$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/77e25622-3f5b-3619-8d59-51f0bfc638c2.roa File: 77e25622-3f5b-3619-8d59-51f0bfc638c2.roa (raw, json) Hash identifier: wAUvnurKCHAEjKKHLgh6J5+jQh7kPpBpsx2IaAutlTU= Subject key identifier: 2D:66:49:95:6D:37:4B:00:22:31:A8:CF:6C:19:31:8B:3B:39:F1:DC Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584B99D78F2E3FD4ACBBC3D09000 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/77e25622-3f5b-3619-8d59-51f0bfc638c2.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 14114 IP address blocks: 157.133.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:8f:2e:3f:d4:ac:bb:c3:d0:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=3e4fabff-260c-4b05-8480-d5e834d94912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e6:54:08:7d:3b:38:ef:ce:3f:85:ce:4e:fc: e9:60:dd:23:26:4d:2b:2b:23:69:8c:e9:be:ed:e1: 75:bd:d0:e4:a9:d3:b9:da:3d:c7:46:bf:49:45:b8: 80:84:1b:f1:9c:40:07:9d:3f:04:a5:31:53:02:9d: 1d:57:80:76:8f:ea:c5:f6:4c:96:33:2f:79:84:bc: 25:c1:80:04:4f:6f:8a:ad:50:30:c1:75:80:e3:84: 7e:c9:f9:9d:05:ff:5f:35:2e:bd:42:dd:5d:8d:93: f3:3e:89:2b:25:83:57:46:a7:ee:1f:0a:ee:ca:e4: 7b:5e:a4:5e:f5:7e:f5:7f:a6:87:1b:24:4f:43:49: 68:f4:7e:e2:db:5f:00:30:a2:73:d1:c1:dc:d9:53: c2:ba:73:ac:fb:9f:30:39:ba:4d:2e:36:24:00:ad: f7:2f:a5:56:d2:78:60:d6:81:ce:5d:9c:9d:bf:41: 43:38:3a:b0:93:96:dc:a0:45:f5:4b:92:06:55:5e: 5a:66:9f:b1:e8:62:b5:23:7a:72:16:67:49:9f:0f: d2:22:e3:8c:02:95:e4:a0:6a:eb:33:72:0d:91:4e: ac:13:8a:95:59:df:0e:13:69:f6:04:56:2f:bd:d0: 15:b2:6e:5b:6c:16:16:af:37:7f:a4:4b:20:57:0f: 52:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:66:49:95:6D:37:4B:00:22:31:A8:CF:6C:19:31:8B:3B:39:F1:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/77e25622-3f5b-3619-8d59-51f0bfc638c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:45:72:48:f0:c0:44:c1:b8:2b:49:ac:78:f5:6a:36:01:63: 35:d4:b6:42:71:f5:4b:b0:85:34:c0:9e:3a:7a:70:1f:76:dd: 58:b9:bb:b3:9f:cb:d3:c3:5c:ad:13:11:a1:da:8a:9e:91:17: c0:aa:e7:b4:75:de:1b:18:5d:0d:07:fd:0a:f1:ef:fc:6a:45: 7a:e9:4f:f6:54:02:e5:71:a0:e2:d9:ba:6f:2f:e4:5c:78:bb: 1b:38:0b:87:95:38:23:02:a7:d8:9a:2d:de:d9:e6:1f:05:ca: 07:71:89:53:69:0e:e3:87:32:3b:6f:40:ff:60:cd:cf:3c:b5: c7:d1:9b:52:0a:23:fe:46:99:17:5e:46:04:2b:c8:c8:31:2a: 65:cf:a5:13:31:30:36:0e:3c:06:c3:b5:bd:f7:0b:f1:ad:c8: 13:95:e8:1e:10:49:dd:cd:e3:8d:f0:d1:1d:17:90:29:c8:29: 33:5e:7e:f4:a1:31:f6:3d:cd:df:71:3e:62:1e:05:7e:7f:90: 69:73:49:fe:2d:52:e8:a8:68:c8:58:60:81:29:99:eb:31:c7: fe:43:80:7d:dc:c5:b7:96:6f:29:cc:92:30:40:d0:96:f1:95: 9e:e9:dd:43:63:de:f4:2b:b7:a9:7d:e4:95:17:8f:c1:2b:14: 14:97:9e:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ148uP9Ssu8PQkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk M2U0ZmFiZmYtMjYwYy00YjA1LTg0ODAtZDVlODM0ZDk0OTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuZUCH07OO/OP4XOTvzpYN0jJk0rKyNpjOm+ 7eF1vdDkqdO52j3HRr9JRbiAhBvxnEAHnT8EpTFTAp0dV4B2j+rF9kyWMy95hLwl wYAET2+KrVAwwXWA44R+yfmdBf9fNS69Qt1djZPzPokrJYNXRqfuHwruyuR7XqRe 9X71f6aHGyRPQ0lo9H7i218AMKJz0cHc2VPCunOs+58wObpNLjYkAK33L6VW0nhg 1oHOXZydv0FDODqwk5bcoEX1S5IGVV5aZp+x6GK1I3pyFmdJnw/SIuOMApXkoGrr M3INkU6sE4qVWd8OE2n2BFYvvdAVsm5bbBYWrzd/pEsgVw9SFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1mSZVtN0sAIjGoz2wZMYs7OfHcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvNzdlMjU2MjItM2Y1Yi0z NjE5LThkNTktNTFmMGJmYzYzOGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnYVYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5FckjwwETBuCtJrHj1ajYBYzXUtkJx9UuwhTTAnjp6cB923Vi5u7Of y9PDXK0TEaHaip6RF8Cq57R13hsYXQ0H/Qrx7/xqRXrpT/ZUAuVxoOLZum8v5Fx4 uxs4C4eVOCMCp9iaLd7Z5h8FygdxiVNpDuOHMjtvQP9gzc88tcfRm1IKI/5GmRde RgQryMgxKmXPpRMxMDYOPAbDtb33C/GtyBOV6B4QSd3N443w0R0XkCnIKTNefvSh MfY9zd9xPmIeBX5/kGlzSf4tUuioaMhYYIEpmesxx/5DgH3cxbeWbynMkjBA0Jbx lZ7p3UNj3vQrt6l95JUXj8ErFBSXniw= -----END CERTIFICATE-----Generated at Wed Nov 5 19:13:08 2025 by rpki-client