$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/f7575e95-9d55-3f46-b4e4-e5eae23e68c6.roa File: f7575e95-9d55-3f46-b4e4-e5eae23e68c6.roa (raw, json) Hash identifier: hURZnteWQEbGKj8cFXLWFn9K6H5CH1FBtnGf0jNXH/Q= Subject key identifier: 69:D4:AE:3C:52:2E:EE:77:B3:3B:ED:76:98:D9:E9:D1:82:16:B1:8A Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584B2A2C357A992A0AC4606DF680 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/f7575e95-9d55-3f46-b4e4-e5eae23e68c6.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 14114 IP address blocks: 157.133.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:35:7a:99:2a:0a:c4:60:6d:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=aaa52487-be1d-4214-bf1e-2c5909dedc2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2b:96:40:26:87:a6:72:47:1a:94:9d:2f:26: 48:3a:cb:33:80:3b:f5:4f:35:ca:42:8d:f7:09:41: 5d:4f:ea:36:7c:94:d8:99:15:41:02:d9:6a:43:79: 6c:1f:ac:e5:b7:4e:2f:61:ca:a0:5b:1d:6a:24:88: 06:6c:44:bf:5d:b7:6a:38:20:79:1f:38:67:ce:b4: 25:a4:ad:90:88:f7:01:4f:b0:93:fc:65:1c:df:49: a8:d2:1c:b1:e6:c6:d3:2c:11:0c:69:4d:87:ea:8f: 77:0e:46:0c:1a:fb:c1:ab:76:13:3a:fb:33:bc:89: 6e:a8:28:a1:15:5e:2d:85:32:66:04:10:d1:8c:03: 87:dc:1d:83:3f:0b:f1:2d:1c:86:4d:90:34:71:6c: 0c:09:06:b7:94:0e:d9:74:20:0e:5d:9f:14:f6:5c: 88:6d:3a:59:48:6b:d3:64:26:e5:db:66:22:75:77: d5:cc:2c:52:69:59:5f:11:29:ab:85:fd:14:5e:f8: 41:ce:6f:97:e6:cd:b0:c3:92:7a:8f:bd:7e:b9:89: 9e:ee:14:db:39:e4:9c:96:bf:f4:59:0d:7e:e6:bd: a9:be:bc:fd:ae:9f:1b:02:56:47:00:01:5e:39:f8: ae:a4:7f:a2:79:83:83:d0:a4:b8:7a:7e:5f:33:10: 9c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D4:AE:3C:52:2E:EE:77:B3:3B:ED:76:98:D9:E9:D1:82:16:B1:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/f7575e95-9d55-3f46-b4e4-e5eae23e68c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:c1:77:3d:61:d3:e6:37:2d:dd:94:a9:94:8c:f6:d5:c7:65: 62:05:4d:37:1e:a0:ab:9f:e4:75:93:a2:a4:18:c7:38:56:7a: a9:be:3a:ea:7b:05:01:a3:25:10:0c:55:43:a0:2e:e2:da:6c: 92:a4:1d:de:03:8f:3b:d3:87:45:a4:89:24:a2:7c:81:5c:d1: 86:44:92:12:39:39:16:80:f5:8c:40:0d:19:a3:b3:eb:1c:88: 37:7f:12:af:68:c2:6f:97:29:76:d6:9c:46:91:59:2f:13:e8: 28:3e:6c:c2:1a:5f:0f:b2:20:09:2b:0f:43:0d:32:54:54:51: 91:a7:e1:82:b6:46:48:4c:a1:90:70:49:4c:ae:39:66:9c:f1: 24:02:2d:9f:89:ba:6a:66:ef:ee:c6:56:5d:47:50:b6:a7:e6: d1:db:d8:5c:8e:ed:a3:87:95:3b:68:08:e0:18:40:2b:76:6f: 61:11:ad:ea:21:e3:e5:65:46:c7:4e:ec:c6:35:b7:1c:c9:e3: a4:7b:84:be:99:5c:fe:c0:50:1e:90:2a:02:d2:d1:06:75:87: 43:6e:cc:32:f2:07:38:e0:3b:38:b2:65:31:01:eb:bd:17:f4: af:8a:43:a4:c9:b5:b4:ea:2a:02:4f:6a:fe:9a:90:2b:4a:e9: 2c:74:e5:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLDV6mSoKxGBt9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk YWFhNTI0ODctYmUxZC00MjE0LWJmMWUtMmM1OTA5ZGVkYzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CuWQCaHpnJHGpSdLyZIOsszgDv1TzXKQo33 CUFdT+o2fJTYmRVBAtlqQ3lsH6zlt04vYcqgWx1qJIgGbES/XbdqOCB5HzhnzrQl pK2QiPcBT7CT/GUc30mo0hyx5sbTLBEMaU2H6o93DkYMGvvBq3YTOvszvIluqCih FV4thTJmBBDRjAOH3B2DPwvxLRyGTZA0cWwMCQa3lA7ZdCAOXZ8U9lyIbTpZSGvT ZCbl22YidXfVzCxSaVlfESmrhf0UXvhBzm+X5s2ww5J6j71+uYme7hTbOeSclr/0 WQ1+5r2pvrz9rp8bAlZHAAFeOfiupH+ieYOD0KS4en5fMxCcoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnUrjxSLu53szvtdpjZ6dGCFrGKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvZjc1NzVlOTUtOWQ1NS0z ZjQ2LWI0ZTQtZTVlYWUyM2U2OGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnYVsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTBdz1h0+Y3Ld2UqZSM9tXHZWIFTTceoKuf5HWToqQYxzhWeqm+Oup7 BQGjJRAMVUOgLuLabJKkHd4DjzvTh0WkiSSifIFc0YZEkhI5ORaA9YxADRmjs+sc iDd/Eq9owm+XKXbWnEaRWS8T6Cg+bMIaXw+yIAkrD0MNMlRUUZGn4YK2RkhMoZBw SUyuOWac8SQCLZ+Jumpm7+7GVl1HULan5tHb2FyO7aOHlTtoCOAYQCt2b2ERreoh 4+VlRsdO7MY1txzJ46R7hL6ZXP7AUB6QKgLS0QZ1h0NuzDLyBzjgOziyZTEB670X 9K+KQ6TJtbTqKgJPav6akCtK6Sx05XQ= -----END CERTIFICATE-----Generated at Wed Nov 5 06:18:03 2025 by rpki-client