$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/02fd6998-8257-3284-8895-0fa240a0be15.roa File: 02fd6998-8257-3284-8895-0fa240a0be15.roa (raw, json) Hash identifier: PeGV6T1f0SnG61icDT1kCmF7J9Ump5Kr+BrCv4LqVmU= Subject key identifier: 9B:99:46:D4:B3:D7:0F:1C:89:52:E4:51:A7:20:6B:14:49:7C:D7:5A Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584B56D722EF048CC5DFBD01FB80 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/02fd6998-8257-3284-8895-0fa240a0be15.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 14114 IP address blocks: 157.133.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:22:ef:04:8c:c5:df:bd:01:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=ce1a7c70-02db-4178-93f3-a40661f4d2f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:44:58:7c:76:cd:cc:d3:d8:26:a5:7c:a0:f4: 3b:ac:cd:a6:f4:e4:eb:93:96:dc:64:57:86:d5:95: 67:f7:00:52:51:f8:f2:d8:28:fb:b8:e6:ee:71:04: b6:7d:a1:91:19:df:a4:25:e8:e0:21:95:4a:0c:60: 04:e9:5e:65:16:58:a9:1d:88:6c:ba:9e:bc:e5:b6: c5:41:c1:82:8f:71:e4:9b:26:1e:a5:9f:ca:1a:02: 52:b2:ae:5e:20:10:af:0a:a2:c7:f6:7d:b8:f9:c7: 11:57:30:d1:ef:e2:35:06:51:de:8a:c6:8e:5b:d7: 94:b3:76:d6:ee:5b:df:d9:96:f8:a2:8b:48:97:e2: e4:22:24:df:87:97:60:29:c4:60:55:06:39:22:19: 48:59:32:2c:c2:41:c9:aa:29:6c:25:ba:e7:86:cd: eb:9a:7b:8f:65:8f:93:48:f1:92:d3:0c:88:a2:2c: a4:61:2e:fe:a4:f3:9a:c9:92:31:5d:0f:4a:e2:b4: ce:c9:be:35:db:4d:80:35:de:3f:9a:49:52:39:f5: ea:31:c6:9f:52:ee:f7:9c:e9:5e:4a:15:4b:2a:df: 55:62:3e:da:f6:91:10:6e:7c:6c:df:f6:ed:07:8a: 8b:76:3c:12:a2:11:db:dd:92:74:5d:d1:56:16:c7: 2d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:99:46:D4:B3:D7:0F:1C:89:52:E4:51:A7:20:6B:14:49:7C:D7:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/02fd6998-8257-3284-8895-0fa240a0be15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:fb:27:f1:94:14:04:6c:9f:fe:76:3a:d0:17:bd:72:4f:10: 7f:57:cc:98:26:0c:69:86:0f:6f:0e:66:66:2b:8b:71:6e:1c: 4c:53:c9:e8:6f:6b:06:e7:e0:db:48:28:7d:db:9b:89:9b:cb: 08:ea:a8:57:93:01:c1:5a:8a:11:ee:1c:16:fd:09:fa:1c:dc: 42:5d:ae:e1:a6:1b:5e:88:87:5b:b5:53:27:e9:5f:cb:8d:d6: b4:3a:0c:fe:e2:f9:67:eb:69:25:ec:05:2e:32:b9:c0:1f:9f: 32:2b:d8:bb:66:21:92:6e:c2:16:00:a4:fe:e0:22:24:72:ee: b8:53:06:b1:a5:67:6e:3c:e6:47:59:a2:34:e1:36:dd:4c:89: b9:fc:80:79:22:b9:de:81:94:de:87:92:bf:e1:26:77:db:51: e9:ad:16:e1:c3:74:29:fb:ba:85:3a:65:f2:0a:48:7a:9e:78: ae:9c:ee:47:f3:a5:83:c4:8e:2d:61:c4:6b:b8:27:3d:d5:f6: e4:ec:e7:2b:7d:62:a1:36:01:db:83:b1:a8:46:79:da:7c:53: 37:61:36:83:83:b8:02:ad:91:b2:98:b9:98:b6:0b:f9:0f:87: 39:1d:36:2a:b4:c0:d9:cc:d9:b7:0b:b8:89:06:e4:f3:67:82: 9f:d0:94:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1yLvBIzF370B+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk Y2UxYTdjNzAtMDJkYi00MTc4LTkzZjMtYTQwNjYxZjRkMmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmERYfHbNzNPYJqV8oPQ7rM2m9OTrk5bcZFeG 1ZVn9wBSUfjy2Cj7uObucQS2faGRGd+kJejgIZVKDGAE6V5lFlipHYhsup685bbF QcGCj3HkmyYepZ/KGgJSsq5eIBCvCqLH9n24+ccRVzDR7+I1BlHeisaOW9eUs3bW 7lvf2Zb4ootIl+LkIiTfh5dgKcRgVQY5IhlIWTIswkHJqilsJbrnhs3rmnuPZY+T SPGS0wyIoiykYS7+pPOayZIxXQ9K4rTOyb41202ANd4/mklSOfXqMcafUu73nOle ShVLKt9VYj7a9pEQbnxs3/btB4qLdjwSohHb3ZJ0XdFWFsctCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJuZRtSz1w8ciVLkUacgaxRJfNdaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvMDJmZDY5OTgtODI1Ny0z Mjg0LTg4OTUtMGZhMjQwYTBiZTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnYWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABb7J/GUFARsn/52OtAXvXJPEH9XzJgmDGmGD28OZmYri3FuHExTyehv awbn4NtIKH3bm4mbywjqqFeTAcFaihHuHBb9Cfoc3EJdruGmG16Ih1u1UyfpX8uN 1rQ6DP7i+WfraSXsBS4yucAfnzIr2LtmIZJuwhYApP7gIiRy7rhTBrGlZ2485kdZ ojThNt1Mibn8gHkiud6BlN6Hkr/hJnfbUemtFuHDdCn7uoU6ZfIKSHqeeK6c7kfz pYPEji1hxGu4Jz3V9uTs5yt9YqE2AduDsahGedp8UzdhNoODuAKtkbKYuZi2C/kP hzkdNiq0wNnM2bcLuIkG5PNngp/QlHE= -----END CERTIFICATE-----Generated at Wed Nov 5 14:58:12 2025 by rpki-client