$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/443fe304-46c7-3dcc-ab7d-91d5e7bf92e6.roa File: 443fe304-46c7-3dcc-ab7d-91d5e7bf92e6.roa (raw, json) Hash identifier: 2jB16su7lZGuqCRplnBHEmkm/FOjSsby5hWD4Up9eaQ= Subject key identifier: 8C:AB:7F:48:02:85:76:F3:A2:AC:6F:EE:44:43:57:CD:9A:C1:F1:2E Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F43285848B22E59B97520D1D46B0134E4 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/443fe304-46c7-3dcc-ab7d-91d5e7bf92e6.roa Signing time: Tue 28 Jan 2025 15:54:10 +0000 ROA not before: Tue 28 Jan 2025 15:54:10 +0000 ROA not after: Mon 28 Apr 2025 14:54:10 +0000 asID: 0 IP address blocks: 157.133.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b2:2e:59:b9:75:20:d1:d4:6b:01:34:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Jan 28 15:54:10 2025 GMT Not After : Apr 28 14:54:10 2025 GMT Subject: CN=a9bb2111-7064-41f4-9861-c66f04164d94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e7:5c:21:13:7f:33:33:23:06:c2:e2:5c:c8: f4:25:41:d6:d5:e3:09:f7:5b:1f:3f:92:9e:55:f9: d9:41:00:62:28:dd:a4:af:4b:de:86:1b:a3:d9:0d: b8:51:a6:64:60:6f:82:87:88:a0:eb:67:53:84:9a: 49:35:65:30:52:f5:81:84:47:13:05:ba:4e:cc:9d: e4:59:60:65:e0:f3:18:d0:83:67:b5:10:f8:60:5c: 55:18:c9:21:1b:0d:bf:bb:4d:73:80:6c:cb:92:e7: 06:78:46:07:11:16:43:94:dd:4e:84:be:1a:31:d0: af:f2:67:4d:05:2c:a7:86:b2:6a:e5:b5:11:93:ba: da:17:f4:e3:bf:12:a6:78:6b:2b:91:19:9b:84:ea: 4d:46:0d:a0:47:e3:38:70:00:46:4b:23:42:2d:48: 28:b4:5f:92:33:f1:e1:56:cd:2e:ca:dd:56:c6:5a: f6:ee:22:cd:49:88:ce:47:80:9e:f4:2f:2c:db:41: e0:f5:f0:a5:29:d6:4b:55:e6:b1:51:00:68:55:23: da:24:a9:77:52:72:78:f6:d7:9d:53:47:77:bc:20: dd:48:b3:1a:db:56:1a:d4:a1:42:24:5c:3d:1f:63: 0b:08:a8:fe:e5:7e:d6:08:ed:8e:a4:07:79:42:d6: 47:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:AB:7F:48:02:85:76:F3:A2:AC:6F:EE:44:43:57:CD:9A:C1:F1:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/443fe304-46c7-3dcc-ab7d-91d5e7bf92e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:00:42:99:54:b7:9e:22:6e:65:a3:39:c0:e0:78:9b:2a:7f: 89:cf:70:f2:30:90:90:d0:0d:63:c4:2b:4b:97:f1:79:81:ce: 23:a2:ba:4e:3b:d0:48:14:f6:ca:4d:a9:b7:06:41:b9:d5:2d: b4:79:71:f0:63:b3:3a:a1:8b:a6:39:69:0d:6c:1d:e2:07:24: b6:ed:33:48:a5:08:d1:03:9b:1a:d0:4f:34:0d:06:46:76:ff: 1a:4d:cf:65:fa:bb:da:04:af:07:23:9c:31:1b:d3:8e:bc:7e: b6:d3:65:f9:4e:7d:77:a8:c6:77:57:9e:07:da:37:66:cf:39: 3b:8e:b7:56:7e:f5:66:a0:ee:72:96:63:36:53:2a:7a:0f:b9: 16:30:fd:2b:b0:96:3e:a6:f5:cf:f7:b6:6c:cd:9a:c3:2e:37: 2c:f2:c5:09:5e:cf:d8:54:57:f5:23:b7:1c:10:fa:ef:61:92: 74:d8:a8:81:8e:fd:43:29:44:60:85:c4:10:aa:04:53:f1:64: 48:2b:39:b8:92:5f:cc:63:52:4f:77:f5:61:78:64:af:2a:74: 3d:9b:83:44:f4:15:29:a1:c0:fa:43:52:54:23:7f:87:07:12: 1a:c9:38:93:36:7d:24:00:ff:d4:de:64:53:b5:83:13:03:54: c2:18:11:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiyLlm5dSDR1GsBNOQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDEyODE1NTQxMFoXDTI1MDQyODE0NTQxMFowLzEtMCsGA1UEAxMk YTliYjIxMTEtNzA2NC00MWY0LTk4NjEtYzY2ZjA0MTY0ZDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArudcIRN/MzMjBsLiXMj0JUHW1eMJ91sfP5Ke VfnZQQBiKN2kr0vehhuj2Q24UaZkYG+Ch4ig62dThJpJNWUwUvWBhEcTBbpOzJ3k WWBl4PMY0INntRD4YFxVGMkhGw2/u01zgGzLkucGeEYHERZDlN1OhL4aMdCv8mdN BSynhrJq5bURk7raF/TjvxKmeGsrkRmbhOpNRg2gR+M4cABGSyNCLUgotF+SM/Hh Vs0uyt1Wxlr27iLNSYjOR4Ce9C8s20Hg9fClKdZLVeaxUQBoVSPaJKl3UnJ49ted U0d3vCDdSLMa21Ya1KFCJFw9H2MLCKj+5X7WCO2OpAd5QtZHRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIyrf0gChXbzoqxv7kRDV82awfEuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvNDQzZmUzMDQtNDZjNy0z ZGNjLWFiN2QtOTFkNWU3YmY5MmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnYUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcAQplUt54ibmWjOcDgeJsqf4nPcPIwkJDQDWPEK0uX8XmBziOiuk47 0EgU9spNqbcGQbnVLbR5cfBjszqhi6Y5aQ1sHeIHJLbtM0ilCNEDmxrQTzQNBkZ2 /xpNz2X6u9oErwcjnDEb0468frbTZflOfXeoxndXngfaN2bPOTuOt1Z+9Wag7nKW YzZTKnoPuRYw/Suwlj6m9c/3tmzNmsMuNyzyxQlez9hUV/UjtxwQ+u9hknTYqIGO /UMpRGCFxBCqBFPxZEgrObiSX8xjUk939WF4ZK8qdD2bg0T0FSmhwPpDUlQjf4cH EhrJOJM2fSQA/9TeZFO1gxMDVMIYEaw= -----END CERTIFICATE-----Generated at Mon Apr 7 13:04:44 2025 by rpki-client