$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/7c50e919-803d-34be-9930-f8a824a61523.roa File: 7c50e919-803d-34be-9930-f8a824a61523.roa (raw, json) Hash identifier: CGlh0A55BHbqaTWyNYGofWC8wCAPeVFKFxPU4URpdpY= Subject key identifier: 65:18:0E:26:4E:E8:0F:FC:DC:86:63:34:46:56:39:EC:DE:A8:38:52 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584D5637B501CE87C054EEC29DA0 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/7c50e919-803d-34be-9930-f8a824a61523.roa Signing time: Mon 30 Mar 2026 05:13:20 +0000 ROA not before: Mon 30 Mar 2026 05:13:20 +0000 ROA not after: Sun 28 Jun 2026 05:13:20 +0000 asID: 35039 IP address blocks: 157.133.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:56:37:b5:01:ce:87:c0:54:ee:c2:9d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Mar 30 05:13:20 2026 GMT Not After : Jun 28 05:13:20 2026 GMT Subject: CN=ec4dfc36-28a1-4020-bbef-b4f1757c37d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d0:d1:bc:f0:fb:90:4a:30:35:9e:eb:76:93: 17:54:a2:a2:f9:7e:fa:7d:4c:0b:aa:db:a9:ad:ee: a3:96:10:11:d6:8a:45:c9:47:28:13:b1:34:88:42: f4:e6:a0:39:83:41:a1:d5:b4:3e:88:b0:bf:6b:bb: 72:58:32:78:04:5f:7f:56:30:be:25:51:3d:a8:c9: 07:78:89:e6:5e:f7:c9:a2:a6:b6:68:71:d1:77:62: 00:3c:f7:c1:84:ba:f5:18:4f:d3:a6:ff:c4:7e:db: 60:37:2f:44:6b:78:c5:72:6d:35:9d:68:b6:99:8c: bb:30:20:61:cc:e9:d0:be:bb:25:d8:7b:24:fe:30: 59:05:61:6a:4f:96:ed:af:d8:57:df:ee:bb:a9:91: 3e:a6:94:6e:6b:dc:4b:93:85:b3:71:e7:0a:d1:5f: 2e:df:ea:96:d2:c2:86:09:bd:9a:29:02:b3:c9:08: 08:12:fa:78:85:5b:81:34:33:64:08:6c:03:1d:5e: 31:9a:5b:3c:c1:9a:26:65:5f:7a:cf:94:08:4a:a6: 5e:75:ba:b2:55:46:e8:86:94:c8:e4:51:00:36:04: 03:7c:3b:ce:ae:41:44:71:03:db:61:69:0a:47:63: 10:25:ff:0b:be:fe:35:5b:d6:af:83:0e:59:69:65: ab:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:18:0E:26:4E:E8:0F:FC:DC:86:63:34:46:56:39:EC:DE:A8:38:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/7c50e919-803d-34be-9930-f8a824a61523.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:19:b8:ba:6c:ea:9d:43:02:25:55:d4:d2:91:72:d7:14:a0: 68:b0:dc:6c:f5:3d:19:ef:81:28:bd:57:a6:72:8b:a7:0e:7e: 9d:6f:c6:10:4a:ba:6d:0c:bb:02:ac:d8:6a:59:b6:f4:02:51: 3f:5c:75:ed:48:0e:65:5d:f1:b8:8c:2d:e1:2f:4e:91:02:20: ed:61:96:b8:71:be:0d:26:af:a6:5f:9a:0a:9d:a9:65:6a:22: c9:6a:0a:cc:84:ac:18:37:86:51:bb:17:28:8a:85:38:8c:c0: 27:7c:d5:ac:f4:7b:12:c6:a1:44:da:88:e5:14:e9:fd:6d:c8: 63:88:39:3a:31:c3:c3:ef:83:74:81:84:31:da:67:ff:d9:8b: a3:6f:4e:cc:59:8d:c7:2d:1a:3a:cf:83:de:f0:76:6f:4f:a4: 9e:45:3c:57:3c:7f:ff:e6:87:6b:0e:a4:b5:dd:17:82:4b:87: e2:a8:a5:80:ea:3b:11:33:ee:87:c6:28:c9:1f:e0:ca:4b:fe: 35:1b:82:9c:57:2e:57:8b:d6:0c:b9:6a:63:aa:d3:f7:c0:81: fa:0c:12:78:45:ec:81:7e:e4:bd:61:3f:6f:d6:83:be:1a:f3: 05:86:07:fe:9e:a0:8e:5b:34:be:f1:27:c1:f7:a3:84:d7:e2: 70:39:b6:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1WN7UBzofAVO7CnaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI2MDMzMDA1MTMyMFoXDTI2MDYyODA1MTMyMFowLzEtMCsGA1UEAxMk ZWM0ZGZjMzYtMjhhMS00MDIwLWJiZWYtYjRmMTc1N2MzN2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9DRvPD7kEowNZ7rdpMXVKKi+X76fUwLqtup re6jlhAR1opFyUcoE7E0iEL05qA5g0Gh1bQ+iLC/a7tyWDJ4BF9/VjC+JVE9qMkH eInmXvfJoqa2aHHRd2IAPPfBhLr1GE/Tpv/EfttgNy9Ea3jFcm01nWi2mYy7MCBh zOnQvrsl2Hsk/jBZBWFqT5btr9hX3+67qZE+ppRua9xLk4WzcecK0V8u3+qW0sKG Cb2aKQKzyQgIEvp4hVuBNDNkCGwDHV4xmls8wZomZV96z5QISqZedbqyVUbohpTI 5FEANgQDfDvOrkFEcQPbYWkKR2MQJf8Lvv41W9avgw5ZaWWrsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUYDiZO6A/83IZjNEZWOezeqDhSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvN2M1MGU5MTktODAzZC0z NGJlLTk5MzAtZjhhODI0YTYxNTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnYXMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIZuLps6p1DAiVV1NKRctcUoGiw3Gz1PRnvgSi9V6Zyi6cOfp1vxhBK um0MuwKs2GpZtvQCUT9cde1IDmVd8biMLeEvTpECIO1hlrhxvg0mr6ZfmgqdqWVq IslqCsyErBg3hlG7FyiKhTiMwCd81az0exLGoUTaiOUU6f1tyGOIOToxw8Pvg3SB hDHaZ//Zi6NvTsxZjcctGjrPg97wdm9PpJ5FPFc8f//mh2sOpLXdF4JLh+KopYDq OxEz7ofGKMkf4MpL/jUbgpxXLleL1gy5amOq0/fAgfoMEnhF7IF+5L1hP2/Wg74a 8wWGB/6eoI5bNL7xJ8H3o4TX4nA5tm4= -----END CERTIFICATE-----Generated at Mon Apr 6 15:20:22 2026 by rpki-client