$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/4b91c8fc-2e98-396e-95a9-719e956df958.roa File: 4b91c8fc-2e98-396e-95a9-719e956df958.roa (raw, json) Hash identifier: fOcHckIwzh6ouOYtZ0wPlUiYvstO6a9dpEWJdr6X88Y= Subject key identifier: 56:7D:B6:BA:B7:A0:81:E2:4F:B1:23:E2:4E:35:C0:53:1C:92:F7:2D Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584A7BB0B320BA08EDDD15DA8C80 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/4b91c8fc-2e98-396e-95a9-719e956df958.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 0 IP address blocks: 157.133.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:b3:20:ba:08:ed:dd:15:da:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=0e6eae8d-5d1e-4b43-bf21-4f074f0c2013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:db:b0:f8:f2:13:d7:7a:2c:2e:ff:63:0b:16: a5:f9:7c:d4:3c:29:01:a4:b7:44:b8:fc:f9:0c:fe: 49:27:c0:3a:f1:d2:d1:8d:43:7b:8b:fe:e2:25:04: 33:86:03:7b:1f:9c:7e:32:f0:72:65:bd:62:b1:d6: 50:ee:4b:96:42:7c:af:7c:8a:76:8c:d2:68:87:58: 54:02:93:db:c5:36:24:93:93:4e:6d:9e:94:36:89: 86:53:19:c6:c2:8c:e3:1c:f0:7c:df:f0:99:43:c1: d9:0f:57:d8:7f:b4:38:f7:c2:78:af:f7:2f:e5:9d: 56:ac:3e:44:b1:3f:9e:49:1a:c9:4c:1b:26:99:0d: bd:51:cb:e7:a5:5d:83:bc:03:0b:26:04:6e:a8:59: a0:eb:c6:d4:b5:d2:3f:d8:4d:f1:c2:0a:4b:c9:bc: c4:9a:d0:18:d1:26:ee:16:27:d3:3f:28:65:f1:fd: ad:ed:b2:9e:2c:4c:c5:55:d6:cf:ab:e7:cb:af:5a: 4b:94:b0:73:d5:43:21:48:d7:a9:d0:09:46:ba:96: aa:00:12:e2:48:e2:02:04:09:cf:78:3a:ea:b4:cc: b8:66:18:cb:5e:16:ca:32:4d:00:4a:03:22:0a:09: cc:bf:53:86:09:b8:76:5f:01:b9:5c:0b:1c:d6:9c: 57:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:7D:B6:BA:B7:A0:81:E2:4F:B1:23:E2:4E:35:C0:53:1C:92:F7:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/4b91c8fc-2e98-396e-95a9-719e956df958.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:02:91:fd:c9:13:20:66:2e:7f:27:93:6b:bc:75:0f:85:3d: db:31:05:54:43:f8:91:a3:d1:0a:a6:15:10:04:e1:23:05:04: 25:8c:8f:af:76:9d:e6:39:51:a5:cf:e6:82:4f:47:8a:a6:dd: 0f:95:64:56:5c:20:c9:92:56:fe:9a:6d:e7:51:53:c8:2b:a6: 6d:40:28:c2:30:30:24:cb:45:a4:30:f0:3c:9b:a6:9f:60:9a: df:12:17:e9:f4:f0:1a:85:cf:e0:6c:d6:bf:d4:94:9a:c0:91: be:94:16:6a:29:10:b4:a4:79:9d:a9:71:76:a8:f0:f2:2c:78: c1:7a:2d:8c:97:d1:c5:68:13:be:54:9d:07:17:f2:4b:4f:33: c3:24:0f:cc:c4:46:fe:ed:7b:02:9e:65:2b:a2:7a:c3:4b:65: e8:37:1f:e4:08:cc:c5:6b:b0:8a:55:36:34:f5:fe:44:59:36: bc:b4:32:ed:6c:51:41:08:f1:a7:4b:55:9a:63:1e:76:60:0f: bd:23:21:34:15:2b:7a:ec:de:33:be:47:bc:6a:36:43:57:81: 64:a9:09:f6:77:e7:6e:c8:cc:5a:0e:b9:63:2f:a1:f6:c7:18: 7a:ea:2f:12:6b:71:bd:97:b6:50:e4:b7:48:09:f2:3d:c4:d9: fc:a7:09:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sLMgugjt3RXajIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk MGU2ZWFlOGQtNWQxZS00YjQzLWJmMjEtNGYwNzRmMGMyMDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiduw+PIT13osLv9jCxal+XzUPCkBpLdEuPz5 DP5JJ8A68dLRjUN7i/7iJQQzhgN7H5x+MvByZb1isdZQ7kuWQnyvfIp2jNJoh1hU ApPbxTYkk5NObZ6UNomGUxnGwozjHPB83/CZQ8HZD1fYf7Q498J4r/cv5Z1WrD5E sT+eSRrJTBsmmQ29UcvnpV2DvAMLJgRuqFmg68bUtdI/2E3xwgpLybzEmtAY0Sbu FifTPyhl8f2t7bKeLEzFVdbPq+fLr1pLlLBz1UMhSNep0AlGupaqABLiSOICBAnP eDrqtMy4ZhjLXhbKMk0ASgMiCgnMv1OGCbh2XwG5XAsc1pxXRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZ9trq3oIHiT7Ej4k41wFMckvctMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvNGI5MWM4ZmMtMmU5OC0z OTZlLTk1YTktNzE5ZTk1NmRmOTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnYXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADICkf3JEyBmLn8nk2u8dQ+FPdsxBVRD+JGj0QqmFRAE4SMFBCWMj692 neY5UaXP5oJPR4qm3Q+VZFZcIMmSVv6abedRU8grpm1AKMIwMCTLRaQw8Dybpp9g mt8SF+n08BqFz+Bs1r/UlJrAkb6UFmopELSkeZ2pcXao8PIseMF6LYyX0cVoE75U nQcX8ktPM8MkD8zERv7tewKeZSuiesNLZeg3H+QIzMVrsIpVNjT1/kRZNry0Mu1s UUEI8adLVZpjHnZgD70jITQVK3rs3jO+R7xqNkNXgWSpCfZ3527IzFoOuWMvofbH GHrqLxJrcb2XtlDkt0gJ8j3E2fynCcI= -----END CERTIFICATE-----Generated at Sun Jul 27 03:05:43 2025 by rpki-client