$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/32e917f7-8439-3dab-8e9b-a859cb6d8e04.roa File: 32e917f7-8439-3dab-8e9b-a859cb6d8e04.roa (raw, json) Hash identifier: 5RgndlJbCd/aBisiM6IqaGwLXchlPMPPzpMVrnllNrM= Subject key identifier: 3D:E3:41:B0:9B:B9:B1:A4:37:8E:B0:BF:6C:F1:69:7E:87:E5:EA:6B Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F43285848B214BD7117589E8C5E82B1C0 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/32e917f7-8439-3dab-8e9b-a859cb6d8e04.roa Signing time: Tue 28 Jan 2025 15:02:34 +0000 ROA not before: Tue 28 Jan 2025 15:02:34 +0000 ROA not after: Mon 28 Apr 2025 14:02:34 +0000 asID: 14114 IP address blocks: 157.133.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b2:14:bd:71:17:58:9e:8c:5e:82:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Jan 28 15:02:34 2025 GMT Not After : Apr 28 14:02:34 2025 GMT Subject: CN=174b160b-4a69-4bea-896b-1ce68e90f575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:6f:0c:7e:c3:a8:f7:fb:0e:9d:72:e0:7a:86: 1c:97:ec:b2:a1:b1:43:4c:fb:7c:da:f3:8f:a6:e2: b3:a1:cb:fe:f7:6b:ed:b4:12:93:4a:e8:3f:0e:4c: 81:ff:3b:85:72:36:d6:2b:ac:66:03:1b:dd:f1:02: 14:e0:58:f7:38:39:58:ef:f8:89:15:9c:59:20:23: 56:68:29:42:1b:8b:ea:dd:fe:95:99:51:a5:5a:d9: 04:51:96:08:1a:0d:24:66:c8:7a:c4:90:ac:92:4b: 17:76:8b:9f:2a:35:84:1e:34:62:80:65:5e:1e:a6: 9c:ba:cc:83:61:d9:5f:ab:98:1e:c1:b0:44:61:ea: 97:a0:65:a5:7a:90:79:6f:6c:43:53:6a:ae:6f:83: 45:f3:6a:2f:dc:32:2f:3a:e5:78:0b:84:8e:d2:15: 3b:98:61:3c:f6:f7:46:21:32:75:33:4f:74:35:77: 65:aa:32:a6:4a:fc:d6:f6:c1:f2:cb:07:68:69:26: 22:0a:1f:7d:2e:4e:f0:ad:9d:db:f3:64:c2:ef:13: 27:14:f9:7c:6e:f8:a0:39:41:fb:9c:6f:92:b9:c9: c8:de:2c:ef:0f:51:6f:32:a2:7e:a4:b7:19:98:5e: 65:51:69:40:36:95:b0:79:96:35:b0:6a:8c:32:67: e3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E3:41:B0:9B:B9:B1:A4:37:8E:B0:BF:6C:F1:69:7E:87:E5:EA:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/32e917f7-8439-3dab-8e9b-a859cb6d8e04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:4f:cb:7d:c5:c1:18:6d:72:29:fe:ff:cc:d1:05:83:c5:6d: 9d:b0:a4:d0:d5:fb:19:99:99:68:3a:d7:c1:0f:0f:63:71:ab: 78:74:bb:a5:c3:40:02:36:50:bb:2f:fa:b8:b1:27:49:74:1b: 10:a0:1b:f2:11:e4:50:f0:32:45:94:7a:12:ca:23:8b:28:bb: e1:e2:1a:cd:fa:69:bd:cb:7a:65:ec:00:ec:c2:47:0e:64:06: 87:0d:a4:cd:d5:83:d4:80:de:9c:b6:32:32:ad:e0:18:e0:74: d7:42:51:83:07:9a:8c:3d:e2:63:8e:c3:ae:6f:1b:70:14:55: 5e:18:43:dd:3c:ca:ef:a2:36:53:17:96:4e:8f:2b:0e:75:3f: f9:c9:5b:2b:d4:37:4b:57:84:a8:a8:f6:30:5d:b0:7c:76:9f: 82:ed:79:2e:ea:07:b5:4e:b2:33:8d:95:dc:7d:02:9b:9b:88: ed:d8:f1:16:7a:e0:40:6f:a1:7e:36:b0:c9:c5:b1:5e:eb:7f: 48:9d:53:48:ce:ce:d5:f4:e9:fb:90:ba:5f:05:5c:ec:1e:92: 23:20:16:7d:f2:9b:3e:a5:20:56:ac:0d:8e:38:d3:3c:ec:fe: c1:9d:16:a0:a7:2e:a2:6f:fd:57:4a:94:02:d0:09:a2:06:c2: f9:22:08:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiyFL1xF1iejF6CscAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDEyODE1MDIzNFoXDTI1MDQyODE0MDIzNFowLzEtMCsGA1UEAxMk MTc0YjE2MGItNGE2OS00YmVhLTg5NmItMWNlNjhlOTBmNTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG8MfsOo9/sOnXLgeoYcl+yyobFDTPt82vOP puKzocv+92vttBKTSug/DkyB/zuFcjbWK6xmAxvd8QIU4Fj3ODlY7/iJFZxZICNW aClCG4vq3f6VmVGlWtkEUZYIGg0kZsh6xJCskksXdoufKjWEHjRigGVeHqacusyD Ydlfq5gewbBEYeqXoGWlepB5b2xDU2qub4NF82ov3DIvOuV4C4SO0hU7mGE89vdG ITJ1M090NXdlqjKmSvzW9sHyywdoaSYiCh99Lk7wrZ3b82TC7xMnFPl8bvigOUH7 nG+SucnI3izvD1FvMqJ+pLcZmF5lUWlANpWweZY1sGqMMmfjqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD3jQbCbubGkN46wv2zxaX6H5eprMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvMzJlOTE3ZjctODQzOS0z ZGFiLThlOWItYTg1OWNiNmQ4ZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnYX0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9Py33FwRhtcin+/8zRBYPFbZ2wpNDV+xmZmWg618EPD2Nxq3h0u6XD QAI2ULsv+rixJ0l0GxCgG/IR5FDwMkWUehLKI4sou+HiGs36ab3LemXsAOzCRw5k BocNpM3Vg9SA3py2MjKt4BjgdNdCUYMHmow94mOOw65vG3AUVV4YQ908yu+iNlMX lk6PKw51P/nJWyvUN0tXhKio9jBdsHx2n4LteS7qB7VOsjONldx9ApubiO3Y8RZ6 4EBvoX42sMnFsV7rf0idU0jOztX06fuQul8FXOwekiMgFn3ymz6lIFasDY440zzs /sGdFqCnLqJv/VdKlALQCaIGwvkiCBE= -----END CERTIFICATE-----Generated at Sat Apr 12 04:44:35 2025 by rpki-client