$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/83ea19b6-07c3-3470-89ff-0f9c435c6eb8.roa File: 83ea19b6-07c3-3470-89ff-0f9c435c6eb8.roa (raw, json) Hash identifier: /JzZBz/8J1DZBW4U4055tArQyel6Lf+uNIrpxgR1b0M= Subject key identifier: BD:23:3E:5E:C5:55:E7:2E:64:BA:6D:82:2D:55:30:4D:B6:0F:3B:30 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F43285849696991899F2EAB3C27AB3300 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/83ea19b6-07c3-3470-89ff-0f9c435c6eb8.roa Signing time: Fri 04 Apr 2025 07:06:25 +0000 ROA not before: Fri 04 Apr 2025 07:06:25 +0000 ROA not after: Thu 03 Jul 2025 07:06:25 +0000 asID: 14114 IP address blocks: 157.133.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:69:69:91:89:9f:2e:ab:3c:27:ab:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Apr 4 07:06:25 2025 GMT Not After : Jul 3 07:06:25 2025 GMT Subject: CN=dd023634-3ed7-4bdd-bc54-a58d4e4a01f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ea:c9:c0:44:55:50:a8:f5:61:b7:43:ce:b8: 63:31:99:06:68:67:f8:e5:4c:e1:03:07:31:81:db: ec:f5:81:f9:23:40:98:9f:6d:8c:23:32:1f:e7:84: 31:bc:f2:ac:2c:c5:ab:3a:9c:6c:82:5f:ec:59:05: 3c:2a:a9:8f:ef:8b:38:c0:c3:0f:04:27:a2:c5:35: 47:1b:f0:ab:57:d7:57:63:44:86:7e:e0:7b:ea:61: e5:88:4b:32:af:36:d3:e4:08:78:b4:96:96:37:53: 95:91:8a:5c:84:c5:1e:77:7d:95:e9:50:a6:e2:f3: 81:fc:cb:18:b4:04:80:33:95:44:4c:6b:c6:28:c8: 4c:0a:c2:ca:6d:60:0e:de:fe:b2:ba:da:b0:af:d5: 1e:4e:25:5d:4b:86:3c:6a:80:d2:fc:e4:5b:35:4f: 9e:e8:d5:f6:f5:97:57:14:49:b8:c7:42:3c:f1:3b: 9c:54:b8:42:84:39:ae:4a:84:11:40:78:1a:aa:ed: c6:ad:b3:66:f2:2b:7a:19:01:28:e1:ba:81:cd:b1: 8f:7c:96:b8:25:c4:55:6c:aa:fa:13:2f:e4:cf:1b: 76:d6:64:a1:98:9a:5f:96:97:91:e2:fd:09:61:49: 8e:97:78:9e:15:db:05:f8:51:68:4b:b3:f7:e1:86: fc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:23:3E:5E:C5:55:E7:2E:64:BA:6D:82:2D:55:30:4D:B6:0F:3B:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/83ea19b6-07c3-3470-89ff-0f9c435c6eb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:a1:05:6b:4e:39:b7:17:bc:4f:f0:6e:01:17:dc:60:31:02: d9:91:7e:f5:18:43:86:c5:18:4d:7b:44:5e:ed:f8:c1:b8:c7: 01:23:0d:4d:08:7c:47:61:6f:0a:5a:2a:fc:1f:ea:b0:e2:0d: 7e:b5:44:34:07:69:32:cc:32:ce:0b:86:f0:35:db:3b:cb:58: 5d:94:b7:03:5b:be:52:12:55:d5:6b:97:22:f3:ae:98:9a:7e: 42:57:b4:f7:c8:f6:f8:3a:ae:12:ae:68:50:c0:ed:2f:01:7d: 0b:2e:c7:71:dc:7a:10:96:50:f8:ee:d8:ce:6f:17:66:f7:cf: 1c:62:5c:b8:e0:8a:c0:49:fa:1b:a1:b7:76:04:f7:4b:85:66: b0:bd:10:26:45:5e:ed:8e:f1:ec:95:bb:8c:89:f5:ac:43:a0: 96:76:67:e9:ab:d6:33:0f:09:d9:ec:bc:e6:b8:86:2d:99:a0: c8:1a:71:46:55:7f:af:16:aa:50:f6:fb:d3:0c:18:b4:f3:45: ce:73:d6:ea:0b:e6:33:7b:3a:3a:29:3f:9a:bd:7c:9a:ad:b6: 05:0e:c6:ce:41:9d:2a:2d:9a:54:99:f3:e0:74:cb:dd:cc:ab: 9d:b6:9a:5b:be:e8:09:93:2f:f5:49:be:ae:db:f1:47:d7:ed: 8b:fc:7b:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElpaZGJny6rPCerMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDQwNDA3MDYyNVoXDTI1MDcwMzA3MDYyNVowLzEtMCsGA1UEAxMk ZGQwMjM2MzQtM2VkNy00YmRkLWJjNTQtYTU4ZDRlNGEwMWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+rJwERVUKj1YbdDzrhjMZkGaGf45UzhAwcx gdvs9YH5I0CYn22MIzIf54QxvPKsLMWrOpxsgl/sWQU8KqmP74s4wMMPBCeixTVH G/CrV9dXY0SGfuB76mHliEsyrzbT5Ah4tJaWN1OVkYpchMUed32V6VCm4vOB/MsY tASAM5VETGvGKMhMCsLKbWAO3v6yutqwr9UeTiVdS4Y8aoDS/ORbNU+e6NX29ZdX FEm4x0I88TucVLhChDmuSoQRQHgaqu3GrbNm8it6GQEo4bqBzbGPfJa4JcRVbKr6 Ey/kzxt21mShmJpflpeR4v0JYUmOl3ieFdsF+FFoS7P34Yb8BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0jPl7FVecuZLptgi1VME22DzswMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvODNlYTE5YjYtMDdjMy0z NDcwLTg5ZmYtMGY5YzQzNWM2ZWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnYVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACChBWtOObcXvE/wbgEX3GAxAtmRfvUYQ4bFGE17RF7t+MG4xwEjDU0I fEdhbwpaKvwf6rDiDX61RDQHaTLMMs4LhvA12zvLWF2UtwNbvlISVdVrlyLzrpia fkJXtPfI9vg6rhKuaFDA7S8BfQsux3HcehCWUPju2M5vF2b3zxxiXLjgisBJ+huh t3YE90uFZrC9ECZFXu2O8eyVu4yJ9axDoJZ2Z+mr1jMPCdnsvOa4hi2ZoMgacUZV f68WqlD2+9MMGLTzRc5z1uoL5jN7OjopP5q9fJqttgUOxs5BnSotmlSZ8+B0y93M q522mlu+6AmTL/VJvq7b8UfX7Yv8e4U= -----END CERTIFICATE-----Generated at Mon Apr 7 13:02:38 2025 by rpki-client