$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/561d0021-3fe4-31b8-85cc-e269eba14074.roa File: 561d0021-3fe4-31b8-85cc-e269eba14074.roa (raw, json) Hash identifier: VlxnIK5ke6t06AodSHbxDVvCVF+9JZvp83SUhlGHxEc= Subject key identifier: E4:6A:87:3A:8D:49:97:6F:1A:1F:40:C8:71:8E:CE:1A:16:A1:40:23 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F432858499294631E1152D8B3D9B0A800 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/561d0021-3fe4-31b8-85cc-e269eba14074.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 14114 IP address blocks: 157.133.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:63:1e:11:52:d8:b3:d9:b0:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=d2adf51a-1aec-4801-aef9-5b0f01d8a26b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:32:93:e8:88:49:f6:45:30:8c:c5:ba:62:a3: 29:ef:d6:6e:43:7a:2c:a8:21:f1:fe:e7:5c:3f:72: 08:90:c7:8a:9d:98:a9:a7:1a:7d:c3:d2:a6:4c:1f: 80:69:00:42:2f:6c:a5:41:08:f3:7d:e0:22:7f:9d: 0d:25:b7:20:0b:ad:01:d9:aa:97:75:79:08:38:80: 54:aa:ec:d8:cb:ce:1a:37:8f:33:fd:1b:74:e2:79: ad:34:ca:f1:da:b2:79:17:e7:cb:ea:93:b8:30:4c: 22:b7:e4:00:8f:9c:46:ff:0b:73:24:29:a2:3e:87: 37:69:70:0f:bf:d2:c0:26:98:cf:c7:5e:c5:3b:02: db:62:33:66:25:34:ba:42:a1:95:e1:4a:b5:08:22: 4b:2a:b4:26:c8:67:ab:42:3c:a8:38:01:25:d0:17: 40:5c:2c:e0:c8:e2:ad:a7:57:23:1a:61:57:80:3c: 4c:b6:d2:d0:6c:4c:0e:4c:79:90:d4:17:57:a5:13: 8f:16:8d:39:4a:b9:ac:9f:4a:fa:f3:a2:aa:82:35: 55:98:27:51:c9:5a:50:29:d2:db:26:53:e9:7a:de: 10:25:e8:27:9d:d5:14:62:c3:31:a2:19:fe:da:7e: f1:e0:b8:db:38:b3:87:b1:1d:ca:c8:b4:0b:47:6a: ec:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:6A:87:3A:8D:49:97:6F:1A:1F:40:C8:71:8E:CE:1A:16:A1:40:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/561d0021-3fe4-31b8-85cc-e269eba14074.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:1d:27:1b:9d:f4:99:78:a0:ae:e8:17:f3:b7:46:74:79:4d: b6:dc:00:7f:ff:77:a0:fe:94:5d:d2:5a:e3:2c:7f:07:e7:ed: f5:bc:b5:63:5e:bd:86:6f:07:67:86:2b:12:06:92:6d:b3:ec: 02:13:ed:e3:bb:30:26:e2:25:61:21:01:9f:8f:88:7c:a1:4f: d2:b9:30:5a:5f:0f:e9:f0:97:6c:ed:9b:8f:3f:64:92:33:55: 35:a3:fb:40:85:9f:a9:5d:53:a0:7a:85:20:b1:38:95:e0:6d: 1e:f7:81:77:9a:c0:33:a6:bd:4a:4a:b9:d3:3d:b0:d5:89:0f: bb:78:b3:a3:00:1d:11:ef:7d:0b:6c:ce:67:21:f1:33:9e:29: fe:88:d3:ae:4c:d3:c8:10:32:a2:ab:f0:70:cc:7d:5d:36:ab: 55:5f:18:c3:56:e6:9d:fc:91:f9:54:ca:af:8c:01:72:05:5d: 35:1f:f5:8d:17:cc:27:4c:71:f4:56:87:77:e2:23:d7:2f:1c: f9:fb:47:df:fb:24:3f:03:08:a2:ef:65:bd:9b:0f:a6:3a:8f: f2:d6:00:86:6d:c0:47:e9:be:3c:05:67:1e:16:54:37:7a:7c: 14:f2:97:db:9b:e6:dd:c5:9b:a6:32:9e:b1:c2:0b:68:27:e7: b1:95:3f:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlGMeEVLYs9mwqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk ZDJhZGY1MWEtMWFlYy00ODAxLWFlZjktNWIwZjAxZDhhMjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjKT6IhJ9kUwjMW6YqMp79ZuQ3osqCHx/udc P3IIkMeKnZippxp9w9KmTB+AaQBCL2ylQQjzfeAif50NJbcgC60B2aqXdXkIOIBU quzYy84aN48z/Rt04nmtNMrx2rJ5F+fL6pO4MEwit+QAj5xG/wtzJCmiPoc3aXAP v9LAJpjPx17FOwLbYjNmJTS6QqGV4Uq1CCJLKrQmyGerQjyoOAEl0BdAXCzgyOKt p1cjGmFXgDxMttLQbEwOTHmQ1BdXpROPFo05Srmsn0r686KqgjVVmCdRyVpQKdLb JlPpet4QJegnndUUYsMxohn+2n7x4LjbOLOHsR3KyLQLR2rskwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORqhzqNSZdvGh9AyHGOzhoWoUAjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvNTYxZDAwMjEtM2ZlNC0z MWI4LTg1Y2MtZTI2OWViYTE0MDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnYUYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUdJxud9Jl4oK7oF/O3RnR5TbbcAH//d6D+lF3SWuMsfwfn7fW8tWNe vYZvB2eGKxIGkm2z7AIT7eO7MCbiJWEhAZ+PiHyhT9K5MFpfD+nwl2ztm48/ZJIz VTWj+0CFn6ldU6B6hSCxOJXgbR73gXeawDOmvUpKudM9sNWJD7t4s6MAHRHvfQts zmch8TOeKf6I065M08gQMqKr8HDMfV02q1VfGMNW5p38kflUyq+MAXIFXTUf9Y0X zCdMcfRWh3fiI9cvHPn7R9/7JD8DCKLvZb2bD6Y6j/LWAIZtwEfpvjwFZx4WVDd6 fBTyl9ub5t3Fm6YynrHCC2gn57GVP7c= -----END CERTIFICATE-----Generated at Sun Apr 27 09:52:44 2025 by rpki-client