$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/dafc0dbf-843e-3c64-a3a0-005e387e4a00.roa File: dafc0dbf-843e-3c64-a3a0-005e387e4a00.roa (raw, json) Hash identifier: 9f0ePrvHeBF8YcxZPQ307E649v+gpXWsCY7k26caoEg= Subject key identifier: 22:74:E0:91:A8:45:54:CB:50:EE:16:59:72:34:DB:6F:F4:57:D1:67 Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F4328584D5AD1FD1F57A38EA3A17F7B00 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/dafc0dbf-843e-3c64-a3a0-005e387e4a00.roa Signing time: Tue 31 Mar 2026 20:47:26 +0000 ROA not before: Tue 31 Mar 2026 20:47:26 +0000 ROA not after: Mon 29 Jun 2026 20:47:26 +0000 asID: 2631 IP address blocks: 157.166.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5a:d1:fd:1f:57:a3:8e:a3:a1:7f:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Mar 31 20:47:26 2026 GMT Not After : Jun 29 20:47:26 2026 GMT Subject: CN=e3493d8e-776c-4eef-888c-ad6d55c3e5bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:53:15:7b:7d:8f:bb:58:6c:af:27:ed:ee:5c: 05:79:cc:39:9a:40:4c:14:4e:0d:4b:a5:73:c2:fb: 5d:4a:92:9c:c3:3f:6b:f0:eb:7f:bc:87:14:04:8d: 96:71:26:68:dd:fd:9e:8b:4b:67:54:73:05:f6:cf: 80:f3:b4:e2:e3:f3:95:1a:93:3e:4c:fc:83:ce:4a: 9e:8b:12:ab:82:82:31:b2:8c:a9:56:dc:05:1a:c6: 64:c4:b2:8b:62:ce:18:75:a5:a2:25:82:b2:12:35: 79:0a:46:29:b6:fd:9c:b2:e8:2d:14:8f:3d:d9:96: 93:5a:14:5f:ed:dd:f7:7b:f1:c8:02:48:9f:91:0a: ad:8b:b6:6c:71:85:ef:60:5a:b4:07:06:57:f7:4d: 1e:6b:49:f8:78:da:d2:0e:34:0a:cc:b7:a9:7f:9a: 2f:af:a2:de:4f:b5:cd:c3:c1:b6:ef:26:6e:fd:3f: 39:18:c6:28:01:2a:f6:1e:a2:4b:bf:24:96:d1:b5: 80:7a:61:eb:a2:10:8e:64:b3:68:3c:89:c9:13:17: 32:1e:11:76:00:09:d1:9e:9a:be:10:dc:73:a7:ba: 5d:52:ce:47:d9:70:67:64:00:f5:a4:c9:25:d6:a1: f7:96:47:1a:f7:59:23:f0:e3:4a:b3:f7:79:73:61: 9d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:74:E0:91:A8:45:54:CB:50:EE:16:59:72:34:DB:6F:F4:57:D1:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/dafc0dbf-843e-3c64-a3a0-005e387e4a00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:c7:88:09:1b:79:2b:0d:bb:46:24:44:54:16:13:fa:db:4d: 43:ef:25:65:b8:4f:4d:02:49:a9:c9:9e:12:18:df:fb:9e:cc: db:2a:4d:df:7c:55:5f:90:ef:ac:f6:ac:1a:2c:1f:a4:a6:2b: 6e:55:e4:a7:1c:cb:cc:75:27:52:9f:1f:0b:96:fe:6e:ca:58: 99:b0:6e:58:78:e6:cb:4f:c7:ba:a0:d5:8b:13:6d:9f:f3:4a: e0:3b:17:c4:07:44:aa:2c:c1:bd:47:c9:e6:b4:fb:a9:bd:07: 57:9b:6f:f2:5c:ca:7b:39:68:af:4b:24:a2:88:d8:b9:88:b5: 39:72:93:4a:7f:b2:13:22:83:94:2c:39:29:24:ba:2b:f8:6d: fb:09:8e:eb:dd:ad:f9:f0:3e:a7:6d:82:b9:d6:0c:7c:b3:6a: d9:fa:45:57:31:24:89:dd:77:a3:3c:cf:05:1a:49:71:ea:b5: dd:c2:10:f2:5b:f2:63:2c:78:e8:35:52:47:b7:69:94:39:8e: d8:46:01:90:5f:83:1d:39:e0:45:1e:b3:82:cd:ee:88:d0:19: 88:a6:50:c3:08:63:42:72:c4:dc:e4:cb:bb:83:39:3a:8e:0b: e0:6b:26:59:d2:5e:75:d1:d1:88:4b:3f:c5:0f:d5:37:4f:9a: 20:3e:3b:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1a0f0fV6OOo6F/ewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI2MDMzMTIwNDcyNloXDTI2MDYyOTIwNDcyNlowLzEtMCsGA1UEAxMk ZTM0OTNkOGUtNzc2Yy00ZWVmLTg4OGMtYWQ2ZDU1YzNlNWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlMVe32Pu1hsryft7lwFecw5mkBMFE4NS6Vz wvtdSpKcwz9r8Ot/vIcUBI2WcSZo3f2ei0tnVHMF9s+A87Ti4/OVGpM+TPyDzkqe ixKrgoIxsoypVtwFGsZkxLKLYs4YdaWiJYKyEjV5CkYptv2csugtFI892ZaTWhRf 7d33e/HIAkifkQqti7ZscYXvYFq0BwZX900ea0n4eNrSDjQKzLepf5ovr6LeT7XN w8G27yZu/T85GMYoASr2HqJLvySW0bWAemHrohCOZLNoPInJExcyHhF2AAnRnpq+ ENxzp7pdUs5H2XBnZAD1pMkl1qH3lkca91kj8ONKs/d5c2GdcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJ04JGoRVTLUO4WWXI022/0V9FnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvZGFmYzBkYmYtODQzZS0z YzY0LWEzYTAtMDA1ZTM4N2U0YTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnaaSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHHiAkbeSsNu0YkRFQWE/rbTUPvJWW4T00CSanJnhIY3/uezNsqTd98 VV+Q76z2rBosH6SmK25V5Kccy8x1J1KfHwuW/m7KWJmwblh45stPx7qg1YsTbZ/z SuA7F8QHRKoswb1Hyea0+6m9B1ebb/Jcyns5aK9LJKKI2LmItTlyk0p/shMig5Qs OSkkuiv4bfsJjuvdrfnwPqdtgrnWDHyzatn6RVcxJIndd6M8zwUaSXHqtd3CEPJb 8mMseOg1Uke3aZQ5jthGAZBfgx054EUes4LN7ojQGYimUMMIY0JyxNzky7uDOTqO C+BrJlnSXnXR0YhLP8UP1TdPmiA+Ox8= -----END CERTIFICATE-----Generated at Tue Apr 7 13:24:55 2026 by rpki-client