$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/88ed4f19-4672-38c3-b88f-52f18d484770.roa File: 88ed4f19-4672-38c3-b88f-52f18d484770.roa (raw, json) Hash identifier: eW6eaQS7tcXVEEU8pCXpkVuWg2EEQQ/i5mSzPFlW6DU= Subject key identifier: 46:07:69:65:0B:40:1C:25:A3:64:5B:77:BE:D8:E0:CD:C7:AD:9F:ED Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584A904B36D8E3C272EF836DB800 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/88ed4f19-4672-38c3-b88f-52f18d484770.roa Signing time: Fri 18 Jul 2025 22:08:43 +0000 ROA not before: Fri 18 Jul 2025 22:08:43 +0000 ROA not after: Thu 16 Oct 2025 22:08:43 +0000 asID: 14114 IP address blocks: 157.133.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:4b:36:d8:e3:c2:72:ef:83:6d:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Jul 18 22:08:43 2025 GMT Not After : Oct 16 22:08:43 2025 GMT Subject: CN=37417338-5d11-4b74-9c99-ba839f4db0c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:48:d4:18:f3:f3:b7:37:55:d5:6a:ce:8a:d3: 17:41:60:55:45:b6:f2:53:31:1d:61:11:44:b8:57: 6a:ce:3a:19:dd:23:0d:eb:89:29:0b:8d:e7:02:3f: f9:8d:ae:28:b6:da:9b:49:b2:23:e0:6d:a2:a6:f4: e7:e7:93:ec:57:92:32:f2:f6:65:4d:95:81:26:98: 24:07:1c:cd:ab:ce:96:2f:9a:ed:5b:96:84:6c:2b: 7a:1d:b0:57:4d:bf:2b:9b:d9:0c:fe:4e:14:30:1b: cd:08:ba:aa:88:99:48:3a:4f:e9:64:35:d3:44:f5: cf:4a:18:9a:b8:2c:0e:e5:26:bf:a3:d6:c0:eb:b3: 58:c6:ff:9f:d2:c2:37:6f:8b:9a:87:a5:33:5a:74: 77:db:da:ee:a5:92:4a:88:c3:50:84:50:50:3e:ce: 24:cb:bc:52:9b:ba:27:7b:5a:c3:c7:17:07:65:84: a3:76:48:07:d3:75:a1:aa:30:78:9c:44:bc:68:da: 59:ef:67:d6:58:3b:e5:f7:76:5c:d3:ba:3f:dc:5d: ab:4a:ce:fc:cb:f9:32:42:8b:3d:98:eb:a3:1c:3b: 6f:64:2e:97:4b:d7:fa:ee:80:08:83:d6:f1:13:31: 85:6a:38:8d:0e:d8:03:50:7d:06:97:b0:64:3c:24: 3d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:07:69:65:0B:40:1C:25:A3:64:5B:77:BE:D8:E0:CD:C7:AD:9F:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/88ed4f19-4672-38c3-b88f-52f18d484770.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:ea:a1:92:1f:05:0f:d5:fe:0d:6c:be:9e:67:4b:e5:c9:7c: 2a:43:25:fd:9a:70:cb:38:dd:0f:f0:35:b3:90:f2:32:99:2a: 25:64:87:87:92:cb:3b:9e:5f:46:37:ab:f5:17:5e:c5:31:50: 26:b6:4c:4f:ea:e5:a0:ed:19:24:a3:fd:3b:ef:c8:48:e4:45: 28:81:e3:36:80:66:ff:fb:16:b9:31:43:32:06:a1:a2:e1:a7: eb:e1:c1:4a:cc:27:e3:d4:7d:94:6f:82:25:64:64:c3:8d:74: 97:eb:df:cb:4e:83:94:b6:8e:58:1c:83:90:21:ee:e7:4f:38: a9:eb:a9:3a:89:fc:7e:d5:dc:d4:76:cc:97:b0:42:75:19:6f: 6f:41:f7:66:b3:da:26:76:0e:98:6f:22:c6:a5:a8:ba:03:de: e5:5e:c1:fe:74:dd:2f:0d:ed:7a:2f:56:8b:50:ae:df:8c:d8: ab:ff:56:b1:8b:0a:85:fa:0d:25:66:d5:ed:0d:63:97:84:94: f0:03:cf:c9:55:4f:20:1b:34:c5:23:bb:e1:7e:ac:8b:1e:cd: b2:03:10:74:54:a8:8f:52:3d:9c:eb:1e:c6:f3:8e:14:c8:d7: c8:a9:83:29:ba:64:20:cd:30:26:cd:4e:2a:1b:0f:1b:82:a8: 89:4c:18:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQSzbY48Jy74NtuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDcxODIyMDg0M1oXDTI1MTAxNjIyMDg0M1owLzEtMCsGA1UEAxMk Mzc0MTczMzgtNWQxMS00Yjc0LTljOTktYmE4MzlmNGRiMGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkjUGPPztzdV1WrOitMXQWBVRbbyUzEdYRFE uFdqzjoZ3SMN64kpC43nAj/5ja4ottqbSbIj4G2ipvTn55PsV5Iy8vZlTZWBJpgk BxzNq86WL5rtW5aEbCt6HbBXTb8rm9kM/k4UMBvNCLqqiJlIOk/pZDXTRPXPShia uCwO5Sa/o9bA67NYxv+f0sI3b4uah6UzWnR329rupZJKiMNQhFBQPs4ky7xSm7on e1rDxxcHZYSjdkgH03WhqjB4nES8aNpZ72fWWDvl93Zc07o/3F2rSs78y/kyQos9 mOujHDtvZC6XS9f67oAIg9bxEzGFajiNDtgDUH0Gl7BkPCQ9YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYHaWULQBwlo2Rbd77Y4M3HrZ/tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvODhlZDRmMTktNDY3Mi0z OGMzLWI4OGYtNTJmMThkNDg0NzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnYU0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbqoZIfBQ/V/g1svp5nS+XJfCpDJf2acMs43Q/wNbOQ8jKZKiVkh4eS yzueX0Y3q/UXXsUxUCa2TE/q5aDtGSSj/TvvyEjkRSiB4zaAZv/7FrkxQzIGoaLh p+vhwUrMJ+PUfZRvgiVkZMONdJfr38tOg5S2jlgcg5Ah7udPOKnrqTqJ/H7V3NR2 zJewQnUZb29B92az2iZ2DphvIsalqLoD3uVewf503S8N7XovVotQrt+M2Kv/VrGL CoX6DSVm1e0NY5eElPADz8lVTyAbNMUju+F+rIsezbIDEHRUqI9SPZzrHsbzjhTI 18ipgym6ZCDNMCbNTiobDxuCqIlMGO0= -----END CERTIFICATE-----Generated at Sun Jul 27 03:11:36 2025 by rpki-client