$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/1bdbbd7a-6fec-3478-983a-d156657009eb.roa File: 1bdbbd7a-6fec-3478-983a-d156657009eb.roa (raw, json) Hash identifier: yo8TBtjjEiiHPz+VJ8N7lM1LzzPOILQmV79pq31h+A8= Subject key identifier: DD:D7:50:39:12:9F:18:57:31:B8:5E:2A:FE:80:0B:7A:01:9E:0C:31 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584A7BB0B3A72CA7C463D3983A00 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/1bdbbd7a-6fec-3478-983a-d156657009eb.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 0 IP address blocks: 157.133.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:b3:a7:2c:a7:c4:63:d3:98:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=f0ed9fa2-0621-488f-9e2a-6ab1180cd100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:61:dd:bd:02:88:6a:ca:cf:9a:eb:4a:9c:dc: ee:ec:9d:49:47:59:b2:4b:c6:1d:52:a4:d7:9a:7a: b1:a6:ee:16:d0:dc:b9:ba:3f:10:a6:f1:37:e7:93: d1:2b:1f:6a:b6:98:31:b0:ed:58:3e:08:db:db:f7: 16:63:2f:f0:12:bc:33:1d:81:84:ae:b5:4f:61:ac: d8:12:f1:63:11:41:6f:83:88:b5:a8:71:ed:a5:8a: c3:5c:c9:dd:dd:9e:f4:db:29:77:84:f8:a1:74:1c: 82:fc:d6:b5:e0:ea:ff:00:5c:98:d5:7a:a2:8d:90: 4e:cf:99:eb:58:f7:50:ae:fb:50:46:09:ae:58:fa: 5e:b6:ca:c7:6a:c0:25:82:89:a0:58:c9:29:35:1f: f1:4d:44:9d:0c:98:27:da:b0:1f:6d:15:3d:1f:b2: bf:8c:55:20:ca:12:06:37:6d:84:4a:87:40:cb:30: 5c:ce:8a:4d:aa:3d:03:44:d6:04:1a:f2:0d:33:54: 2c:f2:bb:4b:52:b4:fd:f2:e6:e3:be:8b:fc:32:45: 9e:f3:82:1f:6a:cd:97:f7:2c:9f:35:d0:8e:23:19: 60:18:c4:6d:ea:e5:48:27:08:f1:06:fb:6d:7b:25: 1d:f9:14:2d:e4:b6:a4:d4:13:2e:01:da:31:b7:39: f3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D7:50:39:12:9F:18:57:31:B8:5E:2A:FE:80:0B:7A:01:9E:0C:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/1bdbbd7a-6fec-3478-983a-d156657009eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:08:75:75:6e:39:4f:02:5f:52:f0:07:5d:39:ea:20:d1:d2: 90:3e:27:91:ad:dc:ed:4e:56:5f:cc:fb:d9:fa:9a:36:83:30: 18:1d:9a:fd:37:e7:68:df:16:3c:fe:46:2f:d4:df:85:41:69: 31:04:a1:f7:8d:5a:cf:6c:ae:02:b9:43:5f:a2:bd:32:cb:44: e5:15:df:29:bb:b0:1a:8e:1c:2f:80:aa:6f:7f:36:e4:7f:46: e4:a6:64:89:6f:56:72:c5:af:35:d1:3a:b6:dc:73:f2:2a:75: 68:01:bf:ce:25:ff:0a:60:f5:f6:8a:af:65:9a:a9:25:9e:0e: 0a:62:7c:fc:f9:3c:0e:ad:73:90:0b:50:db:63:36:62:c2:9f: 64:fa:f6:66:d8:f8:ce:d5:b6:19:aa:80:a9:4e:9d:5e:33:c5: 99:1a:dd:ff:dd:8c:ef:0e:45:30:bc:58:3c:69:f0:c4:73:95: a9:08:64:f6:ce:f4:b2:14:7b:0f:18:e5:4b:f5:e2:36:2a:fe: a2:fc:7c:72:f1:91:5a:ce:32:93:20:ed:ea:2d:21:0b:5b:97: fe:3b:51:1c:81:50:8f:25:ab:89:0d:05:c0:69:d1:95:77:6c: e4:99:b0:e3:95:85:1c:51:d7:59:1e:ee:1e:49:76:b7:af:2c: 41:f1:cc:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sLOnLKfEY9OYOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk ZjBlZDlmYTItMDYyMS00ODhmLTllMmEtNmFiMTE4MGNkMTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmHdvQKIasrPmutKnNzu7J1JR1myS8YdUqTX mnqxpu4W0Ny5uj8QpvE355PRKx9qtpgxsO1YPgjb2/cWYy/wErwzHYGErrVPYazY EvFjEUFvg4i1qHHtpYrDXMnd3Z702yl3hPihdByC/Na14Or/AFyY1XqijZBOz5nr WPdQrvtQRgmuWPpetsrHasAlgomgWMkpNR/xTUSdDJgn2rAfbRU9H7K/jFUgyhIG N22ESodAyzBczopNqj0DRNYEGvINM1Qs8rtLUrT98ubjvov8MkWe84Ifas2X9yyf NdCOIxlgGMRt6uVIJwjxBvtteyUd+RQt5Lak1BMuAdoxtznzZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3XUDkSnxhXMbheKv6AC3oBngwxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvMWJkYmJkN2EtNmZlYy0z NDc4LTk4M2EtZDE1NjY1NzAwOWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnYXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8IdXVuOU8CX1LwB1056iDR0pA+J5Gt3O1OVl/M+9n6mjaDMBgdmv03 52jfFjz+Ri/U34VBaTEEofeNWs9srgK5Q1+ivTLLROUV3ym7sBqOHC+Aqm9/NuR/ RuSmZIlvVnLFrzXROrbcc/IqdWgBv84l/wpg9faKr2WaqSWeDgpifPz5PA6tc5AL UNtjNmLCn2T69mbY+M7VthmqgKlOnV4zxZka3f/djO8ORTC8WDxp8MRzlakIZPbO 9LIUew8Y5Uv14jYq/qL8fHLxkVrOMpMg7eotIQtbl/47URyBUI8lq4kNBcBp0ZV3 bOSZsOOVhRxR11ke7h5JdrevLEHxzOc= -----END CERTIFICATE-----Generated at Sun Jul 27 03:04:44 2025 by rpki-client