$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/dab1f656-370e-3952-a1d7-0dd4adb670a3.roa File: dab1f656-370e-3952-a1d7-0dd4adb670a3.roa (raw, json) Hash identifier: POCI8UhLFMZfL+agby1Yweghl/3GJRWLX6M89Cbkdsk= Subject key identifier: 50:2D:BF:04:52:DF:FD:8A:9A:BF:C1:B3:EF:18:2E:E0:E1:3A:6B:3C Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F432858492E13C7CA3D1A7A2A9C94C000 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/dab1f656-370e-3952-a1d7-0dd4adb670a3.roa Signing time: Fri 14 Mar 2025 01:00:39 +0000 ROA not before: Fri 14 Mar 2025 01:00:39 +0000 ROA not after: Thu 12 Jun 2025 01:00:39 +0000 asID: 0 IP address blocks: 157.133.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2e:13:c7:ca:3d:1a:7a:2a:9c:94:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Mar 14 01:00:39 2025 GMT Not After : Jun 12 01:00:39 2025 GMT Subject: CN=64db7efa-800b-4c5c-be1a-7c89a1888b25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0c:0a:e2:91:e4:5e:4a:56:94:69:04:b1:e7: 20:bc:a6:a9:c1:40:20:76:70:a4:5b:2e:95:16:07: 55:17:e2:7d:e1:7d:16:44:03:6f:20:bb:3a:45:c6: f2:86:bd:f8:36:51:e2:0b:5c:78:8a:f6:76:a8:88: e6:8f:4d:bc:88:98:54:19:1a:a3:c6:18:10:02:13: 48:72:47:95:22:e0:3f:50:26:2f:be:b6:87:08:2c: f3:ea:24:b1:2f:e9:05:f8:67:ed:de:13:92:d6:01: 00:08:d7:e5:0b:c2:69:2d:82:9a:c5:54:b3:c1:06: f4:de:3b:1f:5b:d1:42:8f:0e:b0:55:cf:8d:92:78: 7c:31:c0:02:74:cc:17:1a:5d:62:d3:99:8c:52:57: 7d:af:91:7b:6a:07:03:0a:8c:a3:48:20:e1:df:4a: 94:25:2a:77:aa:f5:d6:41:e4:96:52:4f:e7:ea:9d: d8:e5:06:7d:b9:b0:69:ae:e8:08:39:19:b9:69:2f: 1d:75:5b:70:c6:6d:0e:2d:5d:49:ef:a5:84:81:b6: e5:c4:12:fc:80:0c:f8:0f:fa:a3:e7:42:ca:df:4c: 8c:73:06:8a:3c:8a:83:55:57:47:81:b0:74:fb:86: b3:47:f5:98:85:b9:f4:42:de:7e:09:af:9e:97:8a: da:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2D:BF:04:52:DF:FD:8A:9A:BF:C1:B3:EF:18:2E:E0:E1:3A:6B:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/dab1f656-370e-3952-a1d7-0dd4adb670a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:88:58:18:29:12:5f:85:31:3b:d3:d8:02:f3:e0:be:e1:6e: c3:4a:fd:3d:7c:8b:79:f5:6e:24:09:86:ac:56:7a:ca:b3:10: 0a:6b:91:a2:a6:83:ac:14:e3:d1:d0:3d:07:6a:0f:e6:70:41: 78:7c:34:5b:d5:95:bf:2f:1a:dc:23:a9:2e:ca:b9:ae:35:4f: 26:37:93:80:3d:37:a3:f5:e7:ae:f9:16:b9:c3:8c:b1:7d:35: 8d:8d:f8:70:06:20:c2:9e:5c:4d:65:89:c3:a5:1e:64:73:32: c5:39:3c:23:9a:71:d8:7b:71:98:c1:df:0e:5c:dc:ad:b5:6d: c6:58:e1:04:0f:b9:b6:1f:53:78:c1:96:15:7f:b7:dc:3a:36: 0e:ae:9a:4c:26:93:cf:30:68:fb:7a:38:9d:61:62:7a:13:95: 8c:c0:ce:28:d7:08:2c:d4:98:b5:43:16:a1:ce:58:6e:bc:1b: 62:e3:82:08:2c:97:78:51:88:97:26:3a:ef:5f:ad:b5:62:92: 52:f9:84:c5:3c:d9:6c:8b:58:8b:db:77:71:a3:83:3e:63:fb: e7:09:bb:d2:ef:79:c1:07:1a:47:62:e7:66:4b:62:76:98:aa: 8f:ac:8b:d6:37:08:79:00:38:71:db:5b:9f:b7:93:49:c3:03: 1e:12:09:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkuE8fKPRp6KpyUwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk NjRkYjdlZmEtODAwYi00YzVjLWJlMWEtN2M4OWExODg4YjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQwK4pHkXkpWlGkEsecgvKapwUAgdnCkWy6V FgdVF+J94X0WRANvILs6Rcbyhr34NlHiC1x4ivZ2qIjmj028iJhUGRqjxhgQAhNI ckeVIuA/UCYvvraHCCzz6iSxL+kF+Gft3hOS1gEACNflC8JpLYKaxVSzwQb03jsf W9FCjw6wVc+Nknh8McACdMwXGl1i05mMUld9r5F7agcDCoyjSCDh30qUJSp3qvXW QeSWUk/n6p3Y5QZ9ubBprugIORm5aS8ddVtwxm0OLV1J76WEgbblxBL8gAz4D/qj 50LK30yMcwaKPIqDVVdHgbB0+4azR/WYhbn0Qt5+Ca+el4ratQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAtvwRS3/2Kmr/Bs+8YLuDhOms8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvZGFiMWY2NTYtMzcwZS0z OTUyLWExZDctMGRkNGFkYjY3MGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnYX4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiIWBgpEl+FMTvT2ALz4L7hbsNK/T18i3n1biQJhqxWesqzEAprkaKm g6wU49HQPQdqD+ZwQXh8NFvVlb8vGtwjqS7Kua41TyY3k4A9N6P15675FrnDjLF9 NY2N+HAGIMKeXE1licOlHmRzMsU5PCOacdh7cZjB3w5c3K21bcZY4QQPubYfU3jB lhV/t9w6Ng6umkwmk88waPt6OJ1hYnoTlYzAzijXCCzUmLVDFqHOWG68G2Ljgggs l3hRiJcmOu9frbViklL5hMU82WyLWIvbd3Gjgz5j++cJu9LvecEHGkdi52ZLYnaY qo+si9Y3CHkAOHHbW5+3k0nDAx4SCfM= -----END CERTIFICATE-----Generated at Mon Apr 7 13:02:41 2025 by rpki-client