$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/3ef595d1-cf75-3f92-99ab-1d8416f272ac.roa File: 3ef595d1-cf75-3f92-99ab-1d8416f272ac.roa (raw, json) Hash identifier: TxUReFzZmg8OSgJMrLs8n0jBb2GBdE6dBILAlweJOls= Subject key identifier: AF:EB:64:27:8B:15:B2:54:67:C2:A3:28:30:28:20:A9:99:9E:34:BB Certificate issuer: /CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113 Certificate serial: 010D0C9F4328584DEB6D9FD4F38222B20357B300 Authority key identifier: A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/3ef595d1-cf75-3f92-99ab-1d8416f272ac.roa Signing time: Fri 22 May 2026 15:57:25 +0000 ROA not before: Fri 22 May 2026 15:57:25 +0000 ROA not after: Wed 19 Aug 2026 20:13:46 +0000 asID: 22504 IP address blocks: 162.118.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 02 Jun 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:eb:6d:9f:d4:f3:82:22:b2:03:57:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113 Validity Not Before: May 22 15:57:25 2026 GMT Not After : Aug 19 20:13:46 2026 GMT Subject: CN=04921f2e-04a5-4921-a209-bde8808e6f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:39:ce:51:28:54:9d:db:40:ce:ad:41:14:2e: 84:72:8a:7f:c3:ca:30:36:f3:bf:0e:16:7e:20:9a: ba:c4:bd:89:b1:7b:c2:9f:51:3f:d7:52:f7:e3:31: 57:eb:3e:da:68:7a:b2:8b:9e:29:70:22:55:35:a4: f9:7c:cd:bb:0a:91:0d:59:8b:b2:55:ef:df:fd:ea: 80:26:2e:e8:35:58:1f:9f:af:2c:b3:9f:33:96:b1: 68:40:6d:f8:d9:51:ee:fb:92:ae:68:3a:7f:5a:6c: 51:ce:bf:1e:97:2c:ae:65:21:63:63:6a:bf:9d:bb: db:38:ed:f9:cf:8c:13:9b:ac:57:d0:8e:9f:87:b0: 87:c7:b3:22:36:fe:10:d8:c4:1a:88:4c:ea:6c:62: 58:2d:af:41:79:9b:01:67:cb:47:83:36:0e:8a:d6: f5:5c:f0:ed:a4:4b:dd:41:d4:d2:d1:dd:a6:42:2d: 24:bf:d7:e4:f7:7c:3d:dc:d7:dc:5d:66:50:5e:a8: c6:ef:71:46:49:2f:63:ae:09:f6:d9:b7:46:08:66: cc:a2:2f:d2:79:8c:8b:4c:27:59:59:af:23:ea:f7: ac:c3:35:ca:32:75:08:7d:32:8a:4b:47:10:05:e3: 68:42:64:55:e8:19:41:7d:14:a2:11:92:80:a7:d1: d1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:EB:64:27:8B:15:B2:54:67:C2:A3:28:30:28:20:A9:99:9E:34:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/3ef595d1-cf75-3f92-99ab-1d8416f272ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl X509v3 Authority Key Identifier: keyid:A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer sbgp-ipAddrBlock: critical IPv4: 162.118.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:6a:80:87:e6:07:a6:46:f5:4f:9a:b6:66:b8:1d:ae:96:03: 6d:8d:50:f6:4a:b1:00:f7:05:f2:b5:a9:90:58:3b:70:dc:3f: 87:62:50:a0:5d:04:20:7e:8a:7c:bc:c4:fe:ab:52:da:c1:c8: b7:24:19:ee:a0:48:a8:1a:65:86:33:fb:15:9f:fb:4f:94:a1: 1a:6e:d7:3d:59:0d:07:0d:5b:6d:38:ae:79:43:6f:9e:6d:e0: a5:35:dd:86:cf:5c:1d:4c:c2:2c:9e:19:e0:2b:ba:9a:11:4a: 08:41:25:d5:97:15:a1:82:a3:68:33:33:e8:da:25:f4:2d:a0: af:87:0a:12:61:a1:14:63:8f:0f:80:d8:6f:ec:ec:31:02:81: ee:93:e8:da:95:be:ad:2b:0f:eb:03:f0:27:c8:91:c9:10:33: 5c:0f:d1:b4:fd:b7:58:ad:a5:41:12:a6:75:1f:d0:5e:8e:16: ff:8f:a6:7a:03:1a:6b:78:94:92:f9:90:a8:af:0d:17:f8:b8: 17:47:87:ab:3f:4d:64:93:75:74:3a:35:0f:e0:ba:26:58:c5: 0a:92:c7:fb:3a:8a:a3:03:ea:c6:35:0a:1b:92:71:6f:16:3a: f4:7a:22:9c:a4:8c:32:40:ff:d5:55:f5:bb:97:ee:ac:72:95: f2:1d:f4:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3rbZ/U84IisgNXswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWEzZmUzYTktZDlmNy00YjhlLWEwMzctODc3MzYzYzUz MTEzMB4XDTI2MDUyMjE1NTcyNVoXDTI2MDgxOTIwMTM0NlowLzEtMCsGA1UEAxMk MDQ5MjFmMmUtMDRhNS00OTIxLWEyMDktYmRlODgwOGU2ZjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsznOUShUndtAzq1BFC6Ecop/w8owNvO/DhZ+ IJq6xL2JsXvCn1E/11L34zFX6z7aaHqyi54pcCJVNaT5fM27CpENWYuyVe/f/eqA Ji7oNVgfn68ss58zlrFoQG342VHu+5KuaDp/WmxRzr8elyyuZSFjY2q/nbvbOO35 z4wTm6xX0I6fh7CHx7MiNv4Q2MQaiEzqbGJYLa9BeZsBZ8tHgzYOitb1XPDtpEvd QdTS0d2mQi0kv9fk93w93NfcXWZQXqjG73FGSS9jrgn22bdGCGbMoi/SeYyLTCdZ Wa8j6veswzXKMnUIfTKKS0cQBeNoQmRV6BlBfRSiEZKAp9HRCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/rZCeLFbJUZ8KjKDAoIKmZnjS7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YTNm ZTNhOS1kOWY3LTRiOGUtYTAzNy04NzczNjNjNTMxMTMvM2VmNTk1ZDEtY2Y3NS0z ZjkyLTk5YWItMWQ4NDE2ZjI3MmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWEzZmUzYTktZDlmNy00YjhlLWEw MzctODc3MzYzYzUzMTEzLzVhM2ZlM2E5LWQ5ZjctNGI4ZS1hMDM3LTg3NzM2M2M1 MzExMy5jcmwwHwYDVR0jBBgwFoAUqMFLPdFSbDWZZINgLfzwTAq87N4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YTNmZTNhOS1kOWY3LTRiOGUtYTAzNy04Nzcz NjNjNTMxMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAonYlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9qgIfmB6ZG9U+atma4Ha6WA22NUPZKsQD3BfK1qZBYO3DcP4diUKBd BCB+iny8xP6rUtrByLckGe6gSKgaZYYz+xWf+0+UoRpu1z1ZDQcNW204rnlDb55t 4KU13YbPXB1MwiyeGeArupoRSghBJdWXFaGCo2gzM+jaJfQtoK+HChJhoRRjjw+A 2G/s7DECge6T6NqVvq0rD+sD8CfIkckQM1wP0bT9t1itpUESpnUf0F6OFv+PpnoD Gmt4lJL5kKivDRf4uBdHh6s/TWSTdXQ6NQ/guiZYxQqSx/s6iqMD6sY1ChuScW8W OvR6IpykjDJA/9VV9buX7qxylfId9PI= -----END CERTIFICATE-----Generated at Mon Jun 1 22:42:55 2026 by rpki-client