$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/996680e8-cf66-37bf-a1d6-3f519c7383ea.roa File: 996680e8-cf66-37bf-a1d6-3f519c7383ea.roa (raw, json) Hash identifier: yvC8iuYsthn8keWPH8JSn+474XEmJCzehB/41rj3oUM= Subject key identifier: 77:09:74:CA:D9:74:32:DC:7E:87:F0:A5:87:0E:F3:A7:15:06:60:D9 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584969A888DF7E00375EEF78A5C0 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/996680e8-cf66-37bf-a1d6-3f519c7383ea.roa Signing time: Fri 04 Apr 2025 09:13:17 +0000 ROA not before: Fri 04 Apr 2025 09:13:17 +0000 ROA not after: Thu 03 Jul 2025 09:13:17 +0000 asID: 14114 IP address blocks: 157.133.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:69:a8:88:df:7e:00:37:5e:ef:78:a5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Apr 4 09:13:17 2025 GMT Not After : Jul 3 09:13:17 2025 GMT Subject: CN=0ffd2ba6-980c-455b-9872-91979130cdee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:44:78:2f:bf:45:0c:08:b5:6f:39:02:9c:f9: 9e:fd:51:09:e7:7b:0b:ee:68:9f:5e:e0:5b:6c:5d: 30:ad:e5:af:bf:e1:7c:5e:80:f5:98:6d:96:27:da: 30:1f:03:d1:d3:91:c2:bb:e0:b0:cb:1e:4b:ee:03: a8:5a:e5:45:63:b2:cd:12:e1:0b:25:22:04:dc:05: c2:7f:9d:8c:fa:d6:f2:19:4f:c1:e9:1a:ec:57:67: ec:6b:eb:85:af:8b:d2:8f:18:f2:b6:d2:71:51:1a: eb:a4:48:10:04:51:73:2a:45:19:2a:9f:4e:bd:88: 28:40:70:97:20:4d:fb:84:47:4f:50:22:33:1f:29: fc:20:5c:ae:05:90:d7:f6:a7:e3:b5:a3:13:56:61: a2:72:f5:4f:a2:54:fe:28:ce:93:b1:2a:a8:5c:84: 9e:2e:7a:c5:d8:1c:80:32:1c:18:bb:34:5f:ff:fc: ff:34:53:5a:e6:17:31:1e:ff:55:08:0f:98:f4:48: 7c:a4:82:9e:0a:48:4c:95:0a:0d:c9:ee:2f:53:93: 5c:e2:58:4a:c4:83:06:99:07:69:33:2c:48:67:83: 94:a8:1c:1b:15:12:9c:88:41:99:27:ca:5a:0e:5c: dc:62:89:57:5d:e6:0e:15:6d:85:96:f8:59:a2:e4: 05:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:09:74:CA:D9:74:32:DC:7E:87:F0:A5:87:0E:F3:A7:15:06:60:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/996680e8-cf66-37bf-a1d6-3f519c7383ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:e3:b3:c1:90:a7:1f:39:c1:e4:76:52:54:89:dc:2f:a7:64: 50:2d:84:40:c9:2f:04:e7:27:f3:d4:c1:77:1a:c8:d4:16:e7: 62:e3:b7:72:0e:29:22:df:66:a0:4c:ac:e5:be:ba:1b:95:69: 95:ec:a5:e6:5e:2f:39:c5:b6:b7:8c:e4:0b:84:cd:ce:63:d9: ca:c4:8d:46:95:05:58:22:69:39:d5:28:af:7d:83:ec:7b:14: 50:13:0f:6a:3c:cf:11:03:36:be:6a:c4:42:7e:ab:8c:c8:1f: b7:3f:5c:f4:10:de:49:19:52:cb:ae:d0:44:70:2f:1d:df:ec: 2a:8e:57:c1:49:e6:68:69:ea:71:55:fa:0a:84:c9:f6:46:fe: 81:03:bd:12:15:61:5d:c9:dc:52:1a:fe:95:64:85:88:3f:1e: 4b:22:4b:5d:54:1d:5b:06:19:2c:26:a6:de:11:29:46:59:2b: 29:56:42:dd:93:b7:ae:b9:18:d5:c8:71:5a:a7:e2:00:f0:e1: 30:05:0f:7a:b7:c6:10:8a:4d:ba:6a:f9:dc:1f:71:24:fe:2e: 75:31:dd:49:96:3b:15:2d:c9:6c:e7:4c:4f:98:5f:85:17:52: 5c:b1:4a:69:f2:f7:90:6d:f6:32:5c:ab:c6:38:93:ea:33:46: 79:d0:b0:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElpqIjffgA3Xu94pcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDQwNDA5MTMxN1oXDTI1MDcwMzA5MTMxN1owLzEtMCsGA1UEAxMk MGZmZDJiYTYtOTgwYy00NTViLTk4NzItOTE5NzkxMzBjZGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0R4L79FDAi1bzkCnPme/VEJ53sL7mifXuBb bF0wreWvv+F8XoD1mG2WJ9owHwPR05HCu+Cwyx5L7gOoWuVFY7LNEuELJSIE3AXC f52M+tbyGU/B6RrsV2fsa+uFr4vSjxjyttJxURrrpEgQBFFzKkUZKp9OvYgoQHCX IE37hEdPUCIzHyn8IFyuBZDX9qfjtaMTVmGicvVPolT+KM6TsSqoXISeLnrF2ByA MhwYuzRf//z/NFNa5hcxHv9VCA+Y9Eh8pIKeCkhMlQoNye4vU5Nc4lhKxIMGmQdp MyxIZ4OUqBwbFRKciEGZJ8paDlzcYolXXeYOFW2FlvhZouQF+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcJdMrZdDLcfofwpYcO86cVBmDZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvOTk2NjgwZTgtY2Y2Ni0z N2JmLWExZDYtM2Y1MTljNzM4M2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnYWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXjs8GQpx85weR2UlSJ3C+nZFAthEDJLwTnJ/PUwXcayNQW52Ljt3IO KSLfZqBMrOW+uhuVaZXspeZeLznFtreM5AuEzc5j2crEjUaVBVgiaTnVKK99g+x7 FFATD2o8zxEDNr5qxEJ+q4zIH7c/XPQQ3kkZUsuu0ERwLx3f7CqOV8FJ5mhp6nFV +gqEyfZG/oEDvRIVYV3J3FIa/pVkhYg/HksiS11UHVsGGSwmpt4RKUZZKylWQt2T t665GNXIcVqn4gDw4TAFD3q3xhCKTbpq+dwfcST+LnUx3UmWOxUtyWznTE+YX4UX UlyxSmny95Bt9jJcq8Y4k+ozRnnQsAI= -----END CERTIFICATE-----Generated at Mon Apr 7 13:02:37 2025 by rpki-client