$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/20dd2557-9e73-38c0-8e96-577d764bbbdf.roa File: 20dd2557-9e73-38c0-8e96-577d764bbbdf.roa (raw, json) Hash identifier: PZREaxpBpFTU967mTmgwWw0b5amVNK6UlAaFfw2/RZE= Subject key identifier: BE:DB:A9:46:5B:46:57:54:F1:00:98:E0:1E:EE:03:F4:56:CA:02:EC Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584969C114C4E5D7B1E2BB5BED40 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/20dd2557-9e73-38c0-8e96-577d764bbbdf.roa Signing time: Fri 04 Apr 2025 10:02:44 +0000 ROA not before: Fri 04 Apr 2025 10:02:44 +0000 ROA not after: Thu 03 Jul 2025 10:02:44 +0000 asID: 14114 IP address blocks: 157.133.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:69:c1:14:c4:e5:d7:b1:e2:bb:5b:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Apr 4 10:02:44 2025 GMT Not After : Jul 3 10:02:44 2025 GMT Subject: CN=77c65283-a4ff-4fd9-bf9b-68acfbb02321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:69:9f:63:20:79:1d:93:98:1d:60:2b:cc:5c: 91:1e:60:db:c0:3b:d5:bc:18:ca:ec:28:a0:e6:85: 3c:72:42:14:58:d0:3b:60:cc:3a:1d:c7:dd:37:62: 14:d3:65:98:3e:8d:be:3e:6a:93:c7:b5:86:99:b9: 6f:4e:6d:c3:d4:02:7d:93:a6:03:65:47:27:0f:24: 7d:31:51:3c:f3:75:ec:96:95:00:22:ed:ef:fb:46: c6:e2:ea:88:4f:05:5b:cf:9e:6b:01:31:68:5b:dc: ea:35:25:19:ef:35:1b:ec:58:5d:b8:78:94:e8:cc: 38:c2:73:ae:14:e6:98:38:45:b3:cc:00:fc:27:cc: ac:93:e8:70:f7:31:58:9c:7a:a3:36:fe:78:49:8d: 86:5c:10:5b:b1:eb:27:dc:eb:12:df:e0:46:1e:d0: cb:6f:83:f1:95:4f:d9:4f:7e:47:d6:00:51:26:af: 84:1e:2c:d6:e4:e5:82:b6:3c:2d:1f:d6:83:c9:e9: 82:d8:98:fe:91:15:0a:10:a3:fc:1f:e6:7b:b8:a1: 51:18:07:99:ff:7e:21:44:a4:f3:0c:8d:88:61:21: e0:5d:57:8d:3b:ce:4e:e8:4d:17:e7:7d:a9:3f:92: 31:f5:fc:1d:df:9f:46:e3:65:6d:bf:e9:51:a1:45: af:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:DB:A9:46:5B:46:57:54:F1:00:98:E0:1E:EE:03:F4:56:CA:02:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/20dd2557-9e73-38c0-8e96-577d764bbbdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:9e:19:e0:66:a9:3c:2a:eb:6a:3c:b7:2e:f3:e2:73:34:13: 58:06:ce:a9:fb:3b:2f:8c:0c:75:ce:66:1e:c2:0c:10:7c:37: 14:4f:6d:ed:9b:41:70:28:af:de:c8:9c:1c:a2:2e:9b:f3:d9: 72:4b:50:55:0a:91:ec:7c:56:07:83:1f:79:a2:92:25:a7:8e: 41:61:3b:ca:1d:30:f5:8f:b2:5e:e3:c0:44:fe:ea:54:26:ce: 1a:5b:e3:0a:72:c4:e9:cc:89:10:dd:8c:5d:b2:dd:ff:e7:90: d4:ed:6d:71:a2:6b:08:eb:4f:de:23:d0:c9:61:02:b7:6e:9d: 0e:3f:18:f3:03:26:f5:3b:13:87:b2:2e:78:26:ec:28:48:27: cc:ab:b9:d2:67:5f:23:1b:76:63:64:0d:93:27:88:4b:c3:02: f1:c9:ab:75:5e:3f:f9:02:be:32:b7:fe:82:9b:aa:ae:f6:c3: b7:d5:d5:d0:30:b6:54:4a:48:d4:8a:32:fd:e1:d1:cb:f0:c5: 7d:97:84:69:e8:b9:7e:09:d3:3e:8d:34:a2:a4:14:91:c8:78: eb:2b:10:bc:5e:2f:86:68:e8:9d:f3:81:c2:66:99:90:cf:ad: 15:29:2e:97:c0:50:1c:5f:0f:43:eb:df:27:1e:96:44:fc:e4: f7:bd:43:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElpwRTE5dex4rtb7UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDQwNDEwMDI0NFoXDTI1MDcwMzEwMDI0NFowLzEtMCsGA1UEAxMk NzdjNjUyODMtYTRmZi00ZmQ5LWJmOWItNjhhY2ZiYjAyMzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGmfYyB5HZOYHWArzFyRHmDbwDvVvBjK7Cig 5oU8ckIUWNA7YMw6HcfdN2IU02WYPo2+PmqTx7WGmblvTm3D1AJ9k6YDZUcnDyR9 MVE883XslpUAIu3v+0bG4uqITwVbz55rATFoW9zqNSUZ7zUb7FhduHiU6Mw4wnOu FOaYOEWzzAD8J8ysk+hw9zFYnHqjNv54SY2GXBBbsesn3OsS3+BGHtDLb4PxlU/Z T35H1gBRJq+EHizW5OWCtjwtH9aDyemC2Jj+kRUKEKP8H+Z7uKFRGAeZ/34hRKTz DI2IYSHgXVeNO85O6E0X532pP5Ix9fwd359G42Vtv+lRoUWvlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7bqUZbRldU8QCY4B7uA/RWygLsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvMjBkZDI1NTctOWU3My0z OGMwLThlOTYtNTc3ZDc2NGJiYmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnYWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWeGeBmqTwq62o8ty7z4nM0E1gGzqn7Oy+MDHXOZh7CDBB8NxRPbe2b QXAor97InByiLpvz2XJLUFUKkex8VgeDH3mikiWnjkFhO8odMPWPsl7jwET+6lQm zhpb4wpyxOnMiRDdjF2y3f/nkNTtbXGiawjrT94j0MlhArdunQ4/GPMDJvU7E4ey Lngm7ChIJ8yrudJnXyMbdmNkDZMniEvDAvHJq3VeP/kCvjK3/oKbqq72w7fV1dAw tlRKSNSKMv3h0cvwxX2XhGnouX4J0z6NNKKkFJHIeOsrELxeL4Zo6J3zgcJmmZDP rRUpLpfAUBxfD0Pr3ycelkT85Pe9Qxg= -----END CERTIFICATE-----Generated at Sun Apr 27 12:50:32 2025 by rpki-client