$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/649b71e4-17ec-3f1a-bac5-73a5388888f5.roa File: 649b71e4-17ec-3f1a-bac5-73a5388888f5.roa (raw, json) Hash identifier: 6Qx1QD9oYRvN1ynPUpfh0BT6NEJudFHw/bTEcNTEM2Y= Subject key identifier: 03:37:82:03:DF:76:30:69:31:72:B5:8A:FD:E9:0C:1D:0C:CF:59:61 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584F4974A36A485F655E6078F800 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/649b71e4-17ec-3f1a-bac5-73a5388888f5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14114 IP address blocks: 157.133.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:a3:6a:48:5f:65:5e:60:78:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=103d7426-eaa6-4ae8-81a4-473f289f4c00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a7:17:a5:58:f0:02:76:5b:28:2d:07:32:85: bc:38:a7:f4:33:ac:cb:c1:c1:ad:c7:b3:84:10:ff: 2a:02:93:d1:27:1b:19:34:7e:52:64:c9:72:06:9a: bf:0f:03:48:ee:2b:82:e4:12:5b:ca:bd:a0:c4:26: 40:88:eb:62:52:cc:b2:25:73:79:00:28:8b:02:df: 91:27:d6:92:13:e1:2d:1e:99:4c:70:62:d5:bf:56: a1:92:4b:20:90:c6:e9:96:0a:2f:c5:dd:67:bd:d5: 7f:c7:b3:3e:99:e4:de:2d:65:f0:ec:5a:c6:31:8e: 20:ba:3a:77:5b:33:ed:b7:cb:f9:d9:8a:2f:34:04: e4:7d:22:ee:99:6e:7e:35:46:3d:22:ce:c8:45:d0: af:79:bf:cc:e0:67:03:74:20:b2:6a:ab:4d:9b:fb: ad:15:5a:57:74:18:66:b8:0a:6c:fb:1e:3c:b4:76: e9:cb:11:30:ef:01:be:59:8c:f2:cf:3f:5d:39:85: f4:8c:e5:02:e7:90:29:79:26:2b:07:f8:41:a6:ec: 29:5a:e0:1f:35:c6:9a:67:0d:da:7d:88:f2:93:3f: 48:16:7d:75:85:81:d2:8d:a9:8d:fc:3d:91:2c:cf: e7:bd:cd:55:20:44:61:e1:0c:97:be:4c:5c:8e:5f: 95:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:37:82:03:DF:76:30:69:31:72:B5:8A:FD:E9:0C:1D:0C:CF:59:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/649b71e4-17ec-3f1a-bac5-73a5388888f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:ac:31:d8:b7:f3:aa:27:82:27:21:55:d5:c9:6c:83:54:b6: f7:28:12:1b:a8:47:ca:53:72:29:73:2b:8f:61:8e:03:e9:07: 84:39:d9:57:e7:4d:8c:26:10:8c:67:98:ea:0c:eb:0d:b7:57: 81:16:a9:33:e6:7a:23:6c:e5:15:42:b4:43:e3:40:84:1c:a7: 67:b8:2e:93:9f:a1:f2:74:67:a3:cf:93:7d:c9:94:1c:de:81: fe:47:fb:65:e4:a2:70:11:9e:b6:97:14:a3:c1:f0:85:63:92: fc:97:5c:67:5c:4f:5d:ca:c1:26:22:3c:bb:a4:4d:e8:c9:0e: 13:57:cd:76:0c:bb:66:d9:15:4c:71:44:92:32:d4:62:77:bb: 6e:d5:07:0a:87:89:1b:27:a6:72:4b:d1:b9:9b:07:38:2d:93: a7:ab:2d:b6:86:0a:35:0f:09:49:f2:17:9c:11:b1:88:52:40: 54:44:e2:20:00:6b:a4:93:86:d9:0d:8b:8f:17:8f:40:35:a4: 9e:5f:8b:27:b0:dd:af:1e:4d:c4:46:f5:38:26:6a:f8:4d:29: e9:53:35:63:a3:1e:00:39:fc:ad:c6:80:2d:63:c5:09:cf:ab: ea:72:eb:0f:47:38:e3:2d:b5:9a:98:03:3a:7e:d9:57:39:8c: f8:10:0e:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdKNqSF9lXmB4+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTAzZDc0MjYtZWFhNi00YWU4LTgxYTQtNDczZjI4OWY0YzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56cXpVjwAnZbKC0HMoW8OKf0M6zLwcGtx7OE EP8qApPRJxsZNH5SZMlyBpq/DwNI7iuC5BJbyr2gxCZAiOtiUsyyJXN5ACiLAt+R J9aSE+EtHplMcGLVv1ahkksgkMbplgovxd1nvdV/x7M+meTeLWXw7FrGMY4gujp3 WzPtt8v52YovNATkfSLumW5+NUY9Is7IRdCveb/M4GcDdCCyaqtNm/utFVpXdBhm uAps+x48tHbpyxEw7wG+WYzyzz9dOYX0jOUC55ApeSYrB/hBpuwpWuAfNcaaZw3a fYjykz9IFn11hYHSjamN/D2RLM/nvc1VIERh4QyXvkxcjl+VIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAM3ggPfdjBpMXK1iv3pDB0Mz1lhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvNjQ5YjcxZTQtMTdlYy0z ZjFhLWJhYzUtNzNhNTM4ODg4OGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnYW4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGisMdi386ongichVdXJbINUtvcoEhuoR8pTcilzK49hjgPpB4Q52Vfn TYwmEIxnmOoM6w23V4EWqTPmeiNs5RVCtEPjQIQcp2e4LpOfofJ0Z6PPk33JlBze gf5H+2XkonARnraXFKPB8IVjkvyXXGdcT13KwSYiPLukTejJDhNXzXYMu2bZFUxx RJIy1GJ3u27VBwqHiRsnpnJL0bmbBzgtk6erLbaGCjUPCUnyF5wRsYhSQFRE4iAA a6SThtkNi48Xj0A1pJ5fiyew3a8eTcRG9TgmavhNKelTNWOjHgA5/K3GgC1jxQnP q+py6w9HOOMttZqYAzp+2Vc5jPgQDio= -----END CERTIFICATE-----Generated at Sat Sep 26 22:37:08 2026 by rpki-client