$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/c240851e-0489-3120-bc34-943dad5f42a6.roa File: c240851e-0489-3120-bc34-943dad5f42a6.roa (raw, json) Hash identifier: bk6Mcct9rTlIz2j5m71Y/OVlnFk6rpMTu+jiaxVys70= Subject key identifier: 71:D7:4C:BD:0F:11:14:C7:58:C2:62:A7:0E:99:17:42:97:87:7B:36 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584D4EF4492BCDDF97429DEA1B00 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/c240851e-0489-3120-bc34-943dad5f42a6.roa Signing time: Fri 27 Mar 2026 14:46:50 +0000 ROA not before: Fri 27 Mar 2026 14:46:50 +0000 ROA not after: Thu 25 Jun 2026 14:46:50 +0000 asID: 35039 IP address blocks: 157.133.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:f4:49:2b:cd:df:97:42:9d:ea:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Mar 27 14:46:50 2026 GMT Not After : Jun 25 14:46:50 2026 GMT Subject: CN=7e0e6491-61d0-4301-9991-76b5a07a9715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:12:db:c7:40:6f:60:dd:25:9f:13:c5:93:66: cd:f6:da:f6:7f:31:34:2e:57:d6:ea:a4:19:af:6b: 9c:fb:10:98:e5:52:a3:b9:bc:04:07:01:e6:12:0e: 84:be:45:47:d3:ac:97:8c:b2:a4:ed:ce:cb:52:9f: 23:a1:a7:b8:85:76:22:7a:5a:4b:43:6d:05:92:b4: 34:07:38:aa:9e:c9:8f:41:a5:4b:30:a1:b7:0e:d7: 98:96:19:c9:a8:fc:f1:38:0f:12:b5:81:37:85:94: 7b:e5:0f:57:4f:13:a1:33:38:6f:16:89:c2:ba:e5: 28:e3:b0:47:36:79:a8:0e:c2:9b:51:41:ed:6a:8f: 5c:e8:4b:c0:22:54:1c:4e:f7:0e:a7:a3:21:5a:4a: 61:56:93:8d:26:96:42:6b:f5:73:46:58:fd:91:c9: f1:92:1e:77:dd:a8:51:81:44:ad:e9:7a:45:af:e8: 83:bf:70:72:f9:d0:0c:dd:ab:e2:48:38:96:b9:d7: 67:b4:2c:03:59:a7:b5:69:09:e4:05:c9:d3:72:01: bc:68:fe:8d:67:cb:cc:ee:59:30:ad:1f:b0:dd:1b: 7f:2d:35:0b:bf:8b:00:7f:2e:8f:ba:a9:fb:8d:9d: 93:21:7e:55:b6:bf:ee:e9:e2:ac:0f:77:3a:d5:26: e8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D7:4C:BD:0F:11:14:C7:58:C2:62:A7:0E:99:17:42:97:87:7B:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/c240851e-0489-3120-bc34-943dad5f42a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:ab:a4:a3:6f:a3:6b:d5:d7:fb:93:f4:fd:68:60:e2:ce:9d: 6f:c3:87:bf:0c:8f:5a:1f:10:29:5a:b8:ce:25:a2:65:f0:77: 60:f7:38:c4:6d:69:0e:da:c5:42:3a:fd:78:a6:9d:d6:14:d3: 32:d1:98:2c:0a:b3:b1:af:b0:87:cb:54:a0:85:c2:c7:8b:03: 82:b2:70:f3:f7:d2:35:e9:dd:f5:e6:a1:d0:aa:4a:7a:b4:20: d9:08:a3:81:08:0e:17:93:22:98:e6:22:d9:ce:33:40:66:07: 45:1e:29:79:a9:7c:33:42:4b:8f:95:c6:96:c5:fc:0e:19:e3: 71:b5:4d:e8:fe:9d:69:b0:2e:a0:77:75:f2:ff:5b:37:a4:31: d9:dd:72:9e:f1:05:ef:10:cf:06:9e:fc:f2:fc:a8:5b:79:0e: 95:7b:f4:05:ad:33:14:87:30:7c:6d:97:46:41:d5:44:f9:e7: f4:9f:b9:cc:cd:ef:eb:28:1a:fa:c5:52:72:8d:25:1e:dc:7c: d0:18:1b:7b:76:3a:f8:74:27:43:d0:3f:bb:53:64:48:ee:7d: 4a:2c:0b:23:db:94:b1:f6:52:13:e5:71:0b:e5:7f:86:6f:5f: 76:05:af:5a:2a:06:41:08:b0:c5:04:0e:e5:47:56:92:99:14: d4:b1:d7:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1O9Ekrzd+XQp3qGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI2MDMyNzE0NDY1MFoXDTI2MDYyNTE0NDY1MFowLzEtMCsGA1UEAxMk N2UwZTY0OTEtNjFkMC00MzAxLTk5OTEtNzZiNWEwN2E5NzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxLbx0BvYN0lnxPFk2bN9tr2fzE0LlfW6qQZ r2uc+xCY5VKjubwEBwHmEg6EvkVH06yXjLKk7c7LUp8joae4hXYielpLQ20FkrQ0 BziqnsmPQaVLMKG3DteYlhnJqPzxOA8StYE3hZR75Q9XTxOhMzhvFonCuuUo47BH NnmoDsKbUUHtao9c6EvAIlQcTvcOp6MhWkphVpONJpZCa/VzRlj9kcnxkh533ahR gUSt6XpFr+iDv3By+dAM3aviSDiWuddntCwDWae1aQnkBcnTcgG8aP6NZ8vM7lkw rR+w3Rt/LTULv4sAfy6Puqn7jZ2TIX5Vtr/u6eKsD3c61Sbo2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHXTL0PERTHWMJipw6ZF0KXh3s2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvYzI0MDg1MWUtMDQ4OS0z MTIwLWJjMzQtOTQzZGFkNWY0MmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnYVEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6rpKNvo2vV1/uT9P1oYOLOnW/Dh78Mj1ofEClauM4lomXwd2D3OMRt aQ7axUI6/XimndYU0zLRmCwKs7GvsIfLVKCFwseLA4KycPP30jXp3fXmodCqSnq0 INkIo4EIDheTIpjmItnOM0BmB0UeKXmpfDNCS4+VxpbF/A4Z43G1Tej+nWmwLqB3 dfL/WzekMdndcp7xBe8Qzwae/PL8qFt5DpV79AWtMxSHMHxtl0ZB1UT55/SfuczN 7+soGvrFUnKNJR7cfNAYG3t2Ovh0J0PQP7tTZEjufUosCyPblLH2UhPlcQvlf4Zv X3YFr1oqBkEIsMUEDuVHVpKZFNSx1/o= -----END CERTIFICATE-----Generated at Mon Apr 6 15:20:22 2026 by rpki-client