$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/783675a5-7ea4-3da3-a42d-7e9b6f0e7805.roa File: 783675a5-7ea4-3da3-a42d-7e9b6f0e7805.roa (raw, json) Hash identifier: /GuC2x9BGUj/mRsh4xfo5Dz+XcqF7fcnF7Rbp8TTu+8= Subject key identifier: D5:C0:15:33:D4:22:93:A4:33:F5:44:78:EA:ED:C0:C1:2A:BC:7F:F7 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584B2A2C4E47AB5460E813551B40 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/783675a5-7ea4-3da3-a42d-7e9b6f0e7805.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 35039 IP address blocks: 157.133.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:4e:47:ab:54:60:e8:13:55:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=f8c4bb63-44bd-4707-a550-b4770a698c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3e:e0:c2:e6:f2:e2:4b:d1:5c:41:26:f2:19: 7a:0b:a4:e9:2f:5d:ec:42:c9:37:4c:9a:a6:f4:6c: 37:65:81:bc:01:0b:61:49:01:ed:a2:f9:56:6c:2a: c8:62:98:68:87:69:96:63:6b:07:6a:7e:cb:e8:74: dc:65:21:b5:64:7c:ba:71:48:5e:07:65:4b:0b:80: c2:88:19:67:e5:86:38:27:5b:ed:71:66:ec:9a:e2: 81:66:7e:e4:a1:0b:62:6f:6d:31:99:13:77:72:ce: 2e:6b:f1:1a:d5:b9:d4:2b:80:5a:1d:3a:f5:9c:19: 2b:09:99:f8:7b:22:5d:eb:a5:51:00:0a:61:d4:1f: 5c:f6:fa:17:8d:8f:33:dc:a6:b7:6f:79:b0:28:4c: 70:ce:0c:3d:c0:2a:52:72:74:7f:96:6c:3b:b5:5c: 37:30:f9:8a:23:fc:57:ab:9c:6a:93:05:72:b9:71: 08:de:32:3d:75:9a:43:a4:6d:13:01:13:4b:21:3d: 27:b5:44:f8:5e:02:e5:a3:eb:aa:43:77:72:86:e0: 69:88:5a:40:32:09:19:1a:e1:ac:0e:90:6e:00:08: 85:d3:6b:ec:18:04:3b:1e:7a:47:0f:ca:df:c6:b1: 24:c1:2c:0a:50:1d:eb:47:a6:e4:04:79:ef:05:11: e0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C0:15:33:D4:22:93:A4:33:F5:44:78:EA:ED:C0:C1:2A:BC:7F:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/783675a5-7ea4-3da3-a42d-7e9b6f0e7805.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:ac:ea:ba:96:e5:5b:0e:13:93:87:63:da:53:3e:b7:bc:c8: 0d:2c:54:2f:c9:30:7d:18:af:9a:42:77:d2:37:d6:6a:00:0c: e5:e0:72:89:a0:08:6b:b9:1b:84:fe:02:33:5c:b8:15:c6:48: 51:f0:98:88:00:6b:6c:1d:9a:7f:6e:45:03:43:8a:49:7c:8b: 39:42:82:a4:42:49:d5:b0:87:ce:b2:5a:90:d3:5b:f2:e1:69: 1a:84:18:c8:bc:e1:9e:ae:36:d6:f3:5e:41:7b:35:bf:a4:90: c0:bd:1a:9e:f7:f7:b5:0b:b0:48:b2:e6:1a:6e:97:1d:22:96: b5:d4:79:e3:66:53:e8:c2:02:81:01:7e:cb:0c:a6:12:79:e0: dd:90:5e:28:97:7c:d0:7e:a3:27:67:bc:88:11:18:01:54:4b: 75:80:c3:32:e1:d1:a0:10:e9:63:bd:60:66:ed:80:68:ee:6f: 3d:64:4c:ed:f9:2d:f8:d2:f6:ec:24:a0:af:a7:86:6f:26:87: 88:2d:db:b9:7c:bd:2f:81:5b:38:35:b5:4f:81:28:f9:69:64: 61:68:2c:a1:0e:f9:27:af:8e:b8:c2:7d:df:ff:76:ef:1f:d2: b4:76:3a:99:d1:c7:44:b6:56:6a:af:5e:a0:45:42:8a:db:0b: 19:ea:39:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLE5Hq1Rg6BNVG0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk ZjhjNGJiNjMtNDRiZC00NzA3LWE1NTAtYjQ3NzBhNjk4YzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT7gwuby4kvRXEEm8hl6C6TpL13sQsk3TJqm 9Gw3ZYG8AQthSQHtovlWbCrIYphoh2mWY2sHan7L6HTcZSG1ZHy6cUheB2VLC4DC iBln5YY4J1vtcWbsmuKBZn7koQtib20xmRN3cs4ua/Ea1bnUK4BaHTr1nBkrCZn4 eyJd66VRAAph1B9c9voXjY8z3Ka3b3mwKExwzgw9wCpScnR/lmw7tVw3MPmKI/xX q5xqkwVyuXEI3jI9dZpDpG0TARNLIT0ntUT4XgLlo+uqQ3dyhuBpiFpAMgkZGuGs DpBuAAiF02vsGAQ7HnpHD8rfxrEkwSwKUB3rR6bkBHnvBRHgEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXAFTPUIpOkM/VEeOrtwMEqvH/3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvNzgzNjc1YTUtN2VhNC0z ZGEzLWE0MmQtN2U5YjZmMGU3ODA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnYVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABes6rqW5VsOE5OHY9pTPre8yA0sVC/JMH0Yr5pCd9I31moADOXgcomg CGu5G4T+AjNcuBXGSFHwmIgAa2wdmn9uRQNDikl8izlCgqRCSdWwh86yWpDTW/Lh aRqEGMi84Z6uNtbzXkF7Nb+kkMC9Gp7397ULsEiy5hpulx0ilrXUeeNmU+jCAoEB fssMphJ54N2QXiiXfNB+oydnvIgRGAFUS3WAwzLh0aAQ6WO9YGbtgGjubz1kTO35 LfjS9uwkoK+nhm8mh4gt27l8vS+BWzg1tU+BKPlpZGFoLKEO+SevjrjCfd//du8f 0rR2OpnRx0S2VmqvXqBFQorbCxnqOXo= -----END CERTIFICATE-----Generated at Fri Sep 19 14:19:43 2025 by rpki-client