$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/12d92f26-e702-3244-8b8a-550c4a4b00e3.roa File: 12d92f26-e702-3244-8b8a-550c4a4b00e3.roa (raw, json) Hash identifier: gE8LSrcKoB/R4h4172L7nOm7NMhnk3TUvzXkHkZmojo= Subject key identifier: FA:1D:BF:AB:08:7B:25:08:45:D9:C3:5A:B2:D6:64:DF:27:B7:84:07 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584969C05F740B329B2F6ADAC600 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/12d92f26-e702-3244-8b8a-550c4a4b00e3.roa Signing time: Fri 04 Apr 2025 10:01:19 +0000 ROA not before: Fri 04 Apr 2025 10:01:19 +0000 ROA not after: Thu 03 Jul 2025 10:01:19 +0000 asID: 35039 IP address blocks: 157.133.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:69:c0:5f:74:0b:32:9b:2f:6a:da:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Apr 4 10:01:19 2025 GMT Not After : Jul 3 10:01:19 2025 GMT Subject: CN=4240fc24-7c61-4076-9e56-beefd6162b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:aa:e6:4e:cb:c4:ec:77:8c:63:5e:85:cd:2b: ed:20:32:07:37:1d:b5:78:66:3a:7a:63:93:a6:b8: 28:30:2d:17:09:b4:60:9d:21:10:32:08:bf:e9:0e: a1:5a:54:d7:6c:4e:c8:79:3c:f1:62:6b:f5:45:56: b4:50:86:82:18:08:43:f3:d0:89:74:6c:a0:ca:de: b8:75:ca:2e:a9:e0:ab:c4:4e:9b:d9:fd:62:fb:5d: 88:fb:8f:d2:c9:48:36:98:c8:06:9a:19:39:77:ac: 46:c5:36:71:e7:9a:e8:af:6b:34:09:f6:d9:56:42: f1:cb:45:7b:4f:c0:92:c5:95:66:f3:c5:17:88:b9: 8e:b5:3d:a0:85:2b:ff:94:05:49:e8:26:60:94:13: 9a:c3:0b:3a:a5:7e:22:02:6c:f7:90:a8:01:bf:07: 52:a8:97:67:b0:47:bf:f9:1a:b6:07:fe:b6:dc:2e: db:89:c5:8d:53:b6:9f:59:b6:ad:f1:6d:75:bb:89: 37:48:b8:3b:05:20:a5:a1:2e:fb:5a:04:5d:cd:7b: 7a:db:9c:3c:d2:2f:dd:f5:fd:ea:70:67:04:b6:1c: 33:84:95:cc:88:ba:98:2e:fd:0b:f4:ca:dc:59:29: 34:ac:53:70:e9:af:9f:04:fb:c2:f9:7c:64:9f:bc: 5b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:1D:BF:AB:08:7B:25:08:45:D9:C3:5A:B2:D6:64:DF:27:B7:84:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/12d92f26-e702-3244-8b8a-550c4a4b00e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:6d:7c:32:0f:6e:2b:48:f6:dd:ab:d0:14:b5:63:10:85:a7: 4f:5e:ec:bb:63:a4:55:4c:aa:a5:d5:3f:86:d1:15:71:9a:02: 5f:56:7f:6f:e3:35:dc:1b:1b:d3:2b:26:68:8a:c6:a5:d5:8c: 8c:c1:13:23:88:9f:cb:bb:23:18:a0:4f:9b:bb:6a:62:4f:b2: 2b:41:be:e1:59:41:0f:6d:5c:36:4b:f6:e2:3e:46:ab:3b:2d: fc:50:d7:69:97:c8:f5:53:dc:84:f0:7b:87:31:32:66:9e:68: 69:0b:14:11:b2:38:4a:44:74:0d:ae:50:9f:43:b1:88:1f:b7: d2:0b:ea:0e:4f:93:e0:94:dc:d2:5c:23:17:6d:7e:97:bd:54: 62:c8:a0:13:f8:36:14:45:2e:ad:19:c9:14:d5:56:cc:92:3b: 0f:74:3a:c2:35:9a:5d:1f:96:47:bf:fe:3c:5b:51:80:e8:05: 0b:72:94:83:51:bd:2b:4a:87:de:02:04:fd:fe:52:0e:ed:03: 70:eb:31:fd:af:37:ab:58:2d:28:7a:d1:6e:48:77:3e:99:16: f9:cc:e9:27:55:2d:09:be:81:f4:f0:6d:f4:57:2e:a9:cb:69: 36:35:d0:b1:4f:3c:64:01:10:5c:69:22:9b:61:53:84:c7:d4: 29:04:a2:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElpwF90CzKbL2raxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDQwNDEwMDExOVoXDTI1MDcwMzEwMDExOVowLzEtMCsGA1UEAxMk NDI0MGZjMjQtN2M2MS00MDc2LTllNTYtYmVlZmQ2MTYyYjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6rmTsvE7HeMY16FzSvtIDIHNx21eGY6emOT prgoMC0XCbRgnSEQMgi/6Q6hWlTXbE7IeTzxYmv1RVa0UIaCGAhD89CJdGygyt64 dcouqeCrxE6b2f1i+12I+4/SyUg2mMgGmhk5d6xGxTZx55ror2s0CfbZVkLxy0V7 T8CSxZVm88UXiLmOtT2ghSv/lAVJ6CZglBOawws6pX4iAmz3kKgBvwdSqJdnsEe/ +Rq2B/623C7bicWNU7afWbat8W11u4k3SLg7BSCloS77WgRdzXt625w80i/d9f3q cGcEthwzhJXMiLqYLv0L9MrcWSk0rFNw6a+fBPvC+Xxkn7xbqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPodv6sIeyUIRdnDWrLWZN8nt4QHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvMTJkOTJmMjYtZTcwMi0z MjQ0LThiOGEtNTUwYzRhNGIwMGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnYWmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxtfDIPbitI9t2r0BS1YxCFp09e7LtjpFVMqqXVP4bRFXGaAl9Wf2/j NdwbG9MrJmiKxqXVjIzBEyOIn8u7IxigT5u7amJPsitBvuFZQQ9tXDZL9uI+Rqs7 LfxQ12mXyPVT3ITwe4cxMmaeaGkLFBGyOEpEdA2uUJ9DsYgft9IL6g5Pk+CU3NJc Ixdtfpe9VGLIoBP4NhRFLq0ZyRTVVsySOw90OsI1ml0flke//jxbUYDoBQtylINR vStKh94CBP3+Ug7tA3DrMf2vN6tYLSh60W5Idz6ZFvnM6SdVLQm+gfTwbfRXLqnL aTY10LFPPGQBEFxpIpthU4TH1CkEogU= -----END CERTIFICATE-----Generated at Sun Apr 6 13:29:09 2025 by rpki-client