$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a60f390e-6c81-3aff-b8e0-e81760b2ce11.roa File: a60f390e-6c81-3aff-b8e0-e81760b2ce11.roa (raw, json) Hash identifier: YZlOahLSTQvRQjCXd1KAHdR7e8zVBsSkftOyZ+oHR8o= Subject key identifier: EF:8D:AB:12:05:23:DD:41:C8:0B:3F:07:4C:66:CA:73:CD:02:B4:34 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584B99D7FCE48532EE3920EB4880 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a60f390e-6c81-3aff-b8e0-e81760b2ce11.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 14114 IP address blocks: 157.133.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:fc:e4:85:32:ee:39:20:eb:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=320f094b-0d47-4791-b365-90b8959624f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:fb:64:b0:cb:96:6f:4c:3c:50:3b:ed:1f:76: a3:d6:a5:26:ed:57:c4:bf:6b:b4:a5:d1:97:70:4b: 2e:d8:8e:b6:f0:ac:8a:1a:f9:f1:9c:e1:c6:58:91: b0:cc:6e:a6:87:35:5b:fa:c5:70:9b:cb:b1:6a:73: cf:fc:0f:a8:2a:19:3f:35:26:db:4f:0e:70:cd:61: 16:e5:fb:63:4f:e2:9d:ae:ed:1e:05:5a:24:ad:10: 11:9c:0c:5f:5c:5d:88:5e:8e:6c:05:e1:de:9e:6b: d9:d6:81:68:a6:2e:bf:18:8c:de:12:f7:5d:e7:65: cf:a9:9c:f7:83:3a:3a:22:fe:43:da:d8:8f:49:0f: a4:ad:cd:e3:a5:58:4b:5f:2c:03:60:7c:d8:0d:b0: 0a:ac:34:b3:e5:40:21:3e:4e:ba:0a:e6:be:4e:70: 55:08:b7:f6:c1:5f:5d:fc:3c:9c:05:18:9d:17:2a: f3:50:91:65:9c:86:8e:06:13:95:96:02:06:66:4d: 0f:b4:23:98:9e:6f:89:c9:e2:1d:2d:b8:23:f3:ff: ab:e8:ea:ee:e2:39:7e:4f:a3:8f:7f:33:22:b0:0c: eb:d9:ec:f8:6d:6e:ab:d7:d8:3c:4f:46:9a:f7:c8: 67:38:60:18:7c:36:5a:99:71:4a:7c:10:02:e2:35: 5e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:8D:AB:12:05:23:DD:41:C8:0B:3F:07:4C:66:CA:73:CD:02:B4:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a60f390e-6c81-3aff-b8e0-e81760b2ce11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:41:4c:a1:ed:c4:fb:00:4a:69:bf:ef:99:24:08:b8:67:1d: 08:bc:1f:68:10:cc:cf:5a:ab:09:8b:ce:97:83:6e:dc:b6:fb: fc:72:d4:1b:8d:8a:cc:24:6b:15:a7:3f:0f:80:1d:99:1e:50: d6:7e:f4:5f:f9:e4:e0:6f:1e:be:de:fc:fb:d3:16:74:41:25: 69:dd:ce:a2:23:69:5f:4b:5d:ec:ae:56:41:e2:44:31:3f:b9: 41:a9:97:c0:29:7c:f3:6e:a9:27:57:77:55:3e:3c:a7:79:b4: f8:7c:2c:10:68:ec:bd:f7:a9:4f:94:2c:25:55:c3:51:98:4f: dc:23:92:c1:3a:5f:9f:1f:f4:a9:55:f6:79:98:55:04:35:89: 0d:28:be:a4:ff:dc:a7:6a:87:1a:f3:49:f0:25:92:66:4f:0a: cd:6f:ba:98:c9:ac:d0:32:15:a0:35:54:69:bb:d2:29:be:8e: ed:38:40:4b:14:da:17:b0:29:bc:f9:73:7f:74:1f:3b:d3:a6: 05:df:73:66:f0:57:ee:6b:3f:da:6b:26:01:71:ff:be:ac:dd: 9b:ff:15:aa:1e:74:a2:10:a4:8e:7e:b7:24:41:34:ec:85:62: 45:e3:22:ed:b3:7f:2a:a9:f7:5a:fa:a8:ee:fc:49:4b:e6:46: f7:a4:fb:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ1/zkhTLuOSDrSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MzIwZjA5NGItMGQ0Ny00NzkxLWIzNjUtOTBiODk1OTYyNGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvtksMuWb0w8UDvtH3aj1qUm7VfEv2u0pdGX cEsu2I628KyKGvnxnOHGWJGwzG6mhzVb+sVwm8uxanPP/A+oKhk/NSbbTw5wzWEW 5ftjT+Kdru0eBVokrRARnAxfXF2IXo5sBeHenmvZ1oFopi6/GIzeEvdd52XPqZz3 gzo6Iv5D2tiPSQ+krc3jpVhLXywDYHzYDbAKrDSz5UAhPk66Cua+TnBVCLf2wV9d /DycBRidFyrzUJFlnIaOBhOVlgIGZk0PtCOYnm+JyeIdLbgj8/+r6Oru4jl+T6OP fzMisAzr2ez4bW6r19g8T0aa98hnOGAYfDZamXFKfBAC4jVeHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+NqxIFI91ByAs/B0xmynPNArQ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvYTYwZjM5MGUtNmM4MS0z YWZmLWI4ZTAtZTgxNzYwYjJjZTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnYVIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1BTKHtxPsASmm/75kkCLhnHQi8H2gQzM9aqwmLzpeDbty2+/xy1BuN iswkaxWnPw+AHZkeUNZ+9F/55OBvHr7e/PvTFnRBJWndzqIjaV9LXeyuVkHiRDE/ uUGpl8ApfPNuqSdXd1U+PKd5tPh8LBBo7L33qU+ULCVVw1GYT9wjksE6X58f9KlV 9nmYVQQ1iQ0ovqT/3KdqhxrzSfAlkmZPCs1vupjJrNAyFaA1VGm70im+ju04QEsU 2hewKbz5c390HzvTpgXfc2bwV+5rP9prJgFx/76s3Zv/FaoedKIQpI5+tyRBNOyF YkXjIu2zfyqp91r6qO78SUvmRvek+1s= -----END CERTIFICATE-----Generated at Wed Nov 5 09:49:12 2025 by rpki-client