$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/4e1affea-de48-3b3a-8cd1-c55f336d0e1d.roa File: 4e1affea-de48-3b3a-8cd1-c55f336d0e1d.roa (raw, json) Hash identifier: Wp6GM2t2m7TGdwxHyaVgDaWZpdPo7ARpPHbTiGdeeoU= Subject key identifier: 5A:B5:74:68:14:A0:EA:F0:6A:A9:DC:38:B2:59:A7:47:6D:AF:17:69 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584E36018D87AFAB17740C39B200 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/4e1affea-de48-3b3a-8cd1-c55f336d0e1d.roa Signing time: Thu 18 Jun 2026 09:00:12 +0000 ROA not before: Thu 18 Jun 2026 09:00:12 +0000 ROA not after: Wed 16 Sep 2026 09:00:12 +0000 asID: 35039 IP address blocks: 157.133.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:36:01:8d:87:af:ab:17:74:0c:39:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Jun 18 09:00:12 2026 GMT Not After : Sep 16 09:00:12 2026 GMT Subject: CN=5a519cbb-e5a5-4d7a-aed3-66256b3da792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5b:11:d7:5c:ee:38:fe:0d:31:1f:e1:6b:bd: fe:cf:d1:3d:34:1c:1f:2b:5a:0b:16:75:d4:de:1c: 01:0f:70:0c:c3:b8:b0:43:72:66:01:39:27:c6:92: 8b:6d:8e:c8:eb:f3:9b:12:da:f3:09:6f:82:05:b2: e9:f3:5a:90:05:45:95:75:61:8b:70:14:ca:be:5d: e4:9f:5a:44:50:9e:81:bd:10:59:53:82:1f:54:39: de:65:a6:e2:92:aa:29:21:b0:e3:10:8c:a0:93:49: 40:7a:b4:86:e2:45:fd:38:56:b0:cd:5d:c8:98:1d: 3d:30:55:65:ef:b5:39:4a:91:de:90:74:f1:6d:cd: d5:35:99:4a:96:b0:6d:c6:30:3b:65:df:4a:c9:0d: 80:91:bc:90:54:41:8d:a8:6b:e6:39:68:e0:e8:89: e3:02:7c:ec:15:7f:18:75:48:d5:91:c7:e9:62:be: d2:08:e0:88:a0:0f:ed:ca:0d:93:05:b6:6f:e4:12: df:41:4e:67:1e:d9:4f:ce:9f:8c:fd:eb:61:1d:9e: cc:bc:20:6a:42:82:90:02:15:95:e5:f0:da:d2:ab: a4:43:28:80:13:96:3c:3a:3a:ba:88:1c:22:15:40: cb:f2:04:b8:ea:d2:2c:ba:b3:bb:14:b6:af:96:d2: 4a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B5:74:68:14:A0:EA:F0:6A:A9:DC:38:B2:59:A7:47:6D:AF:17:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/4e1affea-de48-3b3a-8cd1-c55f336d0e1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:51:e7:be:f5:44:05:fa:4c:46:1c:c1:63:62:d9:31:7b:f3: e4:cb:3b:2d:77:d6:a4:d3:23:1f:6f:df:6b:0e:58:0b:ae:00: f8:dd:aa:ad:98:ef:aa:34:fb:ff:97:b5:ca:65:f5:13:e2:37: 5e:26:76:d6:0b:36:fc:a9:45:95:ed:52:99:ec:32:1f:91:83: a6:f4:d5:31:30:0a:d1:41:14:d8:ac:e6:75:98:d8:b2:13:97: 10:da:ae:2d:a2:4d:2a:8e:90:84:b0:fe:f0:de:16:78:fe:b9: d4:da:a8:c5:f0:ce:36:2f:84:64:cd:1e:ee:a4:14:30:b0:0d: d5:51:a1:58:63:a6:f2:1e:9b:49:97:e9:ed:6e:5a:9d:7b:53: 60:c8:8b:cd:f4:a2:36:7e:94:b8:74:14:61:60:a1:9e:3d:ee: 29:fc:5b:e8:0b:a4:63:6c:b2:92:2e:5d:44:72:57:96:5a:95: ec:71:16:c3:1d:3d:3f:b6:8d:91:dc:4f:25:f7:01:84:d9:1b: dc:7b:0e:77:78:2e:d1:2c:f7:fe:21:f1:7e:1a:15:55:ad:d9: cc:67:04:30:4d:57:0a:d4:fb:97:d4:00:60:2c:3c:74:4f:88: 67:a3:ed:d0:3a:5e:ed:31:2b:e3:d5:c1:19:2f:e5:c3:5f:c8: df:63:90:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE42AY2Hr6sXdAw5sgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk NWE1MTljYmItZTVhNS00ZDdhLWFlZDMtNjYyNTZiM2RhNzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lsR11zuOP4NMR/ha73+z9E9NBwfK1oLFnXU 3hwBD3AMw7iwQ3JmATknxpKLbY7I6/ObEtrzCW+CBbLp81qQBUWVdWGLcBTKvl3k n1pEUJ6BvRBZU4IfVDneZabikqopIbDjEIygk0lAerSG4kX9OFawzV3ImB09MFVl 77U5SpHekHTxbc3VNZlKlrBtxjA7Zd9KyQ2AkbyQVEGNqGvmOWjg6InjAnzsFX8Y dUjVkcfpYr7SCOCIoA/tyg2TBbZv5BLfQU5nHtlPzp+M/ethHZ7MvCBqQoKQAhWV 5fDa0qukQyiAE5Y8Ojq6iBwiFUDL8gS46tIsurO7FLavltJKvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFq1dGgUoOrwaqncOLJZp0dtrxdpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvNGUxYWZmZWEtZGU0OC0z YjNhLThjZDEtYzU1ZjMzNmQwZTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnYVFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpR5771RAX6TEYcwWNi2TF78+TLOy131qTTIx9v32sOWAuuAPjdqq2Y 76o0+/+Xtcpl9RPiN14mdtYLNvypRZXtUpnsMh+Rg6b01TEwCtFBFNis5nWY2LIT lxDari2iTSqOkISw/vDeFnj+udTaqMXwzjYvhGTNHu6kFDCwDdVRoVhjpvIem0mX 6e1uWp17U2DIi830ojZ+lLh0FGFgoZ497in8W+gLpGNsspIuXURyV5ZalexxFsMd PT+2jZHcTyX3AYTZG9x7Dnd4LtEs9/4h8X4aFVWt2cxnBDBNVwrU+5fUAGAsPHRP iGej7dA6Xu0xK+PVwRkv5cNfyN9jkIc= -----END CERTIFICATE-----Generated at Tue Jul 7 13:50:33 2026 by rpki-client