$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a94e6faa-4c75-3ba1-82ac-7e7b7400c0fc.roa File: a94e6faa-4c75-3ba1-82ac-7e7b7400c0fc.roa (raw, json) Hash identifier: xN9aH5/7YNVihmaoWPIRA3nK48QeaqRGVO/sjduYKM8= Subject key identifier: CB:B3:9A:FA:0A:3F:7B:BB:28:5F:AF:CB:BE:7A:A4:D7:47:12:D6:5C Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584969E0049FDEF3D6B82278B3C0 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a94e6faa-4c75-3ba1-82ac-7e7b7400c0fc.roa Signing time: Fri 04 Apr 2025 11:05:04 +0000 ROA not before: Fri 04 Apr 2025 11:05:04 +0000 ROA not after: Thu 03 Jul 2025 11:05:04 +0000 asID: 0 IP address blocks: 157.133.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:69:e0:04:9f:de:f3:d6:b8:22:78:b3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Apr 4 11:05:04 2025 GMT Not After : Jul 3 11:05:04 2025 GMT Subject: CN=512fcf54-cea6-4187-b761-b77a71a42001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7a:ce:bf:8a:2e:a7:50:39:a5:8e:75:cf:e8: 23:a0:56:54:ef:74:b4:1c:b5:e9:06:98:18:29:c5: 2a:be:63:ca:79:55:f0:07:4f:39:be:7f:54:92:5d: bc:9a:ab:a0:75:60:3b:9f:86:e0:16:02:03:3f:c4: b3:c7:6b:c2:16:c4:31:44:8d:58:95:13:56:39:fa: 81:5c:ac:40:78:f6:9c:e8:96:71:21:8d:17:77:55: af:41:ba:e4:0e:9f:4b:4d:d4:3e:ff:de:01:b1:4a: 5d:2e:af:aa:30:bd:8c:38:37:d7:7e:5d:27:91:fe: 4a:f0:24:16:23:da:30:54:1f:76:bd:db:ab:68:67: c6:01:c3:25:1b:19:37:12:17:4a:a9:aa:e3:f1:bf: 01:75:e8:0f:fe:98:d9:98:63:a4:73:fe:99:0a:10: 04:f5:bd:47:b7:7c:11:39:77:36:a4:a7:04:e6:c5: 88:31:cf:38:4d:6a:06:a3:8b:ca:10:16:a6:a5:e9: ae:a4:47:b7:1d:92:1f:9d:0c:21:33:82:7e:9b:f8: 87:83:ca:d5:db:71:37:e4:5e:8f:41:04:6d:a5:73: 00:5b:96:d2:a8:6a:70:f7:97:71:b1:d2:73:97:01: 6f:30:a2:f9:e4:a0:a8:5b:cc:d9:c1:47:ed:be:42: 70:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B3:9A:FA:0A:3F:7B:BB:28:5F:AF:CB:BE:7A:A4:D7:47:12:D6:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a94e6faa-4c75-3ba1-82ac-7e7b7400c0fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:5f:cf:79:d9:a5:48:cb:2a:41:93:e1:4d:0f:60:71:9f:97: ad:cc:ec:c3:64:ec:3f:e3:40:1f:81:ca:2d:73:c4:79:62:5e: f2:e1:13:3a:3e:ab:98:7f:69:b7:2a:0e:fc:24:7d:f7:18:75: a4:b9:4d:00:70:13:7d:7c:7d:65:04:83:dc:24:e9:f0:3f:2c: 0b:99:db:a1:47:63:d8:e1:22:84:cc:62:64:7c:73:4f:0d:4a: 5b:2f:78:7e:58:35:46:02:32:d0:1d:ae:a5:4e:f6:95:b4:76: 2e:db:cc:3a:b7:6b:b0:4f:93:79:82:e6:e2:9e:9d:ed:42:b7: bd:ef:64:6c:20:45:44:29:d7:28:1f:b6:65:03:86:9b:d3:a0: e1:18:cd:0c:d2:e8:ea:8e:10:2f:6f:83:8b:06:12:20:21:09: 3b:7b:b7:9d:19:90:81:89:ca:d7:a3:b2:56:f2:7f:e7:e6:87: 1a:4f:10:81:9b:30:ea:f9:9e:bf:53:52:93:65:e7:de:f7:77: e4:f4:7b:07:10:21:b2:9c:fe:cb:41:17:85:e9:1f:27:2d:57: 12:e6:1f:b7:8e:d7:ee:c0:18:c1:41:a9:c4:58:7c:b9:d7:17: 53:1c:2d:d4:68:a7:d0:91:43:54:60:b2:86:26:25:4b:09:14: e2:75:32:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElp4ASf3vPWuCJ4s8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDQwNDExMDUwNFoXDTI1MDcwMzExMDUwNFowLzEtMCsGA1UEAxMk NTEyZmNmNTQtY2VhNi00MTg3LWI3NjEtYjc3YTcxYTQyMDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXrOv4oup1A5pY51z+gjoFZU73S0HLXpBpgY KcUqvmPKeVXwB085vn9Ukl28mqugdWA7n4bgFgIDP8Szx2vCFsQxRI1YlRNWOfqB XKxAePac6JZxIY0Xd1WvQbrkDp9LTdQ+/94BsUpdLq+qML2MODfXfl0nkf5K8CQW I9owVB92vduraGfGAcMlGxk3EhdKqarj8b8BdegP/pjZmGOkc/6ZChAE9b1Ht3wR OXc2pKcE5sWIMc84TWoGo4vKEBampemupEe3HZIfnQwhM4J+m/iHg8rV23E35F6P QQRtpXMAW5bSqGpw95dxsdJzlwFvMKL55KCoW8zZwUftvkJwtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMuzmvoKP3u7KF+vy756pNdHEtZcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvYTk0ZTZmYWEtNGM3NS0z YmExLTgyYWMtN2U3Yjc0MDBjMGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnYXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhfz3nZpUjLKkGT4U0PYHGfl63M7MNk7D/jQB+Byi1zxHliXvLhEzo+ q5h/abcqDvwkffcYdaS5TQBwE318fWUEg9wk6fA/LAuZ26FHY9jhIoTMYmR8c08N SlsveH5YNUYCMtAdrqVO9pW0di7bzDq3a7BPk3mC5uKene1Ct73vZGwgRUQp1ygf tmUDhpvToOEYzQzS6OqOEC9vg4sGEiAhCTt7t50ZkIGJytejslbyf+fmhxpPEIGb MOr5nr9TUpNl5973d+T0ewcQIbKc/stBF4XpHyctVxLmH7eO1+7AGMFBqcRYfLnX F1McLdRop9CRQ1RgsoYmJUsJFOJ1MnQ= -----END CERTIFICATE-----Generated at Mon Apr 7 13:02:43 2025 by rpki-client