$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/b0aa57ef-0d33-3bdd-8125-d421f567a085.roa File: b0aa57ef-0d33-3bdd-8125-d421f567a085.roa (raw, json) Hash identifier: 3KIYntgHqEIOSVlIMjIqk2/uQNbNo7UJgxmQ9rM33rE= Subject key identifier: 8D:93:E6:59:65:DB:CB:04:41:F9:6A:E6:C3:28:E5:64:22:CA:EE:4E Certificate issuer: /CN=2026b921-2d83-4f47-a24e-db9a3c451c72 Certificate serial: 010D0C9F4328584BABFD3965D90E1AACE21EBE80 Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/b0aa57ef-0d33-3bdd-8125-d421f567a085.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 49 IP address blocks: 132.163.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:39:65:d9:0e:1a:ac:e2:1e:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=88d4b364-90ec-4e0d-bcdd-e11ec0b44744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:0f:d8:7d:a1:d8:0a:81:d1:5f:d9:7f:33:42: bf:ac:fb:69:ba:02:aa:61:16:62:12:ee:07:b4:2e: ad:6d:22:61:90:28:c7:b6:fb:44:5d:ef:fc:aa:5a: 7c:b0:a0:27:e3:af:ae:05:88:85:27:27:b7:f9:f0: 03:65:8f:7f:e9:8f:3b:ce:c6:95:57:dd:f6:4b:56: a2:9b:c5:43:2f:f2:fd:b4:6e:9e:bb:c3:e7:5e:7c: 79:25:1f:38:3e:ce:12:d2:c6:ea:a9:4a:f2:62:22: 98:e1:a8:31:42:cc:9b:2f:89:14:f7:4f:3b:12:33: c2:31:78:75:31:93:4e:5f:e6:f4:7f:bf:6c:37:3b: 61:7f:ea:19:7c:3d:ad:af:27:ab:57:a4:d9:42:3d: 2c:d7:10:99:e0:f0:30:11:7c:30:e8:ca:e5:97:73: aa:3c:6a:ec:9d:fd:72:42:4f:0b:a0:ea:d3:51:3b: bb:0e:02:87:04:e0:0d:a6:fc:06:10:7e:3f:21:3d: 70:c6:88:c4:34:62:ee:c7:26:db:b8:aa:1d:3e:5e: 98:a4:29:3b:ed:02:5d:68:0b:f2:30:71:85:03:59: 95:d8:93:8f:e2:49:31:41:f3:af:2e:b4:c4:f5:03: e7:8a:83:94:5a:c0:11:0c:8c:fc:cf:e9:4a:50:60: af:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:93:E6:59:65:DB:CB:04:41:F9:6A:E6:C3:28:E5:64:22:CA:EE:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/b0aa57ef-0d33-3bdd-8125-d421f567a085.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl X509v3 Authority Key Identifier: keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer sbgp-ipAddrBlock: critical IPv4: 132.163.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:87:ed:15:c5:92:3e:d6:6d:18:0f:56:4e:45:55:75:b4:40: 7a:c9:98:23:db:45:ae:e9:f9:6d:e1:07:e7:d8:f2:43:b2:1d: cd:ce:39:63:73:8b:72:af:24:b0:96:3f:46:b5:1e:65:43:2e: 04:91:4f:65:d6:76:0a:7b:92:b0:5d:77:46:61:de:b4:74:f9: c3:05:d1:eb:29:27:a1:65:a3:41:3e:3c:0b:af:03:d6:7e:ee: ac:7e:6e:f2:52:99:a4:95:33:bb:91:27:44:da:a4:0b:64:7f: b5:cf:23:b8:e6:c8:45:3a:7e:04:14:d3:07:a1:e6:58:c4:ae: 97:f2:74:ea:de:d1:1c:e8:b3:46:85:bc:57:c6:e2:15:07:30: ac:2e:b3:82:bb:75:16:0e:12:53:23:43:e3:22:aa:32:8d:ff: 25:4a:5d:99:5b:fa:f2:16:33:77:92:ac:36:05:c5:a9:79:51: 0f:93:2d:ad:a4:32:af:62:24:f4:ab:24:d1:19:f2:2f:aa:65: 7d:cb:05:84:44:8c:b3:fd:49:f3:01:cb:f9:b2:a0:c5:1a:55: dc:bf:1c:05:4d:3a:78:f7:c9:63:41:34:b1:db:46:52:e4:e5: 5d:e4:c1:8c:bd:e9:eb:2e:13:c7:7d:8d:4c:c5:6e:82:b5:a8: 67:73:10:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/Tll2Q4arOIevoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjAyNmI5MjEtMmQ4My00ZjQ3LWEyNGUtZGI5YTNjNDUx YzcyMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk ODhkNGIzNjQtOTBlYy00ZTBkLWJjZGQtZTExZWMwYjQ0NzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Q/YfaHYCoHRX9l/M0K/rPtpugKqYRZiEu4H tC6tbSJhkCjHtvtEXe/8qlp8sKAn46+uBYiFJye3+fADZY9/6Y87zsaVV932S1ai m8VDL/L9tG6eu8PnXnx5JR84Ps4S0sbqqUryYiKY4agxQsybL4kU9087EjPCMXh1 MZNOX+b0f79sNzthf+oZfD2tryerV6TZQj0s1xCZ4PAwEXww6Mrll3OqPGrsnf1y Qk8LoOrTUTu7DgKHBOANpvwGEH4/IT1wxojENGLuxybbuKodPl6YpCk77QJdaAvy MHGFA1mV2JOP4kkxQfOvLrTE9QPnioOUWsARDIz8z+lKUGCvKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2T5lll28sEQflq5sMo5WQiyu5OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMDI2 YjkyMS0yZDgzLTRmNDctYTI0ZS1kYjlhM2M0NTFjNzIvYjBhYTU3ZWYtMGQzMy0z YmRkLTgxMjUtZDQyMWY1NjdhMDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjAyNmI5MjEtMmQ4My00ZjQ3LWEy NGUtZGI5YTNjNDUxYzcyLzIwMjZiOTIxLTJkODMtNGY0Ny1hMjRlLWRiOWEzYzQ1 MWM3Mi5jcmwwHwYDVR0jBBgwFoAUENGlJYMMmJF8ba+R1WwuX/ctfWMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMDI2YjkyMS0yZDgzLTRmNDctYTI0ZS1kYjlh M2M0NTFjNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhKNhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJuH7RXFkj7WbRgPVk5FVXW0QHrJmCPbRa7p+W3hB+fY8kOyHc3OOWNz i3KvJLCWP0a1HmVDLgSRT2XWdgp7krBdd0Zh3rR0+cMF0espJ6Flo0E+PAuvA9Z+ 7qx+bvJSmaSVM7uRJ0TapAtkf7XPI7jmyEU6fgQU0weh5ljErpfydOre0Rzos0aF vFfG4hUHMKwus4K7dRYOElMjQ+MiqjKN/yVKXZlb+vIWM3eSrDYFxal5UQ+TLa2k Mq9iJPSrJNEZ8i+qZX3LBYREjLP9SfMBy/myoMUaVdy/HAVNOnj3yWNBNLHbRlLk 5V3kwYy96esuE8d9jUzFboK1qGdzEF4= -----END CERTIFICATE-----Generated at Wed Nov 5 17:45:12 2025 by rpki-client