$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/649b71e4-17ec-3f1a-bac5-73a5388888f5.roa File: 649b71e4-17ec-3f1a-bac5-73a5388888f5.roa (raw, json) Hash identifier: Jo+qsCIO24NlCNjjVyzUau7tIkkk0dS91oWK6EzYoMw= Subject key identifier: E6:70:A4:4F:A7:83:36:B3:BB:2A:0F:8E:01:A8:11:60:56:08:56:18 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584B28C2B61777D99847E9107000 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/649b71e4-17ec-3f1a-bac5-73a5388888f5.roa Signing time: Thu 11 Sep 2025 12:52:21 +0000 ROA not before: Thu 11 Sep 2025 12:52:21 +0000 ROA not after: Wed 10 Dec 2025 13:52:21 +0000 asID: 14114 IP address blocks: 157.133.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c2:b6:17:77:d9:98:47:e9:10:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Sep 11 12:52:21 2025 GMT Not After : Dec 10 13:52:21 2025 GMT Subject: CN=1a6c80b1-3be0-4b4b-9181-94602546347a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:60:4c:d7:24:06:6a:51:b5:e4:96:6f:dd:bd: 69:2e:2c:f6:dd:a2:d3:0e:f3:62:7f:9e:82:85:3f: 90:77:97:5f:25:52:e6:0c:c5:16:ac:9c:dd:a7:42: 5e:13:ee:be:06:1b:d7:0a:e2:ee:21:d6:12:43:69: bb:67:28:9e:6f:d8:ad:70:37:d0:a8:14:b3:3b:94: f3:91:22:26:08:aa:bf:b1:43:ce:e1:b3:2d:43:25: 82:5d:3e:18:b5:63:83:9c:63:ec:7d:bf:8e:2f:c4: 8e:05:28:fb:9a:0d:d1:30:df:7b:51:3b:70:b6:5c: cc:6b:32:03:cc:0b:f0:5f:76:3e:4c:71:ed:85:43: 39:bd:f9:6e:02:ae:29:74:a6:e9:ba:0e:df:10:8b: b8:23:e9:4b:55:a2:1f:60:2a:43:e1:57:ba:6c:a8: 78:11:4e:db:95:27:a3:21:3b:dc:e8:d0:36:d7:27: 3a:47:d5:15:83:57:b1:02:5f:cc:32:11:a1:5c:e1: 43:3a:ed:41:f8:16:96:43:05:ec:57:67:73:23:29: 4a:b5:53:ed:d8:26:c2:ce:f9:dc:ff:d9:a9:0e:97: d0:41:c4:36:99:f0:2b:31:e6:86:a1:e5:cd:cc:d7: f8:11:cd:dd:98:a2:0e:21:7b:f1:93:60:d9:94:3a: fd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:70:A4:4F:A7:83:36:B3:BB:2A:0F:8E:01:A8:11:60:56:08:56:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/649b71e4-17ec-3f1a-bac5-73a5388888f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:78:e7:bd:c6:c9:09:70:bb:af:7c:1a:3f:00:4d:15:c3:c2: f2:dc:8a:a1:e1:c3:89:0d:40:3b:a0:ac:de:06:a1:a0:12:56: a4:89:e3:ff:8f:15:88:92:1b:7d:13:49:9d:f8:4a:5c:4d:f5: 9b:97:e4:b8:e9:e4:80:a7:8b:d8:d6:47:14:af:ba:37:6e:34: 60:1a:b5:35:33:22:76:c0:26:c4:b6:05:14:ce:32:bf:e8:2f: f7:35:bc:c1:bf:77:13:07:e2:86:53:91:d4:ce:90:34:ae:b6: ce:80:fb:a9:c0:2d:cc:eb:60:2e:26:b4:56:e8:b8:4a:a8:fa: db:5b:b0:19:1e:86:50:8d:8b:bd:05:7c:3f:ea:58:34:2c:9e: 75:26:e2:95:c7:5a:10:2a:52:27:a6:fb:5e:44:66:f5:66:77: f9:ba:6b:61:4e:9b:d5:dd:2c:f3:fb:76:e4:d8:58:fe:a6:8d: c0:d0:51:a0:8b:e3:41:a0:f6:2b:35:53:44:70:5e:aa:8e:f2: e5:c0:0e:71:54:81:a2:b0:4f:ea:54:35:86:4a:b8:cf:9a:a3: 97:a1:27:c0:c6:fe:98:a6:da:9b:5f:74:93:ef:1d:b9:3b:f4: 25:9d:cc:f2:d1:fe:2a:6f:95:1e:14:34:2d:8d:bc:47:4d:76: 09:67:39:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsowrYXd9mYR+kQcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDkxMTEyNTIyMVoXDTI1MTIxMDEzNTIyMVowLzEtMCsGA1UEAxMk MWE2YzgwYjEtM2JlMC00YjRiLTkxODEtOTQ2MDI1NDYzNDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2BM1yQGalG15JZv3b1pLiz23aLTDvNif56C hT+Qd5dfJVLmDMUWrJzdp0JeE+6+BhvXCuLuIdYSQ2m7Zyieb9itcDfQqBSzO5Tz kSImCKq/sUPO4bMtQyWCXT4YtWODnGPsfb+OL8SOBSj7mg3RMN97UTtwtlzMazID zAvwX3Y+THHthUM5vfluAq4pdKbpug7fEIu4I+lLVaIfYCpD4Ve6bKh4EU7blSej ITvc6NA21yc6R9UVg1exAl/MMhGhXOFDOu1B+BaWQwXsV2dzIylKtVPt2CbCzvnc /9mpDpfQQcQ2mfArMeaGoeXNzNf4Ec3dmKIOIXvxk2DZlDr9wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZwpE+ngzazuyoPjgGoEWBWCFYYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvNjQ5YjcxZTQtMTdlYy0z ZjFhLWJhYzUtNzNhNTM4ODg4OGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnYW4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZ4573GyQlwu698Gj8ATRXDwvLciqHhw4kNQDugrN4GoaASVqSJ4/+P FYiSG30TSZ34SlxN9ZuX5Ljp5ICni9jWRxSvujduNGAatTUzInbAJsS2BRTOMr/o L/c1vMG/dxMH4oZTkdTOkDSuts6A+6nALczrYC4mtFbouEqo+ttbsBkehlCNi70F fD/qWDQsnnUm4pXHWhAqUiem+15EZvVmd/m6a2FOm9XdLPP7duTYWP6mjcDQUaCL 40Gg9is1U0RwXqqO8uXADnFUgaKwT+pUNYZKuM+ao5ehJ8DG/pim2ptfdJPvHbk7 9CWdzPLR/ipvlR4UNC2NvEdNdglnOZ4= -----END CERTIFICATE-----Generated at Fri Sep 19 14:20:26 2025 by rpki-client