$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/561d0021-3fe4-31b8-85cc-e269eba14074.roa File: 561d0021-3fe4-31b8-85cc-e269eba14074.roa (raw, json) Hash identifier: 6K7H2ptNvA3y+GGc+sU/c3gtwHcTrQH7oQLQj19+QmE= Subject key identifier: 11:43:05:F8:9E:8C:88:38:FE:B6:1C:DD:90:96:FD:80:4F:15:3C:35 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584A71EB626FADA39681424BAF80 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/561d0021-3fe4-31b8-85cc-e269eba14074.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 14114 IP address blocks: 157.133.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:62:6f:ad:a3:96:81:42:4b:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=a6f11cc7-98c5-4d33-aaea-23821032f535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ef:48:c7:57:fd:b6:60:bd:48:d2:1a:71:ed: 08:ee:ec:ae:1b:5b:c3:34:d1:a3:5f:61:63:c1:3f: 52:aa:10:df:5a:dd:b5:6a:7d:95:fc:82:b0:3d:cb: 9c:1d:1e:59:b1:9f:03:eb:c1:42:0d:71:0e:64:de: 14:22:4d:9a:6a:4a:b1:3d:48:2a:75:c0:08:7d:a1: 4e:73:8a:8d:d7:55:4c:56:f1:49:88:87:ba:31:b4: 4c:c3:88:f2:c1:25:29:e1:07:f8:ce:0f:03:5d:e3: 8e:c9:79:8b:67:af:d5:70:16:29:7b:a4:4c:71:c2: b6:80:d9:dc:3f:00:1d:08:5d:7c:cb:7a:5e:b2:43: ec:5e:98:04:24:cd:5c:9b:b6:12:57:6a:44:7d:ac: 2e:a1:66:e5:55:37:a2:f7:26:01:61:b7:28:94:5a: d5:52:5d:1a:43:80:34:e3:a6:ac:3f:2e:5d:b6:dc: 27:5b:ff:07:9d:fc:d8:0f:41:66:e1:14:93:12:e9: 08:06:29:ce:9e:ff:8f:20:65:41:84:ca:92:f0:d5: 27:db:63:63:e3:3f:20:bd:c9:ae:8f:da:ff:be:97: df:7c:cf:77:ef:01:f4:b0:9a:40:ae:68:1a:f5:d7: d8:16:4a:01:04:0b:42:b6:3d:b6:d5:cc:6b:e7:e7: d3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:43:05:F8:9E:8C:88:38:FE:B6:1C:DD:90:96:FD:80:4F:15:3C:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/561d0021-3fe4-31b8-85cc-e269eba14074.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:ab:87:5d:d9:cd:91:56:4c:ec:5f:62:82:fd:31:aa:44:68: 1d:84:0b:38:bd:9c:b2:fb:ac:a4:3a:4d:bc:40:5c:dd:d7:55: 5f:99:7a:17:fb:40:e5:86:45:5c:77:a6:b4:1f:dc:33:3b:4a: 95:ad:e4:e6:64:64:8d:5b:d7:ab:ec:31:11:74:62:ad:40:51: 68:61:41:c5:50:16:9a:ad:67:a9:47:a7:13:8a:8f:f9:c5:68: 01:4b:c6:92:6a:c1:d3:02:39:99:c0:89:27:81:47:51:dc:81: bc:08:80:a0:25:c3:1a:e1:b4:f7:e2:a0:c3:a9:f7:d1:aa:7f: b2:25:8a:cb:fa:97:f1:17:cb:94:ce:d7:48:e0:1c:1d:1b:22: 75:13:d0:15:ed:33:ed:c0:8c:e7:e3:04:e0:34:fb:05:ef:c6: 06:0c:6e:3a:92:cf:4f:4d:ac:85:2a:9c:cb:73:65:94:50:a8: b1:0f:a9:3b:66:5f:da:6b:f7:24:c3:f5:d4:21:d7:30:b0:68: ba:ec:4c:c3:16:c4:1b:0a:f6:63:74:94:0b:82:e8:68:a1:99: d1:27:06:ea:c0:bc:d9:f3:e1:3c:55:6c:51:2b:66:35:09:99: e1:52:7c:40:69:85:06:dc:f4:f0:3b:87:89:c1:0d:0f:b0:90: 98:1b:34:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx62JvraOWgUJLr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk YTZmMTFjYzctOThjNS00ZDMzLWFhZWEtMjM4MjEwMzJmNTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+9Ix1f9tmC9SNIace0I7uyuG1vDNNGjX2Fj wT9SqhDfWt21an2V/IKwPcucHR5ZsZ8D68FCDXEOZN4UIk2aakqxPUgqdcAIfaFO c4qN11VMVvFJiIe6MbRMw4jywSUp4Qf4zg8DXeOOyXmLZ6/VcBYpe6RMccK2gNnc PwAdCF18y3peskPsXpgEJM1cm7YSV2pEfawuoWblVTei9yYBYbcolFrVUl0aQ4A0 46asPy5dttwnW/8HnfzYD0Fm4RSTEukIBinOnv+PIGVBhMqS8NUn22Nj4z8gvcmu j9r/vpfffM937wH0sJpArmga9dfYFkoBBAtCtj221cxr5+fTQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFDBfiejIg4/rYc3ZCW/YBPFTw1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvNTYxZDAwMjEtM2ZlNC0z MWI4LTg1Y2MtZTI2OWViYTE0MDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnYUYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACarh13ZzZFWTOxfYoL9MapEaB2ECzi9nLL7rKQ6TbxAXN3XVV+Zehf7 QOWGRVx3prQf3DM7SpWt5OZkZI1b16vsMRF0Yq1AUWhhQcVQFpqtZ6lHpxOKj/nF aAFLxpJqwdMCOZnAiSeBR1HcgbwIgKAlwxrhtPfioMOp99Gqf7Ilisv6l/EXy5TO 10jgHB0bInUT0BXtM+3AjOfjBOA0+wXvxgYMbjqSz09NrIUqnMtzZZRQqLEPqTtm X9pr9yTD9dQh1zCwaLrsTMMWxBsK9mN0lAuC6GihmdEnBurAvNnz4TxVbFErZjUJ meFSfEBphQbc9PA7h4nBDQ+wkJgbNKc= -----END CERTIFICATE-----Generated at Sun Jul 27 03:13:43 2025 by rpki-client