$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/eb0a553b-2626-3bc3-89a6-f8b805d35369.roa File: eb0a553b-2626-3bc3-89a6-f8b805d35369.roa (raw, json) Hash identifier: jnOaNCKeEmCnAz1YyQLWflZliuVMtNm6OHY5dkYmREo= Subject key identifier: 7B:18:C3:30:FD:38:0A:BB:C9:C3:41:5B:33:89:15:52:A4:F7:0D:73 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D099DFD07E54559926C302060 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/eb0a553b-2626-3bc3-89a6-f8b805d35369.roa Signing time: Mon 02 Mar 2026 18:42:11 +0000 ROA not before: Mon 02 Mar 2026 18:42:11 +0000 ROA not after: Sun 31 May 2026 17:42:11 +0000 asID: 148996 IP address blocks: 157.238.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:9d:fd:07:e5:45:59:92:6c:30:20:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 2 18:42:11 2026 GMT Not After : May 31 17:42:11 2026 GMT Subject: CN=c7574818-50fc-4cc0-9580-11de4f662f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:87:37:51:97:bf:0e:f7:11:22:85:d7:57:31: 83:74:ff:09:3c:9d:18:c9:af:ad:4d:be:97:d6:91: 87:4f:64:e7:a0:83:14:09:fb:a9:1e:e7:25:ff:30: 98:a2:da:7f:85:70:bf:cc:e8:a4:5e:b8:78:46:04: 83:2a:ea:26:58:28:1b:4e:c2:da:5c:d8:18:d5:c4: f5:54:6c:b0:11:5a:79:1d:4b:4b:8f:59:2c:6e:22: 1f:42:af:79:6d:e2:3a:bf:de:79:2b:06:54:37:d8: dc:9e:43:32:ad:b8:f5:82:93:52:f4:04:a6:65:db: 49:d4:da:01:33:e1:97:d9:42:1f:fb:31:08:45:3e: d2:19:90:f5:62:9d:78:ee:85:0c:73:88:66:24:42: 05:dc:75:f4:24:06:a1:ad:03:65:aa:46:9a:8f:37: d8:26:c2:00:ef:0f:48:da:4a:19:22:1e:a3:f6:2b: eb:25:ae:ea:e3:50:66:bb:66:78:5f:82:9a:38:91: c7:ea:f5:2a:2c:74:59:41:68:f5:15:58:93:8f:3e: 16:34:fe:ca:aa:45:a0:f9:71:eb:cc:64:98:c3:29: 79:d8:c6:b4:93:91:51:ec:af:d2:bd:0f:5e:53:75: 0c:01:3c:31:99:7c:9a:6e:b0:59:df:95:b0:f4:57: a3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:18:C3:30:FD:38:0A:BB:C9:C3:41:5B:33:89:15:52:A4:F7:0D:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/eb0a553b-2626-3bc3-89a6-f8b805d35369.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 157.238.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:72:66:3f:53:2f:cd:75:0d:c4:0b:cc:f3:42:c9:59:b4:78: e8:dc:95:96:ec:5a:62:60:3b:95:00:4e:a8:d9:1f:d4:49:3b: db:d7:a3:a6:67:94:82:e9:3d:34:a3:50:63:8d:50:17:f7:ad: b5:aa:79:a7:d7:11:54:62:46:d6:af:6a:47:b8:ac:80:eb:cf: df:06:57:66:82:68:78:b3:df:c7:f0:95:20:de:23:3a:5c:2a: a5:56:b2:c7:b3:67:a6:70:7d:91:aa:64:4c:24:78:9a:88:8d: 4c:6a:92:f7:20:dd:94:31:15:d1:03:e0:20:8c:88:fb:8d:43: 32:05:3c:03:52:d1:96:a1:3a:84:4d:2a:c2:ad:60:a7:a3:62: 13:90:a8:8a:6e:17:86:5f:9b:1b:29:3d:38:90:a6:48:81:fe: 07:a8:c2:a4:b7:c1:0d:58:3b:c0:aa:83:23:a1:3f:9d:de:4c: 0e:08:59:1e:dc:76:5d:70:bd:a7:7e:88:0d:d5:7c:98:9b:1b: 38:c3:bd:f1:e7:74:69:07:40:57:ce:cd:57:5a:b1:c4:33:35: 6a:d2:4e:ae:ce:98:9c:e3:98:20:49:af:54:2c:ff:a7:3d:a1: 9f:17:27:28:6e:4f:ab:65:1e:6c:17:de:b2:5d:ff:6f:e5:7c: 3e:23:b8:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Jnf0H5UVZkmwwIGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDMwMjE4NDIxMVoXDTI2MDUzMTE3NDIxMVowLzEtMCsGA1UEAxMk Yzc1NzQ4MTgtNTBmYy00Y2MwLTk1ODAtMTFkZTRmNjYyZjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYc3UZe/DvcRIoXXVzGDdP8JPJ0Yya+tTb6X 1pGHT2TnoIMUCfupHucl/zCYotp/hXC/zOikXrh4RgSDKuomWCgbTsLaXNgY1cT1 VGywEVp5HUtLj1ksbiIfQq95beI6v955KwZUN9jcnkMyrbj1gpNS9ASmZdtJ1NoB M+GX2UIf+zEIRT7SGZD1Yp147oUMc4hmJEIF3HX0JAahrQNlqkaajzfYJsIA7w9I 2koZIh6j9ivrJa7q41Bmu2Z4X4KaOJHH6vUqLHRZQWj1FViTjz4WNP7KqkWg+XHr zGSYwyl52Ma0k5FR7K/SvQ9eU3UMATwxmXyabrBZ35Ww9FejvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHsYwzD9OAq7ycNBWzOJFVKk9w1zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZWIwYTU1M2ItMjYyNi0z YmMzLTg5YTYtZjhiODA1ZDM1MzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCne7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtyZj9TL811DcQLzPNCyVm0eOjclZbsWmJgO5UATqjZH9RJO9vXo6Zn lILpPTSjUGONUBf3rbWqeafXEVRiRtavake4rIDrz98GV2aCaHiz38fwlSDeIzpc KqVWssezZ6ZwfZGqZEwkeJqIjUxqkvcg3ZQxFdED4CCMiPuNQzIFPANS0ZahOoRN KsKtYKejYhOQqIpuF4ZfmxspPTiQpkiB/geowqS3wQ1YO8CqgyOhP53eTA4IWR7c dl1wvad+iA3VfJibGzjDvfHndGkHQFfOzVdascQzNWrSTq7OmJzjmCBJr1Qs/6c9 oZ8XJyhuT6tlHmwX3rJd/2/lfD4juJc= -----END CERTIFICATE-----Generated at Mon Mar 9 11:21:42 2026 by rpki-client