$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/4b91c8fc-2e98-396e-95a9-719e956df958.roa File: 4b91c8fc-2e98-396e-95a9-719e956df958.roa (raw, json) Hash identifier: S6+TBoURdBNzzReCkNHzJlsvhAMzjSFa/WSOZb4EQ1M= Subject key identifier: 84:45:EB:A7:0D:75:CD:64:2E:B6:8E:E6:BB:65:CE:76:6E:BA:79:E8 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F432858499C1BA46BAADDA2ECD08514A0 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/4b91c8fc-2e98-396e-95a9-719e956df958.roa Signing time: Tue 22 Apr 2025 10:55:37 +0000 ROA not before: Tue 22 Apr 2025 10:55:37 +0000 ROA not after: Mon 21 Jul 2025 10:55:37 +0000 asID: 0 IP address blocks: 157.133.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:1b:a4:6b:aa:dd:a2:ec:d0:85:14:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Apr 22 10:55:37 2025 GMT Not After : Jul 21 10:55:37 2025 GMT Subject: CN=3cd12b4c-a1f3-44c9-9866-4c2dae056217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c2:02:30:81:53:05:12:18:08:4f:8e:de:54: ff:2f:42:55:c2:56:ef:5c:bf:91:63:90:a1:fa:91: 4f:f6:0a:7c:07:f1:26:a2:f5:17:63:3e:aa:37:0d: ad:47:a2:93:e1:0f:2d:1f:f6:fb:bd:af:c2:b2:20: 46:1a:39:2f:f9:23:94:8a:98:f3:64:53:e9:7d:aa: 5e:27:29:4c:66:78:01:ba:9c:a4:66:cc:9e:59:13: ab:aa:2c:6e:24:73:a4:87:09:6e:15:7b:2c:82:8b: af:be:40:69:2a:9a:a6:2a:a6:d4:f2:ce:9d:75:68: f6:4e:83:3a:31:46:7e:bb:ba:48:41:2a:ee:ac:2e: de:3c:e4:88:4e:df:e4:43:99:7b:2d:29:c9:05:52: 3f:52:2d:40:80:09:12:11:af:2c:30:98:98:e6:23: 2c:95:cc:b7:03:4e:0e:55:eb:1c:45:f8:cd:af:5a: 62:b1:4d:45:7c:80:3b:5c:1e:ce:e0:b7:28:24:18: 98:c7:f5:c2:aa:ce:97:df:74:19:e8:07:5e:cd:89: 6f:2b:0c:78:72:ff:3a:e5:e3:29:54:51:91:43:03: ce:9d:22:36:c9:2d:26:36:8e:1f:64:cf:c0:d7:af: b1:57:d8:89:ee:26:e5:20:98:55:f0:20:7b:4a:59: ce:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:45:EB:A7:0D:75:CD:64:2E:B6:8E:E6:BB:65:CE:76:6E:BA:79:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/4b91c8fc-2e98-396e-95a9-719e956df958.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:f7:e4:9d:7f:d5:a6:29:df:f9:ac:87:66:2d:28:94:af:11: 5e:c2:7a:4f:16:2a:b8:65:79:c5:c1:26:1c:0e:f0:0d:b4:4f: 8e:10:0a:55:0d:b0:c1:90:1a:06:fe:8e:bf:4a:9e:f0:4e:65: 0c:4d:dd:a1:67:d5:cb:4f:fc:54:7f:4a:09:da:df:4f:60:61: 74:e1:c1:11:70:6b:62:8b:45:57:48:d8:06:5c:ae:17:19:37: 42:f9:1f:9c:de:21:36:e0:a6:71:22:aa:1c:cf:dd:a2:a4:d6: ac:af:04:5b:fc:e6:9e:5d:2b:b8:dc:0b:ce:a4:3f:9d:ac:43: 56:19:03:28:07:ea:1b:03:82:47:6c:f3:65:3f:62:a7:cd:d8: 37:7e:17:c3:8d:14:76:fd:f7:a5:d0:d0:f5:18:ab:08:ba:d7: b2:8e:e3:d0:76:38:28:03:b7:22:4c:b2:d9:d8:75:49:d0:0a: 9e:2d:2b:b2:28:38:a1:db:c5:e7:87:26:49:f4:10:a5:59:c2: 12:f7:ae:46:00:d2:46:cc:77:ab:42:20:ad:72:45:5c:54:8f: 92:52:ed:3a:d8:d2:5e:3f:24:0f:9d:35:a9:8f:8c:71:68:8a: 2b:7a:44:3a:c6:3b:e0:37:7a:a7:ee:1a:23:29:07:79:40:5d: a0:6f:cd:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcG6Rrqt2i7NCFFKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDQyMjEwNTUzN1oXDTI1MDcyMTEwNTUzN1owLzEtMCsGA1UEAxMk M2NkMTJiNGMtYTFmMy00NGM5LTk4NjYtNGMyZGFlMDU2MjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MICMIFTBRIYCE+O3lT/L0JVwlbvXL+RY5Ch +pFP9gp8B/EmovUXYz6qNw2tR6KT4Q8tH/b7va/CsiBGGjkv+SOUipjzZFPpfape JylMZngBupykZsyeWROrqixuJHOkhwluFXssgouvvkBpKpqmKqbU8s6ddWj2ToM6 MUZ+u7pIQSrurC7ePOSITt/kQ5l7LSnJBVI/Ui1AgAkSEa8sMJiY5iMslcy3A04O VescRfjNr1pisU1FfIA7XB7O4LcoJBiYx/XCqs6X33QZ6AdezYlvKwx4cv865eMp VFGRQwPOnSI2yS0mNo4fZM/A16+xV9iJ7iblIJhV8CB7SlnOfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRF66cNdc1kLraO5rtlznZuunnoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvNGI5MWM4ZmMtMmU5OC0z OTZlLTk1YTktNzE5ZTk1NmRmOTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnYXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADH35J1/1aYp3/msh2YtKJSvEV7Cek8WKrhlecXBJhwO8A20T44QClUN sMGQGgb+jr9KnvBOZQxN3aFn1ctP/FR/Sgna309gYXThwRFwa2KLRVdI2AZcrhcZ N0L5H5zeITbgpnEiqhzP3aKk1qyvBFv85p5dK7jcC86kP52sQ1YZAygH6hsDgkds 82U/YqfN2Dd+F8ONFHb996XQ0PUYqwi617KO49B2OCgDtyJMstnYdUnQCp4tK7Io OKHbxeeHJkn0EKVZwhL3rkYA0kbMd6tCIK1yRVxUj5JS7TrY0l4/JA+dNamPjHFo iit6RDrGO+A3eqfuGiMpB3lAXaBvzQc= -----END CERTIFICATE-----Generated at Sat Apr 26 18:38:24 2025 by rpki-client