$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/4e1affea-de48-3b3a-8cd1-c55f336d0e1d.roa File: 4e1affea-de48-3b3a-8cd1-c55f336d0e1d.roa (raw, json) Hash identifier: 4zYDdJQQPG52/eIKM82kyHDEXr2x5+gC0wSiJDzGK24= Subject key identifier: 43:83:EB:F3:11:1A:C2:3E:E7:B3:61:42:7E:48:A5:80:6B:0E:14:99 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584D562F2E315638E5C90008B180 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/4e1affea-de48-3b3a-8cd1-c55f336d0e1d.roa Signing time: Mon 30 Mar 2026 04:56:09 +0000 ROA not before: Mon 30 Mar 2026 04:56:09 +0000 ROA not after: Sun 28 Jun 2026 04:56:09 +0000 asID: 35039 IP address blocks: 157.133.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:56:2f:2e:31:56:38:e5:c9:00:08:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Mar 30 04:56:09 2026 GMT Not After : Jun 28 04:56:09 2026 GMT Subject: CN=f6201650-cd63-47ab-9224-4c9a635e673e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6a:e4:88:d3:42:8b:89:18:2b:4d:f8:d1:93: e8:9b:8b:9d:e1:1e:06:26:5e:80:fb:8b:f5:50:59: 17:52:c8:51:37:28:94:7f:b5:9f:3d:ff:01:79:65: c5:b1:66:96:e4:28:de:34:80:1b:1b:a4:07:7a:8c: 90:4a:00:64:b0:46:36:89:60:05:91:fd:d2:cc:3c: ec:06:e6:a3:7a:cc:13:f3:dc:52:df:d5:25:06:11: 31:f7:14:80:a5:01:46:a3:8a:3a:ec:82:30:5d:a8: bc:92:7a:76:b9:b6:a7:9d:1c:0f:ca:47:9f:04:2a: ed:af:9a:b6:ff:90:30:89:07:03:9e:7d:8c:fa:9e: d5:ce:33:57:d4:1b:4f:9f:00:68:b7:5b:6d:bb:53: a7:75:7c:9a:a2:0b:72:04:ec:69:f4:7c:a6:c3:59: 50:80:7a:50:2a:5f:0e:b9:33:30:d0:db:6e:c1:0f: 3f:7c:19:8b:ad:26:59:c8:60:b4:66:36:c5:e7:0d: c8:06:f4:6b:67:24:e3:0b:35:3b:30:2a:3a:12:90: d6:66:58:33:e4:5b:1e:45:37:91:38:bb:41:38:eb: 9e:10:a3:93:48:9d:1f:26:6b:03:65:5b:55:70:fa: 68:ee:02:48:62:21:30:2f:82:83:02:ad:b1:bb:6f: 19:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:83:EB:F3:11:1A:C2:3E:E7:B3:61:42:7E:48:A5:80:6B:0E:14:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/4e1affea-de48-3b3a-8cd1-c55f336d0e1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:d4:38:c7:68:e3:35:55:11:00:42:81:15:22:bf:07:9b:bb: 10:f9:c1:8b:37:8e:5b:fd:3d:6c:60:fc:67:f5:7d:e6:e4:03: 41:42:03:90:d1:80:53:06:e6:94:bc:68:b5:5c:aa:d5:dd:13: 92:86:82:c6:42:14:81:54:0e:cc:8a:6e:37:6f:14:af:57:68: 0a:ce:26:e7:45:39:67:f4:67:be:42:90:1c:1c:0a:a9:5f:1e: 1d:fb:bc:ad:5c:87:04:20:79:d4:23:70:d8:fa:5c:61:d9:0e: 73:ec:df:13:95:7a:56:5c:9c:cc:74:5e:4c:56:7c:82:40:b8: df:b7:21:46:20:e2:bf:12:4a:f6:6d:1b:59:49:08:de:49:f4: d6:76:f1:ab:f1:45:8e:fa:bc:b3:6c:71:fe:5b:aa:67:06:9f: 97:0d:ab:0f:d3:97:7d:c9:18:9d:02:81:53:8e:fd:54:98:e6: 6d:79:3c:a8:2a:4e:fb:65:51:16:79:d3:7c:82:b9:cd:c7:a8: 18:1d:25:ca:34:58:03:c9:b5:ec:4a:f2:10:b3:8d:c4:d8:60: 3a:85:11:81:42:dc:dc:be:f5:32:e5:7c:96:aa:80:d5:e1:ca: 8b:4e:fa:e2:8f:36:e3:32:de:1d:c1:0f:c2:82:3f:ae:f4:39: dc:fe:4d:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1WLy4xVjjlyQAIsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI2MDMzMDA0NTYwOVoXDTI2MDYyODA0NTYwOVowLzEtMCsGA1UEAxMk ZjYyMDE2NTAtY2Q2My00N2FiLTkyMjQtNGM5YTYzNWU2NzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2rkiNNCi4kYK0340ZPom4ud4R4GJl6A+4v1 UFkXUshRNyiUf7WfPf8BeWXFsWaW5CjeNIAbG6QHeoyQSgBksEY2iWAFkf3SzDzs BuajeswT89xS39UlBhEx9xSApQFGo4o67IIwXai8knp2ubannRwPykefBCrtr5q2 /5AwiQcDnn2M+p7VzjNX1BtPnwBot1ttu1OndXyaogtyBOxp9Hymw1lQgHpQKl8O uTMw0NtuwQ8/fBmLrSZZyGC0ZjbF5w3IBvRrZyTjCzU7MCo6EpDWZlgz5FseRTeR OLtBOOueEKOTSJ0fJmsDZVtVcPpo7gJIYiEwL4KDAq2xu28ZYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOD6/MRGsI+57NhQn5IpYBrDhSZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvNGUxYWZmZWEtZGU0OC0z YjNhLThjZDEtYzU1ZjMzNmQwZTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnYVFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/UOMdo4zVVEQBCgRUivwebuxD5wYs3jlv9PWxg/Gf1febkA0FCA5DR gFMG5pS8aLVcqtXdE5KGgsZCFIFUDsyKbjdvFK9XaArOJudFOWf0Z75CkBwcCqlf Hh37vK1chwQgedQjcNj6XGHZDnPs3xOVelZcnMx0XkxWfIJAuN+3IUYg4r8SSvZt G1lJCN5J9NZ28avxRY76vLNscf5bqmcGn5cNqw/Tl33JGJ0CgVOO/VSY5m15PKgq TvtlURZ503yCuc3HqBgdJco0WAPJtexK8hCzjcTYYDqFEYFC3Ny+9TLlfJaqgNXh yotO+uKPNuMy3h3BD8KCP670Odz+TTs= -----END CERTIFICATE-----Generated at Mon Apr 6 15:20:23 2026 by rpki-client