$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/00958947-a7e6-376e-9369-8238c972b8f7.roa File: 00958947-a7e6-376e-9369-8238c972b8f7.roa (raw, json) Hash identifier: krz2QnwZEk3KgrimS204KbGt+kDcGdJx1YJnO+so0go= Subject key identifier: 52:2E:B1:84:B5:FD:3D:58:EF:79:8F:3B:CE:3D:16:51:CD:5B:FA:2E Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584D563531EF82CB13302D01BF80 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/00958947-a7e6-376e-9369-8238c972b8f7.roa Signing time: Mon 30 Mar 2026 05:08:16 +0000 ROA not before: Mon 30 Mar 2026 05:08:16 +0000 ROA not after: Sun 28 Jun 2026 05:08:16 +0000 asID: 35039 IP address blocks: 157.133.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:56:35:31:ef:82:cb:13:30:2d:01:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Mar 30 05:08:16 2026 GMT Not After : Jun 28 05:08:16 2026 GMT Subject: CN=29a3b109-274a-41c8-bb62-5489df30cadb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:de:85:7e:8b:66:60:e8:9e:61:16:90:a7:73: da:ce:45:d4:d1:4e:a0:05:20:9e:f8:e6:69:13:b4: e6:c0:0c:2b:12:75:d2:75:d4:d0:f0:5f:04:16:44: 36:5f:8a:71:a9:b4:52:90:be:ee:a9:23:8e:25:62: f5:aa:dd:d7:7b:93:aa:d6:5d:62:2b:7d:20:77:0e: e1:fb:f7:39:74:60:06:cd:4a:c2:c4:4b:fd:d1:ae: a9:d7:4a:d1:eb:32:85:0f:64:29:f2:18:bd:35:d6: 8f:56:7a:39:84:da:4d:d0:35:bc:4f:80:77:06:45: 41:c7:5d:ec:6a:44:16:de:25:11:53:51:be:ae:95: 97:fb:84:d4:a5:40:a0:36:dc:cc:9b:e0:56:ac:57: 9a:7f:c3:af:56:02:87:0c:fc:ba:d9:b9:75:52:e7: 0c:2a:da:ed:c0:25:a9:6a:de:48:68:0e:cd:fe:43: 98:33:7f:fd:50:0b:09:f1:82:e1:1c:7d:35:8f:c6: 81:ce:35:5a:20:c0:fb:0c:5c:f6:c5:6b:54:27:97: 78:69:b9:a7:cc:d3:0c:74:f2:51:dd:fa:75:50:59: e4:04:58:83:74:a4:44:7e:38:b9:74:0d:61:b9:46: de:c3:58:dd:fb:c8:e5:fc:8d:28:97:3f:73:3e:2e: 42:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:2E:B1:84:B5:FD:3D:58:EF:79:8F:3B:CE:3D:16:51:CD:5B:FA:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/00958947-a7e6-376e-9369-8238c972b8f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:4d:a3:ba:c9:34:d9:23:26:de:12:a4:8d:f2:4e:43:59:7c: 41:1e:ef:38:77:00:9b:a6:9e:bc:88:ee:51:da:b7:19:69:97: 19:b3:78:d7:48:fe:99:88:50:c2:f2:d8:fa:d0:37:b8:f6:d3: b8:d1:ea:16:4d:a5:9a:66:49:65:7a:c2:82:1f:4f:dc:b9:78: 17:99:ce:64:bd:f7:df:c1:c0:00:39:4a:8c:49:b7:8e:e1:6f: 9e:80:42:69:bd:a2:bc:ca:96:36:0c:93:5d:19:ca:ac:bf:41: 66:cb:57:17:f7:98:42:27:b9:a3:21:08:d2:40:73:36:76:c1: 38:d0:29:59:9f:b3:7c:8b:a0:e8:05:8e:b6:01:b6:f5:00:75: 41:c0:8a:8c:64:3d:b7:d0:82:25:4a:73:a2:f1:ee:52:e6:59: 78:bb:f3:d5:9c:fc:e0:f8:71:39:25:78:ff:ac:30:98:5f:9e: b7:ab:88:a3:f4:9e:b6:68:59:9a:21:e0:e0:f3:01:30:1e:86: 11:cf:3d:cd:b9:e7:b6:f2:71:25:33:14:07:55:2b:6a:4f:fe: 41:51:8c:d2:6f:24:e9:ee:ef:67:57:79:90:f2:ac:78:76:e4: 52:a0:ef:c7:2a:15:15:1c:a4:a0:51:bd:50:86:81:8f:7f:b8: 3d:cf:13:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1WNTHvgssTMC0Bv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI2MDMzMDA1MDgxNloXDTI2MDYyODA1MDgxNlowLzEtMCsGA1UEAxMk MjlhM2IxMDktMjc0YS00MWM4LWJiNjItNTQ4OWRmMzBjYWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkN6FfotmYOieYRaQp3PazkXU0U6gBSCe+OZp E7TmwAwrEnXSddTQ8F8EFkQ2X4pxqbRSkL7uqSOOJWL1qt3Xe5Oq1l1iK30gdw7h +/c5dGAGzUrCxEv90a6p10rR6zKFD2Qp8hi9NdaPVno5hNpN0DW8T4B3BkVBx13s akQW3iURU1G+rpWX+4TUpUCgNtzMm+BWrFeaf8OvVgKHDPy62bl1UucMKtrtwCWp at5IaA7N/kOYM3/9UAsJ8YLhHH01j8aBzjVaIMD7DFz2xWtUJ5d4abmnzNMMdPJR 3fp1UFnkBFiDdKREfji5dA1huUbew1jd+8jl/I0olz9zPi5ClwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIusYS1/T1Y73mPO849FlHNW/ouMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvMDA5NTg5NDctYTdlNi0z NzZlLTkzNjktODIzOGM5NzJiOGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnYWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRNo7rJNNkjJt4SpI3yTkNZfEEe7zh3AJumnryI7lHatxlplxmzeNdI /pmIUMLy2PrQN7j207jR6hZNpZpmSWV6woIfT9y5eBeZzmS999/BwAA5SoxJt47h b56AQmm9orzKljYMk10Zyqy/QWbLVxf3mEInuaMhCNJAczZ2wTjQKVmfs3yLoOgF jrYBtvUAdUHAioxkPbfQgiVKc6Lx7lLmWXi789Wc/OD4cTkleP+sMJhfnreriKP0 nrZoWZoh4ODzATAehhHPPc2557bycSUzFAdVK2pP/kFRjNJvJOnu72dXeZDyrHh2 5FKg78cqFRUcpKBRvVCGgY9/uD3PEyg= -----END CERTIFICATE-----Generated at Mon Apr 6 15:20:22 2026 by rpki-client