$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c6f33b32-cceb-311c-b9a6-b22e0c3312b3.roa File: c6f33b32-cceb-311c-b9a6-b22e0c3312b3.roa (raw, json) Hash identifier: +hus6L0qfYkbpJy8kcZxvE7tFwxTRpq/jbtqBLFKYV0= Subject key identifier: 8F:EB:50:43:7F:6B:97:3A:94:E0:7B:FE:65:3C:D8:7D:11:B8:41:5A Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Certificate serial: 010D0C9F4328584D80FFF9357BCDF914ED200880 Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c6f33b32-cceb-311c-b9a6-b22e0c3312b3.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 14618 IP address blocks: 146.197.80.0/24 maxlen: 24 156.37.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:f9:35:7b:cd:f9:14:ed:20:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=2dff8d5b-c687-4f95-a65f-c2fa925b8664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9f:a7:58:5a:ea:dc:01:c2:ee:0e:f0:84:c8: 3c:88:42:c3:24:45:64:0c:65:7e:73:7e:59:fb:16: 4c:07:73:71:80:e9:45:83:dc:2b:31:50:03:b9:3d: 0a:31:46:ac:bf:ec:db:31:3f:1f:4b:b2:04:13:e4: 6b:ca:92:bf:4a:a1:25:94:87:86:78:6c:1c:a3:1a: 2f:49:a8:d4:76:27:41:25:38:cc:9d:16:a4:a1:ac: 78:25:1d:40:ae:c9:37:62:02:d1:f7:c5:40:9c:22: 79:aa:c7:ca:b1:3b:4c:4a:be:6f:0f:d2:f2:00:52: 44:6b:73:09:ae:97:c8:70:27:a9:7c:3e:89:4d:d3: 7e:10:d2:2a:66:03:37:35:19:02:f5:0f:6b:7f:3f: e6:fe:05:db:fe:35:67:55:50:c6:a6:c1:5b:89:33: 00:b1:ab:8e:23:9b:30:f3:df:d3:c0:20:29:a7:fb: bd:ce:b7:8e:4d:49:bc:7d:5f:1b:e4:00:45:c2:af: d3:cf:e2:52:dc:20:bf:b1:f1:96:8f:a0:b6:49:cf: 1d:10:9b:e3:b6:75:e3:29:0a:46:8c:fb:b8:75:f2: d2:44:35:73:29:bb:58:dc:a8:d3:da:c4:b0:65:43: b3:5e:b7:6d:32:e2:36:46:e0:2f:95:fb:4f:87:59: 9a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:EB:50:43:7F:6B:97:3A:94:E0:7B:FE:65:3C:D8:7D:11:B8:41:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c6f33b32-cceb-311c-b9a6-b22e0c3312b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl X509v3 Authority Key Identifier: keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer sbgp-ipAddrBlock: critical IPv4: 146.197.80.0/24 156.37.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:63:d7:e7:b2:0d:ee:c3:46:4a:04:50:95:93:e2:e2:4a:e6: 44:b7:a9:64:5f:38:87:48:ee:a8:69:8e:20:e5:37:b7:7c:4e: 97:2f:c5:38:b3:b8:bd:cd:64:c8:09:21:e9:59:bf:dc:1a:57: 8c:04:b7:c6:a5:ca:95:ea:ba:a3:fb:46:01:3c:11:ce:65:6a: eb:a9:ac:ac:a1:27:19:a0:82:9d:a3:9e:f5:5e:1d:fa:43:26: f8:81:4f:32:17:82:39:0c:b4:3a:22:ac:67:65:10:8e:c2:36: 97:c8:53:9a:8d:b4:c2:18:64:b4:b2:0b:05:40:40:a7:dc:ce: 9e:73:95:75:a2:81:57:77:3d:e5:92:61:05:82:86:6b:4e:49: 9e:d4:42:32:31:7a:b7:3d:08:31:fa:43:aa:8e:dd:02:c0:be: 83:83:ba:2a:c5:33:8a:76:6a:46:bd:c7:0e:3a:14:3e:16:bd: 75:b6:1e:e0:e3:73:27:d6:07:e0:90:a6:7d:2c:27:ba:01:9a: 33:e5:cd:66:36:be:e9:10:58:9b:23:c0:fa:4f:ab:59:ce:08: 99:d6:5c:f9:c9:49:15:86:ad:bf:fd:10:c0:a5:7b:40:92:41: 5d:e8:48:a1:79:64:f3:4a:6a:82:19:74:af:cb:f5:e5:94:4d: eb:0f:d0:9e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2A//k1e835FO0gCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQzMzM1ZGItYzU1Yi00NDNlLWIyMGMtNWM3NGUxYzI1 NmM5MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk MmRmZjhkNWItYzY4Ny00Zjk1LWE2NWYtYzJmYTkyNWI4NjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZ+nWFrq3AHC7g7whMg8iELDJEVkDGV+c35Z +xZMB3NxgOlFg9wrMVADuT0KMUasv+zbMT8fS7IEE+RrypK/SqEllIeGeGwcoxov SajUdidBJTjMnRakoax4JR1Arsk3YgLR98VAnCJ5qsfKsTtMSr5vD9LyAFJEa3MJ rpfIcCepfD6JTdN+ENIqZgM3NRkC9Q9rfz/m/gXb/jVnVVDGpsFbiTMAsauOI5sw 89/TwCApp/u9zreOTUm8fV8b5ABFwq/Tz+JS3CC/sfGWj6C2Sc8dEJvjtnXjKQpG jPu4dfLSRDVzKbtY3KjT2sSwZUOzXrdtMuI2RuAvlftPh1maywIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFI/rUEN/a5c6lOB7/mU82H0RuEFaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNDMz MzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0ZTFjMjU2YzkvYzZmMzNiMzItY2NlYi0z MTFjLWI5YTYtYjIyZTBjMzMxMmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzQzMzM1ZGItYzU1Yi00NDNlLWIy MGMtNWM3NGUxYzI1NmM5L2M0MzMzNWRiLWM1NWItNDQzZS1iMjBjLTVjNzRlMWMy NTZjOS5jcmwwHwYDVR0jBBgwFoAUxAvagFtAIbjQ1K7dFqiSimKzZdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNDMzMzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0 ZTFjMjU2YzkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAksVQAwQD nCWAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHJj1+eyDe7DRkoEUJWT4uJK5kS3qWRfOIdI7qhpjiDlN7d8 TpcvxTizuL3NZMgJIelZv9waV4wEt8alypXquqP7RgE8Ec5lauuprKyhJxmggp2j nvVeHfpDJviBTzIXgjkMtDoirGdlEI7CNpfIU5qNtMIYZLSyCwVAQKfczp5zlXWi gVd3PeWSYQWChmtOSZ7UQjIxerc9CDH6Q6qO3QLAvoODuirFM4p2aka9xw46FD4W vXW2HuDjcyfWB+CQpn0sJ7oBmjPlzWY2vukQWJsjwPpPq1nOCJnWXPnJSRWGrb/9 EMCle0CSQV3oSKF5ZPNKaoIZdK/L9eWUTesP0J4= -----END CERTIFICATE-----Generated at Fri Apr 17 07:04:32 2026 by rpki-client