$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/d03303c1-4941-3e34-91bb-597fdbb20f36.roa File: d03303c1-4941-3e34-91bb-597fdbb20f36.roa (raw, json) Hash identifier: XLm6tbcxUYSAaInoRxpXOGpFLDXO64VwPciiXKhgKYc= Subject key identifier: FF:33:76:59:F8:8D:97:B0:08:B1:F6:5D:81:BA:88:DF:43:D9:BB:C9 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584B6FF74D06412758BAF6822B00 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/d03303c1-4941-3e34-91bb-597fdbb20f36.roa Signing time: Tue 07 Oct 2025 01:00:29 +0000 ROA not before: Tue 07 Oct 2025 01:00:29 +0000 ROA not after: Mon 05 Jan 2026 02:00:29 +0000 asID: 14114 IP address blocks: 157.133.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:f7:4d:06:41:27:58:ba:f6:82:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Oct 7 01:00:29 2025 GMT Not After : Jan 5 02:00:29 2026 GMT Subject: CN=e0ab6457-a3f9-4741-9d7c-03b3ffc681e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b9:c0:9f:3e:59:6e:f3:17:46:f9:10:0a:12: 0c:b2:98:2b:a3:41:9a:17:d1:db:c6:02:c5:7f:94: fd:a3:59:7c:bf:1b:bf:b2:e9:82:18:5d:c4:d0:d5: 62:2d:cf:b6:40:24:1d:0f:3f:01:5b:4d:e8:c5:b8: 43:69:d1:ca:ab:98:30:67:62:75:3b:86:a1:e8:af: 12:6f:2f:dd:73:de:1a:22:12:c5:03:6f:09:13:a0: f2:8b:32:2e:fb:a1:4d:20:d3:ee:78:32:0d:97:68: fd:cb:2e:30:d8:40:39:79:b0:bc:41:c1:cb:dd:2f: 7c:f9:15:09:13:32:ef:4c:80:aa:ba:b6:58:40:9e: a8:0e:45:6c:32:7b:35:94:df:ad:95:dd:d8:c8:cb: 4b:c1:73:0b:97:56:c1:e9:61:a7:29:f0:b7:d7:cd: c0:25:d4:b9:f8:4f:16:2b:71:bc:76:e7:47:20:53: 33:ee:db:a4:a5:3b:1a:da:47:b0:b6:e5:09:8b:c8: ad:0a:3f:27:b0:fe:22:a3:3b:73:e7:07:dd:66:10: 51:0e:37:22:b6:1f:dd:a7:81:b0:c2:e4:08:0c:5d: ca:bd:99:16:53:ac:1d:9b:9f:19:20:98:7c:00:b9: b4:37:b4:9e:c5:22:1b:ad:be:aa:d0:7d:ef:f9:16: d4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:33:76:59:F8:8D:97:B0:08:B1:F6:5D:81:BA:88:DF:43:D9:BB:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/d03303c1-4941-3e34-91bb-597fdbb20f36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:d7:3c:aa:24:a3:93:f4:54:9e:ba:6b:08:99:18:3b:d1:a0: 1c:96:36:c2:93:d3:49:aa:7e:12:d2:0d:c7:f8:ba:ee:97:61: 9e:b4:65:53:0a:5a:9f:37:1f:2c:7b:21:06:83:85:82:ab:36: 68:6c:1c:6e:68:28:99:cc:45:ec:29:17:d0:33:18:91:e6:67: 8e:f2:54:e8:53:ee:88:a7:83:47:a7:a0:19:83:23:28:0e:7e: 57:f9:72:f2:a2:b4:75:2f:ef:d6:c1:70:29:1c:a8:17:a3:0b: 7a:1b:47:68:86:26:45:a4:ae:2e:8e:0f:95:19:e0:cb:a9:80: ba:80:da:a1:fe:0e:0d:23:07:d5:af:ef:c3:c7:13:03:cd:c3: 6a:3f:d2:56:ee:5d:ff:30:ff:de:c6:c8:3b:eb:00:c2:e6:54: c5:64:ca:e2:f2:d6:b3:fd:cf:f4:83:ce:5d:f8:cb:cd:01:f0: 8c:47:87:ca:4b:1c:49:93:c9:e7:16:e7:38:68:a7:1d:8c:e3: 95:a6:93:24:f7:a2:f5:7f:25:48:c8:48:b9:07:ed:29:06:13: b2:65:44:c2:cc:a1:7d:ae:14:18:a1:b6:5f:67:93:65:20:50: e0:04:92:fe:85:4c:74:cd:0e:9d:46:80:4d:54:71:6c:b4:94: 25:89:95:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtv900GQSdYuvaCKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MTAwNzAxMDAyOVoXDTI2MDEwNTAyMDAyOVowLzEtMCsGA1UEAxMk ZTBhYjY0NTctYTNmOS00NzQxLTlkN2MtMDNiM2ZmYzY4MWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbnAnz5ZbvMXRvkQChIMspgro0GaF9HbxgLF f5T9o1l8vxu/sumCGF3E0NViLc+2QCQdDz8BW03oxbhDadHKq5gwZ2J1O4ah6K8S by/dc94aIhLFA28JE6DyizIu+6FNINPueDINl2j9yy4w2EA5ebC8QcHL3S98+RUJ EzLvTICqurZYQJ6oDkVsMns1lN+tld3YyMtLwXMLl1bB6WGnKfC3183AJdS5+E8W K3G8dudHIFMz7tukpTsa2kewtuUJi8itCj8nsP4ioztz5wfdZhBRDjcith/dp4Gw wuQIDF3KvZkWU6wdm58ZIJh8ALm0N7SexSIbrb6q0H3v+RbUWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8zdln4jZewCLH2XYG6iN9D2bvJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvZDAzMzAzYzEtNDk0MS0z ZTM0LTkxYmItNTk3ZmRiYjIwZjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnYVRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArXPKoko5P0VJ66awiZGDvRoByWNsKT00mqfhLSDcf4uu6XYZ60ZVMK Wp83Hyx7IQaDhYKrNmhsHG5oKJnMRewpF9AzGJHmZ47yVOhT7oing0enoBmDIygO flf5cvKitHUv79bBcCkcqBejC3obR2iGJkWkri6OD5UZ4MupgLqA2qH+Dg0jB9Wv 78PHEwPNw2o/0lbuXf8w/97GyDvrAMLmVMVkyuLy1rP9z/SDzl34y80B8IxHh8pL HEmTyecW5zhopx2M45WmkyT3ovV/JUjISLkH7SkGE7JlRMLMoX2uFBihtl9nk2Ug UOAEkv6FTHTNDp1GgE1UcWy0lCWJlRg= -----END CERTIFICATE-----Generated at Mon Oct 20 21:10:16 2025 by rpki-client