$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/dbfc0664-0294-36d7-b0bb-77ae346459b8.roa File: dbfc0664-0294-36d7-b0bb-77ae346459b8.roa (raw, json) Hash identifier: Eva2luPejbRP/PFqBSQ5YC0Y1IqLptZeC3qAOHu17J0= Subject key identifier: DA:BF:D1:27:72:E9:8A:E9:2B:94:F6:A4:30:1B:38:CB:B5:6C:6D:F0 Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F4328584D4D5A561C5F99ADCCE0605900 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/dbfc0664-0294-36d7-b0bb-77ae346459b8.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 40703 IP address blocks: 157.166.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:56:1c:5f:99:ad:cc:e0:60:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=22590e79-bfe0-468b-925c-5447a28c2d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5a:cc:f5:65:5f:43:8b:12:20:ab:ba:04:15: e9:f8:5d:08:b5:0d:55:c7:ca:76:48:a8:8d:17:48: 16:bd:d8:3d:d3:79:b5:a6:e4:42:da:b4:e0:e4:15: 15:3f:ac:0b:a4:32:29:a2:47:3e:65:68:18:b4:55: 02:8a:aa:4e:23:12:e5:10:6d:78:6f:73:09:32:fa: 7c:e8:9a:dd:58:d1:df:bc:64:64:29:4c:82:c1:eb: 7b:29:96:51:b3:d5:ad:56:92:39:29:de:53:8d:a0: ae:81:19:1d:94:e9:25:2e:9f:8e:17:81:ec:f4:bb: 43:5d:d3:24:19:ba:f9:f7:3f:f9:44:60:65:76:e3: af:4f:4d:15:d9:8e:9d:9f:43:4a:81:91:85:bd:d4: d5:fd:86:cb:d0:8f:52:02:82:1c:ff:8b:eb:86:1c: be:d3:52:45:4e:b3:57:d5:51:f6:36:20:6c:80:0d: 7c:71:c8:45:67:8c:09:ab:c4:e8:5f:f9:73:7f:db: 00:50:40:e0:0c:66:a1:ef:7f:b6:31:40:7c:a2:a7: 31:eb:41:97:8e:37:fe:1c:ff:48:d3:5c:4a:7c:d5: b2:eb:99:11:4a:23:c8:14:24:cf:03:50:c9:90:60: 7d:d0:fe:56:ae:5e:a8:5c:ee:dd:f5:d2:7e:c9:e3: 7c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:BF:D1:27:72:E9:8A:E9:2B:94:F6:A4:30:1B:38:CB:B5:6C:6D:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/dbfc0664-0294-36d7-b0bb-77ae346459b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:6a:1b:bc:80:29:57:79:2a:e8:14:22:c7:2f:8c:f9:91:8a: 74:e2:33:2e:c6:48:a0:3d:cf:8b:ee:55:cc:d9:8a:48:a4:83: 86:b5:f9:c9:2f:63:4b:51:58:fd:69:9e:d0:bd:4c:d5:6e:88: a1:e9:90:9d:25:f6:00:23:99:2d:a7:b0:43:79:7a:91:40:75: 2c:67:ca:f7:7f:75:4f:06:cc:55:e9:51:b5:db:b9:9b:69:bf: d9:e7:83:f4:e9:5d:ea:6a:a0:07:9c:e2:17:40:05:ff:be:46: 55:58:58:e1:9d:1c:f5:c3:01:c1:6e:e8:9a:09:a6:1f:04:b1: 28:42:8e:71:12:81:1f:fe:64:77:10:39:cf:c7:bd:67:c3:cd: 0c:b5:da:50:f0:4d:8b:13:f5:fe:6b:67:aa:ad:44:20:50:5c: 2d:1d:53:08:59:23:3a:25:62:c6:c0:f3:2e:e1:1b:1f:b0:81: b7:ea:55:5a:2d:a4:91:8a:85:8b:5e:9a:32:78:c8:38:7c:66: 96:7b:ed:0d:ab:5d:5a:50:e6:ff:78:ba:e9:ff:f1:85:0b:4f: d9:5e:6b:12:42:9f:db:7a:64:e4:f9:9e:cb:14:32:e5:0a:dd: 64:ab:ef:27:d9:d7:04:a2:c7:75:d5:f7:09:a9:cb:39:b3:2d: c1:ec:10:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWlYcX5mtzOBgWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk MjI1OTBlNzktYmZlMC00NjhiLTkyNWMtNTQ0N2EyOGMyZDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1rM9WVfQ4sSIKu6BBXp+F0ItQ1Vx8p2SKiN F0gWvdg903m1puRC2rTg5BUVP6wLpDIpokc+ZWgYtFUCiqpOIxLlEG14b3MJMvp8 6JrdWNHfvGRkKUyCwet7KZZRs9WtVpI5Kd5TjaCugRkdlOklLp+OF4Hs9LtDXdMk Gbr59z/5RGBlduOvT00V2Y6dn0NKgZGFvdTV/YbL0I9SAoIc/4vrhhy+01JFTrNX 1VH2NiBsgA18cchFZ4wJq8ToX/lzf9sAUEDgDGah73+2MUB8oqcx60GXjjf+HP9I 01xKfNWy65kRSiPIFCTPA1DJkGB90P5Wrl6oXO7d9dJ+yeN88wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNq/0Sdy6YrpK5T2pDAbOMu1bG3wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvZGJmYzA2NjQtMDI5NC0z NmQ3LWIwYmItNzdhZTM0NjQ1OWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnaaoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZqG7yAKVd5KugUIscvjPmRinTiMy7GSKA9z4vuVczZikikg4a1+ckv Y0tRWP1pntC9TNVuiKHpkJ0l9gAjmS2nsEN5epFAdSxnyvd/dU8GzFXpUbXbuZtp v9nng/TpXepqoAec4hdABf++RlVYWOGdHPXDAcFu6JoJph8EsShCjnESgR/+ZHcQ Oc/HvWfDzQy12lDwTYsT9f5rZ6qtRCBQXC0dUwhZIzolYsbA8y7hGx+wgbfqVVot pJGKhYtemjJ4yDh8ZpZ77Q2rXVpQ5v94uun/8YULT9leaxJCn9t6ZOT5nssUMuUK 3WSr7yfZ1wSix3XV9wmpyzmzLcHsEFs= -----END CERTIFICATE-----Generated at Tue Apr 7 13:29:27 2026 by rpki-client