$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/2ffdaf98-6513-3f50-a698-66a5e58df24d.roa File: 2ffdaf98-6513-3f50-a698-66a5e58df24d.roa (raw, json) Hash identifier: 9E3xnMotNtM8tjeUi1SY25n0t4D5by9h7CWHo1CefCc= Subject key identifier: 48:AC:CB:72:1D:CA:49:84:E9:B6:E7:F9:C3:1E:DD:AD:E1:E8:F1:5E Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584AB91C0843C8BC0BAA42173DC0 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/2ffdaf98-6513-3f50-a698-66a5e58df24d.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 14114 IP address blocks: 157.133.116.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1c:08:43:c8:bc:0b:aa:42:17:3d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=be18df11-8e69-4672-87bc-67e1508f16c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:51:9b:73:47:16:e3:de:9d:a0:80:4c:d3:d7: fa:74:50:ad:80:03:3d:87:08:a8:3f:a3:9f:e1:ec: 6e:ad:61:40:8e:6f:42:40:5c:96:f0:e5:72:35:cd: 50:6c:fe:41:0c:8e:c3:39:1f:e6:d8:a8:89:99:68: 6a:e3:83:8f:f4:18:a0:7c:11:3e:b2:7f:50:ea:22: 82:a4:6b:55:db:b0:6c:c1:95:07:6c:65:88:26:33: 92:e8:fd:9b:59:f5:f9:14:02:b1:84:54:35:22:c5: f7:d2:36:96:6a:16:3b:31:02:c1:11:0a:ae:e8:51: 71:49:ed:53:ae:95:a5:2c:83:99:fd:fd:83:ff:d8: 04:fc:c0:e0:13:49:b9:d3:74:81:ca:1c:13:f5:ef: f6:7f:72:04:aa:83:9e:94:99:b9:fc:38:f2:bc:34: 11:19:d3:71:4e:98:8b:44:6d:e7:70:22:8f:a1:0a: 00:1f:0e:a4:e0:01:73:db:a7:55:68:40:5d:0f:c6: 8c:7f:11:fe:90:3a:f0:ee:05:ee:58:03:17:a0:5d: 7c:fa:39:08:62:16:f3:ff:9c:5f:54:c6:dd:51:5e: d2:41:be:36:5e:9e:83:fa:9f:b2:9a:c8:90:9e:6d: 71:6f:01:76:19:71:fb:cd:c5:ce:08:20:82:35:80: 03:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:AC:CB:72:1D:CA:49:84:E9:B6:E7:F9:C3:1E:DD:AD:E1:E8:F1:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/2ffdaf98-6513-3f50-a698-66a5e58df24d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:c7:0a:7a:29:1a:7d:ca:25:1f:ed:98:8c:3b:ad:ea:b7:2c: 42:54:ce:b5:42:07:dc:f6:6e:0e:fc:28:c1:c6:ef:bb:62:b1: ac:f0:b4:71:19:c7:fa:6c:bc:ca:0a:5a:ad:8e:f5:76:e2:c4: b8:52:95:df:4e:83:c8:09:8c:ca:68:05:2e:2f:56:9d:04:30: 7a:29:84:38:a0:6c:6b:d4:9c:5e:7c:37:0a:f4:ae:55:d2:e6: 56:11:fa:b4:ba:1f:73:78:fa:63:1b:e0:76:ea:05:e8:1d:dd: 86:e7:16:ed:a2:80:f8:4c:b3:26:64:0f:f5:a7:ef:dc:a3:cf: cf:8a:ad:aa:9b:8b:0e:c2:27:b4:f0:fd:e9:59:eb:67:58:f4: 54:f4:29:83:86:db:78:19:00:ed:3b:05:4c:69:8d:4c:76:df: 93:94:3e:19:3d:d4:6a:24:16:ed:dc:cf:01:4b:fd:71:09:72: fc:4f:31:11:16:76:3f:23:be:04:06:c3:b2:cb:b9:e1:29:26: 36:81:25:96:2d:bf:d8:b0:f5:c4:7e:60:af:2b:9d:ca:46:2d: 2d:de:57:f4:d7:4e:a6:ae:fe:f4:c1:3f:82:e3:80:6c:f0:b5: d7:d9:e5:76:0a:73:2d:9e:bd:7a:7d:92:fc:99:30:74:da:fc: 13:8f:b0:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5HAhDyLwLqkIXPcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk YmUxOGRmMTEtOGU2OS00NjcyLTg3YmMtNjdlMTUwOGYxNmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglGbc0cW496doIBM09f6dFCtgAM9hwioP6Of 4exurWFAjm9CQFyW8OVyNc1QbP5BDI7DOR/m2KiJmWhq44OP9BigfBE+sn9Q6iKC pGtV27BswZUHbGWIJjOS6P2bWfX5FAKxhFQ1IsX30jaWahY7MQLBEQqu6FFxSe1T rpWlLIOZ/f2D/9gE/MDgE0m503SByhwT9e/2f3IEqoOelJm5/DjyvDQRGdNxTpiL RG3ncCKPoQoAHw6k4AFz26dVaEBdD8aMfxH+kDrw7gXuWAMXoF18+jkIYhbz/5xf VMbdUV7SQb42Xp6D+p+ymsiQnm1xbwF2GXH7zcXOCCCCNYADdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEisy3IdykmE6bbn+cMe3a3h6PFeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvMmZmZGFmOTgtNjUxMy0z ZjUwLWE2OTgtNjZhNWU1OGRmMjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnYV0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3HCnopGn3KJR/tmIw7req3LEJUzrVCB9z2bg78KMHG77tisazwtHEZ x/psvMoKWq2O9XbixLhSld9Og8gJjMpoBS4vVp0EMHophDigbGvUnF58Nwr0rlXS 5lYR+rS6H3N4+mMb4HbqBegd3YbnFu2igPhMsyZkD/Wn79yjz8+Kraqbiw7CJ7Tw /elZ62dY9FT0KYOG23gZAO07BUxpjUx235OUPhk91GokFu3czwFL/XEJcvxPMREW dj8jvgQGw7LLueEpJjaBJZYtv9iw9cR+YK8rncpGLS3eV/TXTqau/vTBP4LjgGzw tdfZ5XYKcy2evXp9kvyZMHTa/BOPsCQ= -----END CERTIFICATE-----Generated at Mon Aug 4 22:15:27 2025 by rpki-client