$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/33af3755-83aa-37f9-a9bb-2c92fb09f2b9.roa File: 33af3755-83aa-37f9-a9bb-2c92fb09f2b9.roa (raw, json) Hash identifier: CR+9CplcVG5mgKOL4oV4Cm/cxSzl201KBkTCRAVmDtI= Subject key identifier: 5F:41:77:4F:FD:89:DC:D9:F6:FA:92:19:35:0D:CB:0C:2F:1C:E2:9B Certificate issuer: /CN=2026b921-2d83-4f47-a24e-db9a3c451c72 Certificate serial: 010D0C9F4328584B08ABED64E53413B092F09F00 Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/33af3755-83aa-37f9-a9bb-2c92fb09f2b9.roa Signing time: Sun 31 Aug 2025 01:00:33 +0000 ROA not before: Sun 31 Aug 2025 01:00:33 +0000 ROA not after: Sat 29 Nov 2025 02:00:33 +0000 asID: 2648 IP address blocks: 132.163.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:08:ab:ed:64:e5:34:13:b0:92:f0:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72 Validity Not Before: Aug 31 01:00:33 2025 GMT Not After : Nov 29 02:00:33 2025 GMT Subject: CN=447a55f8-467e-4bed-af6b-7ae62cb0883d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e9:bb:a7:c4:f9:21:7c:fd:45:cf:0d:d3:63: 49:9a:cf:25:e8:b3:59:48:5f:c2:1c:9a:ed:70:98: eb:d9:13:eb:d8:34:0f:ee:d3:11:45:dc:2c:39:74: f3:5a:7f:98:83:7e:d7:26:e7:67:94:31:f6:8d:10: a2:2e:cf:be:33:f6:82:b5:fd:48:21:6b:5a:d5:e5: 13:90:e5:95:4c:9b:a0:44:42:52:ca:1b:a8:e0:5a: 7f:37:bc:e4:e4:20:a3:40:d1:73:5a:d0:cb:b2:25: de:15:ed:48:bf:15:a2:27:16:1e:26:c6:88:49:76: ca:79:80:b7:45:b9:63:e4:ec:90:e4:4a:42:56:f5: b4:4f:24:e0:7c:7e:df:1e:5f:06:91:8a:23:70:07: d9:26:1a:9b:1d:15:a2:67:bc:ec:dd:e0:82:43:ca: 88:50:c7:1c:cd:9f:03:1f:d0:07:95:9b:f9:c7:82: 5c:d0:56:e1:a7:e6:03:40:6b:65:50:0c:af:f1:aa: bd:24:e7:dd:c0:bc:19:11:37:d4:0b:52:15:3b:ca: a4:bc:31:c4:59:8f:10:1f:00:49:4e:18:23:88:61: ee:d8:f4:b3:17:a5:70:d8:51:dc:21:6b:3d:a9:93: 24:ba:04:d6:71:b1:70:48:d5:b9:8c:e7:a9:56:0e: b2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:41:77:4F:FD:89:DC:D9:F6:FA:92:19:35:0D:CB:0C:2F:1C:E2:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/33af3755-83aa-37f9-a9bb-2c92fb09f2b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl X509v3 Authority Key Identifier: keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer sbgp-ipAddrBlock: critical IPv4: 132.163.