$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/db38879e-c78c-33bc-8a09-d58a3db0e3db.roa File: db38879e-c78c-33bc-8a09-d58a3db0e3db.roa (raw, json) Hash identifier: gOA1C5cMqI5hsONGUh/NRWyvRbHwkc2eaL0H5mUF9ms= Subject key identifier: E4:F1:04:9C:5C:AD:B3:22:61:7C:5D:5A:10:2E:F5:5E:12:E7:D7:64 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584E3A2F70E3E593914301A92840 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/db38879e-c78c-33bc-8a09-d58a3db0e3db.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 14114 IP address blocks: 157.133.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:70:e3:e5:93:91:43:01:a9:28:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=17c50ca2-cfbd-436a-9eb2-16ae93f52111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:25:ec:14:b0:09:02:a0:4d:8b:b7:db:07:38: 52:a1:d5:91:b4:ff:23:1f:d2:4c:0f:31:17:47:a4: 9b:03:08:dd:96:1f:de:54:4f:d1:17:c2:5e:98:11: 86:f7:7b:0f:4d:7b:fb:7d:68:f6:39:9c:30:ad:1f: dd:35:1e:d5:20:f3:d4:71:51:94:9e:21:4b:40:0b: 07:f6:2e:62:c2:d2:ea:f2:ab:8c:1d:d1:6a:0a:cc: ee:e6:e9:ac:ea:f4:32:0e:0e:9c:5c:54:a2:aa:5d: 6d:81:74:02:49:eb:e2:03:1d:6c:2c:40:b4:c0:28: c2:4f:e9:87:71:be:4b:01:c2:61:37:6c:91:21:57: e8:e4:65:e7:19:d8:bd:ac:5a:91:bc:84:e4:04:74: 25:d0:eb:ad:cb:71:e6:ed:2d:f0:ca:87:55:05:90: 33:57:7b:91:25:8e:54:f7:e8:a0:64:db:a3:c3:7f: f1:08:67:10:ce:fd:99:48:37:6b:0c:9a:29:8b:6f: a0:ec:51:9e:c6:08:18:a5:4f:41:8a:d2:35:ba:4d: a1:32:18:4d:c2:1f:e8:a4:38:6a:b5:e9:75:f2:c0: bf:e7:d3:41:81:7e:7a:5c:31:af:8b:87:f8:f2:d5: 40:ef:a0:fc:e1:6b:1e:53:85:89:03:94:d8:7e:ba: 5f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F1:04:9C:5C:AD:B3:22:61:7C:5D:5A:10:2E:F5:5E:12:E7:D7:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/db38879e-c78c-33bc-8a09-d58a3db0e3db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:fa:95:2b:98:1c:91:c6:80:0d:19:5b:1e:05:54:72:4d:b0: 29:42:28:80:68:c1:fb:78:03:20:f7:30:db:01:32:be:72:ac: d4:ad:da:2f:5e:03:d0:ef:1e:34:b1:14:35:a1:d7:94:3a:48: 43:c9:16:50:07:00:c9:f1:41:53:f0:9c:e3:a0:83:38:78:9e: f6:a2:0e:1c:72:6c:5a:ea:15:a7:2a:52:aa:74:bc:a5:3e:6e: a7:24:1d:be:c4:e8:1b:e4:f4:27:51:be:fa:d1:e7:d2:32:77: ed:44:58:4c:10:b6:12:d6:bc:00:7b:07:35:39:41:35:75:e1: e9:39:03:b2:00:db:c7:6a:6e:6e:b0:2e:a6:34:74:d6:90:aa: 21:15:55:4f:4a:99:a0:08:fc:bd:bc:17:8e:ed:58:9f:8b:85: c8:7a:6d:05:34:df:f2:e4:f4:7f:27:3c:19:4e:71:44:ea:3c: b5:3d:2e:f6:ac:a6:d6:10:e0:f2:ca:b1:e1:2b:79:5b:71:9a: 81:cc:a1:eb:4f:7e:e4:5d:ce:d7:2f:0b:7c:58:21:fd:a7:87: 53:60:b8:5c:65:71:59:86:77:ed:75:54:90:86:79:0d:af:0f: 0a:7c:ad:91:fc:b9:04:07:ac:0c:a1:2c:4e:c7:d3:5a:c3:bb: e3:ca:32:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE46L3Dj5ZORQwGpKEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk MTdjNTBjYTItY2ZiZC00MzZhLTllYjItMTZhZTkzZjUyMTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyXsFLAJAqBNi7fbBzhSodWRtP8jH9JMDzEX R6SbAwjdlh/eVE/RF8JemBGG93sPTXv7fWj2OZwwrR/dNR7VIPPUcVGUniFLQAsH 9i5iwtLq8quMHdFqCszu5ums6vQyDg6cXFSiql1tgXQCSeviAx1sLEC0wCjCT+mH cb5LAcJhN2yRIVfo5GXnGdi9rFqRvITkBHQl0Outy3Hm7S3wyodVBZAzV3uRJY5U 9+igZNujw3/xCGcQzv2ZSDdrDJopi2+g7FGexggYpU9BitI1uk2hMhhNwh/opDhq tel18sC/59NBgX56XDGvi4f48tVA76D84WseU4WJA5TYfrpfjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTxBJxcrbMiYXxdWhAu9V4S59dkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvZGIzODg3OWUtYzc4Yy0z M2JjLThhMDktZDU4YTNkYjBlM2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnYV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD76lSuYHJHGgA0ZWx4FVHJNsClCKIBowft4AyD3MNsBMr5yrNSt2i9e A9DvHjSxFDWh15Q6SEPJFlAHAMnxQVPwnOOggzh4nvaiDhxybFrqFacqUqp0vKU+ bqckHb7E6Bvk9CdRvvrR59Iyd+1EWEwQthLWvAB7BzU5QTV14ek5A7IA28dqbm6w LqY0dNaQqiEVVU9KmaAI/L28F47tWJ+Lhch6bQU03/Lk9H8nPBlOcUTqPLU9Lvas ptYQ4PLKseEreVtxmoHMoetPfuRdztcvC3xYIf2nh1NguFxlcVmGd+11VJCGeQ2v Dwp8rZH8uQQHrAyhLE7H01rDu+PKMoY= -----END CERTIFICATE-----Generated at Fri Jul 24 10:58:54 2026 by rpki-client