$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/02fd6998-8257-3284-8895-0fa240a0be15.roa File: 02fd6998-8257-3284-8895-0fa240a0be15.roa (raw, json) Hash identifier: ztrMTdcAoa7W/fEJ4OZwq36XY0gM2P/AjmeZrTu7Gjk= Subject key identifier: D9:67:2D:A0:BD:87:C4:44:A5:D7:07:81:77:FF:64:F5:75:A6:45:20 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584D1707CAC117FEAE11D7458200 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/02fd6998-8257-3284-8895-0fa240a0be15.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 14114 IP address blocks: 157.133.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:ca:c1:17:fe:ae:11:d7:45:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=6aed1347-41e8-40b4-858f-7c2c77c09a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b8:5f:f4:d3:33:8a:00:94:89:ce:5f:78:d0: 15:4a:d9:42:e4:72:00:fa:fa:ab:28:3b:ff:08:a7: c6:29:9d:98:30:95:67:24:fa:d5:a4:03:a3:33:16: df:06:54:9b:57:f5:90:90:9f:40:00:2e:7e:95:dd: 75:6f:9d:4a:93:28:20:c5:e5:c5:fb:97:4b:fb:c7: 84:ac:bc:69:2d:62:2b:cb:49:26:8b:23:e0:d1:69: e7:04:11:a6:51:80:d9:da:5a:19:f8:5b:b8:bf:e6: 63:b1:23:7c:a1:c0:6b:fa:f9:26:b9:79:35:9a:fa: 1b:31:26:72:3a:29:3d:48:72:aa:9a:cd:23:e6:2d: 0d:79:8a:9b:f8:50:7b:d6:a6:2b:9a:e2:3c:67:ed: c5:47:2e:4a:2f:78:4d:59:48:dc:2e:c3:1a:cd:59: 5c:5b:9d:74:ea:31:0d:1d:c2:92:43:de:a2:32:33: 20:6d:89:de:42:9f:76:cb:54:e0:77:26:00:bc:2a: 00:40:d3:5c:7c:5f:20:b4:ca:7c:70:b0:89:e9:8e: 6e:b4:71:9e:3c:d9:c3:89:37:c4:b7:b9:a0:45:47: 04:d1:d5:76:dc:a9:d3:c9:cc:74:1a:1a:57:d3:40: 17:a7:a0:ab:c6:84:5b:76:ed:0c:2b:69:25:7d:da: 72:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:67:2D:A0:BD:87:C4:44:A5:D7:07:81:77:FF:64:F5:75:A6:45:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/02fd6998-8257-3284-8895-0fa240a0be15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:65:9e:51:ba:95:57:91:b2:01:54:ee:c1:7d:ae:d9:97:d6: 88:15:9d:d4:ef:ca:39:e1:cd:33:82:15:0b:3c:19:6e:f6:4b: ca:a8:b4:c2:a3:91:23:71:1a:75:23:c5:e1:f9:94:0b:c0:0e: 2c:bb:9b:79:0c:30:e6:f5:5f:aa:65:ca:ed:4c:5e:4d:fe:b8: 11:05:f2:99:40:dc:8b:6a:ba:5b:60:a2:5c:bc:4b:20:8a:7e: 1d:ef:b3:8b:f0:76:35:8e:7b:ca:1c:b6:e5:05:57:bc:d6:5d: b0:31:cf:e2:60:fb:58:7f:32:b0:b3:52:55:17:cb:10:51:f0: 68:4c:a4:9c:a5:53:78:22:07:85:b6:91:1c:2d:61:af:3b:99: d2:14:ae:03:4a:75:86:28:c2:78:ff:38:36:b3:39:ca:93:2c: 47:ab:f0:e4:5b:50:21:4e:c3:a4:f9:8d:48:28:2e:d2:4f:ae: 40:0d:2e:b5:71:d0:27:a6:29:0d:1c:68:20:c3:47:d1:b6:35: 39:db:f3:35:a1:f4:52:03:b9:50:ff:55:f0:bd:ca:d9:24:b2: 0a:11:95:ec:e2:a2:1e:ef:ff:6b:5b:3d:12:6b:9b:8f:40:f5: 28:d4:68:c6:92:26:2c:a6:04:8c:93:22:09:bc:a8:18:04:f7: 18:16:af:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0XB8rBF/6uEddFggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk NmFlZDEzNDctNDFlOC00MGI0LTg1OGYtN2MyYzc3YzA5YTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7hf9NMzigCUic5feNAVStlC5HIA+vqrKDv/ CKfGKZ2YMJVnJPrVpAOjMxbfBlSbV/WQkJ9AAC5+ld11b51KkyggxeXF+5dL+8eE rLxpLWIry0kmiyPg0WnnBBGmUYDZ2loZ+Fu4v+ZjsSN8ocBr+vkmuXk1mvobMSZy Oik9SHKqms0j5i0NeYqb+FB71qYrmuI8Z+3FRy5KL3hNWUjcLsMazVlcW5106jEN HcKSQ96iMjMgbYneQp92y1TgdyYAvCoAQNNcfF8gtMp8cLCJ6Y5utHGePNnDiTfE t7mgRUcE0dV23KnTycx0GhpX00AXp6CrxoRbdu0MK2klfdpyaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlnLaC9h8REpdcHgXf/ZPV1pkUgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvMDJmZDY5OTgtODI1Ny0z Mjg0LTg4OTUtMGZhMjQwYTBiZTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnYWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARlnlG6lVeRsgFU7sF9rtmX1ogVndTvyjnhzTOCFQs8GW72S8qotMKj kSNxGnUjxeH5lAvADiy7m3kMMOb1X6plyu1MXk3+uBEF8plA3Itqultgoly8SyCK fh3vs4vwdjWOe8octuUFV7zWXbAxz+Jg+1h/MrCzUlUXyxBR8GhMpJylU3giB4W2 kRwtYa87mdIUrgNKdYYownj/ODazOcqTLEer8ORbUCFOw6T5jUgoLtJPrkANLrVx 0CemKQ0caCDDR9G2NTnb8zWh9FIDuVD/VfC9ytkksgoRlezioh7v/2tbPRJrm49A 9SjUaMaSJiymBIyTIgm8qBgE9xgWr1g= -----END CERTIFICATE-----Generated at Fri Mar 13 10:55:22 2026 by rpki-client