$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/3afbefaa-25ae-3012-8097-58de448f2b17.roa File: 3afbefaa-25ae-3012-8097-58de448f2b17.roa (raw, json) Hash identifier: q1GQ5Ku5LRZeTV2d2kf6kn0s9TphmwHyxpxCAI3ir7U= Subject key identifier: BF:0B:AD:DB:8B:7F:81:29:9A:54:AA:AC:C6:06:37:FB:03:46:26:26 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584D4ED77A1B24B9CA87A1D1DA00 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/3afbefaa-25ae-3012-8097-58de448f2b17.roa Signing time: Fri 27 Mar 2026 13:48:47 +0000 ROA not before: Fri 27 Mar 2026 13:48:47 +0000 ROA not after: Thu 25 Jun 2026 13:48:47 +0000 asID: 14114 IP address blocks: 157.133.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:d7:7a:1b:24:b9:ca:87:a1:d1:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Mar 27 13:48:47 2026 GMT Not After : Jun 25 13:48:47 2026 GMT Subject: CN=6599ae96-16ae-4dc6-8137-018e7d3fa9f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1f:50:e7:d1:4d:b1:a7:02:8d:90:3d:cf:c4: 70:10:82:9e:b6:64:51:15:dc:d4:d5:f5:21:ca:9b: 4c:6a:ba:33:88:84:ed:ca:51:c4:3e:b5:ac:95:7a: 0c:0e:94:b3:70:e7:f5:0a:d2:eb:e4:da:a2:b4:83: 9c:60:5e:e6:43:8a:17:5e:ce:3c:97:46:8b:0d:1b: 88:d5:b2:30:68:25:03:04:ee:40:d7:b7:aa:ca:ee: 21:1e:1d:53:55:8f:b1:ed:5f:67:f7:64:ea:e7:3d: 61:ee:9b:52:04:89:ba:45:b4:6b:e2:04:07:a7:72: 24:7a:b7:77:4f:8c:99:e5:19:2d:fc:d9:69:85:55: 9d:a4:d5:2d:75:5a:32:a3:30:10:8f:39:a1:44:8d: 78:81:c8:97:43:b5:62:56:60:23:11:69:2f:a6:5b: 6e:90:d7:56:1d:92:c4:01:ae:b8:45:50:a2:c2:a2: a2:cb:5a:a5:6c:77:48:63:4b:d4:52:8a:88:e6:6b: bc:35:5d:e7:e3:42:bb:0f:e3:7b:df:5b:a8:6e:c2: 2e:4b:30:c8:6c:2f:99:43:cb:aa:51:ce:8e:37:99: 51:e5:8c:53:08:79:d1:1a:ed:07:aa:d7:9a:20:10: 9f:49:67:4c:82:9a:b9:ce:7c:a6:2c:d5:95:44:95: 7e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:0B:AD:DB:8B:7F:81:29:9A:54:AA:AC:C6:06:37:FB:03:46:26:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/3afbefaa-25ae-3012-8097-58de448f2b17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:8a:99:44:10:45:0e:76:58:e5:a0:ab:c0:a0:71:2b:9a:5b: bb:8e:c6:33:cb:94:1e:ef:4f:b3:34:93:5a:9a:49:7c:7e:47: 45:d0:a5:40:4c:e3:96:46:9d:49:37:fb:a2:b8:78:b2:1f:b8: c4:f6:bb:37:84:60:50:11:1b:c2:45:56:aa:6a:4e:18:7a:0a: e3:5b:a4:ce:86:e7:31:4c:e5:57:5b:23:c1:34:4b:a9:d7:d6: 25:79:c1:0f:7f:f2:ec:b8:1b:09:8c:42:d2:91:11:b4:d8:0c: d3:38:42:1e:7c:8d:f7:50:e2:32:40:29:44:57:6a:a0:26:c6: ef:d5:80:54:87:e6:aa:4d:cc:61:24:ca:c7:e3:74:d9:29:b3: 6a:7a:01:28:29:46:6a:17:22:36:4c:5b:12:73:8b:8b:eb:31: 83:f0:60:53:64:3c:10:b2:69:ae:7e:93:c0:58:4b:68:f3:3e: e5:1a:03:53:e4:8c:6b:b1:ce:8d:6f:11:53:cc:b4:0d:67:a6: 23:a5:91:d0:64:6a:fc:23:99:5c:09:bc:79:a8:fc:90:0a:ab: 4b:30:61:13:5d:fb:a0:e6:91:a2:f2:b0:b4:2c:37:40:68:e9: 78:6f:1c:b8:4c:30:ba:66:a6:83:ca:4a:78:99:d3:8d:ea:8a: 53:6a:ac:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1O13obJLnKh6HR2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI2MDMyNzEzNDg0N1oXDTI2MDYyNTEzNDg0N1owLzEtMCsGA1UEAxMk NjU5OWFlOTYtMTZhZS00ZGM2LTgxMzctMDE4ZTdkM2ZhOWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh9Q59FNsacCjZA9z8RwEIKetmRRFdzU1fUh yptMaroziITtylHEPrWslXoMDpSzcOf1CtLr5NqitIOcYF7mQ4oXXs48l0aLDRuI 1bIwaCUDBO5A17eqyu4hHh1TVY+x7V9n92Tq5z1h7ptSBIm6RbRr4gQHp3Ikerd3 T4yZ5Rkt/NlphVWdpNUtdVoyozAQjzmhRI14gciXQ7ViVmAjEWkvpltukNdWHZLE Aa64RVCiwqKiy1qlbHdIY0vUUoqI5mu8NV3n40K7D+N731uobsIuSzDIbC+ZQ8uq Uc6ON5lR5YxTCHnRGu0HqteaIBCfSWdMgpq5znymLNWVRJV+pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8LrduLf4EpmlSqrMYGN/sDRiYmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvM2FmYmVmYWEtMjVhZS0z MDEyLTgwOTctNThkZTQ0OGYyYjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnYUBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKKmUQQRQ52WOWgq8CgcSuaW7uOxjPLlB7vT7M0k1qaSXx+R0XQpUBM 45ZGnUk3+6K4eLIfuMT2uzeEYFARG8JFVqpqThh6CuNbpM6G5zFM5VdbI8E0S6nX 1iV5wQ9/8uy4GwmMQtKREbTYDNM4Qh58jfdQ4jJAKURXaqAmxu/VgFSH5qpNzGEk ysfjdNkps2p6ASgpRmoXIjZMWxJzi4vrMYPwYFNkPBCyaa5+k8BYS2jzPuUaA1Pk jGuxzo1vEVPMtA1npiOlkdBkavwjmVwJvHmo/JAKq0swYRNd+6DmkaLysLQsN0Bo 6XhvHLhMMLpmpoPKSniZ043qilNqrCI= -----END CERTIFICATE-----Generated at Fri Apr 17 10:17:17 2026 by rpki-client