$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/dfd0b980-1988-37c9-bc93-aee27170433f.roa File: dfd0b980-1988-37c9-bc93-aee27170433f.roa (raw, json) Hash identifier: Hq0E3KSej0k2hGcY9APUNP3Kzlfbr22UU6GNPbFry1o= Subject key identifier: 67:3B:2E:B5:72:09:E7:FC:05:65:B3:4A:46:8C:DC:D7:99:31:B1:EE Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584D5635929F4966AF3887A88F00 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/dfd0b980-1988-37c9-bc93-aee27170433f.roa Signing time: Mon 30 Mar 2026 05:09:02 +0000 ROA not before: Mon 30 Mar 2026 05:09:02 +0000 ROA not after: Sun 28 Jun 2026 05:09:02 +0000 asID: 35039 IP address blocks: 157.133.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:56:35:92:9f:49:66:af:38:87:a8:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Mar 30 05:09:02 2026 GMT Not After : Jun 28 05:09:02 2026 GMT Subject: CN=e506367f-65ca-4973-a2d5-2ce1bf17d624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:aa:0f:14:4d:ff:a8:31:9c:b0:42:5e:39:66: 65:85:13:2c:36:0b:91:d5:87:1d:af:a9:52:c6:c9: 30:96:82:14:cd:62:33:b2:70:d2:6a:37:94:82:53: c2:7c:e9:86:a5:9c:3c:aa:99:69:7d:b3:1d:a6:ef: 22:82:48:1a:dc:64:4b:34:4b:5a:6e:28:f6:f9:3b: 89:cc:a8:e3:44:3f:f1:05:1b:5a:e5:d7:cc:1c:ab: ab:6d:40:46:ff:e9:ac:3b:49:55:f3:6b:45:d0:cc: ab:f1:89:f0:db:0c:08:82:13:8c:00:34:9d:54:e7: 97:50:73:17:3e:3b:1a:bd:4c:34:03:b0:0b:49:0d: 16:10:4a:6c:24:87:4a:ac:b2:12:42:27:db:bb:31: 95:1f:17:4b:2f:f1:cb:b4:22:5e:c5:82:8c:ae:11: 49:e1:6d:81:af:8a:f6:ab:c4:1d:73:29:01:98:ea: 90:25:35:1e:0f:38:6e:f2:5c:29:4a:02:e2:39:f4: b2:e2:3a:b6:c6:a9:e2:41:da:68:96:12:05:e6:30: 52:16:b1:e7:7f:d6:3f:ab:b6:d9:34:55:74:78:19: f7:df:f7:43:be:3f:c7:f2:31:e6:46:2f:86:1f:91: 8d:9b:df:38:7d:aa:20:20:bd:15:fe:6b:2b:9e:0a: 43:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:3B:2E:B5:72:09:E7:FC:05:65:B3:4A:46:8C:DC:D7:99:31:B1:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/dfd0b980-1988-37c9-bc93-aee27170433f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:85:98:2a:ba:e4:5d:0b:8f:26:82:d6:2b:76:58:e3:a7:ae: 48:fe:ae:98:b1:a6:71:aa:ff:71:2b:07:e0:1d:31:0b:c0:06: 12:d6:13:dc:3e:d0:a9:80:55:ca:28:6f:6d:ec:78:f3:89:b4: 90:3a:21:cd:51:b0:e1:81:4e:4f:00:d5:8e:61:bd:3a:29:be: 89:48:75:42:6a:c3:c7:0d:27:64:0e:a8:5d:8b:94:34:a7:cd: 94:85:f4:ed:6c:ed:e9:f5:2b:ee:c9:55:fb:5b:b5:71:e5:36: 0f:d2:38:74:20:2c:e6:83:66:13:93:eb:d6:b1:c6:20:7c:38: 9b:9f:80:97:84:81:49:11:b3:3f:2f:da:88:5a:ee:52:0f:0d: 30:37:0f:ff:40:eb:74:49:5e:06:53:71:66:2d:90:20:23:4d: 10:75:ba:4c:95:1b:30:55:72:35:6a:87:62:3e:6c:66:32:78: e9:b3:f1:c9:65:58:2c:08:fd:59:0f:39:14:43:46:6d:37:c1: 76:20:cf:8e:42:58:63:66:a3:97:a3:84:9d:c3:79:97:1d:f9: 82:46:f7:5c:4a:e5:43:f5:17:f1:11:e1:f5:15:93:44:88:63: fb:bf:25:f5:c1:57:01:cb:9f:7e:48:bb:5a:f2:68:14:3f:13: f4:14:3e:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1WNZKfSWavOIeojwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI2MDMzMDA1MDkwMloXDTI2MDYyODA1MDkwMlowLzEtMCsGA1UEAxMk ZTUwNjM2N2YtNjVjYS00OTczLWEyZDUtMmNlMWJmMTdkNjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKoPFE3/qDGcsEJeOWZlhRMsNguR1Ycdr6lS xskwloIUzWIzsnDSajeUglPCfOmGpZw8qplpfbMdpu8igkga3GRLNEtabij2+TuJ zKjjRD/xBRta5dfMHKurbUBG/+msO0lV82tF0Myr8Ynw2wwIghOMADSdVOeXUHMX PjsavUw0A7ALSQ0WEEpsJIdKrLISQifbuzGVHxdLL/HLtCJexYKMrhFJ4W2Br4r2 q8QdcykBmOqQJTUeDzhu8lwpSgLiOfSy4jq2xqniQdpolhIF5jBSFrHnf9Y/q7bZ NFV0eBn33/dDvj/H8jHmRi+GH5GNm984faogIL0V/msrngpDBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGc7LrVyCef8BWWzSkaM3NeZMbHuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvZGZkMGI5ODAtMTk4OC0z N2M5LWJjOTMtYWVlMjcxNzA0MzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnYWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESFmCq65F0LjyaC1it2WOOnrkj+rpixpnGq/3ErB+AdMQvABhLWE9w+ 0KmAVcoob23sePOJtJA6Ic1RsOGBTk8A1Y5hvTopvolIdUJqw8cNJ2QOqF2LlDSn zZSF9O1s7en1K+7JVftbtXHlNg/SOHQgLOaDZhOT69axxiB8OJufgJeEgUkRsz8v 2oha7lIPDTA3D/9A63RJXgZTcWYtkCAjTRB1ukyVGzBVcjVqh2I+bGYyeOmz8cll WCwI/VkPORRDRm03wXYgz45CWGNmo5ejhJ3DeZcd+YJG91xK5UP1F/ER4fUVk0SI Y/u/JfXBVwHLn35Iu1ryaBQ/E/QUPlE= -----END CERTIFICATE-----Generated at Mon Apr 6 15:20:23 2026 by rpki-client