$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/ef1e4110-b1ac-33d7-98d6-4e76bf66126d.roa File: ef1e4110-b1ac-33d7-98d6-4e76bf66126d.roa (raw, json) Hash identifier: p73O3cryftiHOmC8MplG9IozD+/JtV742T/Ze//MjE8= Subject key identifier: 7D:C7:02:D7:8D:E7:7B:16:77:AC:45:DE:2E:91:3A:8A:B4:B5:62:A4 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584D300A36CBC548E28F2F5036E0 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/ef1e4110-b1ac-33d7-98d6-4e76bf66126d.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 14114 IP address blocks: 157.133.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:36:cb:c5:48:e2:8f:2f:50:36:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=a35ab22b-0648-4fed-ab84-701f94a702b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9c:bd:93:bd:8a:33:1e:74:6a:84:61:cb:04: ca:e4:ad:ae:65:d1:b2:77:a8:f8:de:27:05:e4:e0: 70:4a:53:e4:b0:45:32:6f:a1:8a:a6:29:93:27:5f: 89:50:58:66:49:41:84:69:8f:d0:41:3d:be:9d:39: cf:f3:38:67:03:d2:87:e2:33:27:de:31:74:74:a7: e6:64:02:8f:8c:e0:7a:27:34:6d:31:fd:24:40:38: f4:44:fa:dc:ee:28:f2:e5:61:a2:3c:dc:23:bb:9d: d8:62:fa:ba:f3:4e:ce:4d:f6:38:aa:1e:d9:b7:d6: 1a:bd:52:f2:f4:24:7d:41:1f:fa:17:f6:7c:91:bf: 51:d4:fd:39:bd:95:92:2d:e0:6e:07:a9:75:eb:94: a6:7c:93:3c:b2:56:56:12:4b:2c:d8:d4:ae:5c:d5: 00:84:0d:40:a4:76:9d:ef:61:c0:36:f3:71:eb:82: 2b:c7:01:6d:6e:66:6f:69:6f:13:c6:d2:71:36:7a: 07:ee:84:a8:6a:a0:3d:9f:42:b5:11:23:f9:b4:aa: e7:fd:e0:21:f4:07:f7:81:96:4e:ca:77:dc:f3:5d: e0:1a:ca:f9:d4:cd:81:c5:29:28:a6:ca:eb:e0:28: b7:45:44:d0:c3:2d:ab:0a:6f:04:d5:ef:46:1e:ee: 5b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C7:02:D7:8D:E7:7B:16:77:AC:45:DE:2E:91:3A:8A:B4:B5:62:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/ef1e4110-b1ac-33d7-98d6-4e76bf66126d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:f5:c7:35:58:5f:a1:8f:95:0c:86:84:68:42:a1:b8:86:81: b8:7d:2d:a5:a4:84:af:0c:34:9d:9e:fc:11:4c:f1:42:51:be: 2e:36:a4:0c:f4:09:4d:9e:22:b9:cd:d9:d2:48:6b:3f:89:59: 00:7e:b9:e6:fa:94:cd:75:9c:49:be:75:43:ae:f9:96:92:ab: 09:86:81:4a:9e:f9:22:d3:ac:36:56:cb:0d:67:71:40:27:81: 96:3e:21:bb:fc:06:e9:1f:6e:5d:a2:36:20:cb:ad:c4:db:08: 2f:6d:91:49:0d:81:66:05:27:90:ce:a6:47:d9:2a:29:0a:01: 26:06:f0:08:ab:e8:de:2b:f5:c0:2c:c8:15:ca:a2:0a:77:68: 22:84:8e:06:16:9e:d5:0f:09:4f:75:e7:56:b7:04:84:c2:74: 85:f0:70:b3:af:ed:b6:96:bd:4b:bd:ed:cf:01:65:66:a1:77: 0f:7b:f8:c0:3c:84:98:10:c4:3b:5f:83:45:78:fd:77:83:9a: 7a:78:66:a5:bf:86:06:db:dd:c3:ba:2e:56:cd:94:90:25:6c: 02:5b:8f:82:fc:7f:7a:56:d2:3f:ac:c1:c1:f7:30:ac:78:a5: f3:1b:8e:87:4f:85:0e:49:46:8b:cb:aa:e6:53:b9:dc:39:18: 91:2b:90:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCjbLxUjijy9QNuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YTM1YWIyMmItMDY0OC00ZmVkLWFiODQtNzAxZjk0YTcwMmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Jy9k72KMx50aoRhywTK5K2uZdGyd6j43icF 5OBwSlPksEUyb6GKpimTJ1+JUFhmSUGEaY/QQT2+nTnP8zhnA9KH4jMn3jF0dKfm ZAKPjOB6JzRtMf0kQDj0RPrc7ijy5WGiPNwju53YYvq6807OTfY4qh7Zt9YavVLy 9CR9QR/6F/Z8kb9R1P05vZWSLeBuB6l165SmfJM8slZWEkss2NSuXNUAhA1ApHad 72HANvNx64IrxwFtbmZvaW8TxtJxNnoH7oSoaqA9n0K1ESP5tKrn/eAh9Af3gZZO ynfc813gGsr51M2BxSkopsrr4Ci3RUTQwy2rCm8E1e9GHu5b7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3HAteN53sWd6xF3i6ROoq0tWKkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvZWYxZTQxMTAtYjFhYy0z M2Q3LTk4ZDYtNGU3NmJmNjYxMjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnYUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABD1xzVYX6GPlQyGhGhCobiGgbh9LaWkhK8MNJ2e/BFM8UJRvi42pAz0 CU2eIrnN2dJIaz+JWQB+ueb6lM11nEm+dUOu+ZaSqwmGgUqe+SLTrDZWyw1ncUAn gZY+Ibv8Bukfbl2iNiDLrcTbCC9tkUkNgWYFJ5DOpkfZKikKASYG8Air6N4r9cAs yBXKogp3aCKEjgYWntUPCU9151a3BITCdIXwcLOv7baWvUu97c8BZWahdw97+MA8 hJgQxDtfg0V4/XeDmnp4ZqW/hgbb3cO6LlbNlJAlbAJbj4L8f3pW0j+swcH3MKx4 pfMbjodPhQ5JRovLquZTudw5GJErkBM= -----END CERTIFICATE-----Generated at Thu Mar 26 17:51:17 2026 by rpki-client