$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/561d0021-3fe4-31b8-85cc-e269eba14074.roa File: 561d0021-3fe4-31b8-85cc-e269eba14074.roa (raw, json) Hash identifier: vm26jshVFyOeZgDeMYwZ3c0i1K7tE6vDud+4On+umyA= Subject key identifier: DE:BD:B3:6D:0B:CF:BA:1B:C5:F2:D3:29:53:3C:3C:4A:87:E3:86:4D Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584B52A769AA3036AD25D773DEC0 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/561d0021-3fe4-31b8-85cc-e269eba14074.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 14114 IP address blocks: 157.133.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:69:aa:30:36:ad:25:d7:73:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=b9dcf9fc-60f4-4a7d-9444-b3fe4c9c67a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:21:7e:dd:86:31:b1:bc:f0:b7:f5:39:85:89: 15:43:d2:de:76:82:fb:47:4d:4c:90:06:47:9d:ce: 94:52:af:7c:c1:d6:52:cb:2f:53:7a:c2:2b:5c:c1: 6e:05:f3:40:bd:2e:5b:6b:5d:ea:4c:24:d4:1a:2e: 12:37:5b:e8:27:f6:aa:4d:b6:3f:b2:65:4a:9a:8e: 14:dc:de:de:79:b7:b3:28:37:42:6f:47:65:ba:af: 25:ed:1b:51:d5:ca:0c:08:5c:06:d8:80:6a:f7:40: 68:17:5a:23:b5:fd:d5:76:94:1c:7e:37:85:82:c0: 57:57:85:f1:24:95:e0:0f:f6:42:f0:15:e0:72:83: ff:62:b7:61:86:e9:29:e9:03:90:5e:d3:bf:cb:2a: 1e:b6:93:25:d8:f1:de:5e:1b:df:1f:c6:e9:0a:0f: 04:77:8b:ef:39:bb:13:3f:42:2a:44:5e:dc:2a:b0: de:fc:9d:94:f2:25:87:d1:9d:b3:55:77:82:9b:c3: 7b:82:f5:5b:bb:16:34:0e:6f:c1:4b:08:a9:65:22: ed:c3:7c:62:81:51:90:8f:8b:46:74:57:9c:20:21: 78:40:5f:4a:44:81:e5:ea:4b:de:3e:49:d1:10:69: 61:d2:ba:fd:d8:24:b5:b9:89:12:f5:c5:50:ca:c6: 17:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:BD:B3:6D:0B:CF:BA:1B:C5:F2:D3:29:53:3C:3C:4A:87:E3:86:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/561d0021-3fe4-31b8-85cc-e269eba14074.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:69:7f:0e:cd:eb:81:45:f8:9d:7b:2f:c9:53:76:e6:c3:d5: 64:dc:8c:37:09:66:aa:87:21:47:ee:3a:bb:f4:fe:90:cf:b9: 68:e6:4d:a2:4e:81:af:86:a7:cd:c4:b8:75:97:50:c2:cd:d9: 94:c3:09:1c:32:d3:e2:ac:72:63:ad:de:33:dc:43:bd:56:4a: fb:54:2e:a8:75:97:bf:31:6a:d7:e7:f4:3f:cc:59:98:db:72: 24:d3:b6:92:4f:c0:7e:b0:1c:c7:08:7a:e1:32:b4:e0:37:d5: 00:a0:c2:cd:76:ba:c6:2b:8e:12:1f:2a:6d:b4:86:10:bd:21: dc:0a:5c:ec:79:cf:99:15:80:6b:ee:34:72:a5:34:6f:a7:c6: e5:4e:da:b2:b3:41:6c:c4:01:39:01:9c:cf:ed:88:98:65:43: 60:4e:ff:b0:9e:88:2c:41:d0:3c:4e:b8:04:98:f3:fc:53:5a: 12:08:7c:7d:7f:75:b3:06:91:d2:ad:7a:27:29:5f:5a:a1:d7: af:d8:92:bb:6b:97:6b:f2:66:5f:a6:9e:5e:b1:26:10:fb:1c: c2:8d:08:ca:e4:a6:17:48:19:17:18:6b:5d:44:65:7e:21:c3: 61:3d:a9:4e:cb:56:92:f9:d7:c5:cc:fe:ba:32:9d:02:5b:6d: 2e:52:06:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp2mqMDatJddz3sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk YjlkY2Y5ZmMtNjBmNC00YTdkLTk0NDQtYjNmZTRjOWM2N2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyF+3YYxsbzwt/U5hYkVQ9LedoL7R01MkAZH nc6UUq98wdZSyy9TesIrXMFuBfNAvS5ba13qTCTUGi4SN1voJ/aqTbY/smVKmo4U 3N7eebezKDdCb0dluq8l7RtR1coMCFwG2IBq90BoF1ojtf3VdpQcfjeFgsBXV4Xx JJXgD/ZC8BXgcoP/Yrdhhukp6QOQXtO/yyoetpMl2PHeXhvfH8bpCg8Ed4vvObsT P0IqRF7cKrDe/J2U8iWH0Z2zVXeCm8N7gvVbuxY0Dm/BSwipZSLtw3xigVGQj4tG dFecICF4QF9KRIHl6kvePknREGlh0rr92CS1uYkS9cVQysYXAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN69s20Lz7obxfLTKVM8PEqH44ZNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvNTYxZDAwMjEtM2ZlNC0z MWI4LTg1Y2MtZTI2OWViYTE0MDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnYUYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1pfw7N64FF+J17L8lTdubD1WTcjDcJZqqHIUfuOrv0/pDPuWjmTaJO ga+Gp83EuHWXUMLN2ZTDCRwy0+KscmOt3jPcQ71WSvtULqh1l78xatfn9D/MWZjb ciTTtpJPwH6wHMcIeuEytOA31QCgws12usYrjhIfKm20hhC9IdwKXOx5z5kVgGvu NHKlNG+nxuVO2rKzQWzEATkBnM/tiJhlQ2BO/7CeiCxB0DxOuASY8/xTWhIIfH1/ dbMGkdKteicpX1qh16/Ykrtrl2vyZl+mnl6xJhD7HMKNCMrkphdIGRcYa11EZX4h w2E9qU7LVpL518XM/roynQJbbS5SBu4= -----END CERTIFICATE-----Generated at Wed Nov 5 11:52:02 2025 by rpki-client