$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/2ffdaf98-6513-3f50-a698-66a5e58df24d.roa File: 2ffdaf98-6513-3f50-a698-66a5e58df24d.roa (raw, json) Hash identifier: g1hdsY/3M6xD37+/yAuAdyPpwE7fyvQGc5MFaKhfe3Y= Subject key identifier: E9:77:33:CF:46:1D:4B:4C:B8:B5:3F:75:85:91:87:D8:2C:23:CD:8D Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584B99D7FCD3278E4860AE119EC0 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/2ffdaf98-6513-3f50-a698-66a5e58df24d.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 14114 IP address blocks: 157.133.116.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:fc:d3:27:8e:48:60:ae:11:9e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=5621bfe8-29d6-4e73-945c-08078fcc6d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1b:48:2e:7d:8d:c5:86:fe:2a:fd:9f:36:34: 1f:4e:e1:d3:c0:ce:d9:84:b0:09:5e:13:aa:46:a8: 46:f0:87:b2:fd:ae:f8:ab:88:67:5f:66:ec:2d:61: 2b:55:44:fe:55:e0:1b:9b:6b:64:47:cc:90:46:28: ae:c2:56:bb:56:9c:25:41:d6:14:b5:27:c0:51:94: 70:90:9d:3d:0c:d4:2b:37:df:34:58:81:e8:3e:ed: cb:78:22:f0:b4:03:78:04:23:5b:10:fa:0c:8c:96: 8f:43:a4:7f:9d:d0:f0:b0:e1:82:13:de:c1:c2:21: 7f:76:30:df:77:e5:0b:17:67:d8:ea:a6:35:bc:8c: 36:cc:7f:1c:03:11:cd:81:78:d6:3f:8f:47:1a:9f: 54:8b:d3:d9:1b:8f:c4:63:d6:d6:aa:c2:6e:6c:cf: fe:9c:1b:b3:17:c0:1b:32:9f:31:95:dd:cc:d1:53: ff:aa:6e:a6:52:6e:2b:b5:5a:42:ae:d3:12:e6:51: c5:48:06:55:5a:4e:60:ea:43:ad:db:2a:1c:5a:08: eb:d3:a5:1c:42:6e:ce:be:a1:0c:87:98:b0:cc:3b: 3d:61:7f:de:9f:52:58:2a:6a:2b:a1:36:a9:cc:58: 02:1e:41:b1:0c:5f:f6:11:6f:56:57:eb:8d:fc:63: 01:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:77:33:CF:46:1D:4B:4C:B8:B5:3F:75:85:91:87:D8:2C:23:CD:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/2ffdaf98-6513-3f50-a698-66a5e58df24d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:ca:dc:f3:9c:81:72:35:2a:c7:72:fd:fd:b2:56:17:d9:4e: 24:5c:10:f0:67:d1:12:8c:9b:ac:76:bd:da:7b:41:27:1c:96: 53:c9:28:8d:92:61:f2:dc:38:c9:0c:c2:21:49:f7:69:e7:9a: 5b:2a:aa:89:8e:bb:1e:a8:2b:11:51:62:f0:f8:23:6f:23:1e: 41:09:7a:82:6d:a9:4e:49:15:cb:5a:9f:d7:91:50:4a:be:7c: 44:f5:19:6d:2f:e2:e9:a5:14:e6:45:03:29:3f:07:b3:d1:87: b9:3a:dc:8c:f8:54:8f:ee:b7:c2:98:38:17:46:ed:e1:1b:0f: 7c:8f:9d:df:3d:07:af:59:1f:67:03:5d:3e:35:2d:6f:00:1b: c4:fc:d9:81:5e:7d:19:e7:c8:75:5e:ef:31:ea:6e:02:4c:14: b7:cb:95:65:57:0f:63:3e:c8:6f:6f:5e:15:c0:c4:e9:e9:54: 8a:26:47:0b:91:a5:45:11:93:6b:a1:19:9d:95:b1:e2:7e:cf: 5a:1d:88:98:86:18:cf:bc:b0:a4:85:40:44:1d:c5:80:26:48: 6e:19:ae:ee:ca:5f:7c:58:cf:4b:70:46:a3:42:fa:d0:50:4b: cb:dc:3e:8d:4e:9c:56:7b:25:d8:54:97:cd:47:74:16:89:b3: 89:a9:42:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ1/zTJ45IYK4RnsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NTYyMWJmZTgtMjlkNi00ZTczLTk0NWMtMDgwNzhmY2M2ZDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBtILn2NxYb+Kv2fNjQfTuHTwM7ZhLAJXhOq RqhG8Iey/a74q4hnX2bsLWErVUT+VeAbm2tkR8yQRiiuwla7VpwlQdYUtSfAUZRw kJ09DNQrN980WIHoPu3LeCLwtAN4BCNbEPoMjJaPQ6R/ndDwsOGCE97BwiF/djDf d+ULF2fY6qY1vIw2zH8cAxHNgXjWP49HGp9Ui9PZG4/EY9bWqsJubM/+nBuzF8Ab Mp8xld3M0VP/qm6mUm4rtVpCrtMS5lHFSAZVWk5g6kOt2yocWgjr06UcQm7OvqEM h5iwzDs9YX/en1JYKmoroTapzFgCHkGxDF/2EW9WV+uN/GMBOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOl3M89GHUtMuLU/dYWRh9gsI82NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvMmZmZGFmOTgtNjUxMy0z ZjUwLWE2OTgtNjZhNWU1OGRmMjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnYV0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXK3POcgXI1Ksdy/f2yVhfZTiRcEPBn0RKMm6x2vdp7QSccllPJKI2S YfLcOMkMwiFJ92nnmlsqqomOux6oKxFRYvD4I28jHkEJeoJtqU5JFctan9eRUEq+ fET1GW0v4umlFOZFAyk/B7PRh7k63Iz4VI/ut8KYOBdG7eEbD3yPnd89B69ZH2cD XT41LW8AG8T82YFefRnnyHVe7zHqbgJMFLfLlWVXD2M+yG9vXhXAxOnpVIomRwuR pUURk2uhGZ2VseJ+z1odiJiGGM+8sKSFQEQdxYAmSG4Zru7KX3xYz0twRqNC+tBQ S8vcPo1OnFZ7JdhUl81HdBaJs4mpQjA= -----END CERTIFICATE-----Generated at Wed Nov 5 11:09:41 2025 by rpki-client