$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/6c9e4248-be2e-3262-936b-f338fe8f9389.roa File: 6c9e4248-be2e-3262-936b-f338fe8f9389.roa (raw, json) Hash identifier: Na1MFvZlqxAOTG+tkXBKgx8/S5w09sHBJMi6MfBBk10= Subject key identifier: 9B:61:DB:D3:B0:19:71:A1:EF:76:4D:89:6B:AA:89:6E:61:94:98:DA Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584969C09793576A78EBFDECDF00 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/6c9e4248-be2e-3262-936b-f338fe8f9389.roa Signing time: Fri 04 Apr 2025 10:01:45 +0000 ROA not before: Fri 04 Apr 2025 10:01:45 +0000 ROA not after: Thu 03 Jul 2025 10:01:45 +0000 asID: 35039 IP address blocks: 157.133.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:69:c0:97:93:57:6a:78:eb:fd:ec:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Apr 4 10:01:45 2025 GMT Not After : Jul 3 10:01:45 2025 GMT Subject: CN=46f44ea8-093a-478a-b9c3-17c2f94ecddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6d:76:2c:7e:8c:e3:d9:47:7e:3f:87:28:77: 64:13:34:48:57:b9:8e:c6:c0:34:88:43:21:70:e1: 74:9a:3c:18:1e:f0:ac:7d:0f:bb:62:da:7a:0e:0f: 28:7d:6f:2d:35:b2:f1:3b:19:48:58:bf:6d:9d:bc: a1:e4:35:13:11:46:08:bd:00:bb:f1:e9:63:f8:39: 9e:1f:17:43:ce:65:4d:aa:84:b8:24:a7:89:4a:eb: 8a:aa:af:7b:bd:8d:6b:ad:4b:e2:53:d3:8f:d8:aa: df:c7:b8:01:38:99:d7:29:68:82:2b:33:5f:ff:c1: a5:1d:35:78:5a:41:21:a8:1f:ae:be:01:c6:74:6e: 88:6c:b1:8e:d0:6e:5f:7d:eb:cb:a3:de:77:6f:b1: 6b:9f:cf:31:83:54:c7:6d:b3:46:37:c5:29:10:e8: af:f0:fd:14:f6:bb:d8:8e:35:66:3a:3e:8f:8e:f9: 47:3f:f5:0c:21:4e:ab:2e:40:d0:58:31:a0:dc:92: 78:3c:0b:b9:b2:48:fb:a0:21:fe:dd:dd:33:63:de: c5:6c:8d:4b:e5:43:85:4a:15:4f:aa:8e:de:95:2e: ea:f6:eb:ea:e9:fa:46:e8:8c:89:71:d0:75:38:5f: c7:be:1d:a8:75:eb:40:3e:49:2c:3f:a3:5b:ce:48: f1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:61:DB:D3:B0:19:71:A1:EF:76:4D:89:6B:AA:89:6E:61:94:98:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/6c9e4248-be2e-3262-936b-f338fe8f9389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:15:aa:12:f0:73:a0:35:3c:b8:31:d3:63:77:d3:44:a1:37: 22:08:7e:36:0c:59:53:67:a4:02:d7:0a:54:77:3c:9c:a9:f0: dd:30:32:ca:3f:f7:23:79:9c:59:ab:1f:ae:2d:de:22:7e:2b: 93:6d:9b:a6:c4:1b:89:d6:4e:72:f5:b2:44:48:61:da:c9:11: 49:ba:ae:5d:f9:6e:a7:f0:a6:3b:52:ac:80:a3:bc:ab:9d:69: a8:41:66:b6:a9:85:4f:f3:db:2e:69:3c:4f:b2:7d:3b:e5:f9: 66:70:f2:3d:7c:1f:05:ed:9b:e3:51:a7:8d:a7:b6:d4:8e:e2: ea:c7:46:9f:90:b4:bd:d0:3f:8b:65:95:b5:8d:70:a4:6e:a5: 51:eb:18:5c:58:f9:30:54:93:a6:ea:11:be:2f:cc:b1:a0:dd: 47:58:9e:ec:b6:f0:84:35:b5:a2:62:9d:22:82:03:db:56:fe: aa:f7:a6:da:c4:56:7a:be:5d:88:9c:7f:46:18:8c:d5:f8:70: 6b:f2:60:8e:33:10:43:bc:96:24:4e:a6:3a:b5:4a:7c:fd:18: 20:ff:ac:a4:8a:ef:16:56:a6:3f:ea:63:88:d1:ae:56:b5:eb: 7a:78:52:1e:47:ca:99:0e:02:8e:64:d8:79:48:8b:10:f0:f7: 49:24:36:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElpwJeTV2p46/3s3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDQwNDEwMDE0NVoXDTI1MDcwMzEwMDE0NVowLzEtMCsGA1UEAxMk NDZmNDRlYTgtMDkzYS00NzhhLWI5YzMtMTdjMmY5NGVjZGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom12LH6M49lHfj+HKHdkEzRIV7mOxsA0iEMh cOF0mjwYHvCsfQ+7Ytp6Dg8ofW8tNbLxOxlIWL9tnbyh5DUTEUYIvQC78elj+Dme HxdDzmVNqoS4JKeJSuuKqq97vY1rrUviU9OP2Krfx7gBOJnXKWiCKzNf/8GlHTV4 WkEhqB+uvgHGdG6IbLGO0G5ffevLo953b7Frn88xg1THbbNGN8UpEOiv8P0U9rvY jjVmOj6PjvlHP/UMIU6rLkDQWDGg3JJ4PAu5skj7oCH+3d0zY97FbI1L5UOFShVP qo7elS7q9uvq6fpG6IyJcdB1OF/Hvh2odetAPkksP6NbzkjxAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJth29OwGXGh73ZNiWuqiW5hlJjaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvNmM5ZTQyNDgtYmUyZS0z MjYyLTkzNmItZjMzOGZlOGY5Mzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnYWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAVqhLwc6A1PLgx02N300ShNyIIfjYMWVNnpALXClR3PJyp8N0wMso/ 9yN5nFmrH64t3iJ+K5Ntm6bEG4nWTnL1skRIYdrJEUm6rl35bqfwpjtSrICjvKud aahBZraphU/z2y5pPE+yfTvl+WZw8j18HwXtm+NRp42nttSO4urHRp+QtL3QP4tl lbWNcKRupVHrGFxY+TBUk6bqEb4vzLGg3UdYnuy28IQ1taJinSKCA9tW/qr3ptrE Vnq+XYicf0YYjNX4cGvyYI4zEEO8liROpjq1Snz9GCD/rKSK7xZWpj/qY4jRrla1 63p4Uh5HypkOAo5k2HlIixDw90kkNiE= -----END CERTIFICATE-----Generated at Sun Apr 6 11:41:52 2025 by rpki-client