$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/b0b7a27d-5933-3e3f-992c-3de05a0bce28.roa File: b0b7a27d-5933-3e3f-992c-3de05a0bce28.roa (raw, json) Hash identifier: fZ/YpuAYtyT6o5fPsmSEW+wTLkLBRr4B2aj1LAA0s5c= Subject key identifier: 70:F7:81:B0:29:F5:85:C4:D0:45:5A:FF:FE:44:DE:3A:08:E3:F1:33 Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F4328584D7CCFDC0740F95F55BF0B3000 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/b0b7a27d-5933-3e3f-992c-3de05a0bce28.roa Signing time: Mon 13 Apr 2026 01:00:24 +0000 ROA not before: Mon 13 Apr 2026 01:00:24 +0000 ROA not after: Sun 12 Jul 2026 01:00:24 +0000 asID: 2631 IP address blocks: 157.166.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7c:cf:dc:07:40:f9:5f:55:bf:0b:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Apr 13 01:00:24 2026 GMT Not After : Jul 12 01:00:24 2026 GMT Subject: CN=a86a911c-ed37-49a4-91c7-cd97ead423a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:33:ef:3f:f8:47:f1:e9:2b:2a:1d:89:e9:30: 32:a6:96:68:38:2c:9b:91:2d:ae:bc:59:b1:64:ec: 46:f3:8f:22:09:c7:c7:e0:09:59:be:5b:42:39:4c: fe:08:fd:ec:f3:09:83:f2:66:fe:57:ca:60:0e:c8: 27:6a:a0:e5:71:d6:55:b1:7c:fc:49:16:dc:38:df: 39:f3:ed:f7:7f:5d:c9:6c:15:b4:19:48:59:71:0d: 1b:ce:b7:f2:f0:02:6a:64:cf:eb:be:47:3b:bc:25: 7f:f1:a7:60:e6:76:2c:f9:eb:7c:b0:62:11:03:92: 3e:67:83:95:29:59:5b:54:f5:b6:00:b6:77:25:f0: 16:60:da:b1:a1:a7:4c:26:a1:cb:96:cc:9a:51:2e: 86:f9:5f:ae:54:e1:4e:ca:6a:2f:20:92:92:68:cf: 18:20:47:b3:6c:bf:64:40:ef:f0:44:02:b1:a3:6b: fc:bc:1d:2f:32:12:af:9b:7e:6f:16:40:cb:0c:ba: c3:b1:55:7a:71:1f:c1:60:c6:1b:65:97:95:1d:e8: 1e:9b:12:fa:25:fb:5e:49:e1:69:79:e3:54:54:e4: 4a:de:bc:33:b4:78:ed:ea:b6:97:dc:10:54:e9:13: dc:b4:86:b8:96:5d:00:3c:f8:3a:63:3b:f3:5f:27: 69:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F7:81:B0:29:F5:85:C4:D0:45:5A:FF:FE:44:DE:3A:08:E3:F1:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/b0b7a27d-5933-3e3f-992c-3de05a0bce28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:e0:7d:1e:01:fb:93:23:fc:cb:02:02:ba:81:89:65:d6:01: 3e:52:d2:eb:19:4c:e3:46:f4:4e:2b:30:b2:be:7c:42:c1:d3: fe:11:b6:ca:0b:9f:6b:0e:94:2c:8d:bb:ac:0c:71:e7:8a:e1: 82:ea:83:ee:01:06:17:e9:d4:bb:b5:dc:14:7b:ae:f0:6c:85: de:bb:04:89:8c:8b:89:1b:45:8a:0f:33:f7:ab:ce:66:fd:8a: 34:40:9f:31:14:45:27:d6:47:ab:62:49:fc:d1:a0:43:d0:37: ee:8b:7d:b1:df:cb:00:1e:9a:b6:b9:f6:07:ed:54:80:03:74: fa:77:05:5b:d1:f7:de:9d:11:80:1f:91:0f:6a:4d:5f:bc:76: 10:a8:72:35:d8:0e:22:79:64:0b:bd:45:42:4e:43:4c:9b:a9: 92:1c:89:55:5b:e0:9c:62:e8:3f:5f:ee:f6:d1:bb:e7:24:f9: 78:4d:6e:cc:4b:15:d6:b9:5b:99:01:66:eb:06:df:df:a0:ab: e4:97:c7:de:9d:e1:ff:64:09:f4:da:a9:a7:74:7c:66:8b:4b: 61:05:4c:01:8a:e6:68:87:cb:aa:46:b4:9c:36:fb:d5:71:62: df:0e:b6:77:b5:ee:68:ea:b5:2d:3a:3f:52:40:22:3f:9d:47: fa:21:46:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE18z9wHQPlfVb8LMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI2MDQxMzAxMDAyNFoXDTI2MDcxMjAxMDAyNFowLzEtMCsGA1UEAxMk YTg2YTkxMWMtZWQzNy00OWE0LTkxYzctY2Q5N2VhZDQyM2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojPvP/hH8ekrKh2J6TAyppZoOCybkS2uvFmx ZOxG848iCcfH4AlZvltCOUz+CP3s8wmD8mb+V8pgDsgnaqDlcdZVsXz8SRbcON85 8+33f13JbBW0GUhZcQ0bzrfy8AJqZM/rvkc7vCV/8adg5nYs+et8sGIRA5I+Z4OV KVlbVPW2ALZ3JfAWYNqxoadMJqHLlsyaUS6G+V+uVOFOymovIJKSaM8YIEezbL9k QO/wRAKxo2v8vB0vMhKvm35vFkDLDLrDsVV6cR/BYMYbZZeVHegemxL6JfteSeFp eeNUVORK3rwztHjt6raX3BBU6RPctIa4ll0APPg6YzvzXydpOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHD3gbAp9YXE0EVa//5E3joI4/EzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvYjBiN2EyN2QtNTkzMy0z ZTNmLTk5MmMtM2RlMDVhMGJjZTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnaa7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3gfR4B+5Mj/MsCArqBiWXWAT5S0usZTONG9E4rMLK+fELB0/4RtsoL n2sOlCyNu6wMceeK4YLqg+4BBhfp1Lu13BR7rvBshd67BImMi4kbRYoPM/erzmb9 ijRAnzEURSfWR6tiSfzRoEPQN+6LfbHfywAemra59gftVIADdPp3BVvR996dEYAf kQ9qTV+8dhCocjXYDiJ5ZAu9RUJOQ0ybqZIciVVb4Jxi6D9f7vbRu+ck+XhNbsxL Fda5W5kBZusG39+gq+SXx96d4f9kCfTaqad0fGaLS2EFTAGK5miHy6pGtJw2+9Vx Yt8Otne17mjqtS06P1JAIj+dR/ohRhc= -----END CERTIFICATE-----Generated at Fri Apr 17 15:35:35 2026 by rpki-client