$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/1ee68db0-734f-31d6-8ac5-b5fd973720a3.roa File: 1ee68db0-734f-31d6-8ac5-b5fd973720a3.roa (raw, json) Hash identifier: 4A2xmwrLzSVIsoLSsMSAXkRw0zxidPnWPYde/kT6eaI= Subject key identifier: 1A:15:07:34:52:1F:60:F2:8B:44:29:63:59:EC:E7:FE:A9:F9:89:8C Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F4328584D7A0529AA5B076BA3A6E17B00 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/1ee68db0-734f-31d6-8ac5-b5fd973720a3.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 5662 IP address blocks: 157.166.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:29:aa:5b:07:6b:a3:a6:e1:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=7cd52bb1-d22b-46e2-b550-1f23eff377d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e7:ee:63:4e:71:34:a5:56:24:97:60:96:2c: 47:a8:81:33:8c:03:98:35:ef:1b:b7:94:9f:c0:82: a6:18:a6:f4:51:be:a1:29:8c:4d:93:60:bf:32:61: d5:b0:33:ec:2f:eb:5b:28:03:cc:43:d1:3d:d3:12: ff:39:8b:d2:b7:32:1d:11:b2:c2:9c:51:2d:f5:0b: a9:38:3c:20:05:e5:46:9d:e6:45:66:cc:47:c6:d0: 75:7f:4f:b4:26:9d:23:e3:3d:2f:8e:ca:15:25:26: 35:42:02:ea:bc:36:eb:d6:80:68:70:9d:4a:57:4c: 20:05:29:0e:c5:b3:eb:68:35:07:c1:8d:25:93:04: 26:e2:96:60:89:f1:40:0f:81:58:0b:88:0c:25:f5: 45:e7:44:25:c0:71:66:22:df:ba:53:b4:91:36:f5: 42:6a:44:4c:fb:89:1d:14:80:93:ac:a0:ae:bc:9c: 1c:ef:a9:90:df:ea:8e:96:a2:a5:0c:f1:00:c7:19: 0f:9f:b1:92:7b:56:1d:b6:48:a3:fc:fd:c0:1e:17: a2:cf:7f:9d:54:0e:4d:09:6a:50:a9:1c:ee:c2:7b: cd:b7:75:a0:74:e0:ae:83:83:58:2c:c2:17:4d:af: e9:14:c4:f1:52:9d:57:64:1c:f1:9d:ee:87:14:9a: 89:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:15:07:34:52:1F:60:F2:8B:44:29:63:59:EC:E7:FE:A9:F9:89:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/1ee68db0-734f-31d6-8ac5-b5fd973720a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:d8:3d:c7:23:b0:0a:f6:38:61:fa:c9:83:fb:ff:18:c0:67: ca:0a:39:e2:b0:f3:16:bf:6d:e3:d6:37:94:c0:90:fc:69:83: e9:d7:7e:71:e3:39:19:38:8c:7b:e2:69:c1:38:8b:58:88:45: 26:d0:1a:b4:4a:dd:7d:f0:53:45:00:7e:40:2e:60:dc:8b:2c: 4a:ae:6d:3e:88:42:9c:af:f8:5d:e8:30:5f:6e:ef:0d:1c:e1: a6:e9:f9:a2:00:38:df:2a:ce:fa:34:76:c3:e9:50:7f:7f:91: 76:68:88:fe:bf:a3:98:c8:3a:63:83:8c:c5:2a:7e:17:13:1c: 94:e9:ac:2d:73:b6:4e:ac:69:58:3c:41:74:a8:19:80:08:02: 59:d2:9a:a8:51:4c:ad:33:c4:c9:01:80:c9:bb:c0:7b:ba:69: c6:05:df:76:30:38:2e:71:fb:09:d2:38:18:15:71:0e:55:c2: 2e:de:1a:0a:36:84:b2:71:9e:f9:06:b0:b3:76:8d:db:8e:1a: fb:c1:09:5c:98:96:7d:ee:f2:5c:dd:00:e8:26:df:88:b9:d1: 07:43:8c:7a:07:f3:dc:0e:5e:3b:c9:88:4b:51:3e:92:e6:e8: 62:3a:a3:a6:1b:19:0f:e2:a3:ed:e5:4f:89:cd:37:36:3c:cf: e7:fb:81:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BSmqWwdro6bhewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk N2NkNTJiYjEtZDIyYi00NmUyLWI1NTAtMWYyM2VmZjM3N2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+fuY05xNKVWJJdglixHqIEzjAOYNe8bt5Sf wIKmGKb0Ub6hKYxNk2C/MmHVsDPsL+tbKAPMQ9E90xL/OYvStzIdEbLCnFEt9Qup ODwgBeVGneZFZsxHxtB1f0+0Jp0j4z0vjsoVJSY1QgLqvDbr1oBocJ1KV0wgBSkO xbPraDUHwY0lkwQm4pZgifFAD4FYC4gMJfVF50QlwHFmIt+6U7SRNvVCakRM+4kd FICTrKCuvJwc76mQ3+qOlqKlDPEAxxkPn7GSe1Ydtkij/P3AHheiz3+dVA5NCWpQ qRzuwnvNt3WgdOCug4NYLMIXTa/pFMTxUp1XZBzxne6HFJqJCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBoVBzRSH2Dyi0QpY1ns5/6p+YmMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvMWVlNjhkYjAtNzM0Zi0z MWQ2LThhYzUtYjVmZDk3MzcyMGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnabRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHYPccjsAr2OGH6yYP7/xjAZ8oKOeKw8xa/bePWN5TAkPxpg+nXfnHj ORk4jHviacE4i1iIRSbQGrRK3X3wU0UAfkAuYNyLLEqubT6IQpyv+F3oMF9u7w0c 4abp+aIAON8qzvo0dsPpUH9/kXZoiP6/o5jIOmODjMUqfhcTHJTprC1ztk6saVg8 QXSoGYAIAlnSmqhRTK0zxMkBgMm7wHu6acYF33YwOC5x+wnSOBgVcQ5Vwi7eGgo2 hLJxnvkGsLN2jduOGvvBCVyYln3u8lzdAOgm34i50QdDjHoH89wOXjvJiEtRPpLm 6GI6o6YbGQ/io+3lT4nNNzY8z+f7gZ4= -----END CERTIFICATE-----Generated at Fri Apr 17 18:20:22 2026 by rpki-client