$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/32fd2aed-084b-34c3-ad42-8399607ba2b0.roa File: 32fd2aed-084b-34c3-ad42-8399607ba2b0.roa (raw, json) Hash identifier: VEQRdHNxlaKKzo9FvlS7hBfLTMWohHbgzRsE6vbRABk= Subject key identifier: 7E:A2:13:78:EC:1E:30:07:FB:05:EC:28:8A:8B:3A:B9:68:A9:97:16 Certificate issuer: /CN=8b973e20-42b5-497e-831b-66d353f928d7 Certificate serial: 010D0C9F4328584D932540981C2C51D594A148E0 Authority key identifier: 0C:A2:EB:93:3F:8C:DC:D9:88:91:5A:BD:94:65:16:32:77:02:19:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/32fd2aed-084b-34c3-ad42-8399607ba2b0.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 6341 IP address blocks: 156.76.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/8b973e20-42b5-497e-831b-66d353f928d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/8b973e20-42b5-497e-831b-66d353f928d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:40:98:1c:2c:51:d5:94:a1:48:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b973e20-42b5-497e-831b-66d353f928d7 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=cc7c989e-f005-4503-8d54-b9c69fb3a0a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f6:1f:7a:1d:7b:d7:62:d7:1c:66:28:33:41: 84:44:c5:d1:1e:7d:c1:95:25:04:58:84:ca:aa:4b: ab:6f:96:13:08:89:41:77:9b:1a:e1:58:0d:d6:75: 30:04:76:4f:1d:29:47:aa:5d:39:b8:df:11:60:0e: 6d:f2:db:10:3d:68:49:d1:5e:d7:ab:7b:86:68:29: bf:ca:79:f5:a2:a1:ef:56:b5:bd:f3:52:5e:f4:81: af:c6:7e:07:01:9f:e3:55:0a:d0:48:b9:17:5d:ce: e5:9f:f6:f8:52:b4:7c:1d:be:6f:b6:3e:24:c1:82: 33:36:20:a5:b0:b8:e4:d7:83:01:43:0e:c5:34:33: 4b:51:0b:83:4e:d4:0a:61:d0:44:3b:44:fb:3c:7b: 1a:c9:4f:07:1d:f3:1b:c3:51:77:d3:6c:d6:f4:25: dd:dc:7e:2c:7f:5a:d2:b9:aa:55:c7:52:d7:3f:04: 39:97:46:5b:fe:43:46:14:32:27:b3:39:76:90:56: 26:1e:04:4c:09:59:df:ba:82:8f:24:a4:cc:c6:55: 6b:54:36:28:70:80:39:1b:fa:7c:c8:ee:12:5e:50: 99:bd:ba:1e:5e:f1:92:93:e5:76:de:6d:db:7d:8d: 90:c6:ca:ff:62:c8:f1:86:8c:82:37:f0:57:a7:01: 5b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A2:13:78:EC:1E:30:07:FB:05:EC:28:8A:8B:3A:B9:68:A9:97:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/32fd2aed-084b-34c3-ad42-8399607ba2b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/8b973e20-42b5-497e-831b-66d353f928d7.crl X509v3 Authority Key Identifier: keyid:0C:A2:EB:93:3F:8C:DC:D9:88:91:5A:BD:94:65:16:32:77:02:19:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7.cer sbgp-ipAddrBlock: critical IPv4: 156.76.