$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/996680e8-cf66-37bf-a1d6-3f519c7383ea.roa File: 996680e8-cf66-37bf-a1d6-3f519c7383ea.roa (raw, json) Hash identifier: oX8pSFWFyaJffUcN6dLty6jwUpkuTA2+IzwopNMxvW4= Subject key identifier: 8D:12:C7:29:EC:0E:AB:DD:00:5F:78:5B:87:F5:71:F9:FF:D9:21:7F Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584CEA5D06FD04C5F8AC8E1F8440 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/996680e8-cf66-37bf-a1d6-3f519c7383ea.roa Signing time: Thu 19 Feb 2026 14:00:40 +0000 ROA not before: Thu 19 Feb 2026 14:00:40 +0000 ROA not after: Wed 20 May 2026 13:00:40 +0000 asID: 14114 IP address blocks: 157.133.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ea:5d:06:fd:04:c5:f8:ac:8e:1f:84:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Feb 19 14:00:40 2026 GMT Not After : May 20 13:00:40 2026 GMT Subject: CN=26a629e7-4286-45d8-9cda-71861b42024b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:35:28:a7:2e:d9:76:da:fa:08:8a:48:d0:e1: c1:a8:f1:e4:d4:e2:ed:b2:92:b8:13:f9:02:dc:c0: 83:f0:21:a5:f6:23:0e:0a:3b:c0:0e:6e:1b:b5:77: bb:3e:70:8c:c2:92:ad:8e:05:9f:e1:36:2b:a4:b1: b9:3e:62:52:e8:06:aa:dd:0b:f7:be:d5:29:74:96: eb:7e:2a:c9:7a:f4:bf:71:ee:98:d1:f1:55:ab:2f: 78:a7:0e:f7:f1:34:b3:e2:a8:61:82:a0:58:57:4f: fa:bd:16:2b:8d:e1:56:38:ef:10:d7:87:7e:28:40: ee:a6:08:36:9d:c5:0a:95:a0:73:4a:4b:7c:cb:39: d2:da:bb:88:8a:97:0c:ea:74:f1:a8:6a:70:d3:70: bb:27:87:f8:45:6f:dc:99:71:ce:78:27:73:40:93: 06:4c:5f:2b:48:a5:ba:07:9c:85:86:ab:f9:d3:e8: 5b:b5:67:f7:4c:be:0d:84:31:8f:84:50:54:34:4b: 6c:eb:5e:f8:72:89:eb:1a:8e:f2:9d:74:06:38:e1: 3a:6c:50:05:b3:53:71:7b:3f:be:b0:04:ff:c9:3f: c9:58:2c:68:a0:ef:ee:29:47:44:64:03:81:ca:fd: 3a:cd:f9:b4:fc:ac:0a:c1:95:f7:a3:a3:fe:4b:fa: 09:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:12:C7:29:EC:0E:AB:DD:00:5F:78:5B:87:F5:71:F9:FF:D9:21:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/996680e8-cf66-37bf-a1d6-3f519c7383ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:b9:d2:75:7b:0c:62:89:e0:6d:0c:73:d5:40:aa:d0:d4:dd: 91:f9:42:27:14:54:60:f2:86:20:e5:d9:6c:86:26:42:05:ba: 30:ca:8b:64:98:c4:29:87:4c:72:14:40:89:92:47:71:1a:46: 47:4b:d0:ae:c6:07:5c:e5:2b:28:0c:df:67:2d:e4:cc:e0:95: df:e7:64:39:80:aa:ed:0d:fe:af:2e:b0:87:12:85:ac:1c:74: 9b:3e:b6:d6:46:2d:bc:a2:d3:1a:84:b6:83:f2:4e:08:88:de: a8:b5:12:4c:5e:3d:34:62:0d:be:cd:cf:47:0b:39:7d:61:86: c1:64:40:30:de:21:19:54:61:e7:f2:ee:0c:bc:13:0d:e9:26: e6:e3:c1:85:87:3d:6c:64:b2:83:91:93:84:91:6c:16:31:47: 9c:72:5f:cf:e1:05:45:8e:4d:32:bb:93:2b:b9:2b:f1:32:73: 73:1c:13:22:e8:69:dd:17:c8:d2:43:86:db:0c:cc:2a:03:81: 01:a7:56:c3:f3:86:45:2a:5d:d1:10:51:3b:14:ec:3e:71:93: f3:93:46:0c:e4:f0:8d:fe:9f:02:38:3c:f0:3f:cc:be:5d:9d: 5c:d4:30:c4:05:c7:2b:56:c3:09:30:af:a2:ec:f8:34:a6:5c: 8c:fd:10:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzqXQb9BMX4rI4fhEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI2MDIxOTE0MDA0MFoXDTI2MDUyMDEzMDA0MFowLzEtMCsGA1UEAxMk MjZhNjI5ZTctNDI4Ni00NWQ4LTljZGEtNzE4NjFiNDIwMjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjUopy7Zdtr6CIpI0OHBqPHk1OLtspK4E/kC 3MCD8CGl9iMOCjvADm4btXe7PnCMwpKtjgWf4TYrpLG5PmJS6Aaq3Qv3vtUpdJbr firJevS/ce6Y0fFVqy94pw738TSz4qhhgqBYV0/6vRYrjeFWOO8Q14d+KEDupgg2 ncUKlaBzSkt8yznS2ruIipcM6nTxqGpw03C7J4f4RW/cmXHOeCdzQJMGTF8rSKW6 B5yFhqv50+hbtWf3TL4NhDGPhFBUNEts6174conrGo7ynXQGOOE6bFAFs1Nxez++ sAT/yT/JWCxooO/uKUdEZAOByv06zfm0/KwKwZX3o6P+S/oJDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0SxynsDqvdAF94W4f1cfn/2SF/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvOTk2NjgwZTgtY2Y2Ni0z N2JmLWExZDYtM2Y1MTljNzM4M2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnYWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGa50nV7DGKJ4G0Mc9VAqtDU3ZH5QicUVGDyhiDl2WyGJkIFujDKi2SY xCmHTHIUQImSR3EaRkdL0K7GB1zlKygM32ct5Mzgld/nZDmAqu0N/q8usIcShawc dJs+ttZGLbyi0xqEtoPyTgiI3qi1EkxePTRiDb7Nz0cLOX1hhsFkQDDeIRlUYefy 7gy8Ew3pJubjwYWHPWxksoORk4SRbBYxR5xyX8/hBUWOTTK7kyu5K/Eyc3McEyLo ad0XyNJDhtsMzCoDgQGnVsPzhkUqXdEQUTsU7D5xk/OTRgzk8I3+nwI4PPA/zL5d nVzUMMQFxytWwwkwr6Ls+DSmXIz9ELE= -----END CERTIFICATE-----Generated at Mon Mar 2 08:53:07 2026 by rpki-client