$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/f7a0a132-7709-3c14-9b98-1b035b042808.roa File: f7a0a132-7709-3c14-9b98-1b035b042808.roa (raw, json) Hash identifier: 4YgKkkFveo5/Lnvt/o8oyZfS/p1FjJfCYDK4JZ5/0rY= Subject key identifier: 1E:5D:F3:01:E5:0D:FD:52:C0:3D:54:B6:27:F2:D7:1C:BD:C0:01:CD Certificate issuer: /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Certificate serial: 010D0C9F4328584D8EF58B31342446E1AE052000 Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/f7a0a132-7709-3c14-9b98-1b035b042808.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 16679 IP address blocks: 152.157.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:8b:31:34:24:46:e1:ae:05:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=99798655-452c-47e9-a73c-939901b8fc69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:05:c1:74:d6:b7:f7:c5:51:5a:ca:80:62:9d: 57:30:11:35:92:06:84:e0:f2:1c:ab:84:06:c7:0a: 4b:36:5f:28:a2:f4:35:1a:91:50:8e:76:dc:85:b8: 90:f1:c1:5e:5f:2e:76:c5:4a:d2:d8:95:7a:b5:24: 59:1b:55:d0:59:87:c2:48:f2:5d:2c:5d:c8:21:cf: 39:d0:19:cd:53:91:93:f3:47:5d:1c:7b:df:07:6c: 70:52:82:f3:d4:40:85:37:a3:41:e0:1b:2d:d8:af: 99:cd:a8:1a:ab:38:7e:b7:61:66:5a:58:fa:e6:7e: 5b:64:c0:9f:b9:03:8a:73:c4:8f:67:1d:0f:0a:60: cd:37:73:3e:0e:ee:1b:fb:4f:18:5f:9f:a8:56:50: 63:93:14:ae:48:54:62:32:52:e6:3d:60:2a:07:1b: 9a:b9:9c:14:5c:90:8d:21:38:b8:74:ea:e5:12:b2: 70:5d:21:ae:b6:d9:95:94:e2:75:e7:d7:36:5e:62: 29:41:be:e6:3c:78:46:62:d6:ab:c4:96:59:08:80: 7a:00:93:2d:d3:71:4b:ee:e3:a2:b3:76:2e:14:97: 40:e4:b1:fa:ea:42:2d:83:a0:1f:36:0f:54:98:de: 3b:1c:58:69:4d:4c:16:b9:e4:58:5c:19:60:91:2e: 89:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5D:F3:01:E5:0D:FD:52:C0:3D:54:B6:27:F2:D7:1C:BD:C0:01:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/f7a0a132-7709-3c14-9b98-1b035b042808.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl X509v3 Authority Key Identifier: keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer sbgp-ipAddrBlock: critical IPv4: 152.157.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:c1:3e:ab:5b:04:63:e1:86:94:32:b7:bc:89:2f:ed:4a:e0: 7c:27:08:a3:45:eb:0d:7b:8b:e6:36:eb:2e:a7:af:b6:fa:33: e6:5c:cf:dc:1e:09:03:f3:f6:6e:15:50:46:a2:11:01:3a:12: 30:ac:9c:e0:70:4b:9c:8f:56:68:f0:52:f5:87:70:57:2a:3a: 2b:5d:ad:5b:2d:e1:b9:f6:19:4b:c0:4d:fa:b2:38:b7:b0:cf: 6e:bb:27:6f:64:85:c2:6a:fe:5b:5e:5d:73:00:c1:af:68:65: fa:9d:18:fa:f9:19:ea:2e:94:bb:d9:40:e2:07:5a:4e:71:b6: 1c:43:9c:53:45:5c:b1:1e:92:a1:4e:f7:e1:93:0c:c2:b1:7d: 5d:b1:1b:aa:c8:2a:ff:a4:9f:73:1d:7f:41:61:04:4b:34:bf: ec:28:60:8f:47:a4:f3:a6:c8:09:79:f5:eb:93:90:a0:d7:91: 08:a3:62:6f:56:bd:39:e9:13:25:fa:92:d0:93:d0:30:58:cc: 9b:c0:a7:a2:15:2f:3b:31:d9:93:58:c2:aa:c3:5d:08:7d:68: 12:19:39:a9:7e:f3:b0:79:d3:81:18:4c:d8:e1:ea:8f:43:31: 68:f7:78:ab:f0:5e:14:b5:1d:14:ce:45:7a:82:f6:8b:bb:cf: 88:e9:54:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9YsxNCRG4a4FIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMzOTlkOTctNjRmNi00ZTEyLThjYmUtNGQxMTQ5MWFk ODE2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk OTk3OTg2NTUtNDUyYy00N2U5LWE3M2MtOTM5OTAxYjhmYzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwXBdNa398VRWsqAYp1XMBE1kgaE4PIcq4QG xwpLNl8oovQ1GpFQjnbchbiQ8cFeXy52xUrS2JV6tSRZG1XQWYfCSPJdLF3IIc85 0BnNU5GT80ddHHvfB2xwUoLz1ECFN6NB4Bst2K+Zzagaqzh+t2FmWlj65n5bZMCf uQOKc8SPZx0PCmDNN3M+Du4b+08YX5+oVlBjkxSuSFRiMlLmPWAqBxuauZwUXJCN ITi4dOrlErJwXSGuttmVlOJ159c2XmIpQb7mPHhGYtarxJZZCIB6AJMt03FL7uOi s3YuFJdA5LH66kItg6AfNg9UmN47HFhpTUwWueRYXBlgkS6JLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5d8wHlDf1SwD1Utify1xy9wAHNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5 OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDExNDkxYWQ4MTYvZjdhMGExMzItNzcwOS0z YzE0LTliOTgtMWIwMzViMDQyODA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzMzOTlkOTctNjRmNi00ZTEyLThj YmUtNGQxMTQ5MWFkODE2L2MzMzk5ZDk3LTY0ZjYtNGUxMi04Y2JlLTRkMTE0OTFh ZDgxNi5jcmwwHwYDVR0jBBgwFoAUrp/EGCd8p/rBPxdlxtTMgg4WXiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDEx NDkxYWQ4MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmJ0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPBPqtbBGPhhpQyt7yJL+1K4HwnCKNF6w17i+Y26y6nr7b6M+Zcz9we CQPz9m4VUEaiEQE6EjCsnOBwS5yPVmjwUvWHcFcqOitdrVst4bn2GUvATfqyOLew z267J29khcJq/lteXXMAwa9oZfqdGPr5GeoulLvZQOIHWk5xthxDnFNFXLEekqFO 9+GTDMKxfV2xG6rIKv+kn3Mdf0FhBEs0v+woYI9HpPOmyAl59euTkKDXkQijYm9W vTnpEyX6ktCT0DBYzJvAp6IVLzsx2ZNYwqrDXQh9aBIZOal+87B504EYTNjh6o9D MWj3eKvwXhS1HRTORXqC9ou7z4jpVII= -----END CERTIFICATE-----Generated at Mon Apr 20 21:16:50 2026 by rpki-client