$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/f7a0a132-7709-3c14-9b98-1b035b042808.roa File: f7a0a132-7709-3c14-9b98-1b035b042808.roa (raw, json) Hash identifier: Lu/dnRJUR+YRPp3JZpckuhaMo63qJPZ1CZB5FvucbUo= Subject key identifier: 4A:AA:7A:CC:11:B0:DD:42:45:2D:DD:AF:7A:40:79:C9:33:48:F9:97 Certificate issuer: /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Certificate serial: 010D0C9F4328584FB3A6976DE3B2A0FBF0EC2980 Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/f7a0a132-7709-3c14-9b98-1b035b042808.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 16679 IP address blocks: 152.157.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a6:97:6d:e3:b2:a0:fb:f0:ec:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=6a5d18db-74ea-4a7e-8627-792f97441d86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:94:5a:1e:e1:dc:60:1f:f6:4c:3b:39:11:8a: ab:b4:2e:09:b4:cb:1f:17:dd:5e:47:b5:80:34:8b: 1d:ce:a4:56:c6:42:da:c0:9a:c4:2c:f1:13:01:3e: a4:83:87:70:27:37:7d:04:35:f1:8b:98:23:12:5f: 03:01:4f:82:26:23:0d:80:8a:80:cc:72:f4:75:30: f1:8f:1d:58:79:a4:a2:1e:ca:0b:b5:a0:fa:ca:12: c5:0c:01:55:3c:bf:fe:1f:98:04:e2:52:4f:00:d0: 65:3b:1d:08:86:d5:df:26:52:ba:67:de:1c:bf:1a: d9:e2:b6:6f:59:99:a0:a2:4f:2d:a1:25:6d:95:bb: 63:03:0c:1b:80:2d:e1:87:3a:1c:7d:d2:bc:93:48: 30:a3:72:58:26:82:9d:fa:9d:a5:73:9e:ce:77:47: ed:9f:f0:fc:a5:46:90:c1:4e:42:55:87:72:25:32: 0f:1e:37:fe:8d:27:07:55:78:46:91:2b:0a:03:58: 58:6b:db:54:6d:2f:fd:3e:62:d5:a1:16:d1:62:6f: d9:aa:8f:8f:11:6b:46:26:82:da:dd:85:ed:c9:43: ce:0f:c6:e7:4f:ce:30:48:81:19:e3:b9:58:5e:c0: 7a:1b:00:39:28:9e:e4:a4:d1:3f:c5:cb:3a:db:c0: ca:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AA:7A:CC:11:B0:DD:42:45:2D:DD:AF:7A:40:79:C9:33:48:F9:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/f7a0a132-7709-3c14-9b98-1b035b042808.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl X509v3 Authority Key Identifier: keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer sbgp-ipAddrBlock: critical IPv4: 152.157.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:c9:52:f3:20:fb:0d:3d:fd:3b:86:de:4f:bf:05:ba:68:72: 12:f9:3c:38:da:cb:6d:0c:f6:81:e2:be:fb:6f:27:0f:c8:d4: 12:ac:9f:3c:20:f7:50:a4:8a:7f:88:41:f7:5c:d9:f0:21:bb: 61:af:f9:ee:33:11:14:e9:57:d0:b0:bc:9f:ce:da:2c:b4:2d: 68:1c:c1:52:2e:d8:f3:b6:7d:24:3b:e9:d7:dc:8b:c5:47:44: 2b:88:2b:03:48:70:ce:51:4b:be:e1:dc:71:f7:12:da:c2:86: 52:98:d0:44:db:b0:65:24:6a:b5:c4:c6:38:62:70:e1:8a:16: eb:90:c7:a7:a9:58:d5:76:2c:3c:cb:4b:b6:d1:06:a9:85:a7: e3:87:77:e2:2e:69:1d:ef:38:7c:95:c2:c4:86:f3:aa:d9:c6: d5:f0:43:0c:c1:f8:fa:39:18:73:d7:06:2e:06:39:f9:dc:eb: ea:61:90:68:f8:d7:bf:60:7d:3a:7b:93:ca:de:fd:01:5d:43: da:2d:3f:c0:7b:2f:02:9e:c3:b1:43:e0:26:a1:bc:0e:e8:c5: dd:88:37:9b:31:17:2f:5d:72:a4:4f:6c:dd:d9:3d:55:f9:1c: 2f:96:cd:c9:8a:79:04:e4:c9:57:42:69:b1:8d:a3:e5:e7:32: 90:3d:65:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+zppdt47Kg+/DsKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMzOTlkOTctNjRmNi00ZTEyLThjYmUtNGQxMTQ5MWFk ODE2MB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk NmE1ZDE4ZGItNzRlYS00YTdlLTg2MjctNzkyZjk3NDQxZDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpRaHuHcYB/2TDs5EYqrtC4JtMsfF91eR7WA NIsdzqRWxkLawJrELPETAT6kg4dwJzd9BDXxi5gjEl8DAU+CJiMNgIqAzHL0dTDx jx1YeaSiHsoLtaD6yhLFDAFVPL/+H5gE4lJPANBlOx0IhtXfJlK6Z94cvxrZ4rZv WZmgok8toSVtlbtjAwwbgC3hhzocfdK8k0gwo3JYJoKd+p2lc57Od0ftn/D8pUaQ wU5CVYdyJTIPHjf+jScHVXhGkSsKA1hYa9tUbS/9PmLVoRbRYm/Zqo+PEWtGJoLa 3YXtyUPOD8bnT84wSIEZ47lYXsB6GwA5KJ7kpNE/xcs628DKBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqqeswRsN1CRS3dr3pAeckzSPmXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5 OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDExNDkxYWQ4MTYvZjdhMGExMzItNzcwOS0z YzE0LTliOTgtMWIwMzViMDQyODA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzMzOTlkOTctNjRmNi00ZTEyLThj YmUtNGQxMTQ5MWFkODE2L2MzMzk5ZDk3LTY0ZjYtNGUxMi04Y2JlLTRkMTE0OTFh ZDgxNi5jcmwwHwYDVR0jBBgwFoAUrp/EGCd8p/rBPxdlxtTMgg4WXiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDEx NDkxYWQ4MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmJ0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfJUvMg+w09/TuG3k+/BbpochL5PDjay20M9oHivvtvJw/I1BKsnzwg 91Ckin+IQfdc2fAhu2Gv+e4zERTpV9CwvJ/O2iy0LWgcwVIu2PO2fSQ76dfci8VH RCuIKwNIcM5RS77h3HH3EtrChlKY0ETbsGUkarXExjhicOGKFuuQx6epWNV2LDzL S7bRBqmFp+OHd+IuaR3vOHyVwsSG86rZxtXwQwzB+Po5GHPXBi4GOfnc6+phkGj4 179gfTp7k8re/QFdQ9otP8B7LwKew7FD4CahvA7oxd2IN5sxFy9dcqRPbN3ZPVX5 HC+WzcmKeQTkyVdCabGNo+XnMpA9Zbo= -----END CERTIFICATE-----Generated at Mon Nov 2 12:45:18 2026 by rpki-client