$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/bd70a83f-6bed-31f4-98c2-f742eff27d16.roa File: bd70a83f-6bed-31f4-98c2-f742eff27d16.roa (raw, json) Hash identifier: rjA06gIF1JkQXrT1krMZNahXYuKTSxZZZ/6pGr0s7+U= Subject key identifier: BF:94:05:B0:57:21:84:34:78:1A:E7:F7:12:B1:C8:3C:AE:2F:76:CB Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584D5C3C39F4F843E3E2DD5078E0 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/bd70a83f-6bed-31f4-98c2-f742eff27d16.roa Signing time: Wed 01 Apr 2026 08:57:17 +0000 ROA not before: Wed 01 Apr 2026 08:57:17 +0000 ROA not after: Tue 30 Jun 2026 08:57:17 +0000 asID: 35039 IP address blocks: 157.133.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5c:3c:39:f4:f8:43:e3:e2:dd:50:78:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Apr 1 08:57:17 2026 GMT Not After : Jun 30 08:57:17 2026 GMT Subject: CN=c91ccae3-9822-4ccb-80ce-cea31f1a3aa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3a:8e:62:6b:cf:83:e9:92:40:68:1c:1a:64: 82:95:59:a6:d9:f8:be:34:b9:bd:64:6e:db:f7:98: 49:43:90:44:89:10:06:8a:d8:de:a2:c5:cd:83:29: 58:68:e6:1b:26:f8:1a:39:75:1d:81:f9:dc:f7:29: b4:1a:72:65:8c:bd:ba:c8:43:0f:bc:32:5a:87:5c: dd:cc:b7:b6:ac:85:e1:25:22:ce:54:8d:77:25:84: 21:81:05:7c:db:7a:a6:d9:54:47:6b:a4:ff:88:3a: 06:64:45:58:28:93:74:c4:95:6a:5d:af:8f:eb:71: cd:dd:9e:03:44:b9:22:37:24:f8:fa:83:9d:c8:9c: 3f:51:48:e8:f6:9e:64:77:d3:d3:6f:34:52:2e:ee: 46:64:0c:33:15:23:53:00:97:46:0c:f6:40:cc:04: bf:b5:d6:88:61:3b:34:0f:5f:bc:75:74:fb:28:05: f3:9e:e5:6b:47:e0:61:99:2b:50:43:01:47:1c:84: 9e:50:0a:c7:6f:dc:dd:08:b2:68:c1:96:9e:e2:ad: a8:b6:17:9f:5e:63:35:b0:c0:c0:82:d1:27:72:a9: 18:32:7c:97:5f:08:19:c1:79:9c:e5:f8:ff:39:dc: 53:aa:05:f7:88:ed:50:83:b7:76:a1:e8:91:86:f3: ea:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:94:05:B0:57:21:84:34:78:1A:E7:F7:12:B1:C8:3C:AE:2F:76:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/bd70a83f-6bed-31f4-98c2-f742eff27d16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:6b:c1:17:46:e4:4e:5e:68:9f:01:ba:89:48:45:6a:1d:98: 12:e7:1f:13:05:6a:a1:13:6c:c4:ed:7a:61:9c:bb:db:c3:92: 2b:54:76:85:04:db:31:58:d3:e2:fa:a7:38:60:a8:b3:ba:51: 20:34:ab:9b:f2:b5:b5:be:57:2c:82:e1:02:ca:e6:9e:ec:a2: 6e:36:29:57:d3:86:12:dd:5c:a9:6a:04:bc:bc:28:f0:97:e6: ca:f3:ca:49:c7:c0:30:a2:db:e4:a1:9e:a5:80:66:60:77:c2: 42:64:7d:6e:bc:2a:ff:7f:29:ce:6d:9a:3f:bc:f9:4b:ee:41: b2:6e:5f:bc:6e:a4:ea:1f:0c:c9:34:43:07:20:23:1e:d0:56: 38:4c:d1:96:14:5d:e4:3b:0c:18:7a:c7:30:7f:6f:6b:45:69: f6:2f:65:d1:e7:6e:7f:c6:a7:29:53:db:0e:5e:9b:64:7b:b6: 76:ec:0d:2f:29:9d:f4:22:bc:39:40:38:7d:c9:17:a9:d0:4d: 9e:ca:35:58:49:a4:6e:8b:50:db:96:a4:6e:eb:0f:57:96:7a: c2:cd:c0:6c:74:65:2f:1d:9f:58:14:d7:a3:06:f2:3f:34:80: 46:66:1e:4b:54:63:09:f7:c8:0a:b2:c9:25:54:b1:f6:b0:af: 6c:b1:9f:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1cPDn0+EPj4t1QeOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI2MDQwMTA4NTcxN1oXDTI2MDYzMDA4NTcxN1owLzEtMCsGA1UEAxMk YzkxY2NhZTMtOTgyMi00Y2NiLTgwY2UtY2VhMzFmMWEzYWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTqOYmvPg+mSQGgcGmSClVmm2fi+NLm9ZG7b 95hJQ5BEiRAGitjeosXNgylYaOYbJvgaOXUdgfnc9ym0GnJljL26yEMPvDJah1zd zLe2rIXhJSLOVI13JYQhgQV823qm2VRHa6T/iDoGZEVYKJN0xJVqXa+P63HN3Z4D RLkiNyT4+oOdyJw/UUjo9p5kd9PTbzRSLu5GZAwzFSNTAJdGDPZAzAS/tdaIYTs0 D1+8dXT7KAXznuVrR+BhmStQQwFHHISeUArHb9zdCLJowZae4q2othefXmM1sMDA gtEncqkYMnyXXwgZwXmc5fj/OdxTqgX3iO1Qg7d2oeiRhvPqTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+UBbBXIYQ0eBrn9xKxyDyuL3bLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvYmQ3MGE4M2YtNmJlZC0z MWY0LTk4YzItZjc0MmVmZjI3ZDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnYXMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIprwRdG5E5eaJ8BuolIRWodmBLnHxMFaqETbMTtemGcu9vDkitUdoUE 2zFY0+L6pzhgqLO6USA0q5vytbW+VyyC4QLK5p7som42KVfThhLdXKlqBLy8KPCX 5srzyknHwDCi2+ShnqWAZmB3wkJkfW68Kv9/Kc5tmj+8+UvuQbJuX7xupOofDMk0 QwcgIx7QVjhM0ZYUXeQ7DBh6xzB/b2tFafYvZdHnbn/GpylT2w5em2R7tnbsDS8p nfQivDlAOH3JF6nQTZ7KNVhJpG6LUNuWpG7rD1eWesLNwGx0ZS8dn1gU16MG8j80 gEZmHktUYwn3yAqyySVUsfawr2yxnxk= -----END CERTIFICATE-----Generated at Mon Apr 6 15:20:22 2026 by rpki-client