$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/335158f7-423f-34a5-b97f-d4041cbecf04.roa File: 335158f7-423f-34a5-b97f-d4041cbecf04.roa (raw, json) Hash identifier: 7X0bgpM8Zf69ELt0gBEmXBlFSWacAFZVtpgkj2fx7dU= Subject key identifier: F2:3C:66:45:B3:58:F5:58:44:25:08:72:AD:24:E9:B8:07:F9:0C:77 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584A904BC4E7BAA5C86697862140 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/335158f7-423f-34a5-b97f-d4041cbecf04.roa Signing time: Fri 18 Jul 2025 22:09:50 +0000 ROA not before: Fri 18 Jul 2025 22:09:50 +0000 ROA not after: Thu 16 Oct 2025 22:09:50 +0000 asID: 14114 IP address blocks: 157.133.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:4b:c4:e7:ba:a5:c8:66:97:86:21:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Jul 18 22:09:50 2025 GMT Not After : Oct 16 22:09:50 2025 GMT Subject: CN=e939bd64-ebe1-4419-b900-43de3ae2019d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:53:3c:99:1a:5b:26:99:91:cb:99:e9:82:0e: 3a:69:4f:4d:2d:b5:bb:f9:82:cc:d8:6d:2e:0c:a2: e5:3d:56:52:7e:13:ed:9f:43:a8:95:f8:7b:d7:ca: 15:e3:da:e7:7f:65:83:d8:bb:0c:11:30:78:e5:a3: 50:c2:49:91:ef:f8:27:c0:10:b2:7a:f8:dc:0e:20: c3:25:42:e9:95:9d:b2:db:6d:1b:52:fb:a1:e8:39: 56:c6:cd:df:4a:d3:3c:81:98:38:95:85:49:56:29: 78:6e:22:be:e6:dc:03:1f:71:2a:95:a3:47:8e:4a: 09:63:36:70:9f:cd:4f:47:37:57:da:24:89:bb:db: 2f:43:4b:d5:24:7e:eb:c6:bc:81:6c:58:bd:63:03: 7c:1f:db:99:7e:ba:ab:de:17:5d:6e:94:a3:a8:13: 84:9d:48:42:4e:01:9a:6d:9f:0a:d6:33:1d:34:60: f6:8e:ac:8c:5b:61:b8:bd:34:43:a2:b7:ad:83:bc: f6:4e:d6:a5:95:1c:6d:89:fe:49:e0:25:61:78:a9: 38:06:a9:34:8c:2f:d9:d8:eb:50:0e:2f:59:f5:39: 7d:4e:01:ba:8f:da:a5:51:63:5b:03:a6:20:12:72: b5:7e:4f:8b:65:38:8b:dc:95:32:21:27:58:2c:b2: 6a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3C:66:45:B3:58:F5:58:44:25:08:72:AD:24:E9:B8:07:F9:0C:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/335158f7-423f-34a5-b97f-d4041cbecf04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:37:53:f6:4f:27:bc:29:77:ed:7b:76:89:58:89:1b:e9:97: 70:72:9f:44:5b:b9:56:c3:f6:3a:77:0a:c9:19:23:f5:7d:5c: 3a:cd:b5:f7:d2:ed:7d:83:bd:8e:ed:8f:8f:a8:a7:6d:a4:a4: e6:32:50:33:aa:39:12:84:55:1e:60:bb:35:ca:9d:84:5b:58: 05:e2:05:1b:24:1c:26:ac:1f:bb:f2:14:02:af:db:98:1d:08: 11:2b:79:f5:0a:52:e7:00:ca:71:96:d5:41:06:c8:27:48:75: fe:db:61:90:f7:fc:cb:b8:0f:50:23:06:e4:fe:d8:39:c9:57: 12:2a:62:d7:06:ed:7d:76:f4:d8:35:ce:74:7f:e6:c5:a2:2d: 0d:50:23:22:bc:10:cc:44:9c:f1:60:e7:22:80:77:03:2a:4e: 2c:89:19:4d:ae:6d:58:6c:7c:94:6d:c2:55:a3:5a:26:1a:81: c9:d4:61:88:d6:c3:ad:98:2b:52:2d:52:3f:44:96:e4:30:f3: 2f:13:b8:f0:8f:d9:59:61:2f:d4:36:16:71:ba:ea:df:9e:5e: 8f:b9:a9:8b:99:74:67:4a:77:ea:79:b3:30:3e:ad:46:18:90: 3f:e1:61:22:93:be:cc:48:62:ba:c9:2d:a0:68:02:0d:5d:ed: 6c:d1:03:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQS8TnuqXIZpeGIUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDcxODIyMDk1MFoXDTI1MTAxNjIyMDk1MFowLzEtMCsGA1UEAxMk ZTkzOWJkNjQtZWJlMS00NDE5LWI5MDAtNDNkZTNhZTIwMTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVM8mRpbJpmRy5npgg46aU9NLbW7+YLM2G0u DKLlPVZSfhPtn0Oolfh718oV49rnf2WD2LsMETB45aNQwkmR7/gnwBCyevjcDiDD JULplZ2y220bUvuh6DlWxs3fStM8gZg4lYVJVil4biK+5twDH3EqlaNHjkoJYzZw n81PRzdX2iSJu9svQ0vVJH7rxryBbFi9YwN8H9uZfrqr3hddbpSjqBOEnUhCTgGa bZ8K1jMdNGD2jqyMW2G4vTRDoretg7z2TtallRxtif5J4CVheKk4Bqk0jC/Z2OtQ Di9Z9Tl9TgG6j9qlUWNbA6YgEnK1fk+LZTiL3JUyISdYLLJqiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPI8ZkWzWPVYRCUIcq0k6bgH+Qx3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvMzM1MTU4ZjctNDIzZi0z NGE1LWI5N2YtZDQwNDFjYmVjZjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnYU4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADE3U/ZPJ7wpd+17dolYiRvpl3Byn0RbuVbD9jp3CskZI/V9XDrNtffS 7X2DvY7tj4+op22kpOYyUDOqORKEVR5guzXKnYRbWAXiBRskHCasH7vyFAKv25gd CBErefUKUucAynGW1UEGyCdIdf7bYZD3/Mu4D1AjBuT+2DnJVxIqYtcG7X129Ng1 znR/5sWiLQ1QIyK8EMxEnPFg5yKAdwMqTiyJGU2ubVhsfJRtwlWjWiYagcnUYYjW w62YK1ItUj9EluQw8y8TuPCP2VlhL9Q2FnG66t+eXo+5qYuZdGdKd+p5szA+rUYY kD/hYSKTvsxIYrrJLaBoAg1d7WzRA+Y= -----END CERTIFICATE-----Generated at Sun Jul 27 03:01:16 2025 by rpki-client