$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/db38879e-c78c-33bc-8a09-d58a3db0e3db.roa File: db38879e-c78c-33bc-8a09-d58a3db0e3db.roa (raw, json) Hash identifier: nbLgaeU8yPZB2dAnprQ9xpDvwJCo9chMIzTgcqIEmiU= Subject key identifier: 22:75:CE:E6:47:2E:8F:96:96:01:FE:85:F5:CF:71:CB:BF:37:41:C8 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584B99D7FC7BDC3B427DB668A3A0 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/db38879e-c78c-33bc-8a09-d58a3db0e3db.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 14114 IP address blocks: 157.133.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:fc:7b:dc:3b:42:7d:b6:68:a3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=6eeb70fe-209e-435d-807b-e3add7d9597c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:05:2e:23:20:6b:55:80:30:39:03:c8:fe:db: d5:99:fe:b7:7a:e4:16:3e:d1:fd:0e:49:6b:9f:e1: 8c:e9:81:06:5f:30:7e:fa:81:ed:ec:25:05:55:e7: 63:d8:a0:9c:a0:b9:a0:a5:ac:30:c1:e7:4a:42:aa: d1:aa:2b:93:be:1a:62:33:7e:80:8f:1f:ce:b6:f6: 3b:e0:9e:a7:6e:50:73:6c:a6:61:a4:aa:51:1f:39: 7b:62:f3:dc:69:ca:6f:92:c2:89:62:4a:56:46:cb: f0:9b:fe:3d:f5:b3:d8:38:86:63:e4:4d:92:11:c0: 33:32:cd:82:df:ba:07:3f:8a:cf:50:bf:d8:43:01: e6:69:0e:e5:23:fd:95:a0:6e:64:ba:65:9c:b7:2f: 52:ca:12:30:d0:7a:c7:14:81:7d:2a:d0:74:38:e7: ec:b0:0e:62:3f:39:b5:70:c3:8c:63:d1:0e:89:7e: 50:17:03:f8:75:74:1f:d8:6f:68:29:a5:f9:90:4d: e2:38:7e:37:7a:0f:f5:43:25:ac:e7:5a:83:23:b6: d1:2d:4e:d9:10:ee:5b:ec:98:85:c9:f6:51:29:0e: eb:d7:d0:69:75:30:e0:22:91:52:20:90:c1:13:52: f5:15:50:60:5b:62:cf:d3:87:d9:f0:c6:aa:4f:70: 46:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:75:CE:E6:47:2E:8F:96:96:01:FE:85:F5:CF:71:CB:BF:37:41:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/db38879e-c78c-33bc-8a09-d58a3db0e3db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:f0:b7:81:e1:36:44:42:51:59:44:b9:59:21:7a:85:b2:f7: da:be:48:32:0a:e3:ad:22:7f:60:57:ec:a0:36:c6:2c:84:c4: 9b:77:0c:a1:b3:d9:28:b2:21:6e:85:d6:02:8f:aa:82:24:cf: ee:d2:68:88:e4:59:04:fe:23:03:0e:94:73:af:cf:f2:5b:71: d0:16:41:2d:11:38:7b:e7:bc:dc:4d:08:5e:08:19:08:17:84: 5c:a5:8f:1e:66:b1:b3:f7:fe:3d:f2:d5:3a:b2:40:3d:94:79: 94:45:18:98:5e:87:fa:d5:8b:2a:33:da:3b:01:f9:15:d8:14: a2:ed:2b:e9:fb:93:88:7d:72:4e:b5:ac:05:74:26:18:16:13: 75:69:c4:9a:94:37:98:9b:e6:77:6c:1f:e4:5e:e6:fb:23:70: dc:f2:aa:99:cd:85:c0:6a:41:f0:39:1b:be:98:62:65:43:1a: 9b:29:93:7a:b0:a0:59:fd:62:68:4a:80:7c:4e:4a:e1:4a:1c: 6c:ee:e1:b2:43:4b:22:03:38:ad:aa:cf:90:41:9c:27:c9:e7: 61:26:5e:02:0c:4a:25:66:0e:1f:22:59:0e:81:de:cd:7f:48: 50:a1:29:70:8b:73:16:5d:a3:26:bd:63:8f:2b:e2:7c:86:0d: 8a:c4:e5:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ1/x73DtCfbZoo6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NmVlYjcwZmUtMjA5ZS00MzVkLTgwN2ItZTNhZGQ3ZDk1OTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAUuIyBrVYAwOQPI/tvVmf63euQWPtH9Dklr n+GM6YEGXzB++oHt7CUFVedj2KCcoLmgpawwwedKQqrRqiuTvhpiM36Ajx/OtvY7 4J6nblBzbKZhpKpRHzl7YvPcacpvksKJYkpWRsvwm/499bPYOIZj5E2SEcAzMs2C 37oHP4rPUL/YQwHmaQ7lI/2VoG5kumWcty9SyhIw0HrHFIF9KtB0OOfssA5iPzm1 cMOMY9EOiX5QFwP4dXQf2G9oKaX5kE3iOH43eg/1QyWs51qDI7bRLU7ZEO5b7JiF yfZRKQ7r19BpdTDgIpFSIJDBE1L1FVBgW2LP04fZ8MaqT3BG6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJ1zuZHLo+WlgH+hfXPccu/N0HIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvZGIzODg3OWUtYzc4Yy0z M2JjLThhMDktZDU4YTNkYjBlM2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnYV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPwt4HhNkRCUVlEuVkheoWy99q+SDIK460if2BX7KA2xiyExJt3DKGz 2SiyIW6F1gKPqoIkz+7SaIjkWQT+IwMOlHOvz/JbcdAWQS0ROHvnvNxNCF4IGQgX hFyljx5msbP3/j3y1TqyQD2UeZRFGJheh/rViyoz2jsB+RXYFKLtK+n7k4h9ck61 rAV0JhgWE3VpxJqUN5ib5ndsH+Re5vsjcNzyqpnNhcBqQfA5G76YYmVDGpspk3qw oFn9YmhKgHxOSuFKHGzu4bJDSyIDOK2qz5BBnCfJ52EmXgIMSiVmDh8iWQ6B3s1/ SFChKXCLcxZdoya9Y48r4nyGDYrE5TA= -----END CERTIFICATE-----Generated at Wed Nov 5 11:32:53 2025 by rpki-client