$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a938623e-6b7a-3f97-80a5-af568107b609.roa File: a938623e-6b7a-3f97-80a5-af568107b609.roa (raw, json) Hash identifier: m7h4487Zl8RyUhRS9haMv/1hm6kZzmAgRpGFuw2GvFQ= Subject key identifier: 18:9B:80:D5:7D:90:18:F0:F2:BF:57:9D:BD:92:D4:0D:C8:B7:B7:4B Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584B2A2C4E8350C66DA0BDDAD080 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a938623e-6b7a-3f97-80a5-af568107b609.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 35039 IP address blocks: 157.133.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:4e:83:50:c6:6d:a0:bd:da:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=2eb8b3ee-c6d3-4d2e-827f-7205271742dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e9:b5:0a:c9:8a:40:e1:d9:2f:30:51:bd:ea: 31:12:01:bd:eb:b2:eb:6e:9d:ef:28:61:71:2f:66: c1:e2:28:4c:14:a4:b5:77:06:01:f2:6d:86:d5:c4: d1:c1:79:45:2d:8f:24:f3:82:3a:b8:cc:94:3d:41: fb:67:f3:e3:cb:50:e4:dc:7e:b6:96:a5:de:91:e4: 00:48:24:04:ca:5c:73:f2:56:b3:ce:fb:b5:5c:2d: a8:9b:09:87:b2:1b:e2:b4:47:d8:0a:4c:65:42:f9: 02:80:ec:a7:37:05:cb:be:d7:7e:5b:54:80:fa:2c: 94:01:26:53:0b:78:0c:7b:84:3a:32:4c:97:fa:fc: 01:23:ae:e9:79:62:98:da:30:21:a6:5f:63:1f:63: 41:1f:dc:1f:fb:b6:80:70:cd:3c:e1:a8:ea:a4:0b: 2b:ad:44:45:81:db:a3:59:03:fb:cc:f0:7a:2b:bc: 34:12:27:e2:65:62:66:56:f5:14:8b:f5:6e:8d:7e: eb:43:0a:a4:ae:35:53:46:83:ab:e4:74:be:b9:43: c6:4a:3b:d1:55:92:14:bc:7a:3f:77:d2:54:ed:65: b8:25:c5:40:35:92:e3:25:7c:52:91:d2:fd:b1:d9: d6:3f:58:fc:ff:aa:88:fa:97:9d:65:c5:dc:d6:71: 39:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:9B:80:D5:7D:90:18:F0:F2:BF:57:9D:BD:92:D4:0D:C8:B7:B7:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a938623e-6b7a-3f97-80a5-af568107b609.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:fe:5c:e8:8e:28:e9:07:8a:0d:fb:04:98:3a:3a:36:79:35: d4:eb:01:bb:67:cc:53:ec:1e:5e:b6:30:7b:45:35:81:31:ac: 24:22:cc:5c:36:71:76:04:4e:a1:0a:84:d4:bb:92:b0:6d:51: 7c:2f:16:33:ad:44:c9:b9:d8:e0:39:51:bf:c3:d8:d9:08:f8: 8b:9e:17:78:91:d6:54:4d:9e:a9:c4:62:84:13:b2:08:26:c9: 62:77:ce:fe:df:3a:38:d8:1e:fc:10:45:69:9e:68:c3:25:19: 60:da:91:ae:92:9f:14:3f:b6:32:65:52:8a:29:38:7f:0c:0f: a1:3e:5b:5d:93:77:a5:50:c9:34:6b:6e:30:bb:ae:60:7e:3d: f7:9f:d0:c4:49:2a:a2:0f:cf:50:b3:80:bf:e1:a4:d0:92:ce: e4:01:bd:ac:85:38:d0:f3:bd:32:3f:7c:22:55:8a:ac:99:cf: 10:a3:e7:4d:0e:db:68:01:59:e2:b0:53:61:1d:77:23:93:ce: cb:23:19:d7:e1:0c:0b:c8:f4:97:f5:14:a1:76:57:38:4a:f8: b6:35:df:00:56:fd:b8:ec:8a:37:5e:89:74:01:79:f9:66:e9: 3c:af:d2:2b:e9:d6:20:1a:e6:18:43:99:9e:a8:03:51:19:dc: e0:70:55:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLE6DUMZtoL3a0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk MmViOGIzZWUtYzZkMy00ZDJlLTgyN2YtNzIwNTI3MTc0MmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+m1CsmKQOHZLzBRveoxEgG967Lrbp3vKGFx L2bB4ihMFKS1dwYB8m2G1cTRwXlFLY8k84I6uMyUPUH7Z/Pjy1Dk3H62lqXekeQA SCQEylxz8lazzvu1XC2omwmHshvitEfYCkxlQvkCgOynNwXLvtd+W1SA+iyUASZT C3gMe4Q6MkyX+vwBI67peWKY2jAhpl9jH2NBH9wf+7aAcM084ajqpAsrrURFgduj WQP7zPB6K7w0EifiZWJmVvUUi/VujX7rQwqkrjVTRoOr5HS+uUPGSjvRVZIUvHo/ d9JU7WW4JcVANZLjJXxSkdL9sdnWP1j8/6qI+pedZcXc1nE5FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBibgNV9kBjw8r9Xnb2S1A3It7dLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvYTkzODYyM2UtNmI3YS0z Zjk3LTgwYTUtYWY1NjgxMDdiNjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnYWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGP+XOiOKOkHig37BJg6OjZ5NdTrAbtnzFPsHl62MHtFNYExrCQizFw2 cXYETqEKhNS7krBtUXwvFjOtRMm52OA5Ub/D2NkI+IueF3iR1lRNnqnEYoQTsggm yWJ3zv7fOjjYHvwQRWmeaMMlGWDaka6SnxQ/tjJlUoopOH8MD6E+W12Td6VQyTRr bjC7rmB+Pfef0MRJKqIPz1CzgL/hpNCSzuQBvayFONDzvTI/fCJViqyZzxCj500O 22gBWeKwU2EddyOTzssjGdfhDAvI9Jf1FKF2VzhK+LY13wBW/bjsijdeiXQBeflm 6Tyv0ivp1iAa5hhDmZ6oA1EZ3OBwVRc= -----END CERTIFICATE-----Generated at Fri Sep 19 15:55:44 2025 by rpki-client