$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/f7a0a132-7709-3c14-9b98-1b035b042808.roa File: f7a0a132-7709-3c14-9b98-1b035b042808.roa (raw, json) Hash identifier: fx4/5LEoqNG6Ol2lGA1pA0HXnIHGKB3sU9e9xHIRLy8= Subject key identifier: BC:5D:0A:D7:57:ED:56:F5:2E:FE:56:E0:67:9B:03:0C:F0:89:27:9A Certificate issuer: /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Certificate serial: 010D0C9F4328584F119D1C7276D8716F1F7EE900 Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/f7a0a132-7709-3c14-9b98-1b035b042808.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 16679 IP address blocks: 152.157.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:1c:72:76:d8:71:6f:1f:7e:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=caaff237-b5c9-47ca-9ee0-90a90e467d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3d:69:81:bb:86:ae:21:70:81:26:92:64:32: b7:5a:1a:c2:ba:9d:63:27:29:8f:d5:7a:3c:df:45: 9b:de:bd:20:b0:72:d4:fe:60:86:61:a7:09:3b:25: b8:4d:07:ac:9c:23:fb:bf:5e:15:d5:eb:44:35:10: 0e:6e:69:4e:14:a1:8c:70:e2:1c:3c:19:23:89:8a: 0a:7c:7f:c5:c6:b9:51:a8:bb:ad:ab:c2:ca:f3:a6: da:96:e1:0f:e4:d5:0a:ec:ba:29:48:23:a8:2b:10: 61:20:29:36:55:7d:d9:8b:f1:09:17:bf:67:22:88: 4a:29:19:1e:a4:9b:30:81:91:b0:66:8b:48:e7:96: 85:1a:91:28:e1:65:7d:96:1f:e4:0f:e3:9b:64:15: 5e:6b:03:68:f4:ac:e4:37:24:94:a6:4d:83:74:a9: f0:b8:01:e7:b1:8d:b8:13:2d:67:6d:51:18:9b:0e: 43:bb:86:b8:29:19:90:16:bb:d9:e6:6f:3a:fe:2d: fd:48:b0:c8:9b:14:05:8f:5c:0f:e8:dc:ad:1f:29: e3:e8:f1:1d:29:29:a0:63:a1:f1:6b:8a:b5:f6:13: 63:ba:2a:d9:08:2d:56:74:86:2b:d0:26:5f:c9:82: 45:57:9b:5e:6f:f5:28:68:f3:e8:02:30:6b:5b:78: 42:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:5D:0A:D7:57:ED:56:F5:2E:FE:56:E0:67:9B:03:0C:F0:89:27:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/f7a0a132-7709-3c14-9b98-1b035b042808.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl X509v3 Authority Key Identifier: keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer sbgp-ipAddrBlock: critical IPv4: 152.157.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:9e:13:ef:bb:54:2d:43:36:a6:cd:ac:b9:9b:b5:5a:e1:38: 84:86:a3:e4:23:75:88:44:95:b0:f3:78:0f:33:8f:77:9a:65: 59:7a:59:48:a2:f1:0b:02:4e:e6:2d:9a:10:d6:93:e5:7a:56: b3:32:c5:60:c3:24:f6:e5:df:4c:46:f3:02:b6:1e:c8:72:62: 7d:24:51:22:c8:86:8c:b6:74:bc:14:97:2e:06:e7:c5:fa:67: 71:22:d7:fb:6c:8f:83:a7:a9:49:47:bc:d0:cb:fd:6a:61:40: 87:c3:d3:df:ee:e1:9c:2d:5a:3d:66:62:86:fe:5e:cd:32:e7: af:c7:90:05:fc:1f:be:f8:df:47:a2:04:cc:fa:2d:d4:d9:f0: d2:69:84:63:f3:14:02:08:9c:83:d4:25:82:9c:02:46:93:f8: 2f:2c:b0:6f:ff:49:95:3a:4a:3b:c9:4b:6b:49:b7:3b:11:b2: 98:48:bd:7e:4d:89:2b:23:5e:fa:72:38:ac:52:a1:1d:78:4d: 5e:e2:1a:ce:ac:48:0b:09:b5:11:18:9b:ca:16:21:f3:b9:7b: a5:28:4f:b4:6c:b7:d0:cd:7e:35:5c:d8:60:fa:72:50:c7:ad: 01:56:cd:d4:3c:c8:26:dd:ba:f4:61:60:65:4c:08:ba:5d:81: f5:c5:d0:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnRxydthxbx9+6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMzOTlkOTctNjRmNi00ZTEyLThjYmUtNGQxMTQ5MWFk ODE2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2FhZmYyMzctYjVjOS00N2NhLTllZTAtOTBhOTBlNDY3ZDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2D1pgbuGriFwgSaSZDK3WhrCup1jJymP1Xo8 30Wb3r0gsHLU/mCGYacJOyW4TQesnCP7v14V1etENRAObmlOFKGMcOIcPBkjiYoK fH/FxrlRqLutq8LK86baluEP5NUK7LopSCOoKxBhICk2VX3Zi/EJF79nIohKKRke pJswgZGwZotI55aFGpEo4WV9lh/kD+ObZBVeawNo9KzkNySUpk2DdKnwuAHnsY24 Ey1nbVEYmw5Du4a4KRmQFrvZ5m86/i39SLDImxQFj1wP6NytHynj6PEdKSmgY6Hx a4q19hNjuirZCC1WdIYr0CZfyYJFV5teb/UoaPPoAjBrW3hC1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxdCtdX7Vb1Lv5W4GebAwzwiSeaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5 OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDExNDkxYWQ4MTYvZjdhMGExMzItNzcwOS0z YzE0LTliOTgtMWIwMzViMDQyODA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzMzOTlkOTctNjRmNi00ZTEyLThj YmUtNGQxMTQ5MWFkODE2L2MzMzk5ZDk3LTY0ZjYtNGUxMi04Y2JlLTRkMTE0OTFh ZDgxNi5jcmwwHwYDVR0jBBgwFoAUrp/EGCd8p/rBPxdlxtTMgg4WXiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDEx NDkxYWQ4MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmJ0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6eE++7VC1DNqbNrLmbtVrhOISGo+QjdYhElbDzeA8zj3eaZVl6WUii 8QsCTuYtmhDWk+V6VrMyxWDDJPbl30xG8wK2HshyYn0kUSLIhoy2dLwUly4G58X6 Z3Ei1/tsj4OnqUlHvNDL/WphQIfD09/u4ZwtWj1mYob+Xs0y56/HkAX8H77430ei BMz6LdTZ8NJphGPzFAIInIPUJYKcAkaT+C8ssG//SZU6SjvJS2tJtzsRsphIvX5N iSsjXvpyOKxSoR14TV7iGs6sSAsJtREYm8oWIfO5e6UoT7Rst9DNfjVc2GD6clDH rQFWzdQ8yCbduvRhYGVMCLpdgfXF0LE= -----END CERTIFICATE-----Generated at Sat Sep 12 08:59:07 2026 by rpki-client