$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/8d720bce-daae-3ce6-8ab0-ae393ff27b21.roa File: 8d720bce-daae-3ce6-8ab0-ae393ff27b21.roa (raw, json) Hash identifier: TKfb9g7rA2PSY3f+UWqb9LWs19y1Q6Ed4/db1Kz01eg= Subject key identifier: E5:C6:4D:0F:27:3C:51:8D:0B:68:11:E2:B1:13:28:77:10:D0:F0:5A Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584CFDD76AC47B75BCC5F424C600 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/8d720bce-daae-3ce6-8ab0-ae393ff27b21.roa Signing time: Thu 26 Feb 2026 13:28:11 +0000 ROA not before: Thu 26 Feb 2026 13:28:11 +0000 ROA not after: Wed 27 May 2026 12:28:11 +0000 asID: 35039 IP address blocks: 157.133.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:d7:6a:c4:7b:75:bc:c5:f4:24:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Feb 26 13:28:11 2026 GMT Not After : May 27 12:28:11 2026 GMT Subject: CN=1bbce31c-ee99-448e-8e0b-ffe62adaec7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:09:c9:bc:e1:e8:6f:ac:71:31:8d:42:5f:0f: ed:c6:85:39:bc:6c:c2:00:12:67:cc:2d:ea:cf:b5: b7:2e:ec:00:01:f2:4f:2e:c6:ab:c3:9f:59:f8:a2: 8f:4b:11:34:e6:a7:31:20:3d:b7:64:09:30:09:7b: 58:b2:df:f6:6f:b2:6d:ce:ad:ec:3d:7e:5f:1f:09: c8:b8:1b:f5:ac:32:20:7e:3a:fa:b4:a7:76:e1:c1: a7:c1:51:b6:fd:e7:c2:ab:c2:4a:46:c5:1c:e9:ef: 1c:3d:6c:b2:52:8f:0d:b7:97:64:a5:b8:d9:4d:5e: a0:22:0c:98:6f:12:e8:73:b8:a8:2a:a7:78:0f:77: d3:04:27:a5:c5:d0:1b:f4:79:d7:74:94:0d:74:79: 29:37:a0:85:92:b2:08:ae:df:6b:ff:6b:ea:7c:b2: eb:fb:28:06:c3:12:0e:99:1e:de:0a:5c:20:fa:35: 2f:31:51:11:cd:6a:27:7b:bd:ad:e7:c9:f1:79:df: 63:78:6c:d0:b1:fd:05:d0:70:34:f0:bf:f3:37:ba: 61:f6:44:ec:7e:6f:e2:9e:cd:7e:a8:24:e6:ab:6e: c8:65:5f:92:85:53:c7:a7:07:88:9f:8d:f1:fb:d4: 4c:4a:b4:d9:af:e6:ba:f6:bf:d0:21:fd:ef:42:a6: 94:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C6:4D:0F:27:3C:51:8D:0B:68:11:E2:B1:13:28:77:10:D0:F0:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/8d720bce-daae-3ce6-8ab0-ae393ff27b21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:8e:27:a5:9e:b1:3a:35:e9:8e:f9:a1:6b:03:27:8c:24:44: fa:19:a5:57:cf:42:10:b7:36:7e:04:07:f4:b1:d6:47:02:05: 41:5b:e5:db:dd:89:d9:6f:af:75:44:ea:15:87:e8:4a:b8:94: 1c:ff:38:80:6e:5d:fb:02:d6:f8:b9:d4:7d:bc:61:18:6c:ce: 10:3b:d6:f0:fb:36:c8:7c:51:ef:e2:d8:d7:30:af:27:73:ac: 92:cc:68:3d:4f:4f:f2:90:da:85:1c:3b:06:e0:7f:e8:25:50: 0b:2d:ef:15:60:f0:81:2a:4f:29:46:e8:a8:1a:1d:75:07:ca: 21:51:b7:1e:31:de:9e:ef:32:e4:bc:b6:88:dd:d0:fd:c6:3a: f7:26:b8:a4:f5:74:4b:0c:6a:1d:ce:59:41:ff:03:be:35:f5: 18:2d:e9:85:07:ac:6f:97:6a:eb:94:88:8d:43:0e:ce:36:f1: 4e:66:09:73:f2:eb:9b:2c:8e:02:62:4d:ee:f4:1f:9a:f1:92: 8b:65:a8:63:3a:74:9e:9f:c1:e6:a6:70:72:6b:16:e0:7c:23: 7f:19:42:f5:16:ca:91:28:3f:bc:9f:78:7d:cd:ca:65:b5:0f: 45:c7:ac:a4:55:38:74:7d:6d:6a:69:15:b2:4e:f9:bc:3a:70: 2c:36:dc:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz912rEe3W8xfQkxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI2MDIyNjEzMjgxMVoXDTI2MDUyNzEyMjgxMVowLzEtMCsGA1UEAxMk MWJiY2UzMWMtZWU5OS00NDhlLThlMGItZmZlNjJhZGFlYzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQnJvOHob6xxMY1CXw/txoU5vGzCABJnzC3q z7W3LuwAAfJPLsarw59Z+KKPSxE05qcxID23ZAkwCXtYst/2b7Jtzq3sPX5fHwnI uBv1rDIgfjr6tKd24cGnwVG2/efCq8JKRsUc6e8cPWyyUo8Nt5dkpbjZTV6gIgyY bxLoc7ioKqd4D3fTBCelxdAb9HnXdJQNdHkpN6CFkrIIrt9r/2vqfLLr+ygGwxIO mR7eClwg+jUvMVERzWone72t58nxed9jeGzQsf0F0HA08L/zN7ph9kTsfm/ins1+ qCTmq27IZV+ShVPHpweIn43x+9RMSrTZr+a69r/QIf3vQqaUtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXGTQ8nPFGNC2gR4rETKHcQ0PBaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvOGQ3MjBiY2UtZGFhZS0z Y2U2LThhYjAtYWUzOTNmZjI3YjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnYXOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOOJ6WesTo16Y75oWsDJ4wkRPoZpVfPQhC3Nn4EB/Sx1kcCBUFb5dvd idlvr3VE6hWH6Eq4lBz/OIBuXfsC1vi51H28YRhszhA71vD7Nsh8Ue/i2Ncwrydz rJLMaD1PT/KQ2oUcOwbgf+glUAst7xVg8IEqTylG6KgaHXUHyiFRtx4x3p7vMuS8 tojd0P3GOvcmuKT1dEsMah3OWUH/A7419Rgt6YUHrG+XauuUiI1DDs428U5mCXPy 65ssjgJiTe70H5rxkotlqGM6dJ6fweamcHJrFuB8I38ZQvUWypEoP7yfeH3NymW1 D0XHrKRVOHR9bWppFbJO+bw6cCw23IE= -----END CERTIFICATE-----Generated at Mon Mar 2 07:36:30 2026 by rpki-client