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:92:d7:b7:13:28:97:bb:37:34:ac:9d:3e:88:89:2d:73:e0: 7d:88:0b:a2:1f:76:51:94:f3:45:4a:53:e3:16:81:5b:0f:72: 1e:26:69:b4:e8:b6:47:0f:59:fb:fc:dc:6f:af:cd:7a:ee:8d: dd:a7:fc:a1:17:b9:04:41:7c:af:79:40:dc:12:e0:12:cd:07: 83:45:06:c0:94:f1:8d:3e:e2:b7:8c:26:b1:22:00:a1:f4:73: d6:c0:e9:f5:d4:d6:0e:58:d2:59:51:50:12:15:f9:07:60:0c: e6:b4:23:33:28:12:e8:56:14:22:93:30:3e:37:90:ec:75:a4: da:94:0f:5f:af:26:93:ee:5d:88:4e:9f:e9:06:b4:53:e8:a9: d0:a4:6e:8f:c2:42:4b:36:5e:76:d1:d0:6c:7f:84:43:3a:06: c2:35:7d:dc:fd:7a:48:d6:9e:23:23:da:ca:50:1d:f6:f8:e4: 6d:39:11:e1:44:66:5b:86:db:06:60:34:95:b9:8f:c6:78:2d: 64:51:e8:6b:f7:b7:76:bf:32:13:d2:8d:b6:62:cb:a9:75:37: 02:53:d7:3e:76:bf:20:b0:e6:d2:3f:53:66:cc:3e:88:53:36: 70:8b:c9:22:3f:cd:bf:4d:8e:f2:61:68:de:b8:25:a0:b8:7b: 12:75:97:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsIq+1k5TQTsJLwnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjAyNmI5MjEtMmQ4My00ZjQ3LWEyNGUtZGI5YTNjNDUx YzcyMB4XDTI1MDgzMTAxMDAzM1oXDTI1MTEyOTAyMDAzM1owLzEtMCsGA1UEAxMk NDQ3YTU1ZjgtNDY3ZS00YmVkLWFmNmItN2FlNjJjYjA4ODNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOm7p8T5IXz9Rc8N02NJms8l6LNZSF/CHJrt cJjr2RPr2DQP7tMRRdwsOXTzWn+Yg37XJudnlDH2jRCiLs++M/aCtf1IIWta1eUT kOWVTJugREJSyhuo4Fp/N7zk5CCjQNFzWtDLsiXeFe1IvxWiJxYeJsaISXbKeYC3 Rblj5OyQ5EpCVvW0TyTgfH7fHl8GkYojcAfZJhqbHRWiZ7zs3eCCQ8qIUMcczZ8D H9AHlZv5x4Jc0Fbhp+YDQGtlUAyv8aq9JOfdwLwZETfUC1IVO8qkvDHEWY8QHwBJ ThgjiGHu2PSzF6Vw2FHcIWs9qZMkugTWcbFwSNW5jOepVg6y3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9Bd0/9idzZ9vqSGTUNywwvHOKbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMDI2 YjkyMS0yZDgzLTRmNDctYTI0ZS1kYjlhM2M0NTFjNzIvMzNhZjM3NTUtODNhYS0z N2Y5LWE5YmItMmM5MmZiMDlmMmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjAyNmI5MjEtMmQ4My00ZjQ3LWEy NGUtZGI5YTNjNDUxYzcyLzIwMjZiOTIxLTJkODMtNGY0Ny1hMjRlLWRiOWEzYzQ1 MWM3Mi5jcmwwHwYDVR0jBBgwFoAUENGlJYMMmJF8ba+R1WwuX/ctfWMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMDI2YjkyMS0yZDgzLTRmNDctYTI0ZS1kYjlh M2M0NTFjNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhKNIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6S17cTKJe7NzSsnT6IiS1z4H2IC6IfdlGU80VKU+MWgVsPch4mabTo tkcPWfv83G+vzXrujd2n/KEXuQRBfK95QNwS4BLNB4NFBsCU8Y0+4reMJrEiAKH0 c9bA6fXU1g5Y0llRUBIV+QdgDOa0IzMoEuhWFCKTMD43kOx1pNqUD1+vJpPuXYhO n+kGtFPoqdCkbo/CQks2XnbR0Gx/hEM6BsI1fdz9ekjWniMj2spQHfb45G05EeFE ZluG2wZgNJW5j8Z4LWRR6Gv3t3a/MhPSjbZiy6l1NwJT1z52vyCw5tI/U2bMPohT NnCLySI/zb9NjvJhaN64JaC4exJ1l90= -----END CERTIFICATE-----Generated at Fri Oct 10 03:52:09 2025 by rpki-client