$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/88ed4f19-4672-38c3-b88f-52f18d484770.roa File: 88ed4f19-4672-38c3-b88f-52f18d484770.roa (raw, json) Hash identifier: m1m5SRRNSIzIa4Q8evxbCkXBJXUtH9zV1yAXFaiRjy8= Subject key identifier: 52:DB:D4:BB:36:2B:43:A4:2B:C1:1F:63:FE:C4:F6:04:D6:0E:2D:B4 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584D300A43B60C45B01D74C1D1D0 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/88ed4f19-4672-38c3-b88f-52f18d484770.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 14114 IP address blocks: 157.133.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:43:b6:0c:45:b0:1d:74:c1:d1:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=0a22f3dc-9c0c-45b4-b2ea-85b8ec9cf9c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4d:e9:0c:e4:7e:4d:a0:60:3e:e4:25:6d:57: fb:21:b8:4a:89:de:f5:2c:cc:66:ba:3f:aa:d7:0b: 5a:66:e1:51:28:c5:47:dd:e5:cc:8f:f2:b9:5f:49: 2a:05:a7:39:12:a4:1f:78:2d:6c:65:bd:6a:07:a3: eb:3c:5e:c0:30:99:81:74:97:77:6e:29:65:1d:ae: ed:9b:6d:d4:33:96:fc:81:71:c9:b9:10:8c:13:9b: 4a:3d:b1:e0:70:aa:41:f3:f2:f4:8b:5b:77:e3:8c: 1d:46:e8:86:8a:96:b2:09:4a:cf:e8:f3:c2:67:59: 9c:1e:be:ec:da:26:49:08:1a:7a:7d:3c:3d:80:8b: d1:83:39:d7:75:1f:e9:c7:36:65:d5:a9:dd:79:f7: 54:94:d9:a4:c7:bd:56:34:07:db:d4:49:46:70:a3: 4c:5c:e8:27:54:30:1a:80:b7:bc:db:1b:bd:e5:ef: 3c:47:29:27:77:8d:04:c5:a3:6e:f5:7e:04:7d:38: 70:f2:d2:53:80:14:7e:fe:95:6d:6d:1e:4b:13:85: 56:1b:de:82:73:5f:11:ab:03:43:aa:00:aa:6b:b6: c1:26:80:e5:53:f7:3f:37:3f:e1:83:69:3c:90:56: 98:23:ef:aa:7c:3f:01:41:11:ab:a0:0c:ff:5f:e4: c0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:DB:D4:BB:36:2B:43:A4:2B:C1:1F:63:FE:C4:F6:04:D6:0E:2D:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/88ed4f19-4672-38c3-b88f-52f18d484770.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:18:e3:3d:9f:2f:a8:a4:a6:e4:c4:db:88:28:ae:4a:e5:95: 7f:d0:86:7a:74:a5:57:8a:1a:bd:95:ac:90:7c:47:bd:f3:a7: d8:32:c6:c6:37:9e:5c:7a:84:d0:3d:85:b2:f4:df:f0:ef:82: 94:d9:4b:93:ac:ae:95:7e:7c:5f:f1:70:ce:54:83:be:54:dc: ad:00:b2:23:85:44:24:a0:3b:cd:56:e8:85:07:67:73:4c:8a: 66:3f:40:8f:a3:dd:5e:3a:bc:db:fa:14:82:36:ba:7f:9a:71: 24:86:cf:af:c3:47:5c:a6:71:51:f8:76:d1:af:6f:12:53:a1: bc:ee:d2:89:40:48:44:1e:b4:2c:d9:e2:99:f0:25:c3:ea:cc: c5:b6:44:98:49:d9:b5:20:04:25:0d:e6:39:92:10:3b:44:42: a8:01:24:01:a8:1d:6e:63:d2:de:64:5b:68:07:1a:4a:f5:ed: df:10:55:d6:19:f4:68:36:98:d0:62:1d:7a:1b:1e:c3:e1:4b: 4c:54:4a:20:90:26:44:d6:b1:f5:2f:57:cd:36:ad:ae:52:61: e6:68:4b:7d:40:68:ca:10:c6:53:0a:44:32:a2:46:23:be:79: 24:d2:f9:17:11:fc:65:5f:5f:50:f9:8f:95:bd:e7:70:47:09: e7:78:d4:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCkO2DEWwHXTB0dAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MGEyMmYzZGMtOWMwYy00NWI0LWIyZWEtODViOGVjOWNmOWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApU3pDOR+TaBgPuQlbVf7IbhKid71LMxmuj+q 1wtaZuFRKMVH3eXMj/K5X0kqBac5EqQfeC1sZb1qB6PrPF7AMJmBdJd3billHa7t m23UM5b8gXHJuRCME5tKPbHgcKpB8/L0i1t344wdRuiGipayCUrP6PPCZ1mcHr7s 2iZJCBp6fTw9gIvRgznXdR/pxzZl1andefdUlNmkx71WNAfb1ElGcKNMXOgnVDAa gLe82xu95e88Ryknd40ExaNu9X4EfThw8tJTgBR+/pVtbR5LE4VWG96Cc18RqwND qgCqa7bBJoDlU/c/Nz/hg2k8kFaYI++qfD8BQRGroAz/X+TAgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLb1Ls2K0OkK8EfY/7E9gTWDi20MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvODhlZDRmMTktNDY3Mi0z OGMzLWI4OGYtNTJmMThkNDg0NzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnYU0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAY4z2fL6ikpuTE24gorkrllX/Qhnp0pVeKGr2VrJB8R73zp9gyxsY3 nlx6hNA9hbL03/DvgpTZS5OsrpV+fF/xcM5Ug75U3K0AsiOFRCSgO81W6IUHZ3NM imY/QI+j3V46vNv6FII2un+acSSGz6/DR1ymcVH4dtGvbxJTobzu0olASEQetCzZ 4pnwJcPqzMW2RJhJ2bUgBCUN5jmSEDtEQqgBJAGoHW5j0t5kW2gHGkr17d8QVdYZ 9Gg2mNBiHXobHsPhS0xUSiCQJkTWsfUvV802ra5SYeZoS31AaMoQxlMKRDKiRiO+ eSTS+RcR/GVfX1D5j5W953BHCed41NQ= -----END CERTIFICATE-----Generated at Thu Mar 26 16:22:03 2026 by rpki-client