24:e0:57: 00:a2:63:5c:01:cd:da:5e:a2:7c:bc:11:6d:6b:ef: 8b:09:39:83:67:d9:9b:29:e1:52:b0:8f:f7:c6:00: 0a:e2:68:f7:32:48:8e:cb:19:35:b8:d7:fe:75:c2: 4e:0b:ee:81:21:fb:19:ba:54:ba:35:3f:d8:d9:31: 6e:b0:76:1d:0a:b5:c1:f1:3e:52:eb:cc:9c:51:0c: 61:db:b5:f9:64:23:ed:a5:d7:e4:77:da:1a:48:36: 10:7c:1a:a2:0f:6a:80:e7:fc:5d:50:7b:c9:19:9c: 33:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:1E:B3:BD:6C:29:D5:40:13:57:B2:4A:E9:FD:9A:0A:DB:D9:77:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4590ea9f-c1f5-3505-beda-6bb73865e2b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 157.52.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:b5:dd:c3:1b:d7:4b:b6:a3:68:21:cc:1f:be:42:a3:d8:94: 3f:0a:6d:26:e7:6c:5e:37:cd:61:b0:e2:05:14:ab:17:21:c6: 5e:32:96:16:fa:9f:44:21:b4:c7:98:53:33:69:59:2e:13:d7: 4e:1f:13:08:ab:8b:2b:34:93:66:94:5e:95:bd:dc:15:61:22: 79:7c:f0:b1:f8:09:56:a4:09:02:e8:48:e7:f9:a9:fb:4e:9a: 66:ed:c9:6d:39:63:98:cc:ff:2f:a6:db:13:84:31:95:0a:bb: a9:d8:41:2a:e0:b6:e4:73:7e:4c:9f:45:fc:43:c8:eb:71:33: a4:b1:4e:09:8e:81:75:9d:10:e7:89:b9:13:e2:2c:d4:c1:23: a9:5d:54:bd:05:b8:3a:a9:ac:7b:bc:9d:74:16:7a:a8:d9:b1: b9:20:9f:69:e5:0a:f3:76:b0:4d:e2:64:03:e0:88:85:c8:1e: be:d4:01:03:bb:43:a6:0a:b1:db:85:1d:3e:10:da:64:e0:3c: cb:c9:02:4e:17:54:c5:63:d4:21:58:ac:5f:c9:46:f7:1a:c8: d8:64:95:fb:26:86:07:37:77:9c:e5:42:bd:90:04:93:88:24: 79:0f:84:79:7c:2e:3a:3b:4c:d1:a0:d7:e2:00:99:ef:08:3b: ba:a3:0c:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzUB5NVsUzEB+RrEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk ZjZkY2I0MDktNzhlYS00OTliLTk4ZTktYmEzY2RhZDBmMTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyenOlYAmQzTuxgywPnyuvoehYxDttLj+d+rZ ZDPEo7vvI1UYNlyBFSKux93uhwSGlsf/30SKVfABYiRnSnZCZalWpsW2HkxCCuaD y7lHtr6hEaLiEKhkh6/BH7b0Liq55DYfpQPJdNF/vRJNP1qq3rheqoTy73ppWoFN eDENoT/IhwALPvYxbbDobXWOOxAC5l4k4FcAomNcAc3aXqJ8vBFta++LCTmDZ9mb KeFSsI/3xgAK4mj3MkiOyxk1uNf+dcJOC+6BIfsZulS6NT/Y2TFusHYdCrXB8T5S 68ycUQxh27X5ZCPtpdfkd9oaSDYQfBqiD2qA5/xdUHvJGZwzZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEes71sKdVAE1eySun9mgrb2Xd0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNDU5MGVhOWYtYzFmNS0z NTA1LWJlZGEtNmJiNzM4NjVlMmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnTRYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJa13cMb10u2o2ghzB++QqPYlD8KbSbnbF43zWGw4gUUqxchxl4ylhb6 n0QhtMeYUzNpWS4T104fEwiriys0k2aUXpW93BVhInl88LH4CVakCQLoSOf5qftO mmbtyW05Y5jM/y+m2xOEMZUKu6nYQSrgtuRzfkyfRfxDyOtxM6SxTgmOgXWdEOeJ uRPiLNTBI6ldVL0FuDqprHu8nXQWeqjZsbkgn2nlCvN2sE3iZAPgiIXIHr7UAQO7 Q6YKsduFHT4Q2mTgPMvJAk4XVMVj1CFYrF/JRvcayNhklfsmhgc3d5zlQr2QBJOI JHkPhHl8Ljo7TNGg1+IAme8IO7qjDKA= -----END CERTIFICATE-----Generated at Mon Mar 2 12:24:00 2026 by rpki-client