$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/22129e65-a3f2-3e63-a31d-88075713bfa4.roa File: 22129e65-a3f2-3e63-a31d-88075713bfa4.roa (raw, json) Hash identifier: w6sY8u+/9dNpblZBfP717jqZJnfmvzU6+SIVVY0tuT4= Subject key identifier: 4A:8B:6F:DF:99:F6:02:F8:1C:18:07:36:8A:E9:9A:A1:5E:B2:BE:2F Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584DB4A5A445F2D47591481EA8C0 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/22129e65-a3f2-3e63-a31d-88075713bfa4.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 54113 IP address blocks: 157.52.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:a4:45:f2:d4:75:91:48:1e:a8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=a5f005b4-1769-45da-9f73-b04563a15754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:75:75:5e:59:07:fa:c1:b1:6f:ad:9e:98:98: a2:e3:b5:d9:07:7b:8b:f8:f3:37:52:9f:33:bb:44: 42:13:a0:8c:3a:59:4b:a6:ef:bd:0d:cc:c6:92:01: 13:37:23:92:34:49:18:3c:32:29:d8:28:20:ae:f9: 70:3e:24:09:23:8a:46:65:87:cf:cc:30:65:23:4e: 67:15:bb:76:2e:68:ac:0b:13:ec:41:b4:e4:f4:72: 3b:bc:68:5a:52:e1:ca:a1:fa:b2:70:45:98:08:55: 66:36:a5:5a:22:72:51:13:5a:a2:77:05:78:e5:a3: 0a:f1:cb:18:43:b6:82:44:55:84:c3:86:64:04:61: 28:60:94:9e:45:7d:5b:ed:f8:5c:7f:a2:45:09:2f: a6:0f:d4:18:99:19:5c:b5:2f:e9:96:97:47:3c:f9: a4:cd:9c:20:6b:40:97:7f:12:84:99:90:f0:ea:a9: 9f:25:75:2e:a1:a1:73:d2:fb:4f:b8:e4:fd:1b:18: 6d:f0:f3:e4:d7:ef:9f:f4:54:d8:29:9e:33:83:98: b8:da:4a:a3:c7:27:db:b9:42:e6:35:ed:4e:b1:e3: f4:4a:39:f6:2c:87:aa:63:36:6f:36:33:a2:b9:ee: b3:d6:b7:78:8b:20:a6:88:a9:f0:12:75:04:1f:1e: 4c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:8B:6F:DF:99:F6:02:F8:1C:18:07:36:8A:E9:9A:A1:5E:B2:BE:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/22129e65-a3f2-3e63-a31d-88075713bfa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 157.52.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:c7:5c:b5:4a:b3:b2:f8:23:ac:1d:5f:d9:0c:58:d5:c9:3e: 37:5b:93:30:c9:84:84:8e:d2:00:53:66:41:e1:61:84:cc:7a: fb:6a:98:6c:38:33:4e:a7:9a:ba:d7:37:cc:44:bf:44:c0:9b: 97:2d:2c:eb:8d:7c:df:68:93:e3:d3:2d:49:4b:58:1c:89:4c: d1:be:14:a4:82:56:5a:e3:88:15:6d:c7:32:9c:9c:bb:2b:b9: 02:9f:7d:c6:55:04:3c:8f:f6:3f:dd:f0:0a:12:1d:bd:a7:99: 11:4e:3d:ee:48:d8:65:74:ef:54:3b:4c:9f:73:2c:09:19:de: 9a:a1:cd:54:de:32:eb:0c:8d:16:7f:fb:f7:2f:22:56:eb:cd: 79:77:9b:d0:86:6d:51:a5:08:ac:95:8f:43:04:11:d3:02:e7: 52:eb:7b:1a:30:4e:13:fd:11:d2:4f:a5:3c:24:7f:e1:60:6f: c2:86:33:62:9c:53:29:19:d8:63:ba:ba:08:cc:5e:bd:a2:fb: df:29:4d:11:19:76:b1:3d:0c:2e:0c:07:2a:fa:53:0e:6a:c7: d3:94:91:c9:53:20:61:3c:13:85:b7:c6:74:71:8d:ef:71:c5: f3:22:4b:6f:56:5e:85:09:cd:9d:54:eb:02:91:7b:13:29:59: c0:60:e4:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE20paRF8tR1kUgeqMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk YTVmMDA1YjQtMTc2OS00NWRhLTlmNzMtYjA0NTYzYTE1NzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHV1XlkH+sGxb62emJii47XZB3uL+PM3Up8z u0RCE6CMOllLpu+9DczGkgETNyOSNEkYPDIp2CggrvlwPiQJI4pGZYfPzDBlI05n Fbt2LmisCxPsQbTk9HI7vGhaUuHKofqycEWYCFVmNqVaInJRE1qidwV45aMK8csY Q7aCRFWEw4ZkBGEoYJSeRX1b7fhcf6JFCS+mD9QYmRlctS/plpdHPPmkzZwga0CX fxKEmZDw6qmfJXUuoaFz0vtPuOT9Gxht8PPk1++f9FTYKZ4zg5i42kqjxyfbuULm Ne1OseP0Sjn2LIeqYzZvNjOiue6z1rd4iyCmiKnwEnUEHx5MqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqLb9+Z9gL4HBgHNorpmqFesr4vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvMjIxMjllNjUtYTNmMi0z ZTYzLWEzMWQtODgwNzU3MTNiZmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnTR9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/HXLVKs7L4I6wdX9kMWNXJPjdbkzDJhISO0gBTZkHhYYTMevtqmGw4 M06nmrrXN8xEv0TAm5ctLOuNfN9ok+PTLUlLWByJTNG+FKSCVlrjiBVtxzKcnLsr uQKffcZVBDyP9j/d8AoSHb2nmRFOPe5I2GV071Q7TJ9zLAkZ3pqhzVTeMusMjRZ/ +/cvIlbrzXl3m9CGbVGlCKyVj0MEEdMC51LrexowThP9EdJPpTwkf+Fgb8KGM2Kc UykZ2GO6ugjMXr2i+98pTREZdrE9DC4MByr6Uw5qx9OUkclTIGE8E4W3xnRxje9x xfMiS29WXoUJzZ1U6wKRexMpWcBg5MA= -----END CERTIFICATE-----Generated at Sun May 3 17:54:23 2026 by rpki-client