$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/6a55805f-5da8-3612-b8ab-c4a66bfae9e4.roa File: 6a55805f-5da8-3612-b8ab-c4a66bfae9e4.roa (raw, json) Hash identifier: iUXGbf2cI7uYa/OrztBTfBnz39NTpHR9G4jOvpS3cVw= Subject key identifier: BE:49:2D:DB:77:38:A7:46:B0:9A:78:8B:04:AF:E5:0C:8D:53:18:DD Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584B28C16E5F5901387623294480 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/6a55805f-5da8-3612-b8ab-c4a66bfae9e4.roa Signing time: Thu 11 Sep 2025 12:49:46 +0000 ROA not before: Thu 11 Sep 2025 12:49:46 +0000 ROA not after: Wed 10 Dec 2025 13:49:46 +0000 asID: 14114 IP address blocks: 157.133.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c1:6e:5f:59:01:38:76:23:29:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Sep 11 12:49:46 2025 GMT Not After : Dec 10 13:49:46 2025 GMT Subject: CN=ff39d940-f177-4917-a393-b6a6ffa3ddd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3e:99:98:76:36:9d:d7:7a:2e:21:4c:d8:b1: 02:5f:9a:db:45:4e:84:6d:83:e1:f2:a4:b0:fd:90: 1c:1a:51:0f:ec:4e:08:9b:0c:ba:a5:28:e6:1f:eb: 25:e5:fc:ea:64:55:42:23:bc:bb:b2:7a:59:8c:31: d6:a8:85:ed:04:77:14:14:49:85:74:ef:3a:ad:32: c1:ad:30:7f:1e:67:5f:0a:d7:46:c2:b6:1a:42:7c: 5f:36:db:f6:e1:92:63:39:b9:d0:ad:64:3e:7e:32: cc:0b:51:87:aa:1f:69:01:2c:c9:15:b0:d9:9e:82: 56:e9:c5:a3:40:bc:56:d6:2b:dd:0f:42:58:cc:db: 39:a4:27:ec:8c:35:47:e7:74:47:01:22:f5:c4:d9: b0:79:87:db:ec:a2:43:01:2a:a7:34:8a:6b:85:9f: 0e:6e:a3:59:e5:e2:6d:c1:d3:65:3e:a4:5c:c2:32: 26:5a:6a:76:f5:f0:55:6c:67:7f:af:4c:05:8f:8f: da:ff:65:3f:ae:48:a9:48:a9:1d:87:b2:b3:29:99: 32:8d:0f:c7:6b:66:31:b3:15:e8:29:12:6f:06:5d: 0e:95:96:b6:fd:66:d9:8c:46:e9:6b:59:47:1b:e9: 58:f6:cc:0e:b1:c7:69:ef:9c:01:bf:7f:85:6e:20: f1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:49:2D:DB:77:38:A7:46:B0:9A:78:8B:04:AF:E5:0C:8D:53:18:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/6a55805f-5da8-3612-b8ab-c4a66bfae9e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:be:05:94:e4:b7:31:d1:6d:03:bc:ce:7c:92:d3:92:90:9d: 0d:60:0e:f7:e2:44:bd:d5:09:bd:3a:fa:a7:d5:4b:dd:4a:3d: 82:20:1f:00:39:98:23:65:2a:f2:a2:d8:91:f6:1e:21:b5:43: c3:88:07:c7:0b:ff:d6:de:dd:4d:09:a3:1f:d2:f3:9a:f7:d1: f7:c6:62:b6:0f:95:d1:f5:40:ea:c6:c0:08:dd:a3:eb:b4:5f: fb:e0:7f:ee:d5:2e:74:7d:f8:ba:7c:ce:89:bf:53:d5:07:96: 56:82:9c:04:be:51:6b:56:90:68:b0:a5:5e:e2:80:a3:94:50: 11:af:a8:90:dd:88:84:39:b0:97:39:3d:a3:99:2a:38:78:59: a1:18:24:0a:bc:41:a2:94:4c:4d:43:e5:64:25:56:4f:60:64: 94:55:e3:2f:9a:db:37:18:88:63:43:b7:99:68:ad:21:66:18: 75:37:58:1f:f4:8d:24:a7:c3:81:93:61:8c:14:ef:21:fa:83: aa:0f:31:36:7e:ec:50:fa:6c:0b:61:a1:39:ae:d6:e6:ff:d4: 1d:cc:cd:a3:3a:68:3c:23:27:90:fb:ed:60:f8:98:7c:ec:24: 97:5a:23:20:74:17:66:6b:ea:08:12:ee:07:51:ba:82:81:15: 1b:28:65:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsowW5fWQE4diMpRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDkxMTEyNDk0NloXDTI1MTIxMDEzNDk0NlowLzEtMCsGA1UEAxMk ZmYzOWQ5NDAtZjE3Ny00OTE3LWEzOTMtYjZhNmZmYTNkZGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgj6ZmHY2ndd6LiFM2LECX5rbRU6EbYPh8qSw /ZAcGlEP7E4Imwy6pSjmH+sl5fzqZFVCI7y7snpZjDHWqIXtBHcUFEmFdO86rTLB rTB/HmdfCtdGwrYaQnxfNtv24ZJjObnQrWQ+fjLMC1GHqh9pASzJFbDZnoJW6cWj QLxW1ivdD0JYzNs5pCfsjDVH53RHASL1xNmweYfb7KJDASqnNIprhZ8ObqNZ5eJt wdNlPqRcwjImWmp29fBVbGd/r0wFj4/a/2U/rkipSKkdh7KzKZkyjQ/Ha2YxsxXo KRJvBl0OlZa2/WbZjEbpa1lHG+lY9swOscdp75wBv3+FbiDxJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5JLdt3OKdGsJp4iwSv5QyNUxjdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvNmE1NTgwNWYtNWRhOC0z NjEyLWI4YWItYzRhNjZiZmFlOWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnYVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFC+BZTktzHRbQO8znyS05KQnQ1gDvfiRL3VCb06+qfVS91KPYIgHwA5 mCNlKvKi2JH2HiG1Q8OIB8cL/9be3U0Jox/S85r30ffGYrYPldH1QOrGwAjdo+u0 X/vgf+7VLnR9+Lp8zom/U9UHllaCnAS+UWtWkGiwpV7igKOUUBGvqJDdiIQ5sJc5 PaOZKjh4WaEYJAq8QaKUTE1D5WQlVk9gZJRV4y+a2zcYiGNDt5lorSFmGHU3WB/0 jSSnw4GTYYwU7yH6g6oPMTZ+7FD6bAthoTmu1ub/1B3MzaM6aDwjJ5D77WD4mHzs JJdaIyB0F2Zr6ggS7gdRuoKBFRsoZQs= -----END CERTIFICATE-----Generated at Fri Sep 19 15:45:48 2025 by rpki-client