$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/db38879e-c78c-33bc-8a09-d58a3db0e3db.roa File: db38879e-c78c-33bc-8a09-d58a3db0e3db.roa (raw, json) Hash identifier: nhvZYiTCv/h+0paHOFkxiFVM9Fzlb7xPjy02zhgCKWc= Subject key identifier: 82:4A:57:8B:17:65:7B:DB:57:19:F4:79:7C:1F:DE:55:33:6C:F1:AD Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584D59EAAEB02412442630B1B600 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/db38879e-c78c-33bc-8a09-d58a3db0e3db.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 14114 IP address blocks: 157.133.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:ae:b0:24:12:44:26:30:b1:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=487ef557-4c61-4f2e-9afd-dae7d2f553ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:89:51:70:5c:0b:e6:e2:e6:3e:4c:ae:46:f3: 4d:98:34:50:61:ec:ac:1e:c8:47:52:76:19:8e:e1: e5:39:df:4d:a2:e0:bb:75:00:d4:46:0a:0f:c7:3c: 2e:d1:35:b4:30:b9:96:f9:22:32:f6:18:9c:45:20: 61:80:1d:b7:3a:0c:b7:16:a9:46:3f:4d:2d:88:7a: 84:69:a6:d2:b1:9d:6b:77:8c:90:61:c2:91:0a:ae: 1d:bf:6c:0f:de:04:31:e6:bf:80:cf:dc:1e:ca:59: ed:73:69:67:8f:cc:1e:10:29:96:e9:ab:e1:6a:5b: 14:6b:93:2f:76:35:d2:e4:92:b2:a8:a3:c7:73:3e: 67:62:1f:45:05:dd:f5:31:76:39:b1:e6:65:63:95: a1:a1:2f:0f:5b:7f:3a:86:09:15:a6:20:84:57:4e: 83:90:f4:82:fa:4d:a3:f0:d8:56:78:f0:3b:f6:b8: f3:2d:69:5e:b2:77:aa:83:0c:79:19:20:2d:6f:f0: 9d:46:ce:cc:ec:01:25:72:5b:21:48:54:91:02:81: 2c:c0:b1:46:e7:32:7d:2d:94:5e:aa:93:4b:6f:d8: fe:42:b5:1f:93:e1:33:89:44:5e:6a:61:b0:32:f3: cc:19:83:c7:80:ca:2d:ba:2c:76:8d:d1:af:50:40: 2f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:4A:57:8B:17:65:7B:DB:57:19:F4:79:7C:1F:DE:55:33:6C:F1:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/db38879e-c78c-33bc-8a09-d58a3db0e3db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:07:5d:6e:1a:b9:3e:27:56:be:82:dd:b7:79:2e:12:68:42: a4:c1:b7:be:39:81:33:7e:1a:fc:44:4d:30:2d:e5:6e:bc:0b: 3a:9c:3e:04:19:e5:3d:c4:67:fa:56:11:98:e7:96:18:71:13: 08:64:c4:63:10:6f:e6:62:e1:32:a2:17:a9:25:55:19:97:4b: 42:86:8d:b1:a9:fe:59:6f:9c:b9:bd:23:af:da:3d:f4:c7:8f: 94:10:0b:28:70:ca:96:f6:77:14:a6:c3:c4:54:71:4f:5e:c5: c3:72:76:ba:14:d8:e9:c9:60:ec:b1:ec:60:61:62:49:3e:c2: b6:f4:10:fd:8a:ac:07:76:05:69:b4:24:07:cf:cd:e9:3d:55: 8b:42:0c:53:65:51:d8:f8:05:5e:57:13:b4:27:b2:2f:ca:92: 24:4c:d4:58:1c:33:fc:c7:71:30:b5:e3:20:ba:b9:15:bd:74: ae:fc:1d:40:5e:74:cb:67:06:6b:f5:88:28:4d:b9:a2:f6:8a: 8e:b5:d5:c2:a0:cd:54:e9:34:b9:c8:06:8b:de:ca:11:9e:1c: e0:cb:ed:e8:cb:0a:86:28:11:02:9d:0b:a7:b3:56:e9:4c:7b: 40:ef:a4:66:f5:2f:b2:3f:5e:1e:49:01:4f:7f:ff:f9:4d:52: 0a:f3:71:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6q6wJBJEJjCxtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NDg3ZWY1NTctNGM2MS00ZjJlLTlhZmQtZGFlN2QyZjU1M2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIlRcFwL5uLmPkyuRvNNmDRQYeysHshHUnYZ juHlOd9NouC7dQDURgoPxzwu0TW0MLmW+SIy9hicRSBhgB23Ogy3FqlGP00tiHqE aabSsZ1rd4yQYcKRCq4dv2wP3gQx5r+Az9weylntc2lnj8weECmW6avhalsUa5Mv djXS5JKyqKPHcz5nYh9FBd31MXY5seZlY5WhoS8PW386hgkVpiCEV06DkPSC+k2j 8NhWePA79rjzLWlesneqgwx5GSAtb/CdRs7M7AElclshSFSRAoEswLFG5zJ9LZRe qpNLb9j+QrUfk+EziUReamGwMvPMGYPHgMotuix2jdGvUEAvGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJKV4sXZXvbVxn0eXwf3lUzbPGtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvZGIzODg3OWUtYzc4Yy0z M2JjLThhMDktZDU4YTNkYjBlM2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnYV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAHXW4auT4nVr6C3bd5LhJoQqTBt745gTN+GvxETTAt5W68CzqcPgQZ 5T3EZ/pWEZjnlhhxEwhkxGMQb+Zi4TKiF6klVRmXS0KGjbGp/llvnLm9I6/aPfTH j5QQCyhwypb2dxSmw8RUcU9excNydroU2OnJYOyx7GBhYkk+wrb0EP2KrAd2BWm0 JAfPzek9VYtCDFNlUdj4BV5XE7Qnsi/KkiRM1FgcM/zHcTC14yC6uRW9dK78HUBe dMtnBmv1iChNuaL2io611cKgzVTpNLnIBoveyhGeHODL7ejLCoYoEQKdC6ezVulM e0DvpGb1L7I/Xh5JAU9///lNUgrzcRs= -----END CERTIFICATE-----Generated at Fri Apr 17 13:13:22 2026 by rpki-client