$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/e2e4c478-2d91-3304-a75e-70d87ba8dbaa.roa File: e2e4c478-2d91-3304-a75e-70d87ba8dbaa.roa (raw, json) Hash identifier: CQ8RgfCNsRZ+pyel9Up7fICQAB5aTrXg6xeDBCWprf0= Subject key identifier: 9F:D2:12:F8:FD:0E:62:73:4A:AA:E3:7F:62:20:3C:63:8D:66:61:C3 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F43285848B74E7975A6152DDE006CDA80 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/e2e4c478-2d91-3304-a75e-70d87ba8dbaa.roa Signing time: Thu 30 Jan 2025 11:57:56 +0000 ROA not before: Thu 30 Jan 2025 11:57:56 +0000 ROA not after: Wed 30 Apr 2025 10:57:56 +0000 asID: 0 IP address blocks: 157.133.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:4e:79:75:a6:15:2d:de:00:6c:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Jan 30 11:57:56 2025 GMT Not After : Apr 30 10:57:56 2025 GMT Subject: CN=18eaeaa4-9e40-4a91-ad83-be1306e454d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3c:f7:8e:8e:0f:7d:f7:ef:3e:8d:81:8c:57: d2:e2:c4:04:38:46:41:23:74:01:b5:d2:f6:9c:f1: 84:8b:85:d0:cb:88:13:9c:39:8e:da:f1:e2:cd:84: 69:a2:a0:19:8c:cb:76:31:bb:86:c4:4c:a7:95:09: b6:02:86:a0:14:0d:ce:9f:8d:80:60:b5:3a:b7:ad: e5:37:08:f5:a4:86:f7:46:34:9a:b7:00:34:75:af: 23:61:ce:c9:b6:b4:ca:98:ec:57:38:98:ad:70:d4: 48:12:41:07:15:59:21:37:6f:b1:23:f5:c6:2b:71: c4:5e:c6:d8:10:11:fe:a1:83:a9:13:e1:ef:da:c6: 68:4d:44:68:31:88:cf:fd:fc:e9:6f:e9:d4:00:d8: d7:0c:c2:61:4e:70:f4:1c:e7:47:d4:27:65:2d:cf: aa:67:79:c3:5f:ad:3a:1c:8c:6e:96:fe:a1:b2:80: 66:40:7f:e6:6f:13:7b:71:d5:be:58:2b:a6:d8:90: 20:66:42:43:d6:41:5a:af:b4:a5:a5:70:a2:1b:7f: fb:74:fd:cb:1e:b5:2e:8a:fa:62:2d:b5:e8:18:a1: 5a:f1:b1:e3:2b:58:61:4f:33:0e:56:64:da:98:86: b1:ed:a8:c1:87:f8:b5:61:53:ba:d9:2e:39:37:04: 3f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D2:12:F8:FD:0E:62:73:4A:AA:E3:7F:62:20:3C:63:8D:66:61:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/e2e4c478-2d91-3304-a75e-70d87ba8dbaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:a4:2b:06:77:cd:bb:30:af:e9:c3:62:79:77:ac:fc:f0:5b: 16:f4:27:16:06:c2:19:6c:ed:c7:90:06:5c:f6:2e:31:c8:f1: fb:91:9e:0a:27:f7:74:2d:cc:6c:69:6e:56:9b:07:a6:64:8d: 18:5d:b1:d8:a4:fb:d6:16:91:78:33:5d:a5:ed:10:8d:25:81: a1:7b:50:40:b8:d5:24:fb:20:b4:24:d0:66:cc:3f:e6:76:07: 38:91:93:0d:0f:c8:88:fc:e4:c7:45:75:5c:aa:20:86:28:13: 99:d7:9d:76:b2:d5:95:15:d9:08:97:a8:25:fe:dd:49:76:ed: 12:6f:c4:a6:ba:57:75:e1:0b:d1:24:e6:76:46:de:0c:f3:16: 4a:2f:3e:60:f9:e0:67:49:0f:0c:34:26:96:16:de:6a:80:22: 31:7b:97:10:d4:5a:a1:02:45:ab:6f:14:f9:7d:04:a8:34:49: 24:a8:40:36:4a:82:51:f2:29:25:d9:0f:15:57:97:11:d0:46: 05:34:5c:4c:d4:e3:11:cf:52:da:e7:b2:bf:14:1b:1b:08:99: 8b:5d:e6:a0:37:73:ad:d7:eb:1b:33:d3:09:69:21:c4:22:b7: 95:5e:fe:85:40:3b:fa:51:a3:9b:7d:5a:d5:42:fb:cf:90:0f: 7b:b7:85:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3Tnl1phUt3gBs2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDEzMDExNTc1NloXDTI1MDQzMDEwNTc1NlowLzEtMCsGA1UEAxMk MThlYWVhYTQtOWU0MC00YTkxLWFkODMtYmUxMzA2ZTQ1NGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjz3jo4PfffvPo2BjFfS4sQEOEZBI3QBtdL2 nPGEi4XQy4gTnDmO2vHizYRpoqAZjMt2MbuGxEynlQm2AoagFA3On42AYLU6t63l Nwj1pIb3RjSatwA0da8jYc7JtrTKmOxXOJitcNRIEkEHFVkhN2+xI/XGK3HEXsbY EBH+oYOpE+Hv2sZoTURoMYjP/fzpb+nUANjXDMJhTnD0HOdH1CdlLc+qZ3nDX606 HIxulv6hsoBmQH/mbxN7cdW+WCum2JAgZkJD1kFar7SlpXCiG3/7dP3LHrUuivpi LbXoGKFa8bHjK1hhTzMOVmTamIax7ajBh/i1YVO62S45NwQ/SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/SEvj9DmJzSqrjf2IgPGONZmHDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvZTJlNGM0NzgtMmQ5MS0z MzA0LWE3NWUtNzBkODdiYThkYmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnYXcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABekKwZ3zbswr+nDYnl3rPzwWxb0JxYGwhls7ceQBlz2LjHI8fuRngon 93QtzGxpblabB6ZkjRhdsdik+9YWkXgzXaXtEI0lgaF7UEC41ST7ILQk0GbMP+Z2 BziRkw0PyIj85MdFdVyqIIYoE5nXnXay1ZUV2QiXqCX+3Ul27RJvxKa6V3XhC9Ek 5nZG3gzzFkovPmD54GdJDww0JpYW3mqAIjF7lxDUWqECRatvFPl9BKg0SSSoQDZK glHyKSXZDxVXlxHQRgU0XEzU4xHPUtrnsr8UGxsImYtd5qA3c63X6xsz0wlpIcQi t5Ve/oVAO/pRo5t9WtVC+8+QD3u3hfg= -----END CERTIFICATE-----Generated at Mon Apr 7 13:02:56 2025 by rpki-client