$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/02fd6998-8257-3284-8895-0fa240a0be15.roa File: 02fd6998-8257-3284-8895-0fa240a0be15.roa (raw, json) Hash identifier: +gefNDkmqpbBqdv+Z2qjQpUEyRrLa3X40PduB8vgvBM= Subject key identifier: FF:20:B9:99:BC:65:68:D2:36:74:A6:F2:7F:15:D5:16:4D:FE:DC:41 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584A761B56270B2A0C0F5341FC00 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/02fd6998-8257-3284-8895-0fa240a0be15.roa Signing time: Wed 09 Jul 2025 13:01:04 +0000 ROA not before: Wed 09 Jul 2025 13:01:04 +0000 ROA not after: Tue 07 Oct 2025 13:01:04 +0000 asID: 14114 IP address blocks: 157.133.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:1b:56:27:0b:2a:0c:0f:53:41:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Jul 9 13:01:04 2025 GMT Not After : Oct 7 13:01:04 2025 GMT Subject: CN=3ca16ca8-6fd7-4dbb-8b98-2e8ed20b637f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e1:5b:c8:e3:d8:84:d4:ee:60:88:b8:46:52: 44:5b:d3:15:1a:58:40:7d:56:38:39:48:b1:83:dd: 87:1a:06:d0:15:1f:a3:47:af:dc:81:2c:34:9f:21: b8:bb:cf:2c:9c:4c:c9:64:21:b1:02:e0:cc:39:c9: c1:24:ba:2d:40:b1:9d:17:61:16:9f:fe:98:32:2c: 42:1f:26:8b:9d:e3:89:05:59:a7:4d:e0:14:d2:52: bd:e2:cf:14:55:74:3b:35:c4:95:eb:99:c0:45:52: bd:47:bb:7e:fe:91:ae:08:57:f5:b0:47:91:1b:34: 73:1f:03:20:0d:a3:c2:68:05:c1:de:e3:3f:7c:b9: e2:2a:bf:31:77:50:74:bc:13:a0:04:53:07:b1:14: 12:b2:a7:4e:b3:9e:b4:fc:01:8b:a0:9d:a5:f0:b6: 97:72:d3:c9:5e:6a:98:8b:e8:39:5a:23:cd:98:2e: a7:dd:0b:b4:cb:5e:26:94:fc:a4:af:d1:e4:6d:66: d0:02:e8:5d:eb:2a:65:c4:e3:b6:f6:2e:8c:72:43: 9e:62:3f:38:aa:c1:53:58:af:0e:80:c1:a5:88:8d: 20:45:5e:dd:88:b3:a1:54:b3:6d:c3:8a:fe:0a:9b: ae:5a:a5:26:93:1f:63:0e:e0:1b:a5:73:23:e5:b4: f9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:20:B9:99:BC:65:68:D2:36:74:A6:F2:7F:15:D5:16:4D:FE:DC:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/02fd6998-8257-3284-8895-0fa240a0be15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:80:09:56:c5:95:61:e5:03:36:a7:45:af:d6:60:45:29:a5: 6b:90:3f:ff:71:2c:9d:8a:49:42:8e:10:2f:9a:29:ad:9c:b4: 2f:06:57:c9:ac:4d:11:7f:a7:3e:bf:1e:3a:1e:c6:da:f0:af: 41:e2:95:58:77:e1:0b:af:5a:05:e3:11:d2:3c:8a:9e:2e:6c: 90:49:4e:21:ea:6a:d7:c2:11:dc:b4:f2:b6:f0:2b:56:6a:bb: 46:fc:65:e6:01:dc:55:47:8b:d4:83:05:19:96:ba:c4:cd:db: 59:6b:09:df:64:f9:6d:7a:34:23:4c:83:0a:0e:91:76:7a:7e: ec:06:0a:00:20:8a:dd:b8:1e:eb:17:c4:47:f2:f6:b0:14:6e: 7a:4e:ac:80:89:fe:ca:f8:af:f6:f7:63:21:74:32:80:57:a7: dd:79:bf:95:3f:77:18:89:a9:7f:ef:80:e1:7d:ad:25:0d:e5: e8:0b:95:18:12:2f:d0:20:ab:ab:8a:2d:2c:37:b1:63:6b:0d: 8d:61:ce:a8:61:b8:06:39:57:dc:a3:b3:da:56:30:70:d7:ea: 93:f4:14:c3:a1:d8:2b:67:88:ea:e1:4a:ca:d2:82:0e:d5:71: ff:fd:e6:08:d7:8c:2b:b4:92:a9:d8:bc:3d:0a:ec:d2:ac:4a: 91:dc:2e:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp2G1YnCyoMD1NB/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk M2NhMTZjYTgtNmZkNy00ZGJiLThiOTgtMmU4ZWQyMGI2MzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuFbyOPYhNTuYIi4RlJEW9MVGlhAfVY4OUix g92HGgbQFR+jR6/cgSw0nyG4u88snEzJZCGxAuDMOcnBJLotQLGdF2EWn/6YMixC HyaLneOJBVmnTeAU0lK94s8UVXQ7NcSV65nARVK9R7t+/pGuCFf1sEeRGzRzHwMg DaPCaAXB3uM/fLniKr8xd1B0vBOgBFMHsRQSsqdOs560/AGLoJ2l8LaXctPJXmqY i+g5WiPNmC6n3Qu0y14mlPykr9HkbWbQAuhd6yplxOO29i6MckOeYj84qsFTWK8O gMGliI0gRV7diLOhVLNtw4r+CpuuWqUmkx9jDuAbpXMj5bT51QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8guZm8ZWjSNnSm8n8V1RZN/txBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvMDJmZDY5OTgtODI1Ny0z Mjg0LTg4OTUtMGZhMjQwYTBiZTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnYWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKACVbFlWHlAzanRa/WYEUppWuQP/9xLJ2KSUKOEC+aKa2ctC8GV8ms TRF/pz6/Hjoextrwr0HilVh34QuvWgXjEdI8ip4ubJBJTiHqatfCEdy08rbwK1Zq u0b8ZeYB3FVHi9SDBRmWusTN21lrCd9k+W16NCNMgwoOkXZ6fuwGCgAgit24HusX xEfy9rAUbnpOrICJ/sr4r/b3YyF0MoBXp915v5U/dxiJqX/vgOF9rSUN5egLlRgS L9Agq6uKLSw3sWNrDY1hzqhhuAY5V9yjs9pWMHDX6pP0FMOh2CtniOrhSsrSgg7V cf/95gjXjCu0kqnYvD0K7NKsSpHcLkk= -----END CERTIFICATE-----Generated at Sun Jul 27 03:14:40 2025 by rpki-client