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:a9:e0:fc:39:e8:9a:90:5a:f8:a5:23:1a:d7:bb:21:f8:7c: 16:2b:1c:2c:b1:5a:72:fb:e6:16:cd:05:cb:c9:0c:f7:35:7b: e6:3a:5b:ea:45:0e:fe:c9:15:cd:e5:05:8a:32:9e:28:24:c1: 5f:2b:6b:05:6b:51:a3:78:84:59:4a:30:21:04:7e:6b:af:75: 75:63:a8:c9:04:4a:eb:7c:32:9d:d2:11:64:ed:95:90:fd:03: af:32:41:b4:78:33:a8:6c:47:09:a6:6b:ac:c7:e0:c0:f4:95: 0a:4e:e8:15:df:d9:35:04:78:52:f1:19:a2:b6:3d:34:25:1e: 6b:7b:c2:d9:6a:7d:ec:b1:94:36:b9:56:1e:a9:4c:2a:f7:58: ec:fb:84:9e:81:df:c7:43:82:3f:34:23:a8:cf:74:4a:c1:a7: ae:69:3e:8d:83:e7:95:c7:bc:58:c8:04:a2:44:91:88:72:2c: c1:d3:70:16:a0:ba:56:fc:4a:c6:76:7b:c0:d0:39:ae:35:62: af:f5:69:0c:58:29:2a:f9:8a:cd:ed:97:28:29:6e:f2:a1:75: cc:53:8b:6d:49:f0:b7:39:a0:f7:89:fc:4a:e5:ec:1c:2c:5f: 1c:bc:5f:9d:f9:47:71:c1:1d:8c:2e:1a:f0:88:8d:fb:f6:81: ba:c2:1d:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJUCYHCxR1ZShSOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI5NzNlMjAtNDJiNS00OTdlLTgzMWItNjZkMzUzZjky OGQ3MB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk Y2M3Yzk4OWUtZjAwNS00NTAzLThkNTQtYjljNjlmYjNhMGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/Yfeh1712LXHGYoM0GERMXRHn3BlSUEWITK qkurb5YTCIlBd5sa4VgN1nUwBHZPHSlHql05uN8RYA5t8tsQPWhJ0V7Xq3uGaCm/ ynn1oqHvVrW981Je9IGvxn4HAZ/jVQrQSLkXXc7ln/b4UrR8Hb5vtj4kwYIzNiCl sLjk14MBQw7FNDNLUQuDTtQKYdBEO0T7PHsayU8HHfMbw1F302zW9CXd3H4sf1rS uapVx1LXPwQ5l0Zb/kNGFDInszl2kFYmHgRMCVnfuoKPJKTMxlVrVDYocIA5G/p8 yO4SXlCZvboeXvGSk+V23m3bfY2Qxsr/YsjxhoyCN/BXpwFbewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6iE3jsHjAH+wXsKIqLOrloqZcWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84Yjk3 M2UyMC00MmI1LTQ5N2UtODMxYi02NmQzNTNmOTI4ZDcvMzJmZDJhZWQtMDg0Yi0z NGMzLWFkNDItODM5OTYwN2JhMmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOGI5NzNlMjAtNDJiNS00OTdlLTgz MWItNjZkMzUzZjkyOGQ3LzhiOTczZTIwLTQyYjUtNDk3ZS04MzFiLTY2ZDM1M2Y5 MjhkNy5jcmwwHwYDVR0jBBgwFoAUDKLrkz+M3NmIkVq9lGUWMncCGXMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84Yjk3M2UyMC00MmI1LTQ5N2UtODMxYi02NmQz NTNmOTI4ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnEwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACip4Pw56JqQWvilIxrXuyH4fBYrHCyxWnL75hbNBcvJDPc1e+Y6W+pF Dv7JFc3lBYoynigkwV8rawVrUaN4hFlKMCEEfmuvdXVjqMkESut8Mp3SEWTtlZD9 A68yQbR4M6hsRwmma6zH4MD0lQpO6BXf2TUEeFLxGaK2PTQlHmt7wtlqfeyxlDa5 Vh6pTCr3WOz7hJ6B38dDgj80I6jPdErBp65pPo2D55XHvFjIBKJEkYhyLMHTcBag ulb8SsZ2e8DQOa41Yq/1aQxYKSr5is3tlygpbvKhdcxTi21J8Lc5oPeJ/Erl7Bws Xxy8X535R3HBHYwuGvCIjfv2gbrCHZc= -----END CERTIFICATE-----Generated at Wed May 13 14:51:45 2026 by rpki